"iquerySecname user" changes access controls for user??
Brian Jones <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CAABZye-BoWAubRN_yQDkWBJwwU-2Saj8sS7fqoAnHC1MLZ7JNA@mail.gmail.com> |
using net-snmp 5.4.1 on FreeBSD 8.0 (because that's what ports installs) I have a problem that I consider a bug. Others may not consider this a bug, as usually it wouldn't be visible to an end user. It's visible to be because I am trying to write a GUI to manage nst-snmp:snmpd. Starting with this /usr/local/share/snmp/snmpd.conf rouser guest noauth rocommunity public default -V open syscontact [email protected] I stop snmpd I add a noauthnopriv createUser line to my persistent data file /var/net-snmp/snmpd.conf echo "createUser guest" >> /var/net-snmp/snmpd.conf and start snmp, and then look at the resultant usmUser line. grep usmUser /var/net-snmp/snmpd.conf usmUser 1 3 0x80001f8880788c2d50b1cb634f00000000 0x677565737400 0x677565737400 NULL .1.3.6.1.6.3.10.1.1.1 0x .1.3.6.1.6.3.10.1.2.1 0x 0x00 and as you can see, it is auth none (.1.3.6.1.6.3.10.1.1.1), priv none( .1.3.6.1.6.3.10.1.2.1) If I then add iquerySecuser guest to /usr/local/share/snmp/snmpd.conf and then restart snmpd, it changes grep usmUser /var/net-snmp/snmpd.conf usmUser 1 3 0x80001f8880788c2d50b1cb634f00000000 0x677565737400 0x677565737400 NULL .1.3.6.1.6.3.10.1.1.2 0x .1.3.6.1.6.3.10.1.2.2 0x 0x00 to auth MD5 (.1.3.6.1.6.3.10.1.1.2) priv DES (.1.3.6.1.6.3.10.1.2.2) Now functionally it appears to make no difference, as you can still access with '-u guest -i noAuthnoPriv' but if you are trying to write a GUI to manage snmpd it's a PITA. So my questions are: 1) Is there a good reason for this behavior 2) Is the behavior any different in newer releases? 3) If the answers to 1 and 2 are both "no", Is there any likelyhood that a bug would be addressed? I realize this is a corner case that is completely uninteresting to most people. -- Brian. ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users