http://blog.gmane.org/gmane.network.snmp4j.general hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.network.snmp4j.general/2242 <pre>Hi, You can use only certain authentication protocols. However, if you use (implement) a non-standard protocol for SNMPv3, then you will have serious interoperability problems. AFAIK, SHA-2 has not been yet defined for SNMPv3 by the IETF. If you want (very) secure authentication and a minimal interoperability, then you can use TLS for SNMPv3. Best regards, Frank Am 10.05.2013 23:27, schrieb Monika: </pre> Frank Fock 2013-05-16T20:58:07 http://permalink.gmane.org/gmane.network.snmp4j.general/2241 <pre>Hello, www.snmp4j.org lists "SHA" as one of the supported authentication algorithms. Is this SHA-1, SHA-2 or both? Is it possible to restrict the usable algorithms to only the SAH-2 family and not allow SHA-1 and MD5 to be used? If so, how? Thanks. </pre> Monika 2013-05-10T21:27:24 http://permalink.gmane.org/gmane.network.snmp4j.general/2240 <pre>Thanks Frank -- we ended up extending DefaultMOMutableRow2PC and all is working well. I notice that there are several, or rather many, managed objects registered by default under your EnterpriseId = 4976. Are these required by SNMP -- if yes, should we convert these to our enterprise id = 41485. If no, can/should we suppress these? Brad -----Original Message----- From: snmp4j-bounces-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org [mailto:snmp4j-bounces-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org] On Behalf Of Frank Fock Sent: Thursday, April 04, 2013 4:45 PM To: snmp4j-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org Subject: Re: [SNMP4J] Intercepting gets and sets from the Network Manager to individual cells in an MOTable Hi Brad, You might want to read the SNMP4J-Agent instrumentation guide with more conceptual background and detailed examples: http://www.snmp4j.org/SNMP4J-Agent-1.4-InstrumentationGuide.pdf The most intuitive approach would be to override the http://www.snmp4j.org/agent/doc/org/snmp4j/agent/mo/DefaultMOMutableRow2PC.html class by creating your own http://www.snmp4j.org/agent/doc/org/snmp4j/agent/mo/DefaultMOMutableRow2PCFactory.html If you can easily integrate an generic solution, then using the http://www.snmp4j.org/agent/doc/org/snmp4j/agent/MOServerLookupListener.html could also be an option. With that listener you can intercept incoming SET (or GET*) requests and update your ManagedObjects before they have to process the request. The instrumentation guide has examples for both. Best regards, Frank Am 04.04.2013 18:32, schrieb Charan, Brad: -- --- AGENT++ Maximilian-Kolbe-Str. 10 73257 Koengen, Germany https://agentpp.com Phone: +49 7024 8688230 Fax: +49 7024 8688231 _______________________________________________ SNMP4J mailing list SNMP4J-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org http://lists.agentpp.org/mailman/listinfo/snmp4j This message may contain confidential information, if you are not the intended addressee, please inform us immediately that you have received this e-mail in error, and delete it. We thank you for your cooperation. </pre> Charan, Brad 2013-05-08T13:41:47 http://permalink.gmane.org/gmane.network.snmp4j.general/2239 <pre>Hi Frank, Thank you very much for the clarifications. I think I am going to try to solve the issue from another angle. As you know the callback function queryEvent which is the implementation MOServerLookupListener class will be called multiple times (when using getbulk), hence this will cause issuing the same query to the DB every time the callback function is executed. I am going to update the table only when the DB table is updated, and I am not going to implement MOServerLookupListener interface. The only concern I have is when the user sends getbulk request and this will cause multiple requests being issued, in the meantime I need to update the snmp table model because the db table is updated. Do you think it is good approach to lock on the snmp table model for update while the still processing getbulk? will this cause issues? Regards AF ---------- Forwarded message ---------- From: Frank Fock &lt;fock-uhZIdBdo/7ZBDgjK7y7TUQ&lt; at &gt;public.gmane.org&gt; Date: Fri, May 3, 2013 at 5:47 PM Subject: Re: [SNMP4J] Fwd: Fwd: Table Model To: snmp4j-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org Hi Aiman, Please reread my