RE: access control

Thanks for the response, see my comments online:
Regards,

/Masoud

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Mike
Ayers
Sent: den 19 februari 2008 21:37
To: [email protected]; [email protected]
Subject: RE: access control


> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Masoud Fatollahy
> Sent: Friday, February 15, 2008 2:14 PM

> We have problem with configuration of the access control list.
> What we are doing is to including the net-snmp src code without any
> modification to our embedded system and compile it together with our
> application and start the agent by running snmpd with flags 
> to support our
> subagent. We don't install it in our system.

	By this, do you mean that you never run "make install"?

[m] True, we don't do make install.

> Now when we are 
> trying to use
> snmpv3 context, we have problem with access control 
> configuration files.

	What problem?  Specifics, please.
[m] the problem is when we are using a mib-browser to fetch data from
snmp-agent with username without any password or with defined password we
never get it work.
and we don't really know which snmpd.conf is used, when we are not doing
make install. Or where we should put our snmpd.conf 

> Could you please help us to point out what we should do to 
> define these
> access list?

	man snmpd.conf
[m] I have already gone through this, but I will do it again to make sure
that I am not missing anything. 
> Should we use snmpd.conf to do this?

	Yep.
[m] we are planning to include the configuration of snmp to our cli, and
from there can generate a config file for snmp. Is it the right way to go?
 
> If so, 
> where can we set
> the path to our snmpd.conf and snmp.conf.

	By default, $sysconfdir ($prefix/etc), but you can use -C/-c flags
to access them anywhere.  Don't forget $localstatedir/snmpd.conf, which is
where you would put your createUser statements.

[m] we have used -C and -c flags and just put a user nothing more, but we
found out that net-snmp is using two two different files in two different
locations, one is used to define the users and another to put the password
and etc. is this currect? why?

> is there any 
> complete example how
> it should be configured.

	No, which is a good thing.  Everybody wants something different out
of their setup, so there is no way around learning the options and using the
ones you want.  You may want to look into the "rouser" and "rwuser"
snmpd.conf directives 

[m] yes, I understand, but it is very nice to have a working example which
everyone can use test their implementation of mibs and mibs access, in this
way we can understand the concept. Do have any working example for this? 


	HTH,

Mike

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users




-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users