RE: SNMPV3 user Authentication Failed

> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Madan (Madan Mohan) Goud
> Sent: Sunday, October 14, 2007 12:24 AM

<SNIP/>

> I wrote an API to create an user. It is in accordance with
> usm_parse_create_usmUser API present in snmpv3.c. Instead of taking
> parameters like username and authentication key from snmpd.conf, I am
> supplying them as parameters to my API.

<SNIP/>

> (2)  When I create the user without Authentication and Privacy, SNMPV3
> works fine and I get response. When I create user with Authentication
> and privacy parameters, It fails. Basically I am getting 
> failure in the
> following piece of code in the API usm_process_in_msg present in
> snmpusm.c :

<SNIP/>

>         if (sc_check_keyed_hash(user->authProtocol,
> user->authProtocolLen,
>                                 user->authKey, user->authKeyLen,
>                                 wholeMsg, wholeMsgLen,
>                                 signature, signature_length)
>             != SNMP_ERR_NOERROR) {

<SNIP/>

>       snmp_log(LOG_WARNING, "Authentication failed for
> %s\n",user->name);      -> I am getting this error on console for the
> user I created.

<SNIP/>

	The sc_check_keyed_hash routine operates on an SNMPv3 message.  To be blunt, it does not appear that you are doing what you think you are doing.  If you wish to create a user, the best way is to use SNMP operations to do so - this is not only portable, it is the defined method for creating users.  See RFC3414 for full details.


	HTH,

Mike

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users