SNMPv3 Debian Question

Discussion:

Jan-Philipp Schollbach

2017-05-15 14:45:17 UTC

Pushpa Thimmaiah

2017-05-25 08:03:58 UTC

Hi Jayshankar,

Because system.sysContact.0 is read-only. snmpd.conf on your device could
have directive 'sysContact'.
snmpd.conf manpage says that specifying sysContact directives in
snmpd.conf makes the corresponding object read-only, and attempts to SET
it will result in a *notWritable* error response.

Thanks,
Pushpa.T

Hi,
I am testing snmpset with snmpv3 rwuser myuser2. I am getting the below
errors.
snmpset -v 3 -u myuser2 -l authNoPriv -a MD5 -A my_password localhost
Error in packet.
Reason: notWritable (That object does not support modification)
Failed object: SNMPv2-MIB::sysContact.0
snmpget works fine.
SNMPv2-MIB::sysContact.0 = STRING: Alice.
Thanks,
Jayshankar

I configured by snmpd an v3 User with the command -->
sudo net-snmp-create-v3-user -ro -A 11111111 -a SHA -X 22222222 -x AES

trap1111
Was the snmpd agent running when you ran that command? It actually
can't be. To add new users via the CLI, you need to stop the agent, run
the command, and then restart it.
(once you have an initial user configured, you can use snmpusm command
to add new users to a live agent)
--
Wes Hardaker
USC/ISI
------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

jayshankar nair

2017-05-27 05:44:30 UTC

Permalink

Hi Pushpa,

I was wondering whether commenting sysContact.0 in snmpd.conf file will
make it writeable again. Hence snmpset will execute successfully.

Please let me know.

Thanks,
Jayshankar

On Thu, May 25, 2017 at 1:33 PM, Pushpa Thimmaiah <

Post by Pushpa Thimmaiah
Hi Jayshankar,
Because system.sysContact.0 is read-only. snmpd.conf on your device
could have directive 'sysContact'.
snmpd.conf manpage says that specifying sysContact directives in
snmpd.conf makes the corresponding object read-only, and attempts to SET
it will result in a *notWritable* error response.
Thanks,
Pushpa.T
On Wed, May 24, 2017 at 10:55 AM, jayshankar nair <

I configured by snmpd an v3 User with the command -->
sudo net-snmp-create-v3-user -ro -A 11111111 -a SHA -X 22222222 -x AES

Pushpa Thimmaiah

2017-05-30 09:26:40 UTC

Permalink

Hi Jayashankar,

Yes. It should. However, I havenot verified.

Thanks,
Pushpa.T

Post by jayshankar nair
Hi Pushpa,
I was wondering whether commenting sysContact.0 in snmpd.conf file will
make it writeable again. Hence snmpset will execute successfully.
Please let me know.
Thanks,
Jayshankar
On Thu, May 25, 2017 at 1:33 PM, Pushpa Thimmaiah <

I configured by snmpd an v3 User with the command -->
sudo net-snmp-create-v3-user -ro -A 11111111 -a SHA -X 22222222 -x

AES trap1111
Was the snmpd agent running when you ran that command? It actually
can't be. To add new users via the CLI, you need to stop the agent, run
the command, and then restart it.
(once you have an initial user configured, you can use snmpusm command
to add new users to a live agent)
--
Wes Hardaker
USC/ISI
------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Net-snmp-users mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Pranesh Kulkarni

2017-06-06 08:20:25 UTC

Permalink

Then net-snmp agent will not the set the values which has been sent by
"set" commands if the object value is configured in snmpd.conf file.

following series of command to show it.

cat /etc/snmp/snmpd.conf
....
syscontact admin
.....

[***@localhost ~]# snmpget -c public localhost sysContact.0
SNMPv2-MIB::sysContact.0 = STRING: admin

after commenting the line syscontact

restart the snmpd server
[***@localhost ~]# systemctl restart snmpd

[***@localhost ~]# snmpget -c public localhost sysContact.0
SNMPv2-MIB::sysContact.0 = STRING: ***@localhost

***@localhost is the default one

set the syscontat string

[***@localhost ~]# snmpset -c private localhost sysContact.0 s
"adminstrator"
SNMPv2-MIB::sysContact.0 = STRING: adminstrator
[***@localhost ~]# snmpget -c public localhost sysContact.0
SNMPv2-MIB::sysContact.0 = STRING: adminstrator

On Tue, May 30, 2017 at 2:56 PM, Pushpa Thimmaiah <

Post by Pushpa Thimmaiah
Hi Jayashankar,
Yes. It should. However, I havenot verified.
Thanks,
Pushpa.T
On Sat, May 27, 2017 at 11:14 AM, jayshankar nair <

Hi,
I am testing snmpset with snmpv3 rwuser myuser2. I am getting the below
errors.
snmpset -v 3 -u myuser2 -l authNoPriv -a MD5 -A my_password
Error in packet.
Reason: notWritable (That object does not support modification)
Failed object: SNMPv2-MIB::sysContact.0
snmpget works fine.
SNMPv2-MIB::sysContact.0 = STRING: Alice.
Thanks,
Jayshankar
On Wed, May 24, 2017 at 4:08 AM, Wes Hardaker <

I configured by snmpd an v3 User with the command -->
sudo net-snmp-create-v3-user -ro -A 11111111 -a SHA -X 22222222 -x

--
Thanks,
Pranesh

Pranesh Kulkarni

2017-06-07 03:14:27 UTC

Permalink

I meant for snmpv2

Post by Pranesh Kulkarni
"adminstrator"

Post by Pranesh Kulkarni
SNMPv2-MIB::sysContact.0 = STRING: adminstrator

Wait if that works (and please tell me "private" is not your real
community string), then you probably need to set up authorization
properly and your SNMPv3 user doesn't have write access to the object.
Se the VACM section of the snmpd.conf manual and/or change the rouser
line to rwuser for your v3 user.
--
Wes Hardaker
USC/ISI

--
Thanks,
Pranesh