Re: snmpusm and security of the initial user

2010-10-22 Thread Mark Ellison
On Thu, Oct 14, 2010 at 4:46 PM, slowpoison wrote: > On Thu, Oct 14, 2010 at 12:51 PM, Wes Hardaker > wrote: > > That really means that in the agent in order to create a new SNMPv3/USM > > user you need to have an existing one to "clone" from. It's a boot > > strapping issue mostly (you have to

Re: snmpusm and security of the initial user

2010-10-18 Thread Wes Hardaker
> On Thu, 14 Oct 2010 13:46:46 -0700, slowpoison > said: s> Right. I understand that to create a user via snmpusm, one would s> always need an "initial" user. I'm asking if there is a non-snmpusm s> way to create the users. I know I can write "createUser" tokens into s> snmpd.conf, but t

RE: snmpusm and security of the initial user

2010-10-15 Thread Ron Rader
> From: slowpoison [mailto:slowpoi...@slowpoison.net] > always need an "initial" user. I'm asking if there is a non-snmpusm > way to create the users. I know I can write "createUser" tokens into > snmpd.conf, but that would mean re-starting snmpd every time a user is > added. I'm trying to a

Re: snmpusm and security of the initial user

2010-10-14 Thread slowpoison
On Thu, Oct 14, 2010 at 12:51 PM, Wes Hardaker wrote: > That really means that in the agent in order to create a new SNMPv3/USM > user you need to have an existing one to "clone" from.  It's a boot > strapping issue mostly (you have to authenticate with something ("a > user") in order to create a

Re: snmpusm and security of the initial user

2010-10-14 Thread Wes Hardaker
VV> I read in the snmpusm manual that I need to have an "initial" user VV> to create additional users. I am wondering about the security VV> implications of this requirement. Seems like I will have to VV> hard-code the snmpv3 password in the application I'm writing to wrap VV> the snmpv3 user crea

snmpusm and security of the initial user

2010-10-13 Thread Vishal Verma
I read in the snmpusm manual that I need to have an "initial" user to create additional users. I am wondering about the security implications of this requirement. Seems like I will have to hard-code the snmpv3 password in the application I'm writing to wrap the snmpv3 user creation/deletion operati