Re: Net-SNMP v3 User Administration from custom app

Wes Hardaker <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
"Bob O'Neil" <[email protected]> writes:

> This application also implements an SNMP subagent, so has access to
> the running agent through the network connection between them.

Well, sort of.  SNMP subagents are really there for the master to query
the subagent through.  There is very little the subagent can ask the
master agent for.

> This custom application is required to allow via a web interface
> administration of SNMP v3 users, which would mean the addition and
> deletion of USM users with security credentials, and modifying
> credentials of existing users.

Right now, there is no external interface that could be used to
programatically mess with the user table *except* through SNMP itself.

> I am considering the following:
>
> 1.  Direct manipulation of the SNMP snmpd.conf files followed by an
> snmpd reload.

Hacky and sort of problematic, but doable.

> 2.  The use of subagent accessible APIs to accomplish this task (if
> available).

That won't work, unfortunately.

> 3.  Making sytem calls in my application (such as
> "net-snmp-create-v3-user" after stopping the service, then restarting
> it).

Similar to #1

Option 4 would be to manipulate the user table through the usmUserTable
SNMP interface, which would be the cleanest of them all but would
require you implement all the right SNMP SETs to make it happen.
-- 
Wes Hardaker
SPARTA, Inc.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.