SHA key for passpharse 'kkkkkkkk' and 'kkkkkkkkkk'
Pushpa Thimmaiah <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <CAASqVJVQXcqb+OxxnwHTZY3quwpgTnbGmg1H-cfn3jrKaL29pg@mail.gmail.com> |
Hi All, I am using snmp-5.7.1 . I have noticed that key generated for passphrase which has repeated chars eg: aaaaaaaaaa, bbbbbbbb, kkkkkkkkk are same. This will result in illegal access. --------------------------------------------------------------- 1) Correct passwords <---- Expected behaviour snmpget -v 3 -u user1238k -a SHA -A kkkkkkkk -x AES -X kkkkkkkk -l authPriv 192.168.7.242 .1.3.6.1.2.1.1.3.0 iso.3.6.1.2.1.1.3.0 = Timeticks: (10995) 0:01:49.95 2) private password 'kkkkkkkka' instead of kkkkkkkk (8k's) snmpget -v 3 -u user1238k -a SHA -A kkkkkkkk -x AES -X kkkkkkkka -l authPriv 192.168.7.242 .1.3.6.1.2.1.1.3.0 Timeout: No Response from 192.168.7.242. <---- Expected behaviour 3) Use private password as (9k's) kkkkkkkkk instead of 8k's snmpget -v 3 -u user1238k -a SHA -A kkkkkkkk -x AES -X kkkkkkkkk -l authPriv 10.208.207.242 .1.3.6.1.2.1.1.3.0 iso.3.6.1.2.1.1.3.0 = Timeticks: (16111) 0:02:41.11 <----- password is wrong but snmp-agent throws no err --------------------------------------------------------------------- I did checked persistent config file /var/lib/snmp/snmpd.conf ------------------------------------------ createUser user1238k SHA kkkkkkkk AES kkkkkkkk <--------- Both Auth Phrase and priv phrase are (8k's ) kkkkkkkk usmUser 1 3 0x80001f88030023123445df "user1238k" "user1238k" NULL .1.3.6.1.6.3.10.1.1.3 0x4338baa9fc2e7b611ae644751c1aa6f4ca7ba6b4 .1.3.6.1.6.3.10.1.2.4 0x4338baa9fc2e7b611ae644751c1aa6f4 "" createUser user22210k SHA kkkkkkk AES kkkkkkkkkk <--------- Auth Phrase (8k's ) kkkkkkkk and priv phrase (10k's) kkkkkkkkkkk usmUser 1 3 0x80001f88030023123445df "user22210k" "user22210k" NULL .1.3.6.1.6.3.10.1.1.3 0x4338baa9fc2e7b611ae644751c1aa6f4ca7ba6b4 .1.3.6.1.6.3.10.1.2.4 0x4338baa9fc2e7b611ae644751c1aa6f4 "" How to resolve this issue? Is this bug? Thanks, Pushpa Thimmaiah ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users