Re: Configuring views, groups and v3 USM

Joe,

Have you tried it without the "authuser" line for Joe? I think the authuser line is specifically giving Joe read,write with no views specified. Assigning Joe to a group and then assigning access to the group should suffice.

  Bill


On Sep 12, 2012, at 4:52 PM, Joe Lorenz <[email protected]> wrote:

> Hello,
> 
> I'm trying to set up a configuration included v3 users, defined views, and named 
> groups that associate users to views. Below is the relevant portion of my 
> snmpd.conf file. (NOTE - I have the v3 users working after using 
> net-snmp-create-v3-user; my issue is the scoping of the set of returned OIDs to 
> that defined by the intended view.) I'm using Net-SNMP v5.7.1.
> 
> -------------
> view fooview included system
> view fooview included ifXTable
> 
> rwuser matt auth -V fooview
> 
> authuser read,write joe
> #rwuser joe
> 
> group foogroup usm joe
> 
> authgroup read,write foogroup auth -V fooview
> #authaccess read,write foogroup fooview
> #access foogroup "" usm auth exact fooview fooview none
> -------------
> 
> You will see from the commented lines some other attempts I have made. The user 
> "matt" is set up with the older-school method of associating the user directly 
> to the named view - *that works*. Walks by that user return the intended subset 
> of objects.
> I want the user "joe" to be added to a group "foogroup" which is then associated 
> with the named view "fooview". This isn't working as I expect, so my guess is 
> that my expectations are incorrect somehow. Walks by user "joe" return the 
> entire MIB the agent serves.
> 
> Any hints are hugely appreciated - many thanks.
> 
>    -Joe
> 
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. Discussions 
> will include endpoint security, mobile security and the latest in malware 
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users