|Skip Navigation Links|
|Exit Print View|
|Oracle VM Server for SPARC 2.1 Administration Guide Oracle VM Server for SPARC|
This section describes how to create new Simple Network Management Protocol (SNMP) version 3 (v3) users to provide secure access to the System Management Agent (SMA). For SNMP version 1 (v1) and version 2 (v2c), the access control mechanism is the community string, which defines the relationship between an SNMP server and its clients. This string controls the client access to the server similar to a password controlling a user's access to a system. See Solaris System Management Agent Administration Guide.
Note - Creating snmpv3 users enables you to use the SMA in SNMP with the Oracle VM Server for SPARC MIB. This type of user in no way interacts with or conflicts with users that you might have configured by using the role-based access control (RBAC) feature of Oracle Solaris for the Logical Domains Manager.
This procedure describes how to create the initial snmpv3 user.
You can create additional users by cloning this initial user. Cloning enables subsequent users to inherit the initial user's authentication and security types. You can change these types later.
When you clone the initial user, you set secret key data for the new user. You must know the passwords for the initial user and for the subsequent users that you configure. You can only clone one user at a time from the initial user. See “To Create Additional SNMPv3 Users with Security” in Solaris System Management Agent Administration Guide for your version of the Oracle Solaris OS.
# svcadm disable -t svc:/application/management/sma:default
# /usr/sfw/bin/net-snmp-config --create-snmpv3-user -a my-password initial-user
This command creates user initial-user with a password that you choose, my-password, and adds an entry to the /etc/sma/snmp/snmpd.conf file. This entry gives the initial user read and write access to the agent.
Note - Passwords must contain at least eight characters.
# svcadm enable svc:/application/management/sma:default
# snmpget -v 3 -u initial-user -l authNoPriv -a MD5 -A my-password localhost sysUpTime.0