HM2-USERMGMT-MIB
Hirschmann User and Password Management MIB. Copyright (C) 2011. All Rights Reserved.
Main OID:
hm2UserMgmtMib.1.3.6.1.4.1.248.11.24
88
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
88 total| Object Name |
|---|
hm2UserMgmtMibHirschmann User and Password Management MIB. Copyright (C) 2011. All Rights Reserved. MODULE-IDENTITY .1.3.6.1.4.1.248.11.24 |
hm2UserMgmtMibNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.0 |
hm2UserCreatedTrapThis notification is send when a new user is added to the hm2UserConfigTable. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.24.0.1 |
hm2UserDeletedTrapThis notification is send when a user is deleted from the hm2UserConfigTable. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.24.0.2 |
hm2UserLockedTrapThis notification is send when a user is locked due to excessive failed login attempts. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.24.0.3 |
hm2UserPwdChangedTrapThis notification is send when a password for a user is changed. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.24.0.4 |
hm2UserPwdPolicyChkChangedTrapThis notification is send when the password policy for a user is changed. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.24.0.5 |
hm2UserMgmtMibObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1 |
hm2UserConfigGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.1 |
hm2UserConfigTableUser configuration table. This table provides the functionality the system uses for any interaction started by the user - authentication, encryption - changing authentication, password and access role for login purposes through Web, CLI, SSH, SNMPv3. For SNMPv3 the standard SNMPv3 authentication/encryption methods are used. To create a new user set hm2UserStatus to 'createAndWait, and set the corresponding objects to their values. Setting hm2UserStatus to 'active' activates the user. To delete a user, set hm2UserStatus to 'destroy'. Creating a new user in the hm2UserConfigTable always creates a new user in the SNMPv3 tables. The newly created SNMPv3 user will get the corresponding view in the SNMPv3 tables which matches to one of the given roles the user can have. All objects in this table can be set while a row is 'active'. SEQUENCE OF Hm2UserConfigEntry .1.3.6.1.4.1.248.11.24.1.1.1 |
hm2UserConfigEntryUser configuration entry. Hm2UserConfigEntry .1.3.6.1.4.1.248.11.24.1.1.1.1 |
hm2UserNameAgent user name.ro SnmpAdminString .1.3.6.1.4.1.248.11.24.1.1.1.1.1 |
hm2UserPasswordAgent user password This object will always return '********' when read. The minimum size of the password is defined with the hm2PwdMgmtMinLength object. The user password can be set while the row is active.rw DisplayString .1.3.6.1.4.1.248.11.24.1.1.1.1.2 |
hm2UserAccessRoleAgent user's role. The user's role can be set while the row is active.rw Hm2UserAccessRoles .1.3.6.1.4.1.248.11.24.1.1.1.1.3 |
hm2UserLockoutStatusDisplays whether the user account is locked due to excessive failed login attempts. If the user is locked out, the hm2UserLockoutStatus status is 'true'. Only a user with the administrator role can set this status back to 'false'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.1.1.4 |
hm2UserPwdChangePermDisplays whether the user is allowed to change his own password. Only a user with the administrator role can set this value.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.1.1.5 |
hm2UserPwdPolicyChkDisplays whether the password policy check is enabled or not. The password policy check objects are defined in the hm2PwdMgmtGroup. Even if this object if set to 'disable' the size of a new password has to be at least the size of the hm2PwdMgmtMinLength object set. Only a user with the administrator role can set this value.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.24.1.1.1.1.6 |
hm2UserSnmpAuthTypeSNMPv3 user authentication. The user password must be set to a string greater than or equal to 8 characters for this to be set to anything but none(0). - hmacmd5(1) -> Use HMAC-MD5 authentication - hmacsha(2) -> Use HMAC-SHA authentication The user authentication type can be set while the row is active .rw Enumeration .1.3.6.1.4.1.248.11.24.1.1.1.1.7 |
hm2UserSnmpEncTypeSNMPv3 user encryption Can not be set to des(2) or aesCfb128(3) if hm2UserSnmpAuthenticationType is set to none(0). - none(0) -> no encryption used - des(1) -> DES encryption used - aesCfb128(2) -> AES-128 encryption used The user encryption type can be set while the row is active.rw Enumeration .1.3.6.1.4.1.248.11.24.1.1.1.1.8 |
