RE: access control

So if I use the following apis to register my mibs with the new context;
then my configuration will work? Also the mibs with the new context will
only be available for access with that context(myuser2)?(this is what we
want) 
we are going to re-use ifTable, bridge and rmon oid and register them with
our new context. 

 netsnmp_handler_registration *reg;
 reg = netsnmp_create_handler_registration(.....);
 reg->contextName = strdup("my_context");
 netsnmp_register_handler(reg);

Regards,

/Masoud
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Mike
Ayers
Sent: den 21 februari 2008 20:17
To: Masoud Fatollahy; Masoud Fatollahy
Cc: [email protected]
Subject: RE: access control

> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Masoud Fatollahy
> Sent: Thursday, February 21, 2008 8:24 AM

> com2sec cust1_sec 192.168.55.0/24  public
> com2sec cust2_sec 192.168.56.0/24  public

	Note that the community "public" will now have acces to both
cust1_sec rights and cust2_sec rights, so customers 1 and 2 can see each
other's data.  Probably not what you want if you went to the trouble to
specify them individually.

> view all    included  .1

	If myuser is not the system administrator, then you should at least
remove the VACM, USM, and coexistence MIBs from the view.

> view cust1_v included  .1.3.6.1.2.1.2.2.1.1.1 ff.a0

	I'd suggest not writing no-effect masks.  That's just a maintenance
hazard.  The line:

view cust1_v included  .1.3.6.1.2.1.2.2.1.1.1

...would have the same effect.

> Do i missing something?

	Looks good.  Note, however, that the only things viewable in
non-default contexts are those MIBs you explicitly register to present data
in those contexts.  MIB-II, IF-MIB, etc. are only available in the default
context.


	HTH,

Mike

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users




-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users