All MIBs › SNMP-USER-BASED-SM-MIB › usmUserOwnAuthKeyChange
usmUserOwnAuthKeyChange
Module: SNMP-USER-BASED-SM-MIB
OID (symbolic): SNMP-USER-BASED-SM-MIB::usmUserOwnAuthKeyChange
OID (numeric): 1.3.6.1.6.3.15.1.2.2.1.7
Node type: OBJECT-TYPE
Type: KeyChange
Access: read-create
Description: Behaves exactly as usmUserAuthKeyChange, with one notable difference: in order for the set operation to succeed, the usmUserName of the operation requester must match the usmUserName that indexes the row which is targeted by this operation. In addition, the USM security model must be used for this operation.
The idea here is that access to this column can be public, since it will only allow a user to change his own secret authentication key (authKey). Note that this can only be done once the row is active.
When a set is received and the usmUserName of the requester is not the same as the umsUserName that indexes the row which is targeted by this operation, then a 'noAccess' error must be returned.
When a set is received and the security model in use is not USM, then a 'noAccess' error must be returned.
What is usmUserOwnAuthKeyChange?
This object behaves identically to usmUserAuthKeyChange, transforming the target user's secret authentication key via a one-way function, except the SET must come from the same usmUserName it targets and must use the USM security model, letting access to this column be granted more broadly since it can only touch one's own key. It gives an SNMPv3 user a public, self-service way to rotate their own authKey rather than requiring an administrator to do it on their behalf. For example, user 'bob' logged in as himself can SET usmUserOwnAuthKeyChange on his own row, but the same SET issued while authenticated as 'bob' against another user's row would be rejected with a noAccess error.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.6 | snmpV2 | DASAN-DHCP-MIB |
| 1.3.6.1.6.3 | snmpModules | RAPID-CITY |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.6.3.15 | snmpUsmMIB | SNMP-USER-BASED-SM-MIB |
| 1.3.6.1.6.3.15.1 | usmMIBObjects | SNMP-USER-BASED-SM-MIB |
| 1.3.6.1.6.3.15.1.2 | usmUser | SNMP-USER-BASED-SM-MIB |
| 1.3.6.1.6.3.15.1.2.2 | usmUserTable | SNMP-USER-BASED-SM-MIB |
| 1.3.6.1.6.3.15.1.2.2.1 | usmUserEntry | SNMP-USER-BASED-SM-MIB |
| 1.3.6.1.6.3.15.1.2.2.1.7 | usmUserOwnAuthKeyChange | SNMP-USER-BASED-SM-MIB |