hm2UserStatusAgent user status. active(1) - This user account is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this user account.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.1.1.9 |
hm2UserStatusGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.1.10 |
hm2UserLastUserCreatedName of the last user created in hm2UserConfigTable.ro SnmpAdminString .1.3.6.1.4.1.248.11.24.1.1.10.1 |
hm2UserLastUserDeletedName of the last user deleted in hm2UserConfigTable.ro SnmpAdminString .1.3.6.1.4.1.248.11.24.1.1.10.2 |
hm2UserCustomGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.1.20 |
hm2UserCustomAccessRole2NameTableCustom based role to name mapping. SEQUENCE OF Hm2UserCustomAccessRole2NameEntry .1.3.6.1.4.1.248.11.24.1.1.20.1 |
hm2UserCustomAccessRole2NameEntryThe hm2UserCustomAccessRole2NameEntry. Hm2UserCustomAccessRole2NameEntry .1.3.6.1.4.1.248.11.24.1.1.20.1.1 |
hm2UserCustomAccessRoleCustom based roles. Hm2UserCustomAccessRoles .1.3.6.1.4.1.248.11.24.1.1.20.1.1.1 |
hm2UserCustomAccessRoleNameCustom based role name.rw SnmpAdminString .1.3.6.1.4.1.248.11.24.1.1.20.1.1.2 |
hm2UserCustomAccessRoleStatusCustom-based role to name command row status. active(1) - This user account is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this role to name entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.20.1.1.3 |
hm2UserCustomCliCmdInheritTableBase access role from which the custom-based CLI commands are inherited from. SEQUENCE OF Hm2UserCustomCliCmdInheritEntry .1.3.6.1.4.1.248.11.24.1.1.20.2 |
hm2UserCustomCliCmdInheritEntryThe hm2UserCustomCliCmdInheritEntry. Hm2UserCustomCliCmdInheritEntry .1.3.6.1.4.1.248.11.24.1.1.20.2.1 |
hm2UserCustomCliBaseAccessRoleThe base access role the new CLI command is inherited from.rw Hm2UserAccessRoles .1.3.6.1.4.1.248.11.24.1.1.20.2.1.1 |
hm2UserCustomCliBaseAccessRoleStatusCustom-based CLI base access role command row status. active(1) - This user account is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this role to name entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.20.2.1.2 |
hm2UserCustomCliCmdTableTable containing the custom-based CLI commands. SEQUENCE OF Hm2UserCustomCliCmdEntry .1.3.6.1.4.1.248.11.24.1.1.20.3 |
hm2UserCustomCliCmdEntryThe entries of the table. Hm2UserCustomCliCmdEntry .1.3.6.1.4.1.248.11.24.1.1.20.3.1 |
hm2UserCustomCliExecModeCLI exec mode. Hm2UserCliExecModes .1.3.6.1.4.1.248.11.24.1.1.20.3.1.1 |
hm2UserCustomCliIndexIndex of the custom based CLI commands. Integer32 .1.3.6.1.4.1.248.11.24.1.1.20.3.1.2 |
hm2UserCustomCliCommandThe custom based CLI command to be assigned.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.248.11.24.1.1.20.3.1.3 |
hm2UserCustomCliTypeThe custom based CLI command to be included or excluded in respect to the base role.rw Enumeration .1.3.6.1.4.1.248.11.24.1.1.20.3.1.4 |
hm2UserCustomCliStatusCustom-based CLI command row status. active(1) - This user account is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this CLI command entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.1.20.3.1.5 |
hm2PwdMgmtGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.2 |
hm2PwdMgmtMinLengthMinimum length for user passwords All new local user passwords must be at least this many characters in length.rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.1 |
hm2PwdMgmtLoginAttemptsThe number of allowable failed local authentication attempts before the user's account is locked. A value of '0' indicates that user accounts will never be locked.rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.2 |
hm2PwdMgmtMinUpperCaseThe number of minimum allowable uppercase letters in a password. Minimum of '0' means no restriction on that set of characters.rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.3 |
hm2PwdMgmtMinLowerCaseThe number of minimum allowable lowercase letters in a password. Minimum of '0' means no restriction on that set of characters.rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.4 |
hm2PwdMgmtMinNumericNumbersThe number of minimum allowable numeric numbers in a password. Minimum of '0' means no restriction on that set of characters.rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.5 |
hm2PwdMgmtMinSpecialCharactersThe number of minimum allowable special characters in a password. Minimum of '0' means no restriction on that set of characters. The following special characters are allowed: !#$%&'()*+,-./:;<=>?@[\\]^_`{}~rw Integer32 .1.3.6.1.4.1.248.11.24.1.2.6 |
hm2PwdMgmtDefaultPwdStatusGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.2.100 |
