The net-snmp-config command used in this procedure adds a line to the /etc/sma/snmp/snmpd.conf file, giving the initial user read and write access to the agent.
Stop the System Management Agent.
# svcadm disable -t svc:/application/management/sma:default |
To create the new user, use the net-snmp-config command.
# /usr/sfw/bin/net-snmp-config --create-snmpv3-user -a "my_password" newuser |
This command causes a new user to be created, named newuser, with a password equal to my_password. The new user creation uses both MD5 and DES, which are described in Authentication Protocol Algorithms.
By default, when creating a user using the net-snmp-config command, these settings are created unless otherwise specified:
auth protocol = MD5security level = rwuser auth
Start the System Management Agent.
# svcadm enable svc:/application/management/sma:default |
Check whether the new user exists.
# snmpget -v 3 -u newuser -l authNoPriv -a MD5 -A my_password localhost sysUpTime.0 |
Passwords must contain at least eight characters.
Giving the new user read and write access is not always useful. If you want to reduce or change the access rights of the new user, edit the /etc/sma/snmp/snmpd.conf file. For more information, see the snmpd.conf(4) man page.