Ok, So much information in your response. :-)
Will take care of it.
Cheers,
On Wed, Feb 16, 2011 at 11:15 PM, Dave Shield <d.t.shi...@liverpool.ac.uk>wrote:
> On 16 February 2011 17:21, Ashwin Kumar <ashwinkumar...@gmail.com> wrote:
> > Yes, you are correct.
> > I was just trying to explain what must get into snmpd.conf file.
>
> > But, that was just my example.
>
> Fair enough.
> But you didn't say it was an example - you said
>
> > [snmpd.conf] *must* look like
> >
> > rocommunity public
> > rwcommunity private
>
> [my emphasis].
> Which is both wrong - and dangerously so.
>
>
> The snmpd.conf file "must" contain at least one of:
>
> rocommunity
> rwcommunity
> rouser
> rwuser
> (with a corresponding 'createUser' line in
> /var/net-snmp/snmpd.conf)
> or
> view/group/access (plus either com2sec or createUser)
>
> i.e. at least one access control entry configured.
> See snmpd.conf(5) for the full details.
> But it doesn't have to contain any write support whatsoever.
>
>
> > Yeah, I would not suggest anyone to do it. I understand the
> > complexities of having poor, easily guessed name in the .conf.
>
> Excepot that you *did* suggest that Anthony did exactly this.
>
> If you want to suggest a simple access control config,
> then
> rocommunity public
>
> is reasonable, simple and functional.
> It might reveal something of your local setup to the world at large,
> but it's unlikely that this would cause too much damage.
>
> But please *NEVER* suggest that people use "rwcommunity"
> unless you *know* that:
> a) they need SET support
> b) they cannot use SNMPv3
> c) they understand the implications
>
> For simply getting started, read-only access is more than sufficient.
>
> Dave
>
--
-- Ashwin Kumar
+91-974-054-7793
(Sent from my iPad)
------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
