snmpd 5.3.0.1 stopped accepting smux peer's password

I've just upgraded NET-SNMP from version 5.1.3.1. to 5.3.0.1.
Am running on Solaris 9 SPARC.

Before upgrading, the SMUX sub-agent in freeradius 1.0.5 and 1.1.2 was able to talk
to snmpd fine.  Now snmpd is refusing to accept the connection from the
freeradius, apparently because snmpd thinks the smux peer's password is wrong.
I've made no configuration changes.

Debug of freeradius shows:

    radiusd[13113]: SMUX_CLOSE with reason: 5

...and I think that the '5' code is referring to SMUXC_AUTHENTICATIONFAILURE
as per net-snmp-5.3.0.1/agent/mibgroup/smux/smux.h


Debug of snmpd shows:

    registered debug token smux, 1
    registered debug token smux_conf, 1
    registered debug token smux_init, 1
    smux_conf: parsing registration for: .1.3.6.1.4.1.3317.1.3.1 foobar
    smux_conf: password is: foobar
    ...
    smux: [smux_accept] Calling accept()
    [smux_accept] accepted fd 9 from 127.0.0.1:56878
    smux: [smux_open_process] version 0, len 33, type 2
    smux: [smux_open_process] smux peer: SNMPv2-SMI::enterprises.3317.1.3.1
    smux: [smux_open_process] len 21, type 6
    smux: [smux_open_process] smux peer descr: radiusd
    smux: [smux_open_process] len 12, type 4
    smux: [smux_open_process] smux peer passwd: foobar
    smux: [smux_open_process] len 0, type 4
    refused smux peer: oid SNMPv2-SMI::enterprises.3317.1.3.1, descr radiusd
    smux: [smux_close] sending close to fd 9, reason 5
    smux: [smux_accept] peer on 9 failed authentication

It seems to be that this says that snmpd init'd password "foobar" for this OID,
then an SMUX client connected and supplied password "foobar", which snmpd
said is the wrong password.

This is surprising, because I've made no changes to the NET-SNMP
(or freeradius) configuration files.  The sole change was to upgrade NET-SNMP
from 5.1.3.1 to 5.3.0.1.

What have I missed?


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users