answer and then try to explain, why you think that "Which is not what I have expected as my model should have either Set1 or Set2 but not mix of both." should be true? If you update the model with each incoming request and each request can only return 1/3 of the table, then the first third of the resulting table view in the browser will be from the Set1, the second third from Set2, and the third from Set3. This is exactly how it should work. Best regards, Frank Am 03.05.2013 11:57, schrieb Aiman Farhat: </pre> Aiman Farhat 2013-05-07T14:41:20 http://permalink.gmane.org/gmane.network.snmp4j.general/2238 <pre>Hi, That question has to be solved by yourself. Best regards, Frank Am 03.05.2013 14:23, schrieb Ballarpure, Akshay (NSN - IN/Hyderabad): </pre> Frank Fock 2013-05-04T10:33:14 http://permalink.gmane.org/gmane.network.snmp4j.general/2237 <pre>Hi Aiman, Please reread my answer and then try to explain, why you think that "Which is not what I have expected as my model should have either Set1 or Set2 but not mix of both." should be true? If you update the model with each incoming request and each request can only return 1/3 of the table, then the first third of the resulting table view in the browser will be from the Set1, the second third from Set2, and the third from Set3. This is exactly how it should work. Best regards, Frank Am 03.05.2013 11:57, schrieb Aiman Farhat: </pre> Frank Fock 2013-05-03T16:47:10 http://permalink.gmane.org/gmane.network.snmp4j.general/2236 <pre>Hi Frank, Thanks for your response. According to instrumentation guide I am updating the table model before the request is processed based on external event. Our table will be small tables doesn't exceed 20 row max. The problem we are having is not with the order, it is actually with the content. I have a test data as follow: Set1: Component_set1_1 Component_set1_2 Component_set1_3 Set2: Component_set2_1 Component_set2_2 Component_set2_3 When I send a request from a Mib browser, the table content gets mixed. For example the data in the table could be something like that: Component_set1_1 Component_set2_2 Component_set1_3 Which is not what I have expected as my model should have either Set1 or Set2 but not mix of both. As you know I am implementing MOServerLookupListener interface and in queryEvent(MOServerLookupEvent event) I am building my table model. I know queryEvent method get called multiple times based on number of columns and rows, and maybe that's why I am getting mixed results even though I am clearing the model. I am sure I am doing something wrong, and appricate your help. Thanks. AF On Thu, May 2, 2013 at 4:28 PM, Frank Fock &lt;fock-uhZIdBdo/7ZBDgjK7y7TUQ&lt; at &gt;public.gmane.org&gt; wrote: </pre> Aiman Farhat 2013-05-03T09:57:22 http://permalink.gmane.org/gmane.network.snmp4j.general/2235 <pre>Hi, I think the table works perfectly. The ordering is correct. (I know that this is not what you expected to hear ;-) ) OK, first some words on the background: As you might already know, SNMP does not have a PDU or service called "getTable". Instead you have GETNEXT and GETBULK and an absolut upper limit of 64K per PDU (UDP). Thus, medium and large tables will be never fetched with a single Request-&gt;Response communication. If you alter your table for each request, the command generator (= sender of the requests) will see "incosistent" data, because you provided incosistent data. Besides, it takes a lot CPU time, to recreate the table for each request. You can improve your code by updating the table only every 2-5 seconds and not more often as a client would typically need to fetch the whole table. Best regards, Frank Am 02.05.2013 14:30, schrieb Aiman Farhat: </pre> Frank Fock 2013-05-02T15:28:44 http://permalink.gmane.org/gmane.network.snmp4j.general/2234 <pre>Hi Vasantharajan, The error status 14 is returned by the agent. Thus, you will need to consult the vendor/manufacturer to get information of the possible cause. Best regards, Frank Am 02.05.2013 15:55, schrieb vasanth: </pre> Frank Fock 2013-05-02T15:20:11 http://permalink.gmane.org/gmane.network.snmp4j.general/2233 <pre>Hi, You probably misunderstood me. You do not need to synchronize anything, just make sure that a PDU object is not modified after Snmp.send* has been called. SNMP4J does not make an internal copy of the PDU object for performance reasons. Thus, if you modify the