Re: users to group association not working as expected
Lokesh Mogra <[email protected]> Thu, 30 Jan 2025 14:59:44 +0530
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CAJC1r5YsgQJJhtOayfuntwWsQtfDM00UgLoWy1X1Z7ntpZwqAA@mail.gmail.com> |
--===============7749155020380183898== Content-Type: multipart/alternative; boundary="000000000000becaea062ce91161" --000000000000becaea062ce91161 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable corrected typo: On Thu, Jan 30, 2025 at 2:56=E2=80=AFPM Lokesh Mogra <[email protected]= > wrote: > Hi folks, > i am trying to create snmp groups and associating views with it. > and assign users to these groups. I see there is no explicit way to assig= n > user to group. > Am i missing some configuration? > > This is the configuration i am doing: > > # Define Views > view view1 included .1.3.6.1.2.1 > view view2 included .1 > view view2 excluded .1.3.6.1.2.1 > > # Define Groups > group group1 usm authPriv > access group1 "" any authPriv exact view1 none none > group group2 usm authNoPriv > access group2 "" any authNoPriv exact view2 none none > > # Define Users > createUser user1 SHA authpass1 AES encryptpass1 > #rouser user1 authPriv > createUser user2 SHA authpass2 > #rouser user2 authNoPriv > > If I dont write rouser for users, snmpwalk doesnt work. > # snmpwalk -v3 -u user2 -l authNoPriv -a SHA -A "authpass2" 10.225.2.143 > Error in packet. > Reason: authorizationError (access denied to that object) > if I write rouser, then the view2 which I want for user2 doesnt work, and > everything gets accessed. > Appreciate your help !!!! > > regards > Lokesh Mogra > --000000000000becaea062ce91161 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr">corrected typo:</div><br><div class=3D"gm= ail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On T= hu, Jan 30, 2025 at 2:56=E2=80=AFPM Lokesh Mogra <<a href=3D"mailto:loke= [email protected]">[email protected]</a>> wrote:<br></div><blockquot= e class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width= :1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-lef= t:1ex"><div dir=3D"ltr">Hi folks,<div>i am trying to create snmp groups and= associating views with it.</div><div>and assign users to these groups. I s= ee there is no explicit way to assign user to group.</div><div>Am i missing= some configuration?</div><div><br></div><div>This is the configuration i a= m doing:</div><div><br></div><div># Define Views<br>view view1 included .1.= 3.6.1.2.1<br>view view2 included .1<br>view view2 excluded .1.3.6.1.2.1<br>= <br># Define Groups<br>group group1 usm authPriv<br>access group1 "&qu= ot; any authPriv exact view1 none none<br>group group2 usm authNoPriv<br>ac= cess group2 "" any authNoPriv exact view2 none none<br><br># Defi= ne Users<br>createUser user1 SHA authpass1 AES encryptpass1<br>#rouser user= 1 authPriv<br>createUser user2 SHA authpass2<br>#rouser user2 authNoPriv<br= ></div><div><br></div><div>If I dont write rouser for users, snmpwalk doesn= t work.</div><div># snmpwalk -v3 -u user2 -l authNoPriv -a SHA -A "aut= hpass2" 10.225.2.143<br>Error in packet.<br>Reason: authorizationError= (access denied to that object)</div><div>if I write rouser, then the view2= which I want for user2 doesnt work, and everything gets accessed.</div><di= v>Appreciate your help !!!!</div><div><br></div><div>regards</div><div>Loke= sh Mogra</div></div> </blockquote></div></div> --000000000000becaea062ce91161-- --===============7749155020380183898== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============7749155020380183898== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users --===============7749155020380183898==--