RE: Does net-snmp support the diffie-helman's MIB? Help please
Marcelo Venegas <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
Hi David. I tried to run the snmpusm command with sudo and I obtained the same mistake. And what do you mean with changing the ownership of the files in /usr/shar/snmp/mibs/ ? Just in case if it helps, the Ubuntu is in a virtual machine and I only have created one administrator user. So, I don't know if that is what you are talking about. I don't have multiple sessions or users creted in the virtual machine. Thanks so much for the help David. BR, Marcelo Date: Sat, 14 Dec 2013 18:12:33 +0200 From: [email protected] To: [email protected] Subject: Re: FW: Does net-snmp support the diffie-helman's MIB? Help please Hi, First you'll have to solve the permission issue. If you have administrator's privileges (which I suspect you have since you did sudo apt-get install...), try to run the snmpusm command with sudo. Another thing you might try is to change the ownership of the files in /usr/share/snmp/mibs/ BR, David On 13/12/2013 03:08, Marcelo Venegas wrote: I have Ubuntu 13.10 and net-snmp v5.7.2... Well, I copied all the iana and ietf mibs inside the directory /usr/share/snmp/mibs (the SNMP-USM-DH-OBJECTS-MIB is part of ietf mibs); I modified the files inside directory /var/lib/snmp/mib_indexes, adding lines for every single new MIB that I copied in the mibs folder. Also I edited snmp.conf file (/etc/snmp/snmp.conf) adding the line: mibs +ALL. After doing all this, already having the MIB that I needed within the agent (with all the others) I though I could suceed in the changekey command but I obtained the same mistake. I read a lot of pages about adding MIBs and problems related to mine and nothing clarified my situation. Also I tried to do the procedures of this page http://l3net.wordpress.com/2013/05/12/installing-net-snmp-mibs-on-ubuntu-and-debian/ but after issuing the command, the same error. wrk129-211fiec@wrk129-211fiec:~$ snmpusm -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m ALL -Ca changekey Admin /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied Unlinked OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 } Undefined identifier: mib-2 near line 18 of /usr/share/mibs/ietf/IPATM-IPMC-MIB Bad operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDU Expected "::=" (RFC5644): At line 493 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Expected "{" (EOF): At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Bad object identifier: At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Bad parse of OBJECT-IDENTITY: At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB snmpusm: Can't get diffie-helman exchange from the agent (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB) Then I tried to do the procedures of http://www.net-snmp.org/FAQ.html#How_do_I_add_a_MIB_to_the_tools_ and when I did the walk, it only walks the default mibs inside the agent, but the agent doesn't walk the MIB I requested neither any other new one: snmpwalk -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m +SNMP-USER-BASED-SM-MIB . . . . DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".1 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".2 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".3 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".4 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFail".5 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".1 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".2 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".3 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".4 = INTEGER: active(1) DISMAN-EVENT-MIB::mteObjectsEntryStatus."_snmpd"."_triggerFire".5 = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkDown' = STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_linkUp' = STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFailure' = STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFalling' = STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerFired' = STRING: DISMAN-EVENT-MIB::mteEventComment."_snmpd".'_mteTriggerRising' = STRING: DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkDown' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_linkUp' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFailure' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFalling' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerFired' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventActions."_snmpd".'_mteTriggerRising' = BITS: 80 notification(0) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkDown' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_linkUp' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFailure' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFalling' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerFired' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEnabled."_snmpd".'_mteTriggerRising' = INTEGER: true(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkDown' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_linkUp' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFailure' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFalling' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerFired' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventEntryStatus."_snmpd".'_mteTriggerRising' = INTEGER: active(1) DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkDown' = OID: IF-MIB::linkDown DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_linkUp' = OID: IF-MIB::linkUp DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFailure' = OID: DISMAN-EVENT-MIB::mteTriggerFailure DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFalling' = OID: DISMAN-EVENT-MIB::mteTriggerFalling DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerFired' = OID: DISMAN-EVENT-MIB::mteTriggerFired DISMAN-EVENT-MIB::mteEventNotification."