Unable to set pass phrases correctly using usmuser executable for user with other authoritative engine

Folks,
    I am attempting to create a new USM user.  The authoritative engine
is not the engine (device) where I am creating the user.  Also the user
will be created with security level 3 (authpriv).  I am successfully
creating the user via an SNMP set as described in RFC 3414.  I specified
the index of the USM user to include the engine id of the authoritative
engine and the user name.  I also set the status to 5 (create and wait).
Upon inspecting the usm table at this point, all is well and the new
user exists in the table.  I was unable to create the user via the
usmuser CREATE function but that's another issue.
 
    I them attempt to set the pass phrases via the usmuser password
function.  The command line looks as follows:
/usr/local/bin/snmpusm -v3 -lauthPriv  -aSHA -xAES -t15 -r2   -E
<authoritative engine id>  \
-u<user>  -A<passhrase> -X<privpassphrase>  -Ca  -CE <authoritative
engine id> 10.1.253.73 passwd <cloned user auth pass phrase> \
 <new auth pass phrase>  NEWUSER
 
    My understanding is that the -CE switch would index the usm table
correctly for this USM user and the -E switch would force the use of the
specified engine id for the encode keychange calculation.  The method
succeeds and I then proceed to change the privacy password the same way
and then set the status of the user to active with an snmpset.
 
    When I attempt to access the authoritative engine however the SNMP
message does not seem to be encrypted properly.  This is what WireShark
is reporting after analysis of the packet dump.  Also the target device
is responding with a report pdu that contains a usmStatsWrongDigest
varbin.
 
    Does NET-SNMP supported changing the pass phrases for user that are
not using the local engine id as the authoritative engine?  If so, how?
 
    Thanks You.

 
Joe Keen
Private Network Management
Motorola
Phone: (847) 576-0807
Pager: [email protected]

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users