Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
SNMP_VACM(3)		 BSD Library Functions Manual		  SNMP_VACM(3)

NAME
     snmp_vacm -- View-based Access Control module for bsnmpd(1)

LIBRARY
     (begemotSnmpdModulePath."vacm" = /usr/lib/snmp_vacm.so)

DESCRIPTION
     The snmp_vacm module implements SNMPv3 View-based Access Control Model
     MIB as defined in RFC 3415. The module is used to manage the internal
     lists of SNMPv1, v2c and v3 user names and	groups and their access	rights
     to	fetch or modify	the values of the MIB objects maintained by bsnmpd and
     the modules loaded	in the daemon.	The module must	be loaded for bsnmpd
     to	implement proper view-based access control. If the module is not
     loaded, access is granted to all configured SNMPv1	& SNMPv2c communities
     and SNMPv3	USM users.

IMPLEMENTATION NOTES
     An	entry in any table implemented by this MIB may be created by setting
     the relevant RowStatus column to createAndGo (4) -	in fact, any other
     value for those columns in	a SET operation	will cause an error. When an
     entry is created, any of its columns that is not used as index, is	set to
     the default value as specified in the SNMP-VIEW-BASED-ACM-MIB. All	en-
     tries maintained by the module are	persistent after reboot	if created via
     bsnmpd 's config file, otherwise entries created via SNMP are lost	after
     reboot.  A	short description of the objects in the	MIB follows.

     vacmContextTable
		A read-only table that consists	of a list of SNMP contexts
		available in bsnmpd.

     vacmSecurityToGroupTable
		The table contains a list of SNMPv1, v2c and v3	user names and
		the groups they	belong to.

     vacmAccessTable
		The table contains a list of SNMP contexts to groups mappings
		and respectively the names of the SNMP views under those con-
		texts, to which	users in the group are granted read-only,
		read-write access or receive notifications for the objects un-
		der the	subtree	in the relevant	view.

     vacmViewTreeFamilyTable
		The table contains a list of SNMP views, i.e. entries specify-
		ing the	OID of a MIB subtree and whether access	to the objects
		under this subtree is to be allowed or forbidden.

FILES
     /usr/share/snmp/defs/vacm_tree.def
		The description	of the MIB tree	implemented by snmp_vacm.

SEE ALSO
     bsnmpd(1),	gensnmptree(1),	snmpmod(3)

STANDARDS
     IETF RFC 3415

AUTHORS
     Shteryana Shopova <syrinx@FreeBSD.org>

BSD				October	7, 2010				   BSD

NAME | LIBRARY | DESCRIPTION | IMPLEMENTATION NOTES | FILES | SEE ALSO | STANDARDS | AUTHORS

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=snmp_vacm&sektion=3&manpath=FreeBSD+12.0-RELEASE+and+Ports>

home | help