users to group association not working as expected

Lokesh Mogra <[email protected]> Thu, 30 Jan 2025 14:56:43 +0530
Newsgroups gmane.network.net-snmp.user
Message-ID <CAJC1r5aDGqS4MDYHBj7bAv2b6kj1MNXaqg9Z4E5=PPYFVk5BWg@mail.gmail.com>
--===============8330977612775291904==
Content-Type: multipart/alternative; boundary="0000000000001cc2cc062ce907d0"

--0000000000001cc2cc062ce907d0
Content-Type: text/plain; charset="UTF-8"

Hi folks,
i am trying to create snmp groups and associating views with it.
and assign users to these groups. I see there is no explicit way to assign
user to group.
Am i missing some configuration?

This is the configuration i am doing:

# Define Views
view view1 included .1.3.6.1.2.1
view view2 included .1
view view2 excluded .1.3.6.1.2.1

# Define Groups
group group1 usm authPriv
access group1 "" any authPriv exact view1 none none
group group2 usm authNoPriv
access group2 "" any authNoPriv exact view2 none none

# Define Users
createUser user1 SHA authpass1 AES encryptpass1
#rouser user1 authPriv
createUser user2 SHA authpass2
#rouser user2 authNoPriv

If I dont write rouser for users, snmpwalk doesnt work.
# snmpwalk -v3 -u user2 -l authPriv -a SHA -A "authpass2" 10.225.2.143
Error in packet.
Reason: authorizationError (access denied to that object)
if I write rouser, then the view2 which I want for user2 doesnt work, and
everything gets accessed.
Appreciate your help !!!!

regards
Lokesh Mogra

--0000000000001cc2cc062ce907d0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi folks,<div>i am trying to create snmp groups and associ=
ating views with it.</div><div>and assign users to these groups. I see ther=
e is no explicit way to assign user to group.</div><div>Am i missing some c=
onfiguration?</div><div><br></div><div>This is the configuration i am doing=
:</div><div><br></div><div># Define Views<br>view view1 included .1.3.6.1.2=
.1<br>view view2 included .1<br>view view2 excluded .1.3.6.1.2.1<br><br># D=
efine Groups<br>group group1 usm authPriv<br>access group1 &quot;&quot; any=
 authPriv exact view1 none none<br>group group2 usm authNoPriv<br>access gr=
oup2 &quot;&quot; any authNoPriv exact view2 none none<br><br># Define User=
s<br>createUser user1 SHA authpass1 AES encryptpass1<br>#rouser user1 authP=
riv<br>createUser user2 SHA authpass2<br>#rouser user2 authNoPriv<br></div>=
<div><br></div><div>If I dont write rouser for users, snmpwalk doesnt work.=
</div><div># snmpwalk -v3 -u user2 -l authPriv -a SHA -A &quot;authpass2&qu=
ot; 10.225.2.143<br>Error in packet.<br>Reason: authorizationError (access =
denied to that object)</div><div>if I write rouser, then the view2 which I =
want for user2 doesnt work, and everything gets accessed.</div><div>Appreci=
ate your help !!!!</div><div><br></div><div>regards</div><div>Lokesh Mogra<=
/div></div>

--0000000000001cc2cc062ce907d0--


--===============8330977612775291904==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============8330977612775291904==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

--===============8330977612775291904==--