Re: Regarding additional user creation

On 19/07/06, Kadirvelu, Kannan (Kanna) <[email protected]> wrote:
> We are using net-snmp for our product.
> We would like to create a new user on the fly with a different auth and priv
> values than the one which is created by default.
> We are not able to do this. We are not able to understand why the creation
> of new user with different auth and priv should fail ?

Because that's the way that the User-Based security mechanism works.
Dynamic creation of new users via SNMP SET requests is done by cloning
from an existing user, with the same authentication and encryption
protocols.  If you want to know the reasons for this decision, you'll
probably need to look through the mailing list archives of the SNMPv3
working group.  It's not something that this project had any real
involvement in.


> We understand that we can create all possible users before starting snmpd.

Yup - there's typically only a small number of possible combinations,
(MD5/DES, MD5/AES, SHA/DES, SHA/AES) so it's not an unmanageable
arrangement to set up an initial user for each of these.


> However the problem we are facing is, a remote snmp manager will contact the
> agent with the default (mutually agreed) snmpv3 user and then will try to
> create a user of its choice.

The remote manager would need to connect to the agent using the
appropriate one of these (mutually agreed) initial users, and create
the new user that way.  That's how SNMPv3/USM works.
  It's not ideal, I'd agree - and I believe there is work going on to
develop other alternative security models.  But that's not something
I'm personally involved with.  You might do better asking on one of
the IETF lists about the status of that.
  But if you're using SNMPv3/USM, then you're stuck with the defined
behaviour - however broken it may seem.

Sorry

Dave

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users