Re: users to group association not working as expected

Lokesh Mogra <[email protected]> Thu, 30 Jan 2025 14:59:44 +0530
Newsgroups gmane.network.net-snmp.user
Message-ID <CAJC1r5YsgQJJhtOayfuntwWsQtfDM00UgLoWy1X1Z7ntpZwqAA@mail.gmail.com>
--===============7749155020380183898==
Content-Type: multipart/alternative; boundary="000000000000becaea062ce91161"

--000000000000becaea062ce91161
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

corrected typo:

On Thu, Jan 30, 2025 at 2:56=E2=80=AFPM Lokesh Mogra <[email protected]=
> wrote:

> Hi folks,
> i am trying to create snmp groups and associating views with it.
> and assign users to these groups. I see there is no explicit way to assig=
n
> user to group.
> Am i missing some configuration?
>
> This is the configuration i am doing:
>
> # Define Views
> view view1 included .1.3.6.1.2.1
> view view2 included .1
> view view2 excluded .1.3.6.1.2.1
>
> # Define Groups
> group group1 usm authPriv
> access group1 "" any authPriv exact view1 none none
> group group2 usm authNoPriv
> access group2 "" any authNoPriv exact view2 none none
>
> # Define Users
> createUser user1 SHA authpass1 AES encryptpass1
> #rouser user1 authPriv
> createUser user2 SHA authpass2
> #rouser user2 authNoPriv
>
> If I dont write rouser for users, snmpwalk doesnt work.
> # snmpwalk -v3 -u user2 -l authNoPriv -a SHA -A "authpass2" 10.225.2.143
> Error in packet.
> Reason: authorizationError (access denied to that object)
> if I write rouser, then the view2 which I want for user2 doesnt work, and
> everything gets accessed.
> Appreciate your help !!!!
>
> regards
> Lokesh Mogra
>

--000000000000becaea062ce91161
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">corrected typo:</div><br><div class=3D"gm=
ail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On T=
hu, Jan 30, 2025 at 2:56=E2=80=AFPM Lokesh Mogra &lt;<a href=3D"mailto:loke=
[email protected]">[email protected]</a>&gt; wrote:<br></div><blockquot=
e class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width=
:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-lef=
t:1ex"><div dir=3D"ltr">Hi folks,<div>i am trying to create snmp groups and=
 associating views with it.</div><div>and assign users to these groups. I s=
ee there is no explicit way to assign user to group.</div><div>Am i missing=
 some configuration?</div><div><br></div><div>This is the configuration i a=
m doing:</div><div><br></div><div># Define Views<br>view view1 included .1.=
3.6.1.2.1<br>view view2 included .1<br>view view2 excluded .1.3.6.1.2.1<br>=
<br># Define Groups<br>group group1 usm authPriv<br>access group1 &quot;&qu=
ot; any authPriv exact view1 none none<br>group group2 usm authNoPriv<br>ac=
cess group2 &quot;&quot; any authNoPriv exact view2 none none<br><br># Defi=
ne Users<br>createUser user1 SHA authpass1 AES encryptpass1<br>#rouser user=
1 authPriv<br>createUser user2 SHA authpass2<br>#rouser user2 authNoPriv<br=
></div><div><br></div><div>If I dont write rouser for users, snmpwalk doesn=
t work.</div><div># snmpwalk -v3 -u user2 -l authNoPriv -a SHA -A &quot;aut=
hpass2&quot; 10.225.2.143<br>Error in packet.<br>Reason: authorizationError=
 (access denied to that object)</div><div>if I write rouser, then the view2=
 which I want for user2 doesnt work, and everything gets accessed.</div><di=
v>Appreciate your help !!!!</div><div><br></div><div>regards</div><div>Loke=
sh Mogra</div></div>
</blockquote></div></div>

--000000000000becaea062ce91161--


--===============7749155020380183898==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============7749155020380183898==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

--===============7749155020380183898==--