FW: Does net-snmp support the diffie-helman's MIB? Help please
Marcelo Venegas <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
I have Ubuntu 13.10 and net-snmp v5.7.2... Well, I copied all the iana and ietf mibs inside the directory /usr/share/snmp/mibs (the SNMP-USM-DH-OBJECTS-MIB is part of ietf mibs); I modified the files inside directory /var/lib/snmp/mib_indexes, adding lines for every single new MIB that I copied in the mibs folder. Also I edited snmp.conf file (/etc/snmp/snmp.conf) adding the line: mibs +ALL.
After doing all this, already having the MIB that I needed within the agent (with all the others) I though I could suceed in the changekey command but I obtained the same mistake. I read a lot of pages about adding MIBs and problems related to mine and nothing clarified my situation.
Also I tried to do the procedures of this page http://l3net.wordpress.com/2013/05/12/installing-net-snmp-mibs-on-ubuntu-and-debian/ but after issuing the command, the same error.
wrk129-211fiec@wrk129-211fiec:~$
snmpusm -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m
ALL -Ca changekey Admin
/usr/share/snmp/mibs/SNMPv2-PDU:
Permission denied
/usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-SMI.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-CONF.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-PDU:
Permission denied
/usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-SMI.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt:
Permission denied
/usr/share/snmp/mibs/SNMPv2-CONF.txt:
Permission denied
Unlinked
OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 }
Undefined
identifier: mib-2 near line 18 of /usr/share/mibs/ietf/IPATM-IPMC-MIB
Bad
operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDU
Expected
"::=" (RFC5644): At line 493 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
Expected
"{" (EOF): At line 651 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
Bad object
identifier: At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
Bad parse
of OBJECT-IDENTITY: At line 651 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
snmpusm:
Can't get
diffie-helman exchange from the agent
(maybe it doesn't support the
SNMP-USM-DH-OBJECTS-MIB MIB)
Then I tried to do the procedures of http://www.net-snmp.org/FAQ.html#How_do_I_add_a_MIB_to_the_tools_ and when I did the walk, it only walks the default mibs inside the agent, but the agent doesn't walk the MIB I requested neither any other new one:
snmpwalk -v
3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m
+SNMP-USER-BASED-SM-MIB....DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".1
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".2
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".3
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".4
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".5
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".1
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".2
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".3
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".4
= INTEGER: active(1)DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".5
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkDown'
= STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkUp'
= STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFailure'
= STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFalling'
= STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFired'
= STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerRising'
= STRING: DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkDown'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkUp'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFailure'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFalling'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFired'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerRising'
= BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkDown'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkUp'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFailure'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFalling'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFired'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerRising'
= INTEGER: true(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkDown'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkUp'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFailure'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFalling'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFired'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerRising'
= INTEGER: active(1)DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkDown'
= OID: IF-MIB::linkDownDISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkUp'
= OID: IF-MIB::linkUpDISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFailure'
= OID: DISMAN-EVENT-MIB::mteTriggerFailureDISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFalling'
= OID: DISMAN-EVENT-MIB::mteTriggerFallingDISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFired'
= OID: DISMAN-EVENT-MIB::mteTriggerFiredDISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerRising'
