Dear all,

I'm running NET-SNMP version 5.3.0.1 on Linux RedHat 7.2.

I'm listening for authentication failure traps, generated by your engine.
*** snmpd.conf:
authtrapenable 1
trapsess -v 3 -l noAuthNoPriv -u noAuthUser <host>:162

I receive the PDU fine, but I noticed that the trap doesn't have the
correct authoritative engine ID, engine boots and engine time;
- authoritative engine ID: null (or empty),
- engine boots: 0,
- engine time: 0


As far as I can work out from the snmpd.log, it seems that your engine
tries to find the usm details for user 'noAuthUser' and fails.
(That figures, since I don't set the -e & -Z flags in snmpd.conf.)

*** snmpd.log:
trace: usm_get_user(): snmpusm.c, 2982:
usm: getting user noAuthUser
trace: usm_get_user_from_list(): snmpusm.c, 2998:
usm: match on user noAuthUser
trace: usm_get_user_from_list(): snmpusm.c, 3004:
usm: no match on engineID ()
trace: usm_rgenerate_out_msg(): snmpusm.c, 1470:
usm: Failed to find engine data.


However, (as far as my knowledge goes for SNMPv3) when sending traps in
SNMPv3, the engine acts as an authoritative engine and should therefor
sends its own (!) authoritative engine ID, engine boots and engine time,
and not the synchronisation parameters of the other party.

Unless my understanding and assumptions are incorrect, it seems that
the net-snmp behaviour is incorrect.
Would you be so kind to confirm my understanding or explain why I'm
wrong?

Thanks, Birgit

-- 
-- Birgit Arkesteijn, [EMAIL PROTECTED],
-- Westhawk Ltd, Albion Wharf, 19 Albion Street, Manchester M1 5LN, UK
-- tel.: +44 (0)161 237 0660
-- <URL: http://www.westhawk.co.uk>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to