Re: SNMPv3 authPriv informs (trapsess)

Thanks Colin and Brian.

I will give creating a new snmpd (agent) user with the remote
(manager's) engine-id a try. 

I was using net-snmp-create-v3-user from the libsnmp-dev package to add
users.  Unfortunately, it does not support engine-id, so I'll have to
forgo that tool for this.

Does anyone have an example of what the final trapsess looks like?


On 17-Jul-2020 12:47 PM, Colin Anderson wrote:
>
> We came across this problem.
>
>  
>
> There are 2 snmpd.conf files.  “Your” one, in /usr/share/snmp/ and an
> autogenerated one in /var/net-snmp/.  This autogenerated one stores
> the keys once they are generated.   You can add the passwords to the
> auto-generated snmpd.conf file.  (You can ignore the “Do not edit”
> warnings.)  This file will automatically delete the password entries
> once the keys have been generated.  This is mentioned in the wiki
> pages somewhere.
>
>  
>
> There are other issues with this file which you may come across.  We
> found that it seems to be written to with the old/existing config as
> snmpd is closing.  So your changes could be overwritten.  The file
> takes some playing with.
>
>  
>
> Or depending how you’ve done it you can delete “your” snmpd.conf file
> once snmpd has started.  We create our snmpd.conf just before we try
> to open snmpd and so the passwords are only added then.  We then
> delete the file once snmpd is running.
>
>  
>
> Hope this helps.
>
>  
>
> Colin
>
>  
>
> *From:*John Bize <[email protected]>
> *Sent:* 17 July 2020 15:32
> *To:* [email protected]
> *Subject:* Re: SNMPv3 authPriv informs (trapsess)
>
>  
>
> Bump please.
>
> On 04-Jul-2020 10:11 AM, John Bize wrote:
>
>     I have an embedded system running Debian 10 with snmpd v5.7.3.
>
>     I'd like to configure SNMPv3 trapsess to send auth,priv informs. 
>     How is this done *without putting clear-text passwords *into the
>     snmpd.conf file?
>
>     Thanks.
>
> Twitter <https://twitter.com/speakerbus>LinkedIn
> <http://www.linkedin.com/company/speakerbus>YouTube
> <http://www.youtube.com/user/SpeakerbusTech?feature=watch>
>
> ****************************************************************************** 
> The contents of this e-mail and any attachments are confidential and
> are intended solely for the attention and use of the intended
> recipient. This message should not be copied or forwarded to any other
> person without the express permission of the sender. If you are not
> the intended recipient, you are hereby notified that to disclose,
> copy, distribute or retain this message or any part of it, is strictly
> unauthorised and forbidden. If you have received this message in
> error, please notify the sender by telephone or by reply e-mail, and
> destroy the original message. Any views or opinions presented are
> solely those of the author and do not necessarily represent those of
> Speakerbus unless otherwise specifically stated. We reserve the right
> to monitor all e-mail messages passing through our network. 
>
> Speakerbus Group plc - Head Office, Hanover House, Britannia Road,
> Queens Gate, Waltham Cross, Hertfordshire, EN8 7TF, England.Tel:
> +44(0)1992 807300 Fax: +44 (0)1992 807301 Company Registration No
> 3330946 Home Page: http://www.speakerbus.com 
> ******************************************************************************

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users