Re: FW: Does net-snmp support the diffie-helman's MIB? Help please

David Ganor <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]> 
Hi,
First you'll have to solve the permission issue.
If you have administrator's privileges (which I suspect you have since 
you did sudo apt-get install...), try to run the snmpusm command with sudo.
Another thing you might try is to change the ownership of the files in 
/usr/share/snmp/mibs/

BR,
David

On 13/12/2013 03:08, Marcelo Venegas wrote:
>
> I have Ubuntu 13.10 and net-snmp v5.7.2... Well, I copied all the iana 
> and ietf mibs inside the directory /usr/share/snmp/mibs (the 
> SNMP-USM-DH-OBJECTS-MIB is part of ietf mibs); I modified the files 
> inside directory /var/lib/snmp/mib_indexes, adding lines for every 
> single new MIB that I copied in the mibs folder. Also I edited 
> snmp.conf file (/etc/snmp/snmp.conf) adding the line: mibs +ALL.
>
> After doing all this, already having the MIB that I needed within the 
> agent (with all the others) I though I could suceed in the changekey 
> command but I obtained the same mistake. I read a lot of pages about 
> adding MIBs and problems related to mine and nothing clarified my 
> situation.
>
> Also I tried to do the procedures of this page 
> http://l3net.wordpress.com/2013/05/12/installing-net-snmp-mibs-on-ubuntu-and-debian/ 
>  but after issuing the command, the same error.
>
> wrk129-211fiec@wrk129-211fiec:~$ snmpusm -v 3 -u Supervisor -l 
> authNoPriv -a SHA -A accessv3 192.168.56.101 -m ALL -Ca changekey Admin
>
> /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied
>
> Unlinked OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 }
>
> Undefined identifier: mib-2 near line 18 of 
> /usr/share/mibs/ietf/IPATM-IPMC-MIB
>
> Bad operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDU
>
> Expected "::=" (RFC5644): At line 493 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Expected "{" (EOF): At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Bad object identifier: At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Bad parse of OBJECT-IDENTITY: At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> snmpusm:
>
> Can't get diffie-helman exchange from the agent
>
>   (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB)
>
> Then I tried to do the procedures of 
>  http://www.net-snmp.org/FAQ.html#How_do_I_add_a_MIB_to_the_tools_ and 
> when I did the walk, it only walks the default mibs inside the agent, 
> but the agent doesn't walk the MIB I requested neither any other new one:
>
>
> snmpwalk -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 
> 192.168.56.101 -m +SNMP-USER-BASED-SM-MIB
>
> .
>
> .
>
> .
>
> .
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".1 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".2 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".3 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".4 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".5 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".1 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".2 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".3 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".4 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".5 = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkDown' = STRING:
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkUp' = STRING:
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFailure' = STRING:
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFalling' = STRING:
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFired' = STRING:
>
> DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerRising' = STRING:
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkDown' = BITS: 80 
> notification(0)
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkUp' = BITS: 80 
> notification(0)
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFailure' = 
> BITS: 80 notification(0)
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFalling' = 
> BITS: 80 notification(0)
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFired' = BITS: 
> 80 notification(0)
>
> DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerRising' = BITS: 
> 80 notification(0)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkDown' = INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkUp' = INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFailure' = 
> INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFalling' = 
> INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFired' = 
> INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerRising' = 
> INTEGER: true(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkDown' = INTEGER: 
> active(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkUp' = INTEGER: 
> active(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFailure' = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFalling' = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFired' = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerRising' = 
> INTEGER: active(1)
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkDown' = OID: 
> IF-MIB::linkDown
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkUp' = OID: 
> IF-MIB::linkUp
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFailure' = 
> OID: DISMAN-EVENT-MIB::mteTriggerFailure
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFalling' = 
> OID: DISMAN-EVENT-MIB::mteTriggerFalling
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFired' = 
> OID: DISMAN-EVENT-MIB::mteTriggerFired
>
> DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerRising' = 
> OID: DISMAN-EVENT-MIB::mteTriggerRising
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkDown' = 
> STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkUp' 
> = STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFailure' 
> = STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFalling' 
> = STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFired' 
> = STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerRising' 
> = STRING: _snmpd
