Re: net-snmp 5.8 password encryption

 
Hi Michael/team,

 A gentle reminder for help.


Thanks,
Uma Mohandoss
     On Monday, 23 December, 2019, 11:27:34 PM IST, Uma Mohandoss <[email protected]> wrote:  
 
  
Michael,

 Thanks for the information.
 Can you please give me right snmpusm cloneFrom command.

 Unable to know clearly what are the common options in the snmpusm syntax.

Tried following and got below error.

snmpusm -v 3 -a sha -l AuthPriv -x AES localhost cloneFrom USER u1 -X watchThis123 -A watchThis123
snmpset: No securityName specified


snmpusm -v 3 -a sha -l AuthPriv -x AES localhost cloneFrom USER u1 -X watchThis123 -A watchThis123 -u u1
Error in packet.
Reason: inconsistentValue (The set value is illegal or unsupported in some way)
Failed object: SNMP-USER-BASED-SM-MIB::usmUserStatus."......PV..."."USER"

Thanks,
Uma Mohandoss
     On Friday, 20 December, 2019, 5:35:28 PM IST, Michael W. Lucas <[email protected]> wrote:  
 
 
The encrypted user is placed in the persistent data file.

You can remove this line from snmpd.conf after the user is created,
and use snmpusm to clone it for new accounts.

==ml


On Fri, Dec 20, 2019 at 05:31:09AM +0000, Uma Mohandoss via Net-snmp-users wrote:
> Hi, 
> 
> Net-snmp 5.8, user creation does not encrypt password. Password stored in plain text under /etc/snmp/snmpd.conf.
> 
> Eg. (snippet from snmpd.conf)
> createUser    u1  SHA  watchThis123  AES watchThis123
> group COMMON usm u1
> 
> Need help/patch to encrypt password.
> 
> Thanks,
> Uma Mohandoss
> 
> 
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users

-- 
Michael W. Lucas     https://mwl.io/
author of: Absolute OpenBSD, SSH Mastery, git commit murder,
Immortal Clay, PGP & GPG, Absolute FreeBSD, etc, etc, etc...

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users