Re: snmptrap v3 authentication
Niels Baggesen writes: > > I tried with SimpleMib browser as well as MGSOFT Mib browser. > > In that case you should direct your question towards them, why they > accept a trap with unknown credentials. Indeed, some trap receivers always accept and print traps regardless of whether or not it has been authenticated. It's the responsibility of the receiver to decide what to do. [some have argued they should always log what they receive, but mark it as whether it was authenticated or not] -- Wes Hardaker Please mail all replies to net-snmp-coders@lists.sourceforge.net ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmptrap v3 authentication
Den 25-04-2023 kl. 17:46 skrev Simon Chamlian: Something else. I tried with SimpleMib browser as well as MGSOFT Mib browser. In that case you should direct your question towards them, why they accept a trap with unknown credentials. Note, that you have asked to send the trap in the clear, so there is no problem interpreting it. /Niels -- Niels Baggesen -- @home -- Århus -- Denmark -- ni...@baggesen.net The purpose of computing is insight, not numbers -- R W Hamming ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmptrap v3 authentication
Something else. I tried with SimpleMib browser as well as MGSOFT Mib browser. On Tue, Apr 25, 2023 at 10:30 AM Niels Baggesen via Net-snmp-coders < net-snmp-coders@lists.sourceforge.net> wrote: > Which trap receiver are you using? snmptrapd, or something else? > > /Niels > Den 25-04-2023 kl. 15:10 skrev Simon Chamlian: > > I tried the command: > > snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 > "" coldStart.0 > > (with security name : Simon and authentication password : SimonPass ). > > These parameters are not set in any config files anywhere. > > On another PC with IP 172.27.37.227, I have a MIB browser and trap > receiver. The trap receiver is receiving the trap even when it is not > configured with the security name : Simon and authentication password > : SimonPass . > > I was not expecting to receive the trap until I configured the trap > receiver with the same security name and authentication password!?! > > Simon > > > > > On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders < > net-snmp-coders@lists.sourceforge.net> wrote: > >> On Sat, 15 Apr 2023 at 11:12, Simon Chamlian >> wrote: >> >>> >>> snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv >>> 172.27.37.227 "" coldStart.0 >>> >>> I do receive the trap on my Trap Receiver even if I didn't specify a >>> Username and Authentication password in the MIB browser (on 172.27.37.227 ) >>> ! >>> >> Do you mean the security name instead of the username? >> The -u sets the security name, -A sets the authentication password. >> They're set in the example you gave. >> >> Or are you saying that you tried that command without the username and >> authentication password? >> If so, are you sure that you don't have those parameters set in an snmp >> configuration file? >> >> Trying the command with -Dread_config:line may help here. >> >> I tried snmptrap 5.9.3 with no -u and -A flags and with/without a >> configuration file and it only worked with the configuration file. >> >> - Craig >> >> ___ >> Net-snmp-coders mailing list >> Net-snmp-coders@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders >> > > > ___ > Net-snmp-coders mailing > listNet-snmp-coders@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/net-snmp-coders > > -- > Niels Baggesen -- @home -- Århus -- Denmark -- n...@users.sourceforge.net >The purpose of computing is insight, not numbers -- R W Hamming > > ___ > Net-snmp-coders mailing list > Net-snmp-coders@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders > ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmptrap v3 authentication
Which trap receiver are you using? snmptrapd, or something else? /Niels Den 25-04-2023 kl. 15:10 skrev Simon Chamlian: I tried the command: snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 "" coldStart.0 (with security name : Simon and authentication password : SimonPass ). These parameters are not set in any config files anywhere. On another PC with IP 172.27.37.227, I have a MIB browser and trap receiver. The trap receiver is receiving the trap even when it is not configured with the security name : Simon and authentication password : SimonPass . I was not expecting to receive the trap until I configured the trap receiver with the same security name and authentication password!?! Simon On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders wrote: On Sat, 15 Apr 2023 at 11:12, Simon Chamlian wrote: snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 "" coldStart.0 I do receive the trap on my Trap Receiver even if I didn't specify a Username and Authentication password in the MIB browser (on 172.27.37.227 ) ! Do you mean the security name instead of the username? The -u sets the security name, -A sets the authentication password. They're set in the example you gave. Or are you saying that you tried that command without the username and authentication password? If so, are you sure that you don't have those parameters set in an snmp configuration file? Trying the command with -Dread_config:line may help here. I tried snmptrap 5.9.3 with no -u and -A flags and with/without a configuration file and it only worked with the configuration file. - Craig ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders -- Niels Baggesen -- @home -- Århus -- Denmark --n...@users.sourceforge.net The purpose of computing is insight, not numbers -- R W Hamming ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmptrap v3 authentication
I tried the command: snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 "" coldStart.0 (with security name : Simon and authentication password : SimonPass ). These parameters are not set in any config files anywhere. On another PC with IP 172.27.37.227, I have a MIB browser and trap receiver. The trap receiver is receiving the trap even when it is not configured with the security name : Simon and authentication password : SimonPass . I was not expecting to receive the trap until I configured the trap receiver with the same security name and authentication password!?! Simon On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders < net-snmp-coders@lists.sourceforge.net> wrote: > On Sat, 15 Apr 2023 at 11:12, Simon Chamlian > wrote: > >> >> snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 >> "" coldStart.0 >> >> I do receive the trap on my Trap Receiver even if I didn't specify a >> Username and Authentication password in the MIB browser (on 172.27.37.227 ) >> ! >> > Do you mean the security name instead of the username? > The -u sets the security name, -A sets the authentication password. > They're set in the example you gave. > > Or are you saying that you tried that command without the username and > authentication password? > If so, are you sure that you don't have those parameters set in an snmp > configuration file? > > Trying the command with -Dread_config:line may help here. > > I tried snmptrap 5.9.3 with no -u and -A flags and with/without a > configuration file and it only worked with the configuration file. > > - Craig > > ___ > Net-snmp-coders mailing list > Net-snmp-coders@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders > ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: snmptrap v3 authentication
On Sat, 15 Apr 2023 at 11:12, Simon Chamlian wrote: > > snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 > "" coldStart.0 > > I do receive the trap on my Trap Receiver even if I didn't specify a > Username and Authentication password in the MIB browser (on 172.27.37.227 ) > ! > Do you mean the security name instead of the username? The -u sets the security name, -A sets the authentication password. They're set in the example you gave. Or are you saying that you tried that command without the username and authentication password? If so, are you sure that you don't have those parameters set in an snmp configuration file? Trying the command with -Dread_config:line may help here. I tried snmptrap 5.9.3 with no -u and -A flags and with/without a configuration file and it only worked with the configuration file. - Craig ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Fwd: snmptrap v3 authentication
Hi, The snmptrap v3 authentication does not seem to be working. I am using Version: 5.9.1 >From my agent, I issue: snmptrap -v 3 -u Simon -a MD5 -A SimonPass -l authNoPriv 172.27.37.227 "" coldStart.0 I do receive the trap on my Trap Receiver even if I didn't specify a Username and Authentication password in the MIB browser (on 172.27.37.227 ) ! I was NOT expecting to receive any traps until I set up the Username and Authentication!?! Any explanation? Thanks, S ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders