[SNMP4J] Encrypted Passphrases

[christyj]

Hi Jochen,

I am using a similar constructor, except for the last localizationEngineID
parameter. However this works well for text passphrases, but does not appear
to work for the encrypted passphrases.

  public UsmUser(OctetString securityName,
                 OID authenticationProtocol,
                 OctetString authenticationPassphrase,
                 OID privacyProtocol,
                 OctetString privacyPassphrase)

Any other ideas what could be happening?

Regards
Christy


Date: Fri, 29 Jul 2011 22:44:40 +0200
From: Jochen Katz <katz at agentpp.com>
Subject: Re: [SNMP4J] Encrypted Passphrases
To: snmp4j at agentpp.org
Message-ID: <4E331BB8.8030503 at 2011.agentpp.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi,

> I?m trying to use SNMP4J to test AUTH_NOPRIV setup for a device that has the
> auth passphrase set as encrypted digest (believe the passphrase is entered
> as a hexa-decimal numbers)

so you are directly setting the key used for authentication.

> I looked at UsmUser API and did not see a alternate way of setting encrypted
> passphrases. How do I set encrypted passphrases?

To set the keys for a user, you can use the following constructor (the
passed passphrases are in fact used as keys):

  public UsmUser(OctetString securityName,
                 OID authenticationProtocol,
                 OctetString authenticationPassphrase,
                 OID privacyProtocol,
                 OctetString privacyPassphrase,
                 OctetString localizationEngineID)

Regards,
  Jochen




From: Christy Jones <christyj at cisco.com>
Date: Fri, 29 Jul 2011 14:32:59 -0400
To: "snmp4j at agentpp.org" <snmp4j at agentpp.org>
Conversation: Encrypted Passphrases
Subject: Encrypted Passphrases

Hi,

I¹m trying to use SNMP4J to test AUTH_NOPRIV setup for a device that has the
auth passphrase set as encrypted digest (believe the passphrase is entered
as a hexa-decimal numbers)

Here what I tested with -

Test 1: text-passphrase ­ works, no issues
snmp-server user ppmv3user readonly v3 auth md5 abcdabcd

Test 2: encrypted-passphrase ­ returns SnmpConstants.usmStatsWrongDigests
snmp-server user ppmv3user readonly v3 encrypted auth md5 abcdabcd

I looked at UsmUser API and did not see a alternate way of setting encrypted
passphrases. How do I set encrypted passphrases?

Regards
Christy