<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:rgb(0,0,0); font-family:Calibri,Helvetica,sans-serif,"EmojiFont","Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p>Just a hunch about your snmpwalk, what happens if you format like this?<br>
<span>snmpwalk -l authpriv -v 3 -u user -a MD5 -x DES -A authpassphrase -X privpassphrase {host address}</span></p>
<p><span><br>
</span></p>
<p><span>so</span></p>
<p><span></span><span>snmpwalk -l authpriv -v 3 -u nut -a MD5 -x DES -A <span>NutScan@Password43LongerWord</span> -X
<span>NutScan@Password43LongerWord</span> apcups</span></p>
<p><span><br>
</span></p>
<br>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:rgb(0,0,0); font-family:Calibri,Helvetica,sans-serif,"EmojiFont","Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p></p>
<p class="x_MsoNormal" style="line-height:120%; text-autospace:none"><span style="color:black; letter-spacing:-0.05pt; font-family:"Calibri",sans-serif,serif,"EmojiFont"">Thank you,</span></p>
<p class="x_MsoNormal" style="line-height:120%; text-autospace:none"><b><span style="color:black; letter-spacing:-0.05pt; font-family:"Calibri",sans-serif,serif,"EmojiFont"">David Zomaya</span></b><span style="color:black; letter-spacing:-0.05pt; font-family:"Calibri",sans-serif,serif,"EmojiFont""></span></p>
Tripp Lite
<p></p>
</div>
</div>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Nut-upsuser <nut-upsuser-bounces+david_zomaya=tripplite.com@alioth-lists.debian.net> on behalf of Lee Damon <nomad@ee.washington.edu><br>
<b>Sent:</b> Tuesday, April 28, 2020 3:28 PM<br>
<b>To:</b> nut-upsuser Mailing List<br>
<b>Subject:</b> [EXTERNAL] [Nut-upsuser] nut-scanner, SNMPv3, APC UPS not chatting</font>
<div> </div>
</div>
<div><font size="2" face="verdana,arial,sans-serif" color="#C11B17"><span>This is an
<b>EXTERNAL</b> email. Please take a moment and think before clicking any links or opening any attachments from this email. If suspicious, please forward to ishelpdesk@tripplite.com for review.</span></font>
<hr>
<div dir="ltr">I'm trying to get SNMPv3 management working for an APC AP9617 card. It is newly refurbed, running sumx v3.7.2 and aos v3.7.3.
<div><br>
</div>
<div>In the SNMPv3 user profiles section I have (I don't care about the password leaking, it's temporary):</div>
<div><br>
</div>
<div> User Name: nut</div>
<div> Authentication Passphrase: NutScan@Password43LongerWord</div>
<div> Privacy Passphrase: NutScan@Password43LongerWord</div>
<div> Authentication protocol: MD5 (only option other than none)</div>
<div> Privacy Protocol: DES (only option other than none)</div>
<div><br>
</div>
<div>In access control I've enabled user nut.</div>
<div><br>
</div>
<div>However, when I try to use nut-scanner on it:</div>
<div>$ nut-scanner -S -s apcups --secLevel authPriv --secName nut --authProtocol MD5 --authPassword NutScan@Password43LongerWord --privProtocol DES --privPassword NutScan@Password43LongerWord<br>
Scanning SNMP bus.<br>
Error: unknown authtypeError generating Ku from authentication pass phrase<br>
</div>
<div><br>
</div>
<div>snmpwalk gives a different error:</div>
<div>$ snmpwalk -v 3 -u nut apcups -x DES -X NutScan@Password43LongerWord -a MD5 -A NutScan@Password43LongerWord<br>
snmpwalk: Decryption error<br>
</div>
<div><br>
</div>
<div>I've tried it with all lowercase, mixed case, mixed case + numbers, and the one you see here. I've also used an 18 character password. All get exactly the same result.</div>
<div><br>
</div>
<div>I've tried setting the privacy protocol to none and leaving off the -x & -X flags, still get the same error messages.</div>
<div><br>
</div>
<div>I see a note in APC's documentation that it may take some time for the card to be ready to talk SNMPv3. I've waited as long as 15 minutes with no change in behavior.</div>
<div><br>
</div>
<div>snmpwalk and nut-scanner are both happy SNMPv1 -c public.</div>
<div><br>
</div>
<div>Can anyone tell me, please, what trivially obvious thing am I missing?</div>
<div><br>
</div>
<div>thanks,</div>
<div>nomad</div>
</div>
</div>
</div>
</div>
<hr>
<font color="grey" face="calibri">This message is for the addressee's use only. It may contain confidential information. If you receive this message in error, please delete it and notify the sender. Tripp Lite disclaims all warranties and liabilities, and assumes
no responsibility for viruses which may infect an email sent to you from Tripp Lite and which damage your electronic systems or information. It is your responsibility to maintain virus detection systems to prevent damage to your electronic systems and information.
</font>
</body>
</html>