[AGENT++] Error returned in the SNMPV3 PDU

Jochen Katz katz at agentpp.com
Mon Dec 1 21:53:39 CET 2003


Hi,

I think I finally found the problem. The line

#define SNMP_ERROR_AUTH_ERR         16 //!< Authentication failure

is WRONG! It must be

#define SNMP_ERROR_AUTH_ERR         16 //!< Authorization error


The agent must do the following checks for incoming requests:
- Check authenticity of message if it has a digest (can result in wrong 
digest or unsupported security level report)

- Decrypt message if it is encrypted (can result in decryption failure 
or unsupported security level report)

- Check if the user is allowed to access the requested Oid (can fail 
with authorization error)

If you get an SNMP_ERROR_AUTH_ERR, the VACM of the agent is configured 
to deny acces to the requested Oid to the user.

You can try to contact the agent++ atm_mib example agent using the 
following commands:
snmpNext localhost -p4700 -v3 -snunsecureUser -sl1
snmpNext localhost -p4700 -v3 -snunsecureUser -sl1 -cnother

The first command will fail, as the user unsecureUser only has access to 
the context "other".

Regards,
   Jochen







More information about the AGENTPP mailing list