Re: How snmpget encryption-decryption keys exchanged between Agent and remote host.

Hi ,

Actually I am bit confused in this. You mean to say if I have any
default user created in snmpd.conf ( we have two snmpd.conf , one is
for confguration generally in /usr/local/share/snmp/snmpd.conf and
another is persistent data file which is in var/lib/snmp/snmpd.conf) ,
then can't I just use username and passphrase in snmpget command and I
am good to go. What initial set up you are talking about ?


Apart from above , I have couple of more related ques :

1.  Suppose user create another user on run time then whether this new
user would be persistent on next reboot ? if yes how ?
2. When I try to create new user by "net-snmp-config
--create-snmpv3-user" command, it says :

command --> net-snmp-config  --create-snmpv3-user -a "sunaina123" sunaina
output -->
adding the following line to /var/lib/snmp/snmpd.conf:
   createUser sunaina MD5 "sunaina123" DES
adding the following line to /usr/share/snmp/snmpd.conf:
   rwuser sunaina

Now on my target board, I don't have /var/lib/snmp and /usr/share/snmp
( also dont want to create that as it is in ramdisk). So
net-snmp-config fails, I modified it to create these files under
/etc/snmp and /etc.

Now I exported environment variable SNMPCONFPATH to /etc and
SNMP_PERSISTENT_FILE  to /etc/snmp/. These variable are basically
guide the agent to look for snmpd.conf in /etc/ and
/etc/snmp/snmpd.conf (persistent data file) .

Now If I create user by above net-snmp-config command and then run
snmpwalk command it throws an error :

snmpwalk -v 3 -u sunaina -l authNoPriv -a MD5 -A sunaina123 localhost ifTable
No log handling enabled - using stderr logging
/etc/hosts/localhost.conf: Not a directory
/etc/hosts/localhost.local.conf: Not a directory
snmpwalk: Unknown user name (Sub-id not found: (top) -> ifTable)


And if I dont change the path of both snmpd.conf and let it to be at
original path ( /usr/local/share/snmp and /var/lib/snmp/), snmpwalk is
succefull.

Any pointer on this ?


Regards
Suniana



On Tue, Mar 22, 2011 at 11:24 PM, Dave Shield
<[email protected]> wrote:
> On 23 March 2011 01:50, sunaina mangla <[email protected]> wrote:
>> What about default user? In this case, we don't create the user?
>
> Then you can't use SNMPv3
>
> SNMPv3   (strictly SNMPv3/USM)   *requires* that some set of
> initial user(s) are set up in advance.
>   (Wes will no doubt correct me if I'm wrong here)
>
>
> Dave
>

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users