object while it is being send out, you get wrong results and BufferOverflowExceptions. Best regards, Frank Am 02.05.2013 11:41, schrieb Ballarpure, Akshay (NSN - IN/Hyderabad): </pre> Frank Fock 2013-05-02T15:10:59 http://permalink.gmane.org/gmane.network.snmp4j.general/2232 <pre>Hi, I am using SNMP4J API for SNMP set operation. I tried to set the syslocation for the *ASR 9k device (SNMP V2)*. but set operation is failed and getting error response. Error Status: 14 Error Text: commitFailed&lt;http://www.snmp4j.org/doc/org/snmp4j/PDU.html#commitFailed&gt; If i give the wrong credential, then i am getting the error response as"No Access". But here i am trying with correct credentials only. could you please help me here why i am getting commitFailed&lt;http://www.snmp4j.org/doc/org/snmp4j/PDU.html#commitFailed&gt; error. In what scenario we will get this response. Note: I am not facing this issue for other Cisco IOS devices. Thanks, Vasantharajan </pre> vasanth 2013-05-02T13:55:36 http://permalink.gmane.org/gmane.network.snmp4j.general/2231 <pre>Hi All, The problem I am facing with snmp4j is as follow, I am building a *dynamic*table model, where every time a request comes I clear the old data and then recreate it. The Issue I am facing is when I am sending subsequent requests the data model is not returning the correct rows. Just to give you an example: As a test the data I am sending back to the request either: Set A: Component1 Component2 Component3 Component4 Component5 Component6 OR Set B: Component11 Component22 Component33 Component44 Component55 Component66 Now the problem as follow: I see the following results in the Mib browser returned: Component1 Component22 Component3 Component44 Component55 Component6 As you can see the values in the table model is not what I have expected. As when I am building the table model I am clearing the old data then re populated with either set A or Set B of dummy values. Just to elaborate more from code prospective : T*his is building the table section:* DefaultMOTable table = new DefaultMOTable(tableRootOid, indexDef, columns.toArray(new MOColumn[0])); MOMutableTableModel model = (MOMutableTableModel) table.getModel(); int i = 1; for (Variable[] variables : tableRows) { model.addRow(new DefaultMOMutableRow2PC(new OID(String.valueOf(i)), variables)); i++; } table.setVolatile(true); return table; This section details the registration of the managed Table Object server.register(table, null); server.addLookupListener(new DeployedComponentListener(table), table); And this is my Listener class implementation &lt; at &gt;Override *public* *void* queryEvent(MOServerLookupEvent event) { *DefaultMOTable* table = (*DefaultMOTable*) event.getLookupResult(); MOMutableTableModel&lt;DefaultMOMutableRow2PC&gt; model = *(MOMutableTableModel&lt;DefaultMOMutableRow2PC&gt;) table.getModel()*; *synchronized* (model) { model.clear(); Random r = *new* Random(); *int* rand = r.nextInt(2); *if* (rand == 0) { Variable[] var1 = *new* Variable[] { *new* Integer32(1), *new* OctetString( "Component1"), *new* OctetString("Component1 version"), *new* OctetString("Component1 revision"), *new* OctetString("Component1 insenace id"), *new* OctetString("") }; more var….. model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("1"), var1)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("2"), var2)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("3"), var3)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("4"), var4)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("5"), var5)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("6"), var6)); } *else* { Variable[] var1 = *new* Variable[] { *new* Integer32(1), *new* OctetString( "Component11"), *new* OctetString("" ), *new* OctetString("" ), *new* OctetString("" ), *new* OctetString("") }; more var model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("1"), var1)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("2"), var2)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("3"), var3)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("4"), var4)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("5"), var5)); model.addRow(*new*DefaultMOMutableRow2PC( *new* OID("6"), var6)); } } I am following the AgentPro instrumentation guide this the only guide I could find on how to build the table model. Thanks AF </pre> Aiman Farhat 2013-05-02T12:30:10 http://permalink.gmane.org/gmane.network.snmp4j.general/2230 <pre>Kelly, Yes, the change wasn't a good one. It does not work if the exception is thrown permantly, for example if the socket was closed (although this should not happen). You can improve the behavior by adding the following method to DefaultUdpTransportMapping: /** * If receiving new datagrams fails with a {&lt; at &gt;link SocketException}, this method is called to renew the * socket - if possible. * &lt; at &gt;param socketException * the exception that occurred. * &lt; at &gt;return * the new socket or &lt;code&gt;null&lt;/code&gt; if the listen thread should be terminated with the provided * exception. * &lt; at &gt;throws SocketException * a new socket exception if the socket could not be renewed. */ protected DatagramSocket renewSocketAfterException(SocketException socketException) throws SocketException { DatagramSocket s = new DatagramSocket(udpAddress.getPort()); s.setSoTimeout(socketTimeout); return s; } Then change the DefaultUdpTransportMapping.ListenThread.run() method as follows: public void run() { DatagramSocket socketCopy = socket; if (socketCopy != null) { try { socketCopy.setSoTimeout(getSocketTimeout()); if (receiveBufferSize &gt; 0) { socketCopy.setReceiveBufferSize(Math.max(receiveBufferSize, maxInboundMessageSize)); } if (logger.isDebugEnabled()) { logger.debug("UDP receive buffer size for socket " + getAddress() + " is set to: " + socketCopy.getReceiveBufferSize()); } } catch (SocketException ex) { logger.error(ex); setSocketTimeout(0); } } while (!stop) { DatagramPacket packet = new DatagramPacket(buf, buf.length, udpAddress.getInetAddress(), udpAddress.getPort()); try { socketCopy = socket; try { if (socketCopy == null) { stop = true; continue; } socketCopy.receive(packet); } catch (InterruptedIOException iiox) { if (iiox.bytesTransferred &lt;= 0) { continue; } } if (logger.isDebugEnabled()) { logger.debug("Received message from "+packet.getAddress()+"/"+ packet.getPort()+ " with length "+packet.getLength()+": "+ new OctetString(packet.getData(), 0, packet.getLength()).toHexString()); } ByteBuffer bis; // If messages are processed asynchronously (i.e. multi-threaded) // then we have to copy the buffer's content here! if (isAsyncMsgProcessingSupported()) { byte[] bytes = new byte[packet.getLength()]; System.arraycopy(packet.getData(), 0, bytes, 0, bytes.length); bis = ByteBuffer.wrap(bytes); } else { bis = ByteBuffer.wrap(packet.getData()); } TransportStateReference stateReference = new TransportStateReference(DefaultUdpTransportMapping.this, udpAddress, null, SecurityLevel.undefined, SecurityLevel.undefined, false, socketCopy); fireProcessMessage(new UdpAddress(packet.getAddress(), packet.getPort()), bis, stateReference); } catch (SocketTimeoutException stex) { // ignore } catch (PortUnreachableException purex) { synchronized (DefaultUdpTransportMapping.this) { listener = null; } logger.error(purex); if (logger.isDebugEnabled()) { purex.printStackTrace(); } if (SNMP4JSettings.isFowardRuntimeExceptions()) { throw new RuntimeException(purex); } break; } catch (SocketException soex) { if (!stop) { logger.warn("Socket for transport mapping " + toString() + " error: " + soex.getMessage()); } if (SNMP4JSettings.isFowardRuntimeExceptions()) { stop = true; throw new RuntimeException(soex); } else { try { DatagramSocket newSocket = renewSocketAfterException(soex); if (newSocket == null) { throw soex; } socket = newSocket; } catch (SocketException e) { stop = true; logger.error("Socket renewal for transport mapping " + toString() + " failed with: " + e.getMessage(), e); } } } catch (IOException iox) { logger.warn(iox); if (logger.isDebugEnabled()) { iox.printStackTrace(); } if (SNMP4JSettings.isFowardRuntimeExceptions()) { throw new RuntimeException(iox); } } } synchronized (DefaultUdpTransportMapping.this) { listener = null; stop = true; DatagramSocket closingSocket = socket; if ((closingSocket != null) &amp;&amp; (!closingSocket.isClosed())) { closingSocket.close(); } socket = null; } if (logger.isDebugEnabled()) { logger.debug("Worker task stopped:" + getClass().getName()); } } Best regards, Frank Am 30.04.2013 23:05, schrieb Kelly Dyer: </pre> Frank Fock 2013-04-30T23:02:02 http://permalink.gmane.org/gmane.network.snmp4j.general/2229 <pre>Hello Akshay, I think the root cause is the buffer overflow exception. First, you should fix that issue. Possible causes are: 1. The PDU or any contained VariableBinding is modified by another thread (for example the PDU sender) after calling asynchronous Snmp.send*. 2. A variable binding is being sent, that is not supported by the protocol version (as you send a scoped pdu, I think this cases is not matching your case). Then you can optimize the threading behavior by reducing the bootle neck in Snmp.NotificationDispatcher.processPdu by replacing it with: public void processPdu(CommandResponderEvent event) { CommandResponder listener; synchronized (this) { listener = notificationTransports.get(event.getTransportMapping()); } if ((event.getPDU() != null) &amp;&amp; (event.getPDU().getType() == PDU.INFORM)) { // try to send INFORM response try { sendInformResponse(event); } catch (MessageException mex) { if (logger.isWarnEnabled()) { logger.warn("Failed to send response on INFORM PDU event (" + event + "): " + mex.getMessage()); } } } if (listener != null) { listener.processPdu(event); } } Best regards, Frank Am 30.04.2013 17:35, schrieb Ballarpure, Akshay (NSN - IN/Hyderabad): </pre> Frank Fock 2013-04-30T22:25:55 http://permalink.gmane.org/gmane.network.snmp4j.general/2228 <pre>I am a little confused by this change. We have run into this issue, with a sporadic socket closed exception, the cause of which we have not been able to identify. What we are seeing is that the new behavior results in a busy-loop, since we go right back to a receive that is guaranteed to fail. This strikes me as a case where we need to either remediate the socket directly, or cancel the listener. What am I missing? Regards, Kelly. On 12.07.2011 14:02, Fock, Frank wrote: </pre> Kelly Dyer 2013-04-30T21:05:59 http://permalink.gmane.org/gmane.network.snmp4j.general/2227 <pre>Frank, I have further ran through the code execution line by line and the identified where the problem occurs - it is in VacmMIB.java class, in the method getGroupName(...) private OctetString getGroupName(OctetString securityName, int securityModel) { OID index = new OID(); index.append(securityModel); index.append(securityName.toSubIndex(false)); MOTableRow row = vacmSecurityToGroupTableModel.getRow(index); if (row != null) { OctetString groupName = (OctetString) row.getValue(idxVacmGroupName); if (logger.isDebugEnabled()) { logger.debug("Found group name '"+groupName+"' for secName '"+ securityName+"' and secModel "+securityModel); } return groupName; } return null; }: For the private community, the call " MOTableRow row = vacmSecurityToGroupTableModel.getRow(index);" returns a null "row", which then propagates the error in a cascade. I tried to trace back this problem through may function calls and it seems that the context is set correctly (I created two contexts - one for public community and one for private community), and when the call is made during the requested SET operation, the context is found correctly to be "private" but the views associated with the context cannot be found, even though they have been created correctly during the initialization process and placed in the respective locations into MIBs. I am going back in circles trying to figure out which of the initialization configurations are incorrect. I already tried to create a single default context set to "", single context set to "public" and also create two separate contexts "public" and "private" and the net outcome is the same. It is my understanding that either of these should work fine if the binding was done correctly. The latest configuration with two explicit contexts is shown below for reference. I did read through all the respective references you pointed me to, and I cannot still move this forward. Yes, I understand I should probably get a paid support for this problem, but I cannot afford to buy a support license for a year for this problem to be solved. If there was an option of pay-per-problem, I would consider it (I am that desperate) but shelling out big money for year's support for a school project that ends this semester is a big of an overkill for me. Hope you understand. ====================================== addCommunities &gt;&gt;&gt;&gt;&gt;&gt; protected void addCommunities(SnmpCommunityMIB communityMIB) { // ==== default configuration ==== Variable[] com2sec1 = new Variable[] { new OctetString("public"), // community name new OctetString("cpublic"), // security name getAgent().getContextEngineID(), // local engine ID new OctetString("public"), // default context name new OctetString(), // transport tag new Integer32(StorageType.nonVolatile), // storage type new Integer32(RowStatus.active) // row status }; MOTableRow row1 = communityMIB.getSnmpCommunityEntry().createRow(new OctetString("public2public").toSubIndex(true), com2sec1); communityMIB.getSnmpCommunityEntry().addRow(row1); // ==== extended configuration ==== Variable[] com2sec2 = new Variable[] { new OctetString("private"), new OctetString("cprivate"), // security name getAgent().getContextEngineID(), // local engine ID new OctetString("private"), // default context name new OctetString(), // transport tag new Integer32(StorageType.nonVolatile), // storage type new Integer32(RowStatus.active) // row status }; MOTableRow row2 = communityMIB.getSnmpCommunityEntry().createRow(new OctetString("private2private").toSubIndex(true), com2sec2); communityMIB.getSnmpCommunityEntry().addRow(row2); } ====================================== addViews &gt;&gt;&gt;&gt;&gt;&gt; protected void addViews(VacmMIB vacm) { vacm.addGroup( SecurityModel.SECURITY_MODEL_ANY, new OctetString("cpublic"), new OctetString("v1v2group_public"), StorageType.nonVolatile ); vacm.addGroup( SecurityModel.SECURITY_MODEL_ANY, new OctetString("cprivate"), new OctetString("v1v2group_private"), StorageType.nonVolatile ); vacm.addAccess( new OctetString("v1v2group_public"), new OctetString("public"), SecurityModel.SECURITY_MODEL_ANY, SecurityLevel.NOAUTH_NOPRIV, MutableVACM.VACM_MATCH_EXACT, new OctetString("fullReadView"), new OctetString("fullWriteView"), new OctetString("fullNotifyView"), StorageType.nonVolatile ); vacm.addAccess( new OctetString("v1v2group_private"), new OctetString("private"), SecurityModel.SECURITY_MODEL_ANY, SecurityLevel.NOAUTH_NOPRIV, MutableVACM.VACM_MATCH_EXACT, new OctetString("fullReadView"), new OctetString("fullWriteView"), new OctetString("fullNotifyView"), StorageType.nonVolatile ); vacm.addViewTreeFamily( new OctetString("fullReadView"), new OID(".1.3"), new OctetString(), VacmMIB.vacmViewIncluded, StorageType.nonVolatile ); vacm.addViewTreeFamily( new OctetString("fullWriteView"), new OID(".1.3"), new OctetString(), VacmMIB.vacmViewIncluded, StorageType.nonVolatile ); vacm.addViewTreeFamily( new OctetString("fullNotifyView"), new OID(".1.3"), new OctetString(), VacmMIB.vacmViewIncluded, StorageType.nonVolatile ); } Marek -----Original Message----- From: Frank Fock [mailto:fock-uhZIdBdo/7ZBDgjK7y7TUQ&lt; at &gt;public.gmane.org] Sent: Tuesday, 02 April, 2013 5:42 PM To: Marek Hajduczenia Cc: snmp4j-uhZIdBdo/7ZAfugRpC6u6w&lt; at &gt;public.gmane.org Subject: Re: [SNMP4J] SET access to created managed objects Marek, You have mapped your views only to the default context, but you have mapped the "private" community to the "private" context. That will not work. Either map your "private" community to the default context ("") or map all the views to the "private" context too. Best regards, Frank Am 02.04.2013 23:39, schrieb Marek Hajduczenia: [org.snmp4j.agent.request.SnmpRequest$SnmpSubRequest[scope=org.snmp4j.agent. cluded=true,upperBound=1.3.6.1.3.22.2.10.1,upperIncluded=true],vb=1.3.6.1.3. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.1.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.1.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.2.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.2.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.3.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.3.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.4.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.4.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.5.0,access=org.snmp4j.agent. org.snmp4j.agent.mo.MOScalar[oid=1.3.6.1.3.22.1.5.0,access=org.snmp4j.agent. statements. 