#799 proxy mishandles SNMPv3 REPORT PDUs

proxy-override-etc
open
nobody
agent (1103)
5
2013-01-25
2003-08-01
Dave Shield
No

If a proxy delegation is set up using SNMPv3,
and the configured user is not recognised by the remote
agent,
then attempts to query this proxied tree will trigger an
authorizationFailed Report PDU, rather than the
expected Response PDU.

Because the response handler doesn't check the PDU type,
it will treat this as a response, and expect it to
contain the
same (or equivalent) varbinds as the original request.

I'm not quite sure what the correct response for a Get
(or Set) should be, but a GetNext should presumably skip
over the whole of this block, and move on to the next
registered subtree.

I'm just logging this bug here, so that it doesn't get
forgotten.

Dave

Discussion