Re: snmptrap v3 authentication

2023-05-30 Thread Wes Hardaker
Niels Baggesen  writes:

> > I tried with SimpleMib browser as well as MGSOFT Mib browser.
> 
> In that case you should direct your question towards them, why they
> accept a trap with unknown credentials.

Indeed, some trap receivers always accept and print traps regardless of
whether or not it has been authenticated.  It's the responsibility of
the receiver to decide what to do.

[some have argued they should always log what they receive, but mark it
as whether it was authenticated or not]
-- 
Wes Hardaker
Please mail all replies to net-snmp-coders@lists.sourceforge.net


___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Re: snmptrap v3 authentication

2023-04-25 Thread Niels Baggesen


Den 25-04-2023 kl. 17:46 skrev Simon Chamlian:

Something else.

I tried with SimpleMib browser as well as MGSOFT Mib browser.


In that case you should direct your question towards them, why they 
accept a trap with unknown credentials.


Note, that you have asked to send the trap in the clear, so there is no 
problem interpreting it.


/Niels

--
Niels Baggesen -- @home -- Århus -- Denmark -- ni...@baggesen.net
The purpose of computing is insight, not numbers  --  R W Hamming



___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Re: snmptrap v3 authentication

2023-04-25 Thread Simon Chamlian
Something else.

I tried with SimpleMib browser as well as MGSOFT Mib browser.




On Tue, Apr 25, 2023 at 10:30 AM Niels Baggesen via Net-snmp-coders <
net-snmp-coders@lists.sourceforge.net> wrote:

> Which trap receiver are you using? snmptrapd, or something else?
>
> /Niels
> Den 25-04-2023 kl. 15:10 skrev Simon Chamlian:
>
> I tried the command:
>
> snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
> "" coldStart.0
>
> (with  security name  : Simon and   authentication password  : SimonPass ).
>
> These parameters are not set in any config files anywhere.
>
> On another PC with IP 172.27.37.227, I have a MIB browser and trap
> receiver. The trap receiver is receiving the trap even when it is not
> configured with the  security name  : Simon and   authentication password
> : SimonPass .
>
> I was not expecting to receive the trap until I configured the trap
> receiver with the same security name and authentication password!?!
>
> Simon
>
>
>
>
> On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders <
> net-snmp-coders@lists.sourceforge.net> wrote:
>
>> On Sat, 15 Apr 2023 at 11:12, Simon Chamlian 
>> wrote:
>>
>>>
>>> snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv
>>> 172.27.37.227 "" coldStart.0
>>>
>>> I do receive the trap on my Trap Receiver even if I didn't specify a
>>> Username and Authentication password in the MIB browser (on 172.27.37.227 )
>>> !
>>>
>> Do you mean the security name instead of the username?
>> The -u sets the security name, -A sets the authentication password.
>> They're set in the example you gave.
>>
>> Or are you saying that you tried that command without the username and
>> authentication password?
>> If so, are you sure that you don't have those parameters set in an snmp
>> configuration file?
>>
>> Trying the command with -Dread_config:line may help here.
>>
>> I tried snmptrap 5.9.3 with no -u and -A flags and with/without a
>> configuration file and it only worked with the configuration file.
>>
>>  - Craig
>>
>> ___
>> Net-snmp-coders mailing list
>> Net-snmp-coders@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>>
>
>
> ___
> Net-snmp-coders mailing 
> listNet-snmp-coders@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>
> --
> Niels Baggesen -- @home -- Århus -- Denmark -- n...@users.sourceforge.net
>The purpose of computing is insight, not numbers  --  R W Hamming
>
> ___
> Net-snmp-coders mailing list
> Net-snmp-coders@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Re: snmptrap v3 authentication

2023-04-25 Thread Niels Baggesen via Net-snmp-coders

Which trap receiver are you using? snmptrapd, or something else?

/Niels

Den 25-04-2023 kl. 15:10 skrev Simon Chamlian:

I tried the command:

snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 
172.27.37.227 "" coldStart.0


(with security name  : Simon and  authentication password  : SimonPass ).

These parameters are not set in any config files anywhere.

