HELP WITH SHA AES CONNECTION ISSUE

Post general support questions here that do not specifically fall into the Linux or Windows categories.

Moderators: Developers, Moderators

Post Reply
paris
Posts: 3
Joined: Wed Sep 06, 2017 1:09 am

HELP WITH SHA AES CONNECTION ISSUE

Post by paris »

Please help me to connect a Device using SHA/AES.
I am currently receiving "SNMP error" as the message on save.

MD5/DES works without issue, my issue is with SHA/AES.

Any help is appreciated!

Here is my configuration information:

SNMP Server Settings (/etc/snmp/snmpd.conf)
createUser somename SHA [128 characters here] AES [128 characters here]
rouser somename priv

Cacti Settings:
SNMP Utility Version 5.X
SNMP Version 3
SHA/AES

Package Version Information:
ii snmp 5.7.2.1+dfsg-1
ii cacti 0.8.8b+dfsg-8+de
ii cacti-spine 0.8.8b-1+b3

My log file says:
09/06/2017 06:36:31 AM - CMDPHP: Poller[0] WARNING: SNMP Get Timeout for Host:'192.168.20.2', and OID:'.1.3.6.1.2.1.1.1.0'

Running the same command from the command line SHA/AES (snmpget 192.168.20.2 .1.3.6.1.2.1.1.1.0)
SNMPv2-MIB::sysDescr.0 = STRING: Linux somehost 3.16.0-4-686-pae #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) i686
paris
Posts: 3
Joined: Wed Sep 06, 2017 1:09 am

Re: HELP WITH SHA AES CONNECTION ISSUE

Post by paris »

Anyone using SHA AES or able to verify the issues? I have tried two hosts with the same results.
paris
Posts: 3
Joined: Wed Sep 06, 2017 1:09 am

Re: HELP WITH SHA AES CONNECTION ISSUE

Post by paris »

Resolved!
Since I don't know anything about the code other than a quick look inside I cannot say if this is a Bug or Feature.

The maximum password length for passphrase is 100 in PHP and only 50 in Spine.
For the priv passphrase its 200 in both PHP and Spine.

When I created an SNMP SHA/AES priv user with those password lengths is works no problem.
If I go over in either it fails as indicated above.

Here is the little bit of research that I did:

https://github.com/Cacti/cacti/blob/dev ... ttings.php

'snmp_password' => array(
'friendly_name' => __('Password (v3)'),
'description' => __('The SNMP v3 Password for polling hosts.'),
'method' => 'textbox_password',
'default' => '',
'max_length' => '100',
),
'snmp_auth_protocol' => array(
'method' => 'drop_array',
'friendly_name' => __('Auth Protocol (v3)'),
'description' => __('Choose the SNMPv3 Authorization Protocol.'),
'default' => 'MD5',
'array' => $snmp_auth_protocols,
),
'snmp_priv_passphrase' => array(
'method' => 'textbox',
'friendly_name' => __('Privacy Passphrase (v3)'),
'description' => __('Choose the SNMPv3 Privacy Passphrase.'),
'default' => '',
'max_length' => '200'
),
'snmp_priv_protocol' => array(
'method' => 'drop_array',
'friendly_name' => __('Privacy Protocol (v3)'),
'description' => __('Choose the SNMPv3 Privacy Protocol.'),
'default' => 'DES',
'array' => $snmp_priv_protocols,
),

https://github.com/Cacti/spine/blob/develop/spine.h
char snmp_password[50];
char snmp_priv_passphrase[200];
User avatar
Osiris
Cacti Guru User
Posts: 1424
Joined: Mon Jan 05, 2015 10:10 am

Re: HELP WITH SHA AES CONNECTION ISSUE

Post by Osiris »

Please open a bug on github.com
Before history, there was a paradise, now dust.
Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest