Re: Need Help on Snmpv3 AES issue

Hi,

I faced same behaviour too with latest(27/june/2017) net-snmp-5.7.3.tar.gz
-----------------------------------------------------------------------------------
*net-snmp-5.7.3*

:~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
"priv_pass" -l authPriv 192.168.122.85 iso.3.6.1.2.1.1.3.0
iso.3.6.1.2.1.1.3.0 = Timeticks: (104392) 0:17:23.92

:~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
"priv_pass" -l authNoPriv 192.168.122.85 iso.3.6.1.2.1.1.3.0
iso.3.6.1.2.1.1.3.0 = Timeticks: (105137) 0:17:31.37

:~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -l authNoPriv
192.168.122.85 iso.3.6.1.2.1.1.3.0iso.3.6.1.2.1.1.3.0 = Timeticks: (105747)
0:17:37.47

------------------------------------------------------------------------------------
*net-snmp-5.4.x*

:~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
"priv_pass" -l authNoPriv 10.208.207.112 iso.3.6.1.2.1.1.3.0
Error in packet.
Reason: authorizationError (access denied to that object)
~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
"priv_pass" -l authPriv 10.208.207.112 iso.3.6.1.2.1.1.3.0
iso.3.6.1.2.1.1.3.0 = Timeticks: (42528) 0:07:05.28
-------------------------------------------------------------------------------------


Thanks,
Pushpa.T


On Tue, Jun 27, 2017 at 11:20 AM, Suhasini Katuri <[email protected]
> wrote:

> Hi All,
>
> I've confgured a snmpv3 user with authentication of SHA and encryption of
> AES  and i tried to snmget on mib object of type sysuptime. As follows,
>
> i'm using centos and net-snmp version is 5.7.3,
>
> [root@centOs67-9 ~]# snmpd -v
>
>
>
> NET-SNMP version:  5.7.3
>
> Web:               http://www.net-snmp.org/
>
> Email:             [email protected]
>
>
> 1. Stop snmpd process
>
>
> 2. Create snmpv3 user as follows
>
> [root@centOs67-9 ~]# net-snmp-config --create-snmpv3-user -a SHA -A
> "my_password" -x AES -x "my_passwordx" sukaturi
>
> adding the following line to /var/net-snmp/snmpd.conf:
>
>    createUser sukaturi SHA "my_password" AES my_passwordx
>
> adding the following line to /usr/local/share/snmp/snmpd.conf:
>
>    rwuser sukaturi
>
> 3. Start snmpd process
>
>     i.e [root@centOs67-9 ~]# /usr/local/sbin/snmpd
>
>
>
> Snmpd.conf  consists of :
>
> /var/net-snmp/snmpd.conf:
>
>
>
> usmUser 1 3 0x80001f88804bacd0564aa3165900000000 "sukaturi" "sukaturi"
> NULL .1.3.6.1.6.3.10.1.1.3 0x6a54643582b22e968088bf569181292a6d166a7a
> .1.3.6.1.6.3.10.1.2.4 0xbae320f7db964cdc9fa9b82589b2cde8 ""
>
>
>
> Snmpget Operations:
>
> -----------------------------
>
> 1.  User: sukaturi
>
>      Type : authpriv
>
>
> [root@centOs67-9 ~]# snmpget -v 3 -u sukaturi -l authPriv -a SHA -A
> my_password -x AES -X my_passwordx localhost sysUpTime.0
>
> DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (55730) 0:09:17.30
>
>
>
> I've created snmpv3 user with auth and priv but when i tried to do snmpget
> with  authnopriv, it is accepting and giving results as follows, but it
> generally need to throw a error like unsupported security level.
>
>
> 2. User: sukaturi
>
>      Type:authnopriv
>
>
> [root@centOs67-9 ~]# snmpget -v 3 -u sukaturi -l authNoPriv -a SHA -A
> my_password localhost sysUpTime.0
>
> DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (57122) 0:09:31.22
>
> [root@centOs67-9 ~]#
>
> This is existing with netsnmp versions of 5.7.2 and 5.7.3.
>
> does anybody know filed a bug for it?. I've searched in netsnmp.org
> haven't find bug related to it.
>
> Can you guys please mention patch for it if bug is already filed for it.
> Please can you guys mention the bug name for it.
>
> --
> Thanks & Regards,
>
>  suhasini katuri
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users