Re: Need Help on Snmpv3 AES issue

Hi Pushpa,

Thanks for information.

By looking at your mail, i got that for older branches it is working
fine.Latest branches are failing.
Does this fix integrate in future releases?.
Can you please share exact version of net-snmp has a fix for it.

Thanks,
Suhasini.

On Tue, Jun 27, 2017 at 4:22 PM, Pushpa Thimmaiah <
[email protected]> wrote:

> Hi,
>
> I faced same behaviour too with latest(27/june/2017) net-snmp-5.7.3.tar.gz
> ------------------------------------------------------------
> -----------------------
> *net-snmp-5.7.3*
>
> :~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
> "priv_pass" -l authPriv 192.168.122.85 iso.3.6.1.2.1.1.3.0
> iso.3.6.1.2.1.1.3.0 = Timeticks: (104392) 0:17:23.92
>
> :~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
> "priv_pass" -l authNoPriv 192.168.122.85 iso.3.6.1.2.1.1.3.0
> iso.3.6.1.2.1.1.3.0 = Timeticks: (105137) 0:17:31.37
>
> :~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -l authNoPriv
> 192.168.122.85 iso.3.6.1.2.1.1.3.0iso.3.6.1.2.1.1.3.0 = Timeticks:
> (105747) 0:17:37.47
>
> ------------------------------------------------------------
> ------------------------
> *net-snmp-5.4.x*
>
> :~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
> "priv_pass" -l authNoPriv 10.208.207.112 iso.3.6.1.2.1.1.3.0
> Error in packet.
> Reason: authorizationError (access denied to that object)
> ~$ snmpwalk -v 3 -n "" -u initial -a MD5 -A "auth_pass" -x DES -X
> "priv_pass" -l authPriv 10.208.207.112 iso.3.6.1.2.1.1.3.0
> iso.3.6.1.2.1.1.3.0 = Timeticks: (42528) 0:07:05.28
> ------------------------------------------------------------
> -------------------------
>
>
> Thanks,
> Pushpa.T
>
>
> On Tue, Jun 27, 2017 at 11:20 AM, Suhasini Katuri <
> [email protected]> wrote:
>
>> Hi All,
>>
>> I've confgured a snmpv3 user with authentication of SHA and encryption of
>> AES  and i tried to snmget on mib object of type sysuptime. As follows,
>>
>> i'm using centos and net-snmp version is 5.7.3,
>>
>> [root@centOs67-9 ~]# snmpd -v
>>
>>
>>
>> NET-SNMP version:  5.7.3
>>
>> Web:               http://www.net-snmp.org/
>>
>> Email:             [email protected]
>>
>>
>> 1. Stop snmpd process
>>
>>
>> 2. Create snmpv3 user as follows
>>
>> [root@centOs67-9 ~]# net-snmp-config --create-snmpv3-user -a SHA -A
>> "my_password" -x AES -x "my_passwordx" sukaturi
>>
>> adding the following line to /var/net-snmp/snmpd.conf:
>>
>>    createUser sukaturi SHA "my_password" AES my_passwordx
>>
>> adding the following line to /usr/local/share/snmp/snmpd.conf:
>>
>>    rwuser sukaturi
>>
>> 3. Start snmpd process
>>
>>     i.e [root@centOs67-9 ~]# /usr/local/sbin/snmpd
>>
>>
>>
>> Snmpd.conf  consists of :
>>
>> /var/net-snmp/snmpd.conf:
>>
>>
>>
>> usmUser 1 3 0x80001f88804bacd0564aa3165900000000 "sukaturi" "sukaturi"
>> NULL .1.3.6.1.6.3.10.1.1.3 0x6a54643582b22e968088bf569181292a6d166a7a
>> .1.3.6.1.6.3.10.1.2.4 0xbae320f7db964cdc9fa9b82589b2cde8 ""
>>
>>
>>
>> Snmpget Operations:
>>
>> -----------------------------
>>
>> 1.  User: sukaturi
>>
>>      Type : authpriv
>>
>>
>> [root@centOs67-9 ~]# snmpget -v 3 -u sukaturi -l authPriv -a SHA -A
>> my_password -x AES -X my_passwordx localhost sysUpTime.0
>>
>> DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (55730) 0:09:17.30
>>
>>
>>
>> I've created snmpv3 user with auth and priv but when i tried to do
>> snmpget with  authnopriv, it is accepting and giving results as follows,
>> but it generally need to throw a error like unsupported security level.
>>
>>
>> 2. User: sukaturi
>>
>>      Type:authnopriv
>>
>>
>> [root@centOs67-9 ~]# snmpget -v 3 -u sukaturi -l authNoPriv -a SHA -A
>> my_password localhost sysUpTime.0
>>
>> DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (57122) 0:09:31.22
>>
>> [root@centOs67-9 ~]#
>>
>> This is existing with netsnmp versions of 5.7.2 and 5.7.3.
>>
>> does anybody know filed a bug for it?. I've searched in netsnmp.org
>> haven't find bug related to it.
>>
>> Can you guys please mention patch for it if bug is already filed for it.
>> Please can you guys mention the bug name for it.
>>
>> --
>> Thanks & Regards,
>>
>>  suhasini katuri
>>
>
>


-- 
Thanks & Regards,

 suhasini katuri

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users