Re: SNMP v3 user authentication password with pattern problem

HelloTadas Ivanovas,

Yes there is a pattern repetition involved here - but it is not a 
problem - you just have to think carefully what you choose.

This just works exactly as it was designed in the SNMP Specifications, 
you can find the details about that here:

https://tools.ietf.org/html/rfc3414#appendix-A.2.1

Kind regards
Bernd Eilers




On 7/13/20 2:58 PM, Tadas Ivanovas wrote:
> Hello, I'm using net-snmp 5.8 with version 3 support. I've noticed 
> that agents can authenticate messages with passwords by pattern only. 
> What I mean is, for example, if I create the user with password 
> "aaaaaaaaaaaa" (12 a's), that agent authenticates with password 
> "aaaaaaaa" (8 a's). I've tried it with Linux OS (OpenWRT and Ubuntu).
>
> Here is how I create a sample SNMP server: /usr/sbin/snmpd -Lo -f -d 
> -q -Cc /snmpd.conf --noPersistentSave=1 --noPersistentLoad=1
> My "snmpd.conf" file looks like this:
>
> agentaddress udp:161
> sysLocation location
> sysContact [email protected]
> sysName name
> exec  filedescriptors /bin/cat /proc/sys/fs/file-nr
> createUser agurkas MD5 "abcabcabcabcabcabcabcabcabcabcabcabc"
> rouser agurkas auth
> dlmod chilli /usr/lib/snmpd-mod/chilli.so
> dlmod device /usr/lib/snmpd-mod/device.so
> dlmod gps /usr/lib/snmpd-mod/gps.so
> dlmod gsm /usr/lib/snmpd-mod/gsm.so
> dlmod traps /usr/lib/snmpd-mod/traps.so
>
> And authentication is succesful if I try "snmpwalk" command from other 
> endpoint:
>
> snmpwalk -d -v3 -l authNoPriv -u agurkas -a MD5 -A abcabcabc 
> 192.168.1.1 1.3.6.1.4.1.48690.1.2
>
> This time the pattern is "abc", and it does not matter how many times 
> you repeat "abc", as long as it meets minimum password length. Did not 
> find any information online about this problem, maybe some 
> configurations are wrong?
>

-- 
Signature

Mit freundlichen Grüßen | with kind regards

i.A. Bernd Eilers

Fr. Meyer's Sohn (GmbH & Co.) KG
Grüner Deich 19
20097 Hamburg | Germany

Tel.: +49 40 2393 1468
Fax: +49 40 2393 2468
E-Mail: [email protected] 
<mailto:[email protected]>
Internet: www.fms-logistics.com <http://www.fms-logistics.com>


Wir arbeiten ausschließlich auf Grundlage der Allgemeinen Deutschen 
Spediteurbedingungen 2017 (ADSp 2017). Die ADSp 2017 beschränken in 
Ziffer 23 die gesetzliche Haftung für Güterschäden, die nach der 
gesetzlichen Regelung in § 431 HGB auf 8,33 SZR/kg beschränkt ist, 
weiter auf 1,25 Mio. € je Schadenfall bzw. 2,5 Mio. € je Schadenereignis 
oder auf 2 SZR/kg, je nachdem, welcher Betrag höher ist. Bei 
multimodalen Transporten unter Einschluss einer Seebeförderung ist die 
Haftungsgrenze generell 2 SZR/kg. Die ADSp sind auf unserer Website 
(https://www.fms-logistics.com/agb) abrufbar und werden auf Verlangen 
übersandt. Wir haben die Speditionshaftungsversicherung bei W. Droege & 
Co. GmbH. & Co. KG gezeichnet.
Unter https://www.fms-logistics.com/datenschutz können Sie unsere 
Informationen zum Datenschutz einsehen.

Our services are governed exclusively by the Allgemeine Deutsche 
Spediteurbedingungen 2017 (ADSp 2017) (German Freight Forwarders' 
General Terms and Conditions 2017). As stated in clause 23 of the ADSp 
2017, the statutory liability, which is limited in Section 431 of the 
German Commercial Code (HGB) to 8,33 Special Drawing Rights per kilogram 
(SDR/kg), is further limited to a maximum of € 1,25 million per claim or 
to € 2,5 million per event or to 2 SDR/kg, whichever sum is higher. In 
the case of a multimodal transport which includes sea carriage the 
maximum liability is in general 2 SDR/kg. The ADSp are available on our 
website (https://www.fms-logistics.com/en/general-terms-and-conditions) 
and can be obtained from the company on request. Our forwarder liability 
insurance is covered at W. Droege & Co. GmbH. & Co. KG.
Under https://www.fms-logistics.com/en/privacy-statement you can find 
more information about our data privacy principles.

Gerichtsstand/place of jurisdiction: Hamburg. Handelsregister/commercial 
register: Hamburg HRA 41917. Rechtsform/legal form: 
Kommanditgesellschaft/Limited Partnership. Persönlich haftende 
Gesellschafter/general partner: Speditionsgesellschaft Fr. Meyer's Sohn 
mbH. Handelsregister/commercial register: Hamburg HRB 17990. 
Geschäftsführer/managing directors: Dominik Lucius, Heiko Voigt

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users