_snmpd".'_mteTriggerRising' = OID: DISMAN-EVENT-MIB::mteTriggerRising DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkDown' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_linkUp' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFailure' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFalling' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerFired' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjectsOwner."_snmpd".'_mteTriggerRising' = STRING: _snmpd DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkDown' = STRING: _linkUpDown DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_linkUp' = STRING: _linkUpDown DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFailure' = STRING: _triggerFail DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFalling' = STRING: _triggerFire DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerFired' = STRING: _triggerFire DISMAN-EVENT-MIB::mteEventNotificationObjects."_snmpd".'_mteTriggerRising' = STRING: _triggerFire NOTIFICATION-LOG-MIB::nlmConfigGlobalEntryLimit.0 = Gauge32: 1000 NOTIFICATION-LOG-MIB::nlmConfigGlobalAgeOut.0 = Gauge32: 1440 minutes NOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsLogged.0 = Counter32: 1 notifications NOTIFICATION-LOG-MIB::nlmStatsGlobalNotificationsBumped.0 = Counter32: 0 notifications NOTIFICATION-LOG-MIB::nlmLogTime."default".1 = Timeticks: (8) 0:00:00.08 NOTIFICATION-LOG-MIB::nlmLogDateAndTime."default".1 = STRING: 2013-12-12,19:30:54.0,-5:0 NOTIFICATION-LOG-MIB::nlmLogEngineID."default".1 = "" NOTIFICATION-LOG-MIB::nlmLogContextEngineID."default".1 = "" NOTIFICATION-LOG-MIB::nlmLogContextName."default".1 = STRING: NOTIFICATION-LOG-MIB::nlmLogNotificationID."default".1 = OID: SNMPv2-MIB::coldStart NOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.1 = OID: DISMAN-EVENT-MIB::sysUpTimeInstance NOTIFICATION-LOG-MIB::nlmLogVariableID."default".1.2 = OID: SNMPv2-MIB::snmpTrapEnterprise.0 NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.1 = INTEGER: timeTicks(3) NOTIFICATION-LOG-MIB::nlmLogVariableValueType."default".1.2 = INTEGER: objectId(7) NOTIFICATION-LOG-MIB::nlmLogVariableTimeTicksVal."default".1.1 = Timeticks: (7) 0:00:00.07 NOTIFICATION-LOG-MIB::nlmLogVariableOidVal."default".1.2 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10 wrk129-211fiec@wrk129-211fiec:~$ snmpusm -v 3 -u Supervisor -l authNoPriv -a SHA -A accessv3 192.168.56.101 -m ALL -Ca changekey Admin /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-PDU: Permission denied /usr/share/snmp/mibs/SNMPv2-USEC-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-SMI.txt: Permission denied /usr/share/snmp/mibs/SNMP-USER-BASED-SM-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-AES-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMP-USM-DH-OBJECTS-MIB.txt: Permission denied /usr/share/snmp/mibs/SNMPv2-CONF.txt: Permission denied Unlinked OID in IPATM-IPMC-MIB: marsMIB ::= { mib-2 57 } Undefined identifier: mib-2 near line 18 of /usr/share/mibs/ietf/IPATM-IPMC-MIB Bad operator (INTEGER): At line 73 in /usr/share/mibs/ietf/SNMPv2-PDU Expected "::=" (RFC5644): At line 493 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Expected "{" (EOF): At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Bad object identifier: At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB Bad parse of OBJECT-IDENTITY: At line 651 in /usr/share/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB snmpusm: Can't get diffie-helman exchange from the agent (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB) Thanks David for your help, do you know what's wrong with the agent? I need to execute the changekey command, and make that MIB works with the agent, please if you or someone has done that, I will appreciate if can help me with the steps I need to follow. I installed net-snmp in ubuntu with the tipical sudo apt-get install snmp snmpd directives. Thanks in advance. Date: Wed, 11 Dec 2013 10:30:20 +0200 From: [email protected] To: [email protected]; [email protected] Subject: Re: Does net-snmp support the diffie-helman's MIB? Help please Hi, I haven't configured an NetSNMP agent to do key exchange myself, but the error you get suggests that the agent didn't load the SNMP-USM-DH-OBJECTS-MIB MIB or wasn't compiled with it. To check this maybe try to do an snmpget of SNMP-USM-DH-OBJECTS-MIB::usmDHParameters (1.3.6.1.3.101.1.1.1). If you get a "no such object" error, probably the MIB is not loaded... HTH, David Ganor On 11/12/2013 10:00, Marcelo Venegas wrote: Please I hope someone can help me it's very urgent... I've searched this in internet and the answers are too old (2006), I need to know something current. Can someone tell me if in the latest version of NET-SNMP (5.7.2) is supported the SNMP-USM-DH-OBJECTS-MIB? I need to execute the snmpusm keychange command, but when I try, I obtain an error related to that MIB. I tried to copy that mib in the folder /usr/share/mibs but I got nothing anyway. Here's an example of the error I receive: snmpusm -v 3 -u Supervisor -l authNoPHA -A accessv3 192.168.56.101 -Ca changekey final snmpusm: Can't get diffie-helman exchange from the agent (maybe it doesn't support the SNMP-USM-DH-OBJECTS-MIB MIB) ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users -- Best regards, David Ganor ||||||||||||||||||||||||||||||||||| Cell: +972-54-3090299 Tel: +972-74-7028642 Fax: +972-153-74-7028642 SW developer www.oliver-solutions.com ||||||||||||||||||||||||||||||||||| ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users -- Best regards, David Ganor ||||||||||||||||||||||||||||||||||| Cell: +972-54-3090299 Tel: +972-74-7028642 Fax: +972-153-74-7028642 SW developer www.oliver-solutions.com ||||||||||||||||||||||||||||||||||| ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users