= OID: DISMAN-EVENT-MIB::mteTriggerRisingDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkDown'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkUp'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFailure'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFalling'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFired'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerRising'
= STRING: _snmpdDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkDown'
= STRING: _linkUpDownDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkUp'
= STRING: _linkUpDownDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFailure'
= STRING: _triggerFailDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFalling'
= STRING: _triggerFireDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFired'
= STRING: _triggerFireDISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerRising'
= STRING: _triggerFireNOTIFICATION-LOG-MIB::nlmConfigGlobalEntryLimit.0
= Gauge32: 1000NOTIFICATION-LOG-MIB::nlmConfigGlobalAgeOut.0
= Gauge32: 1440 minutesNOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsLogged.0
= Counter32: 1 notificationsNOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsBumped.0
= Counter32: 0 notificationsNOTIFICATION-LOG-MIB::nlmLogTime."default".1
= Timeticks: (8) 0:00:00.08NOTIFICATION-LOG-MIB::nlmLogDateAndTime."default".1
= STRING: 2013-12-12,19:30:54.0,-5:0NOTIFICATION-LOG-MIB::nlmLogEngineID."default".1
= ""NOTIFICATION-LOG-MIB::nlmLogContextEngineID."default".1
= ""NOTIFICATION-LOG-MIB::nlmLogContextName."default".1
= STRING: NOTIFICATION-LOG-MIB::nlmLogNotificationID."default".1
= OID: SNMPv2-MIB::coldStartNOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.1
= OID: DISMAN-EVENT-MIB::sysUpTimeInstanceNOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.2
= OID: SNMPv2-MIB::snmpTrapEnterprise.0NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.1
= INTEGER: timeTicks(3)NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.2
= INTEGER: objectId(7)NOTIFICATION-LOG-MIB::nlmLogVariableTimeTicksVal."default".1.1
= Timeticks: (7) 0:00:00.07NOTIFICATION-LOG-MIB::nlmLogVariableOidVal."default".1.2
= OID: NET-SNMP-MIB::netSnmpAgentOIDs.10wrk129-211fiec@wrk129-211fiec:~$
snmpusm -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m
ALL -Ca changekey Admin/usr/share/snmp/mibs/SNMPv2-PDU:
Permission denied/usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-SMI.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-CONF.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-PDU:
Permission denied/usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-SMI.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt:
Permission denied/usr/share/snmp/mibs/SNMPv2-CONF.txt:
Permission deniedUnlinked
OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 }Undefined
identifier: mib-2 near line 18 of /usr/share/mibs/ietf/IPATM-IPMC-MIBBad
operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDUExpected
"::=" (RFC5644): At line 493 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIBExpected
"{" (EOF): At line 651 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIBBad
object identifier: At line 651 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIBBad
parse of OBJECT-IDENTITY: At line 651 in
/usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIBsnmpusm:
Can't
get diffie-helman exchange from the agent
(maybe it doesn't support the
SNMP-USM-DH-OBJECTS-MIB MIB)
Thanks David for your help, do you know what's wrong with the agent? I need to execute the changekey command, and make that MIB works with the agent, please if you or someone has done that, I will appreciate if can help me with the steps I need to follow. I installed net-snmp in ubuntu with the tipical sudo apt-get install snmp snmpd directives. Thanks in advance.Date: Wed, 11 Dec 2013 10:30:20 +0200
From: [email protected]
To: [email protected]; [email protected]
Subject: Re: Does net-snmp support the diffie-helman's MIB? Help please
Hi,
I haven't configured an NetSNMP agent to do key exchange myself, but
the error you get suggests that the agent didn't load the
SNMP-USM-DH-OBJECTS-MIB MIB or wasn't compiled with it.
To check this maybe try to do an snmpget of
SNMP-USM-DH-OBJECTS-MIB::usmDHParameters (1.3.6.1.3.101.1.1.1). If
you get a "no such object" error, probably the MIB is not loaded...
HTH,
David Ganor
On 11/12/2013 10:00, Marcelo Venegas
wrote:
Please I hope someone can help me it's very
urgent... I've searched this in internet and the answers are too
old (2006), I need to know something current.
Can someone tell me if in the latest version of NET-SNMP
(5.7.2) is supported the SNMP-USM-DH-OBJECTS-MIB? I need to
execute the snmpusm keychange command, but when I try, I
obtain an error related to that MIB. I tried to copy that mib
in the folder /usr/share/mibs but I got nothing anyway.
Here's an example of the error I receive:
snmpusm -v 3 -u Supervisor -l authNoPHA -A accessv3
192.168.56.101 -Ca changekey final
snmpusm:
Can't get diffie-helman exchange from the agent
(maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB
MIB)
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
--
Best regards,
David Ganor
|||||||||||||||||||||||||||||||||||
Cell: +972-54-3090299
Tel: +972-74-7028642
Fax: +972-153-74-7028642
SW developer
www.oliver-solutions.com
|||||||||||||||||||||||||||||||||||
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users