[prev in list] [next in list] [prev in thread] [next in thread]
List: net-snmp-coders
Subject: SNMP V3 Authentication (MD5 + DES) failed
From: Saida Rao <saidaraoinnet () gmail ! com>
Date: 2019-04-05 13:23:33
Message-ID: CAAiRZZbXOqieSzhAnm4Q9eebw4wgSGkXcWEUQG4Ox3=65HAazg () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi All,
Thanks you very much in advance for your inputs.
I am getting the very peculiar issue, while using the net-snmp for testing
V3.
V3 authentication is failing during sending Traps as well as with SnmpWalk.
But the same issue is not observed with various other tools like
ireasoning,, mgsoft ...
Below are the details of the configuration and error messages I have
observed.
Please do the needful.
PS: Even sometimes with the same setup, V3 operations are getting success.
Server is used by me alone.
*Configuration:*
*snmptrapd.conf:*
createUser -e 0x80000F1500 testv3stuff MD5 test1234 DES test1234
authUser log,execute,net testv3stuff
authCommunity log,execute,net public
*Command For Starting the TrapDaemon: (NET-SNMP Version: 5.7.2)*
snmpwalk -v 3 -l authPriv -u testv3stuff -a MD5 -A test1234 -x DES -X
test1234 167.254.169.78:1611 .1.3.6
*Console Logs:*
:
trace: sc_get_properlength(): scapi.c, 138:
trace: set_enginetime(): lcd_time.c, 393:
lcd_set_enginetime: engineID 80 00 0F 15 00 : boots=0, time=0
trace: usm_get_user_from_list(): snmpusm.c, 3527:
usm: match on user testv3stuff
trace: usm_check_secLevel(): snmpusm.c, 3404:
comparex: Comparing: 1 3 SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
trace: sc_check_keyed_hash(): scapi.c, 609:
trace: sc_generate_keyed_hash(): scapi.c, 303:
trace: sc_get_properlength(): scapi.c, 138:
trace: usm_process_in_msg(): snmpusm.c, 2511:
usm: Verification failed.
Authentication failed for testv3stuff
trace: snmpv3_parse(): snmp_api.c, 3781:
dumph_recv: ScopedPDU
trace: _snmp_parse(): snmp_api.c, 4159:
snmp_parse: Parsed SNMPv3 message (secName:testv3stuff, secLevel:authPriv):
USM authentication failure (incorrect password or key)
trace: _sess_process_packet(): snmp_api.c, 5244:
sess_process_packet: received message id#51087 reqid#0 len 483
trace: _sess_process_packet(): snmp_api.c, 5247:
sess_process_packet: parse fail
trace: _sess_read(): snmp_api.c, 5538:
:
--
Best Regards,
K Saida Rao.
[Attachment #5 (text/html)]
<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Hi \
All,</div><div> Thanks you very much in advance for your \
inputs.</div><div><br></div><div>I am getting the very peculiar issue, while using \
the net-snmp for testing V3. </div><div>V3 authentication is failing during sending \
Traps as well as with SnmpWalk.</div><div>But the same issue is not observed with \
various other tools like ireasoning,, mgsoft ...</div><div><br></div><div>Below are \
the details of the configuration and error messages I have observed. \
</div><div>Please do the needful.</div><div><br></div><div>PS: Even sometimes with \
the same setup, V3 operations are getting success. Server is used by me \
alone.</div><div><br></div><div><b>Configuration:</b></div><div><p class="MsoNormal" \
style="margin:0in 0in \
0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><b>snmptrapd.conf:</b></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><font face="Calibri, \
sans-serif"><span style="font-size:14.6667px">createUser -e 0x80000F1500 testv3stuff \
MD5 test1234 DES test1234</span></font></p><p class="MsoNormal" style="margin:0in 0in \
0.0001pt"><font face="Calibri, sans-serif"><span style="font-size:14.6667px">authUser \
log,execute,net testv3stuff</span></font></p><p class="MsoNormal" style="margin:0in \
0in 0.0001pt"><font face="Calibri, sans-serif"><span \
style="font-size:14.6667px">authCommunity log,execute,net \
public</span></font></p></div><div><br></div><div><b>Command For Starting the \
TrapDaemon: (NET-SNMP Version: 5.7.2)</b></div><div>snmpwalk -v 3 -l authPriv -u \
testv3stuff -a MD5 -A test1234 -x DES -X test1234 <a \
href="http://167.254.169.78:1611">167.254.169.78:1611</a> \
.1.3.6<br></div><div><b><br></b></div><div><b>Console Logs:</b></div><div> \
:</div><div><div>trace: sc_get_properlength(): scapi.c, 138:</div><div>trace: \
set_enginetime(): lcd_time.c, 393:</div><div>lcd_set_enginetime: engineID 80 00 0F 15 \
00 : boots=0, time=0</div><div>trace: usm_get_user_from_list(): snmpusm.c, \
3527:</div><div>usm: match on user testv3stuff</div><div>trace: usm_check_secLevel(): \
snmpusm.c, 3404:</div><div>comparex: Comparing: 1 3 \
SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol</div><div>trace: sc_check_keyed_hash(): \
scapi.c, 609:</div><div>trace: sc_generate_keyed_hash(): scapi.c, \
303:</div><div><font color="#ff0000">trace: sc_get_properlength(): scapi.c, \
138:</font></div><div><font color="#ff0000">trace: usm_process_in_msg(): snmpusm.c, \
2511:</font></div><div><font color="#ff0000">usm: Verification \
failed.</font></div><div><font color="#ff0000">Authentication failed for \
testv3stuff</font></div><div><font color="#ff0000">trace: snmpv3_parse(): snmp_api.c, \
3781:</font></div><div><font color="#ff0000">dumph_recv: \
ScopedPDU</font></div><div><font color="#ff0000">trace: _snmp_parse(): snmp_api.c, \
4159:</font></div><div><font color="#ff0000">snmp_parse: Parsed SNMPv3 message \
(secName:testv3stuff, secLevel:authPriv): USM authentication failure (incorrect \
password or key)</font></div><div><font color="#ff0000">trace: \
_sess_process_packet(): snmp_api.c, 5244:</font></div><div>sess_process_packet: \
received message id#51087 reqid#0 len 483</div><div>trace: _sess_process_packet(): \
snmp_api.c, 5247:</div><div>sess_process_packet: parse fail</div><div>trace: \
_sess_read(): snmp_api.c, 5538:</div></div><div> \
:</div><div><br></div>-- <br><div dir="ltr" class="gmail_signature">Best \
Regards,<br>K Saida Rao.</div><div dir="ltr" \
class="gmail_signature"><br></div></div></div></div></div></div>
_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic