Re: SNMPv3: two request needed to get response(msgAuthoritativeEngineTime)?

    [ First - *please* don't mail me privately, without copying
     any responses to the mailing list.  I don't have the time
     or inclination to offer private, unpaid, SNMP consultancy.
     Keep discussions to the list, where others can both learn
     and offer advice.  Thanks.   ]
2009/3/26 mike one <[email protected]>:
> Dave,
>
> THANKS for clarification!!!
>
>> Any subsequent request from the same management application
>> should succeed, without the need for another probe (unless the
>> agent has restarted in the meantime)
> I use Nagios for switches management, Nagios used NET-SNMP via plugins : snmpget.
> Do I need to configure Net-SNMP for v3 on Nagios-server?
> Because any time I do snmpget from Nagios-server I get AuthenticationFailure from switch.
> You are right: for instance by snmpdelta any subsequent request is succeeded!
> But I can not use the snmpdelta in nagios requests.

What is the full content of the error report returned by the switch?

My suspicion is that the switch is implementing things incorrectly.

According to my reading of the SNMPv3 specs, the switch ought to
be returning an error indication of "notInTimeWindow".
   See step 7 of section 3.2 of RFC 3414

An authenticationFailure error would only be triggered by step 6,
which doesn't seem to take notice of the engineBoots/Time values.

You may need to contact the switch vendors to sort this out.



As a workaround, see whether the switch supports the MIB object
SNMPv2-MIB::snmpEnableAuthenTraps,   which can be used to
suppress the generation of authenticationFailure notifications.

(It's not actually clear from your message whether you are concerned
about SNMPv3 REPORT messages, or traps)

Dave

------------------------------------------------------------------------------
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users