snmptrapd can't log V3 traps

[Ron R. <ron...@ci...>]

  Thanks to Joan's help, I was able to configure a V3 trap destination
on my v5.4.1 agent.

  v5.5 snmptrapd successfully logs V2C traps from this agent, but I
can't get it to log V3 traps from the same agent.

  To simplify the issue, at present I am not trying to use V3
authentication or encryption (noAuthNoPriv).

  Here is most of my snmpd.conf:

[start snmpd.conf]

trapcommunity public
createUser _internal MD5 <neveryoumind>
rouser _internal
iquerySecName _internal
notificationEvent linkUpTrap linkUp ifIndex ifAdminStatus ifOperStatus
notificationEvent linkDownTrap linkDown ifIndex ifAdminStatus
ifOperStatus
monitor -r 5 -e linkUpTrap "Generate linkUp" ifOperStatus != 2
monitor -r 5 -e linkDownTrap "Generate linkDown" ifOperStatus == 2
authtrapenable 1
rocommunity "public"
rwcommunity "NewRWCommunity"

createUser trapuser1
trapsess -l noauth -u trapuser1 192.168.1.129

[end snmpd.conf]

  And here is my corresponding snmptrapd.conf on host 192.168.1.129:

[start snmptrapd.conf]

format1 "%02.2H:%02.2J:%02.2K TRAP%w.%q from %b Enterprise %n Security
%P Varbinds %v\n"
format2 "%02.2H:%02.2J:%02.2K TRAP%w.%q from %b Enterprise %n Security
%P Varbinds %v\n"

donotfork  yes

logOption f C:/Tools/net-snmp/usr/log/snmptrapd.log

disableAuthorization no

createUser trapuser1
authUser log trapuser1 noauth

[end snmptrapd.conf]

  This results in... nothing showing up in the log file except for the
startup banner.

  I have confirmed that the agent sends something to snmptrapd, because
when I comment out the createUser & authUser lines in snmptrapd.conf,
delete the persistent version of snmptrapd.conf, and restart snmptrapd,
every time the agent sends a trap this shows up in the log:

No access configuration - dropping trap.

  Can anybody detect what I'm doing wrong?  Version problem between 5.5
listener and 5.4.1 agent?  OpenSSL issue even with no authorization?

  Thanks,

  Ron



The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting all copies. Thank you.