Re: external authentification
Wes Hardaker <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Organization | Sparta |
| Message-ID | <[email protected]> |
>>>>> On Wed, 23 Jun 2010 08:42:22 +0200, Torsten Bitterlich <[email protected]> said: TB> Thanks for the clearification. Can you specify the term "Tunneling TB> over SSH - not 100% supported in Net-SNMP" more clearly. I would TB> like to know what is, and what is not working. Is it usable and are TB> there any SNMP-Managers supporting this transport? I need to document usage, sadly, in the wiki and haven't gotten to it. Fundamentally, you need to turn on the transport (--with-transports=ssh) and then the client side works fairly well (IE, snmpget and friends). The agent, however, needs a path from the sshd to the agent and this is done by configuring the ssh daemon to fire off the "sshtosnmp" application when an incoming ssh/snmp request comes in. You need to configure /etc/ssh/sshd_config with something like: Subsystem snmp /usr/bin/sshtosnmp and I think it'll work. I say think because I haven't tried it recently :-/ The problems: - The whole snmptossh mechanism seems a bit funky to me, but it's the only way to support it at this time because there isn't a better library or API way of doing it with openssh's sshd. - The whole system hasn't really been reviewed for safety and a double check by someone else is really needed before it could be declared "safe". -- Wes Hardaker Cobham Analytic Solutions ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users