RE: snmpwalk: Unsupported security level

[Syed A. <sy...@ne...>]

I had set the LD_LIBRARY_PATH and the LD_RUN_PATH to include the SSL
libs before I ran configure.
However, after reading your email I tried the following option with
configure: --with-openssl=3D/usr/local/ssl
Now I get a configure error saying:=20

checking for authentication support... Internal MD5 Support
configure: error: Asked to use OpenSSL but I couldn't find it.

I have installed OpenSSL 0.9.6g and when I do an ls on /usr/local/ssl I
see:

bash-2.03# ls /usr/local/ssl
bin          certs        doc          include      lib          man
misc         openssl.cnf  private

bash-2.03# ls /usr/local/ssl/lib
libcrypto.a         libcrypto.so.0      libssl.a            libssl.so.0
libcrypto.so        libcrypto.so.0.9.6  libssl.so
libssl.so.0.9.6
bash-2.03#=20

-----Original Message-----
From: Wes Hardaker [mailto:har...@us...]=20
Sent: Monday, February 24, 2003 11:13 AM
To: Syed Ali
Cc: net...@li...
Subject: Re: snmpwalk: Unsupported security level


>>>>> On Sat, 22 Feb 2003 13:50:30 -0500, "Syed Ali" <sy...@ne...>
said:

Syed> I see that the agent replaces the createUser string in
Syed> /var/net-snmp/snmpd.conf with an encrypted string.

(Just a nit: it's not an encrypted string...  It's a localized hash of
the pass phrase you used.  It's a "key" actually.)

Syed> I get the below error message:
Syed> snmpwalk: Unsupported security level

When you compiled the sources, it couldn't find the OpenSSL package
and thus you don't have DES support available and thus -l authPriv
won't work.  -l authNoPriv will, but you won't get encryption (but you
will get secure authentication).

Syed> Here are some things I have tried:
Syed> snmpwalk -v 3 localhost -u root -x DES -X mypassword -a SHA -A
Syed> mypassword-l noAuthNoPriv
Syed> Error in packet.
Syed> Reason: authorizationError (access denied to that object)

Minimum accept security level: authNoPriv, and yours was "less"

Syed> snmpwalk -v 3 localhost -u root -x DES -X mypassword -a SHA -A
Syed> mypassword -l authNoPriv
Syed> snmpwalk: Authentication failure (incorrect password, community or
key)

That, I think, should have worked assuming your passwords were the same.
--=20
Wes Hardaker
Network Associates Laboratories