Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can a v3 inform attach a v3 noAuthNoPriv user ?

6 views
Skip to first unread message

Andy

unread,
Dec 14, 2009, 10:13:06 PM12/14/09
to
Hi LIST,

I issue a command under net-snmp,

./snmpinform -v 3 -e 0xaabbccddee68 -u wanhe-v3-68 -l noAuthNoPriv
10.0.0.28 44 coldStart.0

And, configure snmptrapd.conf with a line on host 10.0.0.28,

createUser -e aabbccddee68 wanhe-v3-68

I got a snmpinform timeout, but if the user wanhe-v3-68 is authNoPriv
level or higher, it will be fine.

So I have a question, should the inform be attached with a user at
least authNoPriv level ?


Thanks in advance.

-Andy

------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Net-snmp-users mailing list
Net-snm...@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Dave Shield

unread,
Dec 15, 2009, 3:35:53 AM12/15/09
to
2009/12/15 Andy <hewan...@gmail.com>:

> So I have a question, should the inform be attached with a user at
> least authNoPriv level ?

It depends on how you've configured access control
on the trap receiver.

If you're using

authUser log,execute,net wanhe-v3-68

(or similar) then the default is to accept auth (or
authPriv) notifications only.
If you configure the agent using

authUser log,execute,net wanhe-v3-68 noauth

then this will accept noAuthNoPriv notifications
as well. [ Although that does negate most of the
benefits of using SNMPv3 in the first place :-) ]

Dave

Andy

unread,
Dec 15, 2009, 5:43:57 AM12/15/09
to
On Tue, Dec 15, 2009 at 4:35 PM, Dave Shield <D.T.S...@liverpool.ac.uk> wrote:
> 2009/12/15 Andy <hewan...@gmail.com>:
>> So I have a question, should the inform be attached with a user at
>> least authNoPriv level ?
>
> It depends on how you've configured access control
> on the trap receiver.
>
> If you're using
>
>   authUser  log,execute,net  wanhe-v3-68
>
> (or similar) then the default is to accept auth (or
> authPriv) notifications only.
> If you configure the agent using
>
>   authUser  log,execute,net  wanhe-v3-68   noauth
>
> then this will accept noAuthNoPriv notifications
> as well.   [ Although that does negate most of the
> benefits of using SNMPv3 in the first place :-) ]
>
> Dave
>

Got it ! Thanks, Dave.

-Andy

0 new messages