On another PC with IP 172.27.37.227, I have a MIB browser and trap 
receiver. The trap receiver is receiving the trap even when it is not 
configured with the security name  : Simon and  authentication 
password  : SimonPass .


I was not expecting to receive the trap until I configured the trap 
receiver with the same security name and authentication password!?!


Simon




On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders 
 wrote:


On Sat, 15 Apr 2023 at 11:12, Simon Chamlian
 wrote:


snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv
172.27.37.227 "" coldStart.0

I do receive the trap on my Trap Receiver even if I didn't
specify a Username and Authentication password in the MIB
browser (on 172.27.37.227 ) !

Do you mean the security name instead of the username?
The -u sets the security name, -A sets the authentication
password. They're set in the example you gave.

Or are you saying that you tried that command without the username
and authentication password?
If so, are you sure that you don't have those parameters set in an
snmp configuration file?

Trying the command with -Dread_config:line may help here.

I tried snmptrap 5.9.3 with no -u and -A flags and with/without a
configuration file and it only worked with the configuration file.

 - Craig

___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders



___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


--
Niels Baggesen -- @home -- Århus -- Denmark --n...@users.sourceforge.net
   The purpose of computing is insight, not numbers  --  R W Hamming
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Re: snmptrap v3 authentication

2023-04-25 Thread Simon Chamlian
I tried the command:

snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
"" coldStart.0

(with  security name  : Simon and   authentication password  : SimonPass ).

These parameters are not set in any config files anywhere.

On another PC with IP 172.27.37.227, I have a MIB browser and trap
receiver. The trap receiver is receiving the trap even when it is not
configured with the  security name  : Simon and   authentication password
: SimonPass .

I was not expecting to receive the trap until I configured the trap
receiver with the same security name and authentication password!?!

Simon




On Tue, Apr 25, 2023 at 3:17 AM Craig Small via Net-snmp-coders <
net-snmp-coders@lists.sourceforge.net> wrote:

> On Sat, 15 Apr 2023 at 11:12, Simon Chamlian 
> wrote:
>
>>
>> snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
>> "" coldStart.0
>>
>> I do receive the trap on my Trap Receiver even if I didn't specify a
>> Username and Authentication password in the MIB browser (on 172.27.37.227 )
>> !
>>
> Do you mean the security name instead of the username?
> The -u sets the security name, -A sets the authentication password.
> They're set in the example you gave.
>
> Or are you saying that you tried that command without the username and
> authentication password?
> If so, are you sure that you don't have those parameters set in an snmp
> configuration file?
>
> Trying the command with -Dread_config:line may help here.
>
> I tried snmptrap 5.9.3 with no -u and -A flags and with/without a
> configuration file and it only worked with the configuration file.
>
>  - Craig
>
> ___
> Net-snmp-coders mailing list
> Net-snmp-coders@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Re: snmptrap v3 authentication

2023-04-25 Thread Craig Small via Net-snmp-coders
On Sat, 15 Apr 2023 at 11:12, Simon Chamlian  wrote:

>
> snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
> "" coldStart.0
>
> I do receive the trap on my Trap Receiver even if I didn't specify a
> Username and Authentication password in the MIB browser (on 172.27.37.227 )
> !
>
Do you mean the security name instead of the username?
The -u sets the security name, -A sets the authentication password. They're
set in the example you gave.

Or are you saying that you tried that command without the username and
authentication password?
If so, are you sure that you don't have those parameters set in an snmp
configuration file?

Trying the command with -Dread_config:line may help here.

I tried snmptrap 5.9.3 with no -u and -A flags and with/without a
configuration file and it only worked with the configuration file.

 - Craig
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders


Fwd: snmptrap v3 authentication

2023-04-14 Thread Simon Chamlian
Hi,

The snmptrap v3 authentication does not seem to be working.

I am using Version:  5.9.1

>From my agent, I issue:

snmptrap -v 3 -u  Simon  -a MD5 -A  SimonPass -l authNoPriv 172.27.37.227
"" coldStart.0

I do receive the trap on my Trap Receiver even if I didn't specify a
Username and Authentication password in the MIB browser (on 172.27.37.227 )
!

I was NOT expecting to receive any traps until I set up the Username and
Authentication!?!

Any explanation?

Thanks,
S
___
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders