Re: How to add user without showing non-encrypted password in conf file

On 15 March 2011 10:14, Naama Bar Menachem
<[email protected]> wrote:
> when using the following usage, sending the request with encrypted
> password (according to what shown in snmpd.conf file) - I get a
> "Authentication failure (incorrect password, community or key)" error

> snmpusm  -v 3 -u initial -n "" -l authPriv
>  -a MD5  -A 0x23479cade453433f18ee7630f90fe5f1
>  -x DES -X 0x23479cade453433f18ee7630f90fe5f1 0.0.0.0 create new1 initial

The '-A' and '-X' flags are used for specifying the (unencrypted) passwords.
If you want to use the localised key instead, then use '-3k' and '-3K' instead.

Try

snmpusm  -v 3 -u initial -n "" -l authPriv
   -a MD5  -3k 0x23479cade453433f18ee7630f90fe5f1
   -x DES -3K 0x23479cade453433f18ee7630f90fe5f1 0.0.0.0 create new1 initial


Dave


> Which means I need to hold the password not encrypted. Am I correct?
>
>
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On
> Behalf Of Dave Shield
> Sent: Tuesday, March 15, 2011 12:06 PM
> To: Naama Bar Menachem
> Cc: Net-SNMP users
> Subject: Re: How to add user without showing non-encrypted password in
> conf file
>
>    [ First - *please* don't mail me privately, without copying
>     any responses to the mailing list.  I don't have the time
>     or inclination to offer private, unpaid, SNMP consultancy.
>     Keep discussions to the list, where others can both learn
>     and offer advice.  Thanks.   ]
>
>
> On 15 March 2011 09:43, Naama Bar Menachem
> <[email protected]> wrote:
>> Thanks, however the snmpusm application must get a user+password of an
>> executing user.
>> Therefore I need to hold such user and password, which can be a
> security
>> problem for me....
>
>
> Well, if you are looking for a remote solution, using "snmpset"
> (or equivalent) then yes - you will need an existing user in order
> to send the SET request.
>  If you can't talk to the agent in the first place, then you can't
> really do anything remotely!
>
> Dave
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
>

------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users