From e22efc62d58a5a77865ed8b0d924920ab59e230e Mon Sep 17 00:00:00 2001 From: Sriram Bhetanabottla Date: Wed, 12 Aug 2026 14:07:58 +0200 Subject: [PATCH 1/2] review fixes --- doc/Core.xml | 58 ++++++++++++++++++++++++++-------------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/doc/Core.xml b/doc/Core.xml index ddc18009d..aed0ec8c7 100644 --- a/doc/Core.xml +++ b/doc/Core.xml @@ -5452,10 +5452,14 @@ onvif://www.onvif.org/name/ARV-453
SNMP Configuration - This section defines a feature extension to the Device Management Service for SNMPv3 support as specified in [RFC 3410] and related standards. Only SNMPv3 is within the scope of this extension. Devices supporting this extension shall indicate their capability via the SNMP flag in the DeviceServiceCapabilities (see Section ). + This section defines a feature extension to the Device Management Service for SNMPv3 + support as specified in [RFC 3410] and related standards. Only SNMPv3 is within the scope of + this extension. A device supporting this extension shall indicate their capability via the + SNMP flag in the DeviceServiceCapabilities (see Section ).
SNMP Service Control - The SNMP service shall be disabled by default. When enabled, the Device shall start to + The SNMP service shall be disabled by default. When enabled, the device shall start to listen for commands and queries on the configured SNMP port.
@@ -5472,7 +5476,9 @@ onvif://www.onvif.org/name/ARV-453 response SNMPConfiguration [tt:SNMPConfiguration] - The current SNMP service configuration, including service state and, if an initial user has been configured, the associated user name, security level, and active protocol settings. + This message includes current SNMP service configuration, including + service state and, if an initial user has been configured, the associated user + name, security level, and active protocol settings. @@ -5588,7 +5594,7 @@ onvif://www.onvif.org/name/ARV-453 ListeningPort - xs:unsignedInt + xs:unsignedShort optional The UDP port number for the SNMP agent. May be set on initial enable or updated while the service is running. If omitted on initial @@ -5661,17 +5667,13 @@ onvif://www.onvif.org/name/ARV-453 env:Sender - ter:InvalidArgVal - ter:InvalidSNMPPort The provided ListeningPort is outside the valid range or is otherwise unusable. - env:Sender - ter:InvalidArgVal - - ter:SNMPInitialUserIncomplete - The initial user configuration is missing or incomplete. - InitialUserName and SecurityLevel are required when enabling the service or - when updating user credentials. Additional fields (AuthenticationProtocol, - AuthPassword, PrivacyProtocol, PrivacyPassword) are required depending on - the chosen SecurityLevel. - env:Sender - ter:InvalidArgVal - - ter:SNMPInvalidInitialUser - The provided initial user configuration is invalid (e.g. username - too long, password too short). + env:Sender - ter:InvalidArgVal - ter:InvalidSNMPConfig + The initial user configuration is either incomplete or invalid. + InitialUserName and SecurityLevel are required when enabling the service or when + updating user credentials. Additional fields (AuthenticationProtocol, + AuthPassword, PrivacyProtocol, PrivacyPassword) are required depending on the + chosen SecurityLevel. The provided initial user configuration is invalid (e.g. + username too long, password too short). @@ -5686,16 +5688,18 @@ onvif://www.onvif.org/name/ARV-453
Security Parameter Configuration - - This section details the requirements for authentication and privacy protocols supported by the SNMP extension. - When an initial user is created or updated via SetSNMPConfiguration, the Device shall securely store localized keys and apply them according to the specified security level. - Authentication and privacy passwords shall be provided by the Client as plaintext strings. The Device shall derive the corresponding keys from these passwords using the password-to-key algorithm defined in [RFC 3414] §2.6, or as extended by [RFC 7860] §4 for SHA-2 based authentication protocols. The Device shall then localize the derived keys using its EngineID per [RFC 3414] Appendix A.1 before storing them internally. Passwords shall be at minimum 8 characters in length as required by [RFC 3414] §2.6. - + This section details the requirements for authentication and privacy protocols supported + by the SNMP extension. When an initial user is created or updated via + SetSNMPConfiguration, the device shall securely store localized keys + and apply them according to the specified security level. The device shall derive + corresponding keys from plain text passwords using the password-to-key algorithm defined + in [RFC 3414] §2.6, or as extended by [RFC 7860] §4 for SHA-2 based authentication + protocols. The device shall then localize the derived keys using its EngineID per [RFC + 3414] Appendix A.1 before storing them internally. Passwords shall be at minimum 8 + characters in length as required by [RFC 3414] §2.6.
Authentication Protocols - - The following authentication protocols shall be supported: - + The following authentication algirithms shall be supported: @@ -5703,9 +5707,7 @@ onvif://www.onvif.org/name/ARV-453 - - Support for stronger authentication algorithms is RECOMMENDED: - + The following authentication algorithms should be supported: @@ -5734,9 +5736,7 @@ onvif://www.onvif.org/name/ARV-453 - - Support for stronger privacy ciphers is RECOMMENDED: - + The following privacy protocols should be suppotted: From 2e8e5bb2f573ca405a5d68aed25b9203858634de Mon Sep 17 00:00:00 2001 From: Sriram Bhetanabottla Date: Thu, 13 Aug 2026 12:58:14 +0200 Subject: [PATCH 2/2] typo fix --- doc/Core.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/Core.xml b/doc/Core.xml index aed0ec8c7..060d06d6b 100644 --- a/doc/Core.xml +++ b/doc/Core.xml @@ -5736,7 +5736,7 @@ onvif://www.onvif.org/name/ARV-453 - The following privacy protocols should be suppotted: + The following privacy protocols should be supported: