Re: Help needed

Wes Hardaker <[email protected]> Wed, 03 Sep 2003 06:44:31 -0700
Newsgroups gmane.ietf.snmpv3
Organization Sparta
Message-ID <[email protected]>
>>>>> On Tue, 02 Sep 2003 07:54:04 -0400, Uri Blumenthal <[email protected]> said:

Uri> Existing USERS can be re-used. Existing KEYS cannot, as they
Uri> are localized - at the NMS level (i.e. NMS itself determines
Uri> what the localized key for user X on the managed box Y will
Uri> be, and updates that key to this particular value. It's not
Uri> the managed box that computes localization - except maybe
Uri> for the very first time when/if the key is created from
Uri> a password).

Which is exactly why the key can be reused.  A conforming manager
properly using localization all the time can't reuse the KEYs, however
more flexible managers (ones that let you directly input localized
keys) or evil managers can reuse old keys, for just as you say the
managed device doesn't care.

-- 
Wes Hardaker
Sparta