RE: How to create a VACM view that blocks particular rows in a table
Suresh kumar <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Dave The default users have been added to snmpusm table for V3 user creation/cloning which is internal to the SNMP Agent. But anyone who has rw/ro access to the Snmpusm table will be able to view these internal users starting with “defaultXXXX” as well. We want that when any operator accesses SNMPUSM table, he should be able to view users that are created ( for example deepti1 in the below case) but not the internal users/default users ( starting with “defaultXXXXX”). In VACM terms, this implies creating a view where particular rows belonging to a table can be accessed while some can be blocked. We want a sample VACM configuration for the same. Regards Suresh > Date: Tue, 4 Sep 2012 08:25:29 +0100 > Subject: Re: How to block read-write access to the default v3 users only > From: [email protected] > To: [email protected] > CC: [email protected] > > On 4 September 2012 08:15, Suresh kumar <[email protected]> wrote: > > We have added around 2 default users in the snmp persist file to enable v3 > > user creation/cloning through snmpusm utility..... > > > What VACM configuration should go into snmpd.conf to block > > read-write access to the default users ONLY? > > That's looking at things the wrong way. > You don't need any VACM configuration settings to block access. > You need VACM configuration settings to *grant* access. > > > > The user for example “deepti1” should be > > accessible but not the users starting with “defaultXXXXXXX”. > > So use either > rouser deepti1 > or > rwuser deepti1 > > (depending on whether this user should have read-only vs read-write) > > If there's no similar r{o,w}user line that refers to the defaultXXXX > users (or an equivalent 'group' setting), then they won't have any access. > > Dave ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users