'private'=CoexistenceInfo[securityName=cprivate,contextEngineID=80:00:13:70: org.snmp4j.agent.DefaultMOContextScope[context=private,lowerBound=1.3.6.1.3. [org.snmp4j.agent.request.SnmpRequest$SnmpSubRequest[scope=org.snmp4j.agent. org.snmp4j.MessageDispatcherImpl.dispatchMessage(MessageDispatcherImpl.java: -- --- AGENT++ Maximilian-Kolbe-Str. 10 73257 Koengen, Germany https://agentpp.com Phone: +49 7024 8688230 Fax: +49 7024 8688231 </pre> Marek Hajduczenia 2013-04-29T08:34:42 http://permalink.gmane.org/gmane.network.snmp4j.general/2226 <pre>Hi, I guess you are mixing local and remote engine ID, but I am not sure. Best regards, Frank Am 17.04.2013 13:58, schrieb Vilagut Abad, Roger: </pre> Frank Fock 2013-04-18T07:16:46 http://permalink.gmane.org/gmane.network.snmp4j.general/2225 <pre>Hello, In order to remotely change the authentication password of a user I do the following steps: 1. Get the usmUsrSpinLock.0 and save in sValue 2. I obtain the old key of the user whose password I want to change as follows: byte[] oldKey = snmp.getUSM().getUser(engineId, new OctetString(user)).getUsmUser().getAuthenticationPassphrase(); 3. Then I generate the new key as follows: byte[] newKey = SecurityProtocols.getInstance().passwordToKey(AuthMD5.ID, new OctetString(newPassword), engineId.toByteArray()); 4. Then I generate the key change value as follows: byte[] keyChange = new AuthMD5().changeDelta(oldKey, newKey, random.getBytes()); 5. And finally I do a SET to the usmUserTable: SET(usmUserSpinLock.0=sValue, usmUserAuthKeyChange=keyChange, usmUserPublic=random) When I read the usmUserTable MIB table after the SET I can see the random value in the usmUserPublic column, however when I do a request using the new password the agent responds that the password is not correct. Am I missing something in the password change procedure? I have tried to follow the procedure described in RFC 3414 (KeyChange). Best regards, Roger Vilagut Abad ________________________________ Este correo electr?nico y, en su caso, cualquier fichero anexo al mismo, contiene informaci?n de car?cter confidencial exclusivamente dirigida a su destinatario o destinatarios. Si no es vd. el destinatario indicado, queda notificado que la lectura, utilizaci?n, divulgaci?n y/o copia sin autorizaci?n est? prohibida en virtud de la legislaci?n vigente. En el caso de haber recibido este correo electr?nico por error, se ruega notificar inmediatamente esta circunstancia mediante reenv?o a la direcci?n electr?nica del remitente. Evite imprimir este mensaje si no es estrictamente necesario. This email and any file attached to it (when applicable) contain(s) confidential information that is exclusively addressed to its recipient(s). If you are not the indicated recipient, you are informed that reading, using, disseminating and/or copying it without authorisation is forbidden in accordance with the legislation in effect. If you have received this email by mistake, please immediately notify the sender of the situation by resending it to their email address. Avoid printing this message if it is not absolutely necessary. </pre> Vilagut Abad, Roger 2013-04-17T11:58:14 http://permalink.gmane.org/gmane.network.snmp4j.general/2224 <pre>Hi, You have to specify the message processing model (aka. SNMP version) when sending a PDU. That message processing model will be used - irrespective of the available coexistance information. Best regards, Frank Am 16.04.2013 16:40, schrieb m k: </pre> Frank Fock 2013-04-16T17:47:43 http://permalink.gmane.org/gmane.network.snmp4j.general/2223 <pre>Let's say I have a community user with a name like "public", which is associated with a v3 user security name for compatibility purposes. Does SNMP4j somehow support explicitly sending a trap on behalf of "public", so that trap-receivers with v1/2c authentication can recognize it? Thanks </pre> m k 2013-04-16T14:40:31 http://permalink.gmane.org/gmane.network.snmp4j.general/2222 <pre>Hi Brad, You might want to read the SNMP4J-Agent instrumentation guide with more conceptual background and detailed examples: http://www.snmp4j.org/SNMP4J-Agent-1.4-InstrumentationGuide.pdf The most intuitive approach would be to override the http://www.snmp4j.org/agent/doc/org/snmp4j/agent/mo/DefaultMOMutableRow2PC.html class by creating your own http://www.snmp4j.org/agent/doc/org/snmp4j/agent/mo/DefaultMOMutableRow2PCFactory.html If you can easily integrate an generic solution, then using the http://www.snmp4j.org/agent/doc/org/snmp4j/agent/MOServerLookupListener.html could also be an option. With that listener you can intercept incoming SET (or GET*) requests and update your ManagedObjects before they have to process the request. The instrumentation guide has examples for both. Best regards, Frank Am 04.04.2013 18:32, schrieb Charan, Brad: </pre> Frank Fock 2013-04-04T21:44:53 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.network.snmp4j.general