I would very much appreciate someone's help with the following NET-SNMP config issue.
I have tried to determine why a SNMPD.CONF file does not work on a SNMP V3 authentication setup in the following file. After reviewing the CONF file many times, I have not been able to identify it. My basic intent is to create 2 users - 1 with access to the mib-2::system subarea and the other of the mib-2::interfaces subtree in the views view1 and view2. The snmpwalk command always returns: Error in packet. Reason: authorizationError (access denied to that object) Here is my CONF file which describes all of the views, groups, and accesses : # # net-snmp (or ucd-snmp) persistent data file. # syslocation unknown syscontact unknown sysservices 72 rocommunity public rwcommunity private
# # SMUX peer support (gated) # smuxpeer .1.3.6.1.4.1.4.3.1.4 secret
#send v1 traps trapsink 192.168.1.3 public #send v2 traps trap2sink 192.168.1.3 secret #send authentication traps authtrapenable 1
# SNMP v3 configuration
createUser tester1 MD5 testpasswd DES createUser tester2 MD5 testpass DES com2sec tester1 default public com2sec tester2 default public group test1 usm tester1 group test2 usm tester2 view view1 included system 0 view view2 included interfaces 0 access test1 "" any auth exact view1 none none access test2 "" any auth exact view2 none none
# Used with ifMibObjects alias support ifalias /etc/rcZ.d/ifalias
# To limit the size of the RMON logfile logentry 5000 # End of snmpd.conf
The following SNMP v3 requests all return authorization errors : 1.snmpwalk -v3 -A "testpasswd" -n "" -u tester1 -l authNoPriv 192.168.1.26 interfaces 2.snmpwalk -v3 -A "testpasswd" -n "" -u tester1 -l authNoPriv 192.168.1.26 system 3.snmpwalk -v3 -A "testpass" -n "" -u tester2 -l authNoPriv 192.168.1.26 system 4.snmpwalk -v3 -A "testpass" -n "" -u tester2 -l authNoPriv 192.168.1.26 interfaces
I believe that with the above setup, test 1 and 3 should not work. Only 2 and 4 should work, but this is not occurring. Is there something wrong in my SNMPD.CONF file. I cannot determine if it is the mask for the view or another issue.
Thanks for your time and look forward to hearing from you soon.
Regards Manish
|
- Re: Net-snmp 5.0.9 config issue Bakshi Manish-Q16572
- Re: Net-snmp 5.0.9 config issue Dave Shield
- RE: Net-snmp 5.0.9 config issue Baumgart Alexander