[Nut-upsdev] SNMPv3

[Tim Rice]

Hi Arnaud,

On Fri, 1 Feb 2013, Arnaud Quette wrote:

> Hi Tim
> 
> 2013/1/29 Tim Rice <tim at multitalents.net>
> 
> >
> > nut-2.6.5
> > Scientific Linux 6.3
> > APC AP9630 management card
> >
> > My basic question is, does nut's SNMPv3 implementation work?
> >
> > I have this in /etc/ups/ups.conf
> > ......
> > [tfapc01]
> >         driver = snmp-ups
> >         port = tfapc01.testfest.ixorg.org
> >         mibs = apcc
> >
> 
> drop the above field: mibs is autodetected, and is blocking here

Thanks for trying but that just makes it try more things before failing.
......
[root at tfupsmon tmp]# /sbin/snmp-ups -DDD -a tfapc01
Network UPS Tools - Generic SNMP UPS driver 0.68 (2.6.5)
   0.000000	debug level is '3'
   0.000542	SNMP UPS driver : entering upsdrv_initups()
   0.000562	SNMP UPS driver : entering nut_snmp_init(snmp-ups)
   0.048288	SNMP UPS driver : entering load_mib2nut(auto)
   0.048301	trying the new match_sysoid() method
   0.048306	Entering nut_snmp_get_str()
   0.048313	nut_snmp_get(.1.3.6.1.2.1.1.2.0)
   0.052745	Can't get sysOID value
   0.052759	load_mib2nut: trying classic method with 'apcc' mib
   0.052767	Entering nut_snmp_get_str()
   0.052774	nut_snmp_get(.1.3.6.1.4.1.318.1.1.1.1.1.1.0)
   0.052792	load_mib2nut: trying classic method with 'mge' mib
   0.052797	Entering nut_snmp_get_str()
   0.052800	nut_snmp_get(.1.3.6.1.4.1.705.1.1.1.0)
   0.052811	load_mib2nut: trying classic method with 'netvision' mib
   0.052816	Entering nut_snmp_get_str()
   0.052819	nut_snmp_get(.1.3.6.1.4.1.4555.1.1.1.1.1.1.0)
   0.052828	load_mib2nut: trying classic method with 'pw' mib
   0.052832	Entering nut_snmp_get_str()
   0.052836	nut_snmp_get(1.3.6.1.4.1.534.1.1.2.0)
   0.052846	load_mib2nut: trying classic method with 'aphel_genesisII' mib
   0.052851	Entering nut_snmp_get_str()
   0.052854	nut_snmp_get(.1.3.6.1.4.1.17373.3.1.1.0)
   0.052863	load_mib2nut: trying classic method with 'aphel_revelation' mib
   0.052867	Entering nut_snmp_get_str()
   0.052871	nut_snmp_get(.1.3.6.1.4.1.534.6.6.6.1.1.12.0)
   0.052879	load_mib2nut: trying classic method with 'eaton_epdu' mib
   0.052884	Entering nut_snmp_get_str()
   0.052887	nut_snmp_get(.1.3.6.1.4.1.534.6.6.7.1.2.1.2.0)
   0.052896	load_mib2nut: trying classic method with 'pulizzi_switched1' mib
   0.052900	Entering nut_snmp_get_str()
   0.052903	nut_snmp_get(.1.3.6.1.4.1.20677.1)
   0.052912	load_mib2nut: trying classic method with 'pulizzi_switched2' mib
   0.052916	Entering nut_snmp_get_str()
   0.052920	nut_snmp_get(.1.3.6.1.4.1.20677.1)
   0.052929	load_mib2nut: trying classic method with 'raritan' mib
   0.052934	Entering nut_snmp_get_str()
   0.052937	nut_snmp_get(.1.3.6.1.4.1.13742.1.1.12.0)
   0.052947	load_mib2nut: trying classic method with 'baytech' mib
   0.052952	Entering nut_snmp_get_str()
   0.052955	nut_snmp_get(.1.3.6.1.4.1.4779.1.3.5.2.1.24.1)
   0.052965	load_mib2nut: trying classic method with 'cpqpower' mib
   0.052970	Entering nut_snmp_get_str()
   0.052973	nut_snmp_get(.1.3.6.1.4.1.232.165.3.1.1.0)
   0.052982	load_mib2nut: trying classic method with 'bestpower' mib
   0.052987	Entering nut_snmp_get_str()
   0.052990	nut_snmp_get(.1.3.6.1.4.1.2947.1.1.2.0)
   0.052998	load_mib2nut: trying classic method with 'cyberpower' mib
   0.053003	Entering nut_snmp_get_str()
   0.053006	nut_snmp_get(.1.3.6.1.4.1.3808.1.1.1.1.1.1.0)
   0.053016	load_mib2nut: trying classic method with 'ietf' mib
   0.053021	Entering nut_snmp_get_str()
   0.053024	nut_snmp_get(1.3.6.1.2.1.33.1.1.1.0)
   0.053034	No supported device detected
[root at tfupsmon tmp]# 
......
> 
>         snmp_version = v3
> >
>         secLevel = authPriv
> >         secName = tfsnmpprof1
> >         authPassword = ralow6moHet7zoboP8
> >         privPassword = tuseL8Pakaz9degim7
> >
> 
> when sending to a public mailing list, prefer to trim passwds ;)

Yes, if they were not throw away passwords in a test environment I would
have snipped them out.
 
> >         authProtocol=MD5
> >         privProtocol=AES
> >         desc = "APC SU700 SNMP v3 device, with the highest security level"
> > ......
[snip]

In all my testing I discovered the APC AP9630 is kind of flakey when
it comes to SNMP v3.
I have 
   snmpget -Cf -v 3 -u tfsnmpprof1 -l authPriv \
   -a MD5 -A ralow6moHet7zoboP8 \
   -x AES -X tuseL8Pakaz9degim7 \
   tfapc01 .1.3.6.1.4.1.318.1.1.1.1.1.1.0
work one day and the next day fail.

So I will revisit SNMP v3 when I get my hands on a non APC ups that
supports SNMP v3.

Thanks for all your help.

A note for the archives: To get snmpget working I had to rename the
v3 profile I had set up on the APC and create a new one with all the same
info. Then it worked.
When it stopped working (when I came back to it days later) , I renamed
that one and set up a third one again with all the same info. Once again
it started working.  Strange.

-- 
Tim Rice				Multitalents	(707) 456-1146
tim at multitalents.net					(707) 887-1469