[SNMP4J] Sending traps to 2 destinations with the same security name and different authentication

Frank Fock fock at agentpp.com
Thu Feb 20 23:59:15 CET 2014


Hi I-Wen,

The trap sender is authoritative. Thus, the senders engineID is used to 
authenticate the trap.
According to the SNMPv3 standad, you cannot send SNMPv3 notifications 
with the same USM
with the same securityName but different authentication passphrases (keys).

Best regards,
Frank

Am 20.02.2014 23:54, schrieb I-Wen Yang:
> Hi,
>
> I added 2 Usm users with same security name, different engine ids, and authentications. While trying to send the traps, I received following error messages
> org.snmp4j.security.USM  - USM.getUser - User 'xxxxxx' unknown
> org.snmp4j.security.USM  - Security name not found for engineID=...
> Message processing model 3 returned error: Unknown security name
>
> Look like the localEngineID is used when the codes try to find the security name. I traced into the MPv3.java program and found following:
>
>      if (scopedPDU.isConfirmedPdu()) {
>        flags |= MPv3_REPORTABLE_FLAG;
>      }
>      else {
>        secEngineID = localEngineID;
>      }
>
> As trap is not a confirmed pdu, the secEngineID is set to localEngineID.. Please feel free to correct me if my understanding of the code is wrong.
> Would you please share your thoughts on what I may do wrong or missed?
>
> Thanks,
> I-Wen
>
> _______________________________________________
> SNMP4J mailing list
> SNMP4J at agentpp.org
> https://s16675406.onlinehome-server.info/mailman/listinfo/snmp4j

-- 
---
AGENT++
Maximilian-Kolbe-Str. 10
73257 Koengen, Germany
https://agentpp.com
Phone: +49 7024 8688230
Fax:   +49 7024 8688231




More information about the SNMP4J mailing list