Re: Problem with snmptrap

On Tue, 2005-11-29 at 10:27 -0800, Wes Hardaker wrote:
> >>>>> On Tue, 29 Nov 2005 09:39:37 -0800, Wes Hardaker <[email protected]> said:
> 
> Andrei> snmptrap  -Ddumph_send,dumpv_send,usm -e 0xbd224466-v 3 -u root -a MD5
> Andrei> -A authpass -l authPriv -x DES -X privpass localhost 42 coldStart.0
> 
> Wes> 1) that engineid is not a legal one...  Not that it should matter much
> Wes> for our tools, as we're fairly liberal in what we accept.  However,
> Wes> for others it might cause them to fail.
> 

OK. For this moment I am trying to make it work on local host, but still
I don't get this correspondence user <=> engine ID. 0xbd224466 might not
be a valid value, but still is accepted.

> Wes> 2) The engineID *MUST* match the engineID of the trap receiver.  It
> Wes> can't be arbitrary.  do a "grep oldEngineID
> Wes> /var/net-snmp/snmptrapd.conf" and use the engineID from that line
> Wes> for *both* the createUser line and the snmptrap line.
> 
> whoops.  #2 is a lie.  It should only match for an INFORM....  my bad.
> 
> As long as the createuser line matches the -e switch, it should work...
> 
> -- 
> Wes Hardaker
> Sparta, Inc.
> 

Let me put it this way. I do the followings:
1. stop snmptrapd
2. edit /var/net-snmp/snmptrapd.conf to have
createUser -e myengineID username MD5 authpass DES privpass

myengineID = 0xbd224466 , I tried values even bigger, but still had the
same result
3. start snmptrapd
4. snmpinform or snmptrap for this user doesn't work, I try this with
the cmd:
 snmp{trap|inform} -e myengineID -v 3  -u username -a MD5 -A authpass -l
authPriv -x DES -X privpass localhost 42 coldStart.0

=> 
snmptrap: USM unknown security name (no such user exists) (Sub-id not
found: (top) -> coldStart)

As I see this steps are also in the tutorial from the site.
I have observed that if I do a createuser without -e, snmpinform
succeds, but snmptrap does not. The debug shows me that snmpinform or
snmptrap -Ci do a GET message before, snmptrap does only TRAP2 message,
and I fails to verify the user.

Can anybody explain me what I misunderstood here?
I can't make it work together, the username and the engineID.

Thanks!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iQEVAwUAQ416rQlodUAtaLVoAQLEAQf/TPPkFqJQGOolxw78Zu9OR2dPIVlJ9HsS
QQDDrZ/AMvh4Jdj68wgPU/qfXV0w7HM679/5eT9MopYlbMDW0BFn6EHJlqz9b8ej
VmOo38KP9JYY/mIWc5rgSiivhB/3Ala4KYy1dCsZmESJ4h3qg+tWhdWUhXZLn22A
DKUyKjII3VLjfImXROQ01UEX9cqlW3HlZ5yFMQaYzkt+BYeDnFjF0wmqJjB8Bu1n
EgVwG9i9WM21NA3vwirh1T5yo/v27mr4bQaXtFKO+ieNX6BXDROnlo7xu/nWFxH2
7mwFEXAMMspQLH81avmYRSWppjDhAvavyTCrI582cNhrk72oHsl7ow==
=Uzt0
-----END PGP SIGNATURE-----

-- 
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/