hm2PwdMgmtDefaultPwdActiveShows if one or more default passwords are active for users configured in the hm2UserConfigTable. The hm2PwdMgmtDefaultPwdStatusTable shows for which users the default password is currently actice.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.2.100.1 |
hm2PwdMgmtDefaultPwdStatusTableTable showing for which users defined in hm2UserConfigTable the default password has not been changed. SEQUENCE OF Hm2PwdMgmtDefaultPwdStatusEntry .1.3.6.1.4.1.248.11.24.1.2.100.100 |
hm2PwdMgmtDefaultPwdStatusEntryEntry. Hm2PwdMgmtDefaultPwdStatusEntry .1.3.6.1.4.1.248.11.24.1.2.100.100.1 |
hm2PwdMgmtDefaultPwdStatusIndexIndex for the table. Integer32 .1.3.6.1.4.1.248.11.24.1.2.100.100.1.1 |
hm2PwdMgmtDefaultPwdStatusUserNameThe name of the default user for which the default password has not been changed.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.248.11.24.1.2.100.100.1.2 |
hm2UserApplicationListGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.3 |
hm2UserApplicationListTableThis table provides the functionality the system uses to assign an authentication list to an application. All objects in this table can be set while a row is 'active'. SEQUENCE OF Hm2UserApplicationListEntry .1.3.6.1.4.1.248.11.24.1.3.1 |
hm2UserApplicationListEntryApplication list entry. Hm2UserApplicationListEntry .1.3.6.1.4.1.248.11.24.1.3.1.1 |
hm2UserApplicationListNameApplication list name. SnmpAdminString .1.3.6.1.4.1.248.11.24.1.3.1.1.1 |
hm2UserApplicationListAuthListNameThe authentication list used for this application to authenticate to the system. The application authentication list can be set while the row is active.rw SnmpAdminString .1.3.6.1.4.1.248.11.24.1.3.1.1.6 |
hm2UserApplicationListStatusApplication row status. active(1) - This user account is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this application list entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.3.1.1.7 |
hm2UserAuthListGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.4 |
hm2UserAuthListTableThe hm2UserAuthListTable holds up to 5 policies a user authenticates to the system. SEQUENCE OF Hm2UserAuthListEntry .1.3.6.1.4.1.248.11.24.1.4.1 |
hm2UserAuthListEntryThe hm2UserAuthListEntry. Hm2UserAuthListEntry .1.3.6.1.4.1.248.11.24.1.4.1.1 |
hm2UserAuthListNameAuthentication list index. Unique name used for indexing into this table. SnmpAdminString .1.3.6.1.4.1.248.11.24.1.4.1.1.1 |
hm2UserAuthListPolicy1Authentication list policy 1. Configures the first authentication policy to use when this list is specified. - local -> authentication is done through local user database - radius -> authentication is done through a RADIUS server - ias -> authentication is done through a (i)ntegrated (a)uthentication (s)erver - cam -> authentication is done through a CAM server (via LDAP) - ldap -> authentication is done through a AD server (via LDAP) - reject -> authentication is rejected/not allowed. Note: If a policy is set to 'reject' further policies are ignored.rw Hm2UserAuthList .1.3.6.1.4.1.248.11.24.1.4.1.1.2 |
hm2UserAuthListPolicy2Authentication list policy 2. Configures the first authentication policy to use when this list is specified. - local -> authentication is done through local user database - radius -> authentication is done through a RADIUS server - ias -> authentication is done through a (i)ntegrated (a)uthentication (s)erver - cam -> authentication is done through a CAM server (via LDAP) - ldap -> authentication is done through a AD server (via LDAP) - reject -> authentication is rejected/not allowed Note: If a policy is set to 'reject' further policies are ignored.rw Hm2UserAuthList .1.3.6.1.4.1.248.11.24.1.4.1.1.3 |
hm2UserAuthListPolicy3Authentication list policy 3. Configures the first authentication policy to use when this list is specified. - local -> authentication is done through local user database - radius -> authentication is done through a RADIUS server - ias -> authentication is done through a (i)ntegrated (a)uthentication (s)erver - cam -> authentication is done through a CAM server (via LDAP) - ldap -> authentication is done through a AD server (via LDAP) - reject -> authentication is rejected/not allowed Note: If a policy is set to 'reject' further policies are ignored.rw Hm2UserAuthList .1.3.6.1.4.1.248.11.24.1.4.1.1.4 |
hm2UserAuthListPolicy4Authentication list policy 4. Configures the first authentication policy to use when this list is specified. - local -> authentication is done through local user database - radius -> authentication is done through a RADIUS server - ias -> authentication is done through a (i)ntegrated (a)uthentication (s)erver - cam -> authentication is done through a CAM server (via LDAP) - ldap -> authentication is done through a AD server (via LDAP) - reject -> authentication is rejected/not allowed Note: If a policy is set to 'reject' further policies are ignored.rw Hm2UserAuthList .1.3.6.1.4.1.248.11.24.1.4.1.1.5 |
hm2UserAuthListPolicy5Authentication list policy 5. Configures the first authentication policy to use when this list is specified. - local -> authentication is done through local user database - radius -> authentication is done through a RADIUS server - ias -> authentication is done through a (i)ntegrated (a)uthentication (s)erver - cam -> authentication is done through a CAM server (via LDAP) - ldap -> authentication is done through a AD server (via LDAP) - reject -> authentication is rejected/not allowed Note: If a policy is set to 'reject' further policies are ignored.rw Hm2UserAuthList .1.3.6.1.4.1.248.11.24.1.4.1.1.6 |
hm2UserAuthListStatusThe status of the authentication list. active(1) - This entry is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this authentication list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.4.1.1.7 |
hm2UserIasGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.1.5 |
hm2UserIasTable(I)ntegrated (A)uthentication (S)erver. SEQUENCE OF Hm2UserIasEntry .1.3.6.1.4.1.248.11.24.1.5.1 |
hm2UserIasEntryThe hm2UserIasEntry. Hm2UserIasEntry .1.3.6.1.4.1.248.11.24.1.5.1.1 |
hm2UserIasUserNameThe (I)ntegrated (A)uthentication (S)erver user name. SnmpAdminString .1.3.6.1.4.1.248.11.24.1.5.1.1.1 |
hm2UserIasUserPasswordThe (I)ntegrated (A)uthentication (S)erver user password. This object will always return '********' when read. The user password can be set while the row is active.rw DisplayString .1.3.6.1.4.1.248.11.24.1.5.1.1.2 |
hm2UserIasUserStatusThe status of the IAS users. active(1) - This entry is active. notInService(2) - Row has been suspended. notReady(3) - Row has incomplete values. createAndGo(4) - Accept row values and activate. createAndWait(5) - Accept row values and wait. destroy(6) - Set to this value to remove this IAS entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.24.1.5.1.1.3 |
hm2UserMgmtMibSNMPExtensionGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3 |
hm2UserMgmtGlobalSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.1 |
hm2UserMgmtGlobalSESLenCharsetIndicates that the chosen entry name uses not allowed character(s). Allowed are alphanumerical characters and name size from 1 to 32. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.1.1 |
hm2UserMgmtGlobalSESPwdLenCharsetIndicates that the chosen password is incorrect. Check character set, length, policy matching (if password policy checker is enabled). OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.1.2 |
hm2UserMgmtUserSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.2 |
hm2UserMgmtUserSESActivateIndicates that the chosen user entry can not be activated. Be sure that a user password has been successfully set before. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.2.1 |
hm2UserMgmtUserSESDeactivateIndicates that the chosen user entry can not be deactivated. Be sure that this user is not the last active admin on the device. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.2.2 |
hm2UserMgmtApplSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.3 |
hm2UserMgmtApplSESAddDelIndicates that the chosen entry can not be added or deleted. Notice that application lists can neither be added nor deleted. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.3.1 |
hm2UserMgmtApplSESDeactivateIndicates that the chosen entry can not be deactivated. Be sure that this list is not referenced to an authentication list (hm2UserApplicationListAuthListName has to be set to a zero length string). OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.3.2 |
hm2UserMgmtAuthSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.4 |
hm2UserMgmtAuthSESDuplPolicyIndicates that the chosen policy of this entry can not be set twice. Be sure that a policy is set only once per authentication list (exception: the policy 'reject' can be set several times). OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.4.1 |
hm2UserMgmtAuthSESDeactivateIndicates that the chosen entry can not be deactivated. Be sure that this list is not referenced by an apllication list (hm2UserApplicationListAuthListName is not set to this authentication list name). OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.24.3.4.2 |