This queue is for tickets about the Net-SNMP CPAN distribution.

Report information
The Basics
Id:
125332
Status:
open
Priority:
Low/Low
Queue:
Net-SNMP
People
Owner:
dtown [...] cpan.org
Requestors:
anexiole [...] gmail.com
Cc:
AdminCc:
BugTracker
Severity:
Normal
Broken in:
(no value)
Fixed in:
(no value)

History
Thu May 17 00:38:18 2018 anexiole [...] gmail.com - Ticket created
MIME-Version: 1.0
X-Spam-Status: No, score=-1.333 tagged_above=-99.9 required=10 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=no
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
Content-Type: multipart/alternative; boundary="000000000000ba8d38056c5f66c0"
Message-ID: <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com>
X-Received: by 2002:a50:88c3:: with SMTP id d61-v6mr5036457edd.122.1526531884746; Wed, 16 May 2018 21:38:04 -0700 (PDT)
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Spam-Score: -1.333
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id E20AC240312 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:38:16 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6p2RRFucFOY6 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:38:15 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id D03AC2402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 00:38:14 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 1C63311EC1B for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:38:13 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id 6CF1D11EDE0 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:38:10 -0700 (PDT)
Received: from mail-wm0-f41.google.com (mail-wm0-f41.google.com [74.125.82.41]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id 9A6BF11EC1B for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:38:06 -0700 (PDT)
Received: by mail-wm0-f41.google.com with SMTP id a137-v6so3815624wme.1 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:38:06 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 21:37:24 -0700 (PDT)
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
X-Google-SMTP-Source: AB8JxZqHLJyfmsVIyZikJlI1AyK6w2Lc5ZA58Ld4+v9ra6xa0MWKbjEII/HkAYJCxJp5vTJh1+2hhkOJmwUMCsSzS9A=
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
X-RT-Mail-Extension: net-snmp
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=+rV2KHxd/DlCyd29tTHVrl4SCLA42aladsEV1tSb3MA=; b=Hwpw/Rp/xF8rc9Mwb4NrjcLtGDZfrIvxOv6qnW9IqYfLBshj0nWGN0Bpd6olI6o71r HjRK3IZ46uumG44khp/IEYdzU1A/1G2i8sDQCguGbm7o4uMXg3NgeD7SOskby7UlJQzt yr3yrX4UMTD+EsZz6GETmnac88iJFR1yxlgsrQKij5OrbnoitPV5eGxhvrng+Tpsc2aQ 6eeFlyz3vUNkRPWmCNq0kPe45OkrLMShp6VjBxdg4oPO6qayFO+f50CbuI9qSplkn3aI G392/V9at5H57t3KkDXG26YTjDWauBXeyGQKYwmzGVAhe4I29IszChzNtFXXyHFEkkll jC9Q==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=+rV2KHxd/DlCyd29tTHVrl4SCLA42aladsEV1tSb3MA=; b=jYhws+dFRB1jExbCY6f2UZi0V3QHnBVn7CMMWJY6HbI99Wd2iC6MBUTo9kDbF6UR7H wIGW7GH2qr+Rp1Ik2hX6WI0wa4px5mUvg6/PxpvRJWBKlFL/PsWXLIdiiFJMB9nT/j/E r4ikmSFgerA+mT86mAGwc3JY+gafX2ryoqSthVlL0IDWfXymGtY34SZA3vUdUx0hvo/v WL1CvEJKn1bCWhSruNTU1XSo2oQPJvOMPabUhknTFzRskMkTeMxFAM+fnT8cNrtw9TnF kYM/NMoOHp2wA/Txapdu3a9xyPCx/ZMy6Jmc95vMUBJ0okxsuKCE8LbBvJNmiHbCk/t2 BD3A==
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_70_90 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTP_SIZE_3000_LESS 0, BODYTEXTP_SIZE_400_LESS 0, BODY_SIZE_1300_1399 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, DKIM_SIGNATURE 0, NO_CTA_URI_FOUND 0, NO_URI_FOUND 0, NO_URI_HTTPS 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HTML_TAG_DIV 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
Date: Thu, 17 May 2018 14:37:24 +1000
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.17.42716
To: bug-Net-SNMP@rt.cpan.org
From: Gordon Yeong <anexiole@gmail.com>
X-GM-Message-State: ALKqPwfjQCHN7R1jmV3JgjPDXFyvs1uZyv2e1dq6lJolO9Vudd/QIrQ6 rIuPrqWXkFmwS69nKLw3xnufhzQQRPLqIL0lfP4nbNO0
X-RT-Interface: Email
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 218

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 860

Noticed that the security level is always set to noauthnopriv.

Thus, referring to the constructor of Net::SNMP::Security::USM,
why would privProtocol be checked for (ie. " $this->_priv_protocol(delete $argv{$_});" )?


Thu May 17 00:44:01 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-3.333 tagged_above=-99.9 required=10 tests=[AWL=2.000, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:88c3:: with SMTP id d61-v6mr5055548edd.122.1526532232155; Wed, 16 May 2018 21:43:52 -0700 (PDT)
Message-ID: <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com>
Content-Type: multipart/alternative; boundary="0000000000006f972f056c5f7bcb"
X-Spam-Score: -3.333
X-Google-SMTP-Source: AB8JxZonZ1RC5deW/cp1lxoT+BFlWnUwYjeZvQlHMebg1HwnBZEuCzsp6WprApRjg4y7NCP+EbI5MAT1jXv7NARj348=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id E04CE240312 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:44:00 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qkZmUdywdP7Y for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:43:59 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id DF9BA2402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 00:43:58 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id F006111EC2A for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:43:57 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id C840811EC7F for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:43:55 -0700 (PDT)
Received: from mail-wm0-f44.google.com (mail-wm0-f44.google.com [74.125.82.44]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id CF41011EC2A for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:43:53 -0700 (PDT)
Received: by mail-wm0-f44.google.com with SMTP id a67-v6so5945701wmf.3 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:43:53 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 21:43:11 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] AutoReply: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=F35OEh4m4/8yld3QH++PmM9T779drrU/s2i3liTMEjs=; b=iHcu6gvO5mDISZM71ZuDLljF3pDar2zuacpkx2UvUiHsnN95UxOKAYwm7u0jNmey4Q S7WpraCDrawk1FmysAdtb7gB7SBX0g1Ge3zMW72Rni6Rpn/BXIXMuXACuSRKJ6wQS+T9 LHvTKURMVg1512SoGiYRBCUPMskMywwLoKkJtWBlwTnrOrCzUhlX4h6VfSykr+hi1vbt ukm87Zap7g82o5ECz6d2NgxfNJmYonQ6N9iVAo2ova58pCdGSY+VKQ5uJ31/E0/sk8GZ F4uZKehoywV8etdHEMHVPaPUzXbg6DUdnP4FiI5w0fyl8VsdqSjS82Glql5AGaJuo+zz TUYw==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=F35OEh4m4/8yld3QH++PmM9T779drrU/s2i3liTMEjs=; b=qJRPTkvzM4WpPcRMYKYmi8YhmYA+N/63EK6q2o9fc3J5BArVQITA4dDbu133tDm6dV ScO0znYjw9ioiefH8AxQo+InGUpoNC8GCJXQZTzREuvUEYxhJzuA2JnrfWXifwaOI9r3 0qwzV00E8ofycEVm9QT4FaNxVNOw/5FFXK9Y8rLLWp1SV2Y64GwKL476Nmn2qgFT5Xq/ o9uksBa9nHadVZnW5CrF/K/e7asn6LIL15iZ5gq4mbPvL/hEsnKK3X/izgyGvDklFaFc 0zXVfFx5L4cDRuJ6rgBdO1qedLh2rkiAmWFiIePWcXb8wByQTyJqAfkN6BImLT017Hi9 en8A==
Date: Thu, 17 May 2018 14:43:11 +1000
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTH_SIZE_3000_MORE 0, BODYTEXTP_SIZE_3000_LESS 0, BOUNCE_AUTORESP 0, BOUNCE_GENERIC 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_AUTORESP_SUBJ 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.17.43316
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPwf8M5zxtGUi8VY3I4XXqiSqrEUWMm3uDTx2Muk5tNxFFYKmNdvI oL/HT4NqCbQvSMImdnx/vwcJniKwI+wUTQeDHCUZZEdz
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-26271-1526532241-951.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 1845

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 4110

in line 133 , they set the priv protocol and next, in line 148, they evaluate the priv protocol and of course it fails. Wtf?


In Net::SNMP::Security::USM :

 124       '_time_epoc'          => time(),                # snmpEngineBoots epoc
 125       '_user_name'          => q{},                   # securityName
 126       '_auth_data'          => undef,                 # Authentication data
 127       '_auth_key'           => undef,                 # authKey
 128       '_auth_password'      => undef,                 # Authentication password
 129       '_auth_protocol'      => AUTH_PROTOCOL_HMACMD5, # authProtocol
 130       '_priv_data'          => undef,                 # Privacy data
 131       '_priv_key'           => undef,                 # privKey
 132       '_priv_password'      => undef,                 # Privacy password
 133       '_priv_protocol'      => PRIV_PROTOCOL_DES,     # privProtocol
 134       '_security_level'     => SECURITY_LEVEL_NOAUTHNOPRIV
 135    }, $class;
 136
 137    # We first need to find out if we are an authoritative SNMP
 138    # engine and set the authProtocol and privProtocol if they
 139    # have been provided.
 140
 141    foreach (keys %argv) {
 142
 143       if (/^-?authoritative$/i) {
 144          $this->{_authoritative} = (delete $argv{$_}) ? TRUE : FALSE;
 145       } elsif (/^-?authprotocol$/i) {
 146          $this->_auth_protocol(delete $argv{$_});
 147       } elsif (/^-?privprotocol$/i) {
 148          $this->_priv_protocol(delete $argv{$_});
 149       }
 150
 151       if (defined $this->{_error}) {
 152          return wantarray ? (undef, $this->{_error}) : undef;
 153       }
 154    }
 155
 156    # Now validate the rest of the passed arguments
 157
 158    for (keys %argv) {
 159
 160       if (/^-?version$/i) {
 161          $this->_version($argv{$_});

Thu May 17 00:49:30 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-4.333 tagged_above=-99.9 required=10 tests=[AWL=1.000, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org> <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:ca85:: with SMTP id x5-v6mr5017622edh.40.1526532542263; Wed, 16 May 2018 21:49:02 -0700 (PDT)
Message-ID: <CAEoBQ97hn+e9v-jkRLkZDmObWYiavoB1_x_wKCzj9P6PpcfQJg@mail.gmail.com>
Content-Type: multipart/alternative; boundary="000000000000eb7692056c5f8de7"
X-Spam-Score: -4.333
X-Google-SMTP-Source: AB8JxZo4+zCdhC4viM9pAvqmzUuLuhy/UtfNE5atglWoFXz9jj2VCu2LLh1nniJUv0mUHjvQwnAK5eV4SA07nRKO8MU=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id F2002240312 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:49:29 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OqsFO9+5kzJ2 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:49:28 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id 35BF72402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 00:49:28 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 31BFE11EDE0 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:49:23 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id E7E4466FFA for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:49:10 -0700 (PDT)
Received: from mail-wm0-f42.google.com (mail-wm0-f42.google.com [74.125.82.42]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id C737911EC1B for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:49:03 -0700 (PDT)
Received: by mail-wm0-f42.google.com with SMTP id o78-v6so6521890wmg.0 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:49:03 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 21:48:21 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] AutoReply: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=0bxsxPNHEPU4kciVw7jZxNwYTBjNnWjvMkZjOzwjPl0=; b=Y+3vu9Pr+JUpLNVkP6f7fHGPpUbwQMeC2iTuuhm1UCicJEmPXoj5fa6XNlcndLaQVU P4zjmB7MSINhpZiwSYh06QlSRY+1ZAsMhzFBGLGoPGFYjOKtvWrH7B5y/XxH6TqweihI 5nNYxL0si5qybrDcpZFd62Pfvif16Xh10JEm7+kANb+cNRsozyXw+OBXZ0trNMnAUuPW owskDfNuuE9HC+UOiIEyvkBaR7gVqxSZCafm1g2A/8nuqOLJnLK2iSpZkhXhnWbYuNqQ OlZtbPxnGpjkcrcVqZOOUKPkFUZddGUNjRW1ZACRYuyY/BZEALaHFZKaxkXdugg5/fwV 3IeA==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=0bxsxPNHEPU4kciVw7jZxNwYTBjNnWjvMkZjOzwjPl0=; b=XMg5R2AgsLv09+ijvLpYwP5hO+mRwBKU6l3DQULycI0RrdSe6r81lIzc406ahzlHpO lF41Mru28bFPcS3V9R0NwmiyN2Lj3bEhRhPtJIQuFul5U98e90kH0Cjk7irIZ+t+A05M inTfccxK1JyYRh17z3sxCfxK8S4OA0hbOTiNniwfplu6Ieh0aLWbva9TP0fj7ivZ+VEJ +43B8oi/sJWmNLrp1S4c/bnagJ+Ii2LvvG5YU84t/LGgFPNfZzV9eoinpRcMCUlRJ5qY qbjepKGAJdWNg8buZCkobdc10sivm/ILpH45X5MbTeaWcTVloR/y1SLjVx