Re: overwrite standard mib2/interfaces

On 17/03/2008, Masoud Fatollahy <masoud.fatollahy@t2data.se> wrote:
> Is it possible to give read access to all registered mibs (both with default
> context and other context) to a group/user?

Yes.

> If yes, how can it be done?

Firstly, you'll need to set up a working access control configuration using
the "com2sec/group/view/access" directives, rather than the shorthand
"r[ow]community/r[ow]user" directives.
That will typically include an access line of the form:

access {group} "" .... exact .....

If you change the token "exact" to read "prefix", then this will extend
the access rights to *all* prefixes.


> Is it any way to give read access to mibs with different context to a client
> which is running v1/v2c snmp?

Yes.
Again, you need to be using the full "com2sec/group/view/access" directives.

Normally, you would have a line of the form

com2sec {someUser} default {community}

which would be part of allowing that community to access information
in the default context. To allow access to information in a different
context, you should amend this to read

com2sec -Cn {context} {someUser} default {community}

Note that each context will require a different community name.

Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/...net-snmp-users