RE: Encrypting trapsess entries in snmpd.conf

This doesn't quite work as you would hope though.
 
While the user information is used to send the trap, the act of configuring the "trapsess" directive causes create_user_from_session to set the storage type for the user to "read-only".
When snmpd is stopped and it writes the persistent snmpd.conf file, it then does not write the information back for this user, since it ignores those entries that are not non-volatile (in usm_save_users_from_list) - which this entry was, until messed about with by create_user_from_session.
So, the next time you start snmpd, it stops working... 
 
Bug? Feature? Other?
 
Phil
 

________________________________

From: [email protected] on behalf of Russell Harlin
Sent: Fri 19/01/2007 11:26 PM
To: Dave Shield
Cc: [email protected]
Subject: Re: Encrypting trapsess entries in snmpd.conf



That worked.  Thanks, Dave!

I tried something similar before, but I left out the engineID when
creating the user.  I guess that made all the difference.

Thanks again,

Russell


Dave Shield wrote:
> On 19/01/07, Russell Harlin <[email protected]> wrote:
>  
>> Does anyone know if there is a way to avoid having snmpv3 "trapsess" entries
>> in snmpd.conf display the authentication/privacy pass-phrase?
>>    
>
> Untested, but try putting the following in /var/net-snmp/snmpd.conf:
>
>     createUser -e 0x010203040506 myuser MD5 mypassword DES myotherpassword
>
> Then use the trapsess directive:
>
>     trapsess -e 0x010203040506 -u myuser -l authPriv localhost:162
>
> I haven't tried this myself, but it should work OK.
>
> Dave
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
>  


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users