Gentlemen,
Any helping hand on this??
Thanks,
Madan
-----Original Message-----
From: Madan (Madan Mohan) Goud
Sent: Monday, October 08, 2007 5:43 PM
To: net-snmp-users@lists.sourceforge.net
Cc: Madan (Madan Mohan) Goud
Subject: SNMPV3 user Authentication Failed
Hi All,
Thanks for reading. I am facing problem with SNMPV3 user
authentication.
(1) I created an SNMPv3 user at the initialization code(init_usm() in
snmpusm.c). I wrote an API to create an user. It is in accordance with
usm_parse_create_usmUser API present in snmpv3.c. Instead of taking
parameters like username and authentication key from snmpd.conf, I am
supplying them as parameters to my API. I am creating this user here as
I am not using snmpd.conf for configuration. The API I wrote for
creating the user is attached with this e-mail. For clarity, I am
including only the part I changed in snmpusm.c file.
(2) When I create the user without Authentication and Privacy, SNMPV3
works fine and I get response. When I create user with Authentication
and privacy parameters, It fails. Basically I am getting failure in the
following piece of code in the API usm_process_in_msg present in
snmpusm.c :
/*
* Check the authentication credentials of the message.
*/
if (secLevel == SNMP_SEC_LEVEL_AUTHNOPRIV
|| secLevel == SNMP_SEC_LEVEL_AUTHPRIV) {
if (sc_check_keyed_hash(user->authProtocol,
user->authProtocolLen,
user->authKey, user->authKeyLen,
wholeMsg, wholeMsgLen,
signature, signature_length)
!= SNMP_ERR_NOERROR) {
DEBUGMSGTL(("usm", "Verification failed.\n"));
if (snmp_increment_statistic(STAT_USMSTATSWRONGDIGESTS) == 0)
{
DEBUGMSGTL(("usm", "%s\n",
"Failed to increment statistic."));
}
snmp_log(LOG_WARNING, "Authentication failed for
%s\n",user->name); -> I am getting this error on console for the
user I created.
return SNMPERR_USM_AUTHENTICATIONFAILURE;
}
DEBUGMSGTL(("usm", "Verification succeeded.\n"));
}
Please let me know if the way I am creating user is correct. It seems
the authentication is getting failed. Your inputs for solving this
problem are highly appreciated.
Thanks in advance,
Madan
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
