snmp v3 authentication

Hi,

I don't seem to be able to make snmp v3 authentication work. Command line messages snmpget are very cryptic and not helpful:

Server2:~/work/.../snmp/tutorial-> snmpget -v 2c -c xxxx 127.0.0.1 sysUpTime.0
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3467) 0:00:34.67

Server2:~/work/.../snmp/tutorial-> snmpget -v 3 -u xxxx 127.0.0.1 sysUpTime.0
snmpget: Unknown user name (Sub-id not found: (top) -> sysUpTime)

But I give user-name (xxxx)! snmpd is 5.4.1 and os is Solaris 10.5. I also specify noAuthNoPriv in snmp.conf

Thanx,
Nikos

~/.snmp/snmp.conf:
defVersion                 3
defSecurityName        xxxx
defSecurityLevel        noAuthNoPriv
mibs +NET-SNMP-TUTORIAL-MIB

/usr/local/share/snmp/snmpd.conf:
###########################################################################
#
# snmpd.conf
#
#   - created by the snmpconf configuration program
#
###########################################################################
# SECTION: Access Control Setup
#
#   This section defines who is allowed to talk to your running
#   snmp agent.

# rwuser: a SNMPv3 read-write user
#   arguments:  user [noauth|auth|priv] [restriction_oid]

rwuser  xxxx

# rwcommunity: a SNMPv1/SNMPv2c read-write access community name
#   arguments:  community [default|hostname|network/bits] [oid]

rwcommunity  xxxx


dlmod nstAgentPluginObject /export/home/nbal/work/kannel/snmp/tutorial/nstAgentPluginObject.so



###########################################################################
# SECTION: Monitor Various Aspects of the Running Host
#
#   The following check up on various aspects of a host.

# proc: Check for processes that should be running.
#     proc NAME [MAX=0] [MIN=0]
#...
#     NAME:  the name of the process to check for.  It must match
#            exactly (ie, http will not find httpd processes).
#     MAX:   the maximum number allowed to be running.  Defaults to 0.
#     MIN:   the minimum number to be running.  Defaults to 0.
#...
#   The results are reported in the prTable section of the UCD-SNMP-MIB tree
#   Special Case:  When the min and max numbers are both 0, it assumes
#   you want a max of infinity and a min of 1.

proc  sshd 1 1

# disk: Check for disk space usage of a partition.
#   The agent can check the amount of available disk space, and make
#   sure it is above a set limit...
#...
#    disk PATH [MIN=100000]
#...
#    PATH:  mount path to the disk in question.
#    MIN:   Disks with space below this value will have the Mib's errorFlag set.
#           Can be a raw byte value or a percentage followed by the %
#           symbol.  Default value = 100000.
#...
#   The results are reported in the dskTable section of the UCD-SNMP-MIB tree

disk  / 10000000
disk  /tmp 40000

# SECTION: System Information Setup
#
#   This section defines some of the information reported in
#   the "system" mib group in the mibII tree.

# syslocation: The [typically physical] location of the system.
#   Note that setting this value here means that when trying to
#   perform an snmp SET operation to the sysLocation.0 variable will make
#   the agent return the "notWritable" error code.  IE, including
#   this token in the snmpd.conf file will disable write access to
#   the variable.
#   arguments:  location_string

# syscontact: The contact information for the administrator
#   Note that setting this value here means that when trying to
#   perform an snmp SET operation to the sysContact.0 variable will make
#   the agent return the "notWritable" error code.  IE, including
#   this token in the snmpd.conf file will disable write access to
#   the variable.
#   arguments:  contact_string

# sysservices: The proper value for the sysServices object.
#   arguments:  sysservices_number

sysservices 76



###########################################################################
# SECTION: Trap Destinations
#
#   Here we define who the agent will send traps to.

# informsink: A SNMPv2c inform (acknowledged trap) receiver
#   arguments: host [community] [portnum]

# trapcommunity: Default trap sink community to use
#   arguments: community-string

trapcommunity  xxxx
# authtrapenable: Should we send traps when authentication failures occur
#   arguments: 1 | 2   (1 = yes, 2 = no)

authtrapenable  1

------------------------------------------------------------------------------

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users