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkDown' = 
> STRING: _linkUpDown
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkUp' = 
> STRING: _linkUpDown
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFailure' 
> = STRING: _triggerFail
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFalling' 
> = STRING: _triggerFire
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFired' 
> = STRING: _triggerFire
>
> DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerRising' 
> = STRING: _triggerFire
>
> NOTIFICATION-LOG-MIB::nlmConfigGlobalEntryLimit.0 = Gauge32: 1000
>
> NOTIFICATION-LOG-MIB::nlmConfigGlobalAgeOut.0 = Gauge32: 1440 minutes
>
> NOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsLogged.0 = Counter32: 
> 1 notifications
>
> NOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsBumped.0 = Counter32: 
> 0 notifications
>
> NOTIFICATION-LOG-MIB::nlmLogTime."default".1 = Timeticks: (8) 0:00:00.08
>
> NOTIFICATION-LOG-MIB::nlmLogDateAndTime."default".1 = STRING: 
> 2013-12-12,19:30:54.0,-5:0
>
> NOTIFICATION-LOG-MIB::nlmLogEngineID."default".1 = ""
>
> NOTIFICATION-LOG-MIB::nlmLogContextEngineID."default".1 = ""
>
> NOTIFICATION-LOG-MIB::nlmLogContextName."default".1 = STRING:
>
> NOTIFICATION-LOG-MIB::nlmLogNotificationID."default".1 = OID: 
> SNMPv2-MIB::coldStart
>
> NOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.1 = OID: 
> DISMAN-EVENT-MIB::sysUpTimeInstance
>
> NOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.2 = OID: 
> SNMPv2-MIB::snmpTrapEnterprise.0
>
> NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.1 = INTEGER: 
> timeTicks(3)
>
> NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.2 = INTEGER: 
> objectId(7)
>
> NOTIFICATION-LOG-MIB::nlmLogVariableTimeTicksVal."default".1.1 = 
> Timeticks: (7) 0:00:00.07
>
> NOTIFICATION-LOG-MIB::nlmLogVariableOidVal."default".1.2 = OID: 
> NET-SNMP-MIB::netSnmpAgentOIDs.10
>
> wrk129-211fiec@wrk129-211fiec:~$ snmpusm -v 3 -u Supervisor -l 
> authNoPriv -a SHA -A accessv3 192.168.56.101 -m ALL -Ca changekey Admin
>
> /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied
>
> /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied
>
> Unlinked OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 }
>
> Undefined identifier: mib-2 near line 18 of 
> /usr/share/mibs/ietf/IPATM-IPMC-MIB
>
> Bad operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDU
>
> Expected "::=" (RFC5644): At line 493 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Expected "{" (EOF): At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Bad object identifier: At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> Bad parse of OBJECT-IDENTITY: At line 651 in 
> /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB
>
> snmpusm:
>
> Can't get diffie-helman exchange from the agent
>
>   (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB)
>
>
> Thanks David for your help, do you know what's wrong with the agent? I 
> need to execute the changekey command, and make that MIB works with 
> the agent, please if you or someone has done that, I will appreciate 
> if can help me with the steps I need to follow. I installed net-snmp 
> in ubuntu with the tipical sudo apt-get install snmp snmpd directives. 
> Thanks in advance.
>
> ------------------------------------------------------------------------
> Date: Wed, 11 Dec 2013 10:30:20 +0200
> From: [email protected]
> To: [email protected]; [email protected]
> Subject: Re: Does net-snmp support the diffie-helman's MIB? Help please
>
> Hi,
> I haven't configured an NetSNMP agent to do key exchange myself, but 
> the error you get suggests that the agent didn't load the 
> SNMP-USM-DH-OBJECTS-MIB MIB or wasn't compiled with it.
> To check this maybe try to do an snmpget of 
> SNMP-USM-DH-OBJECTS-MIB::usmDHParameters (1.3.6.1.3.101.1.1.1). If you 
> get a "no such object" error, probably the MIB is not loaded...
>
>
> HTH,
> David Ganor
>
> On 11/12/2013 10:00, Marcelo Venegas wrote:
>
>     Please I hope someone can help me it's very urgent... I've
>     searched this in internet and the answers are too old (2006), I
>     need to know something current.
>     Can someone tell me if in the latest version of NET-SNMP (5.7.2)
>     is supported the SNMP-USM-DH-OBJECTS-MIB? I need to execute the
>     snmpusm keychange command, but when I try, I obtain an error
>     related to that MIB. I tried to copy that mib in the folder
>     /usr/share/mibs but I got nothing anyway.
>
>     Here's an example of the error I receive:
>
>     snmpusm -v 3 -u Supervisor -l authNoPHA -A accessv3 192.168.56.101
>     -Ca changekey final
>     snmpusm:
>     Can't get diffie-helman exchange from the agent
>       (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB)
>
>
>
>     ------------------------------------------------------------------------------
>     Rapidly troubleshoot problems before they affect your business. Most IT
>     organizations don't have a clear picture of how application performance
>     affects their revenue. With AppDynamics, you get 100% visibility into your
>     Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
>     http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
>
>
>
>     _______________________________________________
>     Net-snmp-users mailing list
>     [email protected]  <mailto:[email protected]>
>     Please see the following page to unsubscribe or change other options:
>     https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>
>
> -- 
> Best regards,
> David Ganor
>
> |||||||||||||||||||||||||||||||||||
> Cell: +972-54-3090299
> Tel: +972-74-7028642
> Fax: +972-153-74-7028642
>
> SW developer
> www.oliver-solutions.com  <http://www.oliver-solutions.com>
> |||||||||||||||||||||||||||||||||||
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users

-- 
Best regards,
David Ganor

|||||||||||||||||||||||||||||||||||
Cell: +972-54-3090299
Tel: +972-74-7028642
Fax: +972-153-74-7028642

SW developer
www.oliver-solutions.com
|||||||||||||||||||||||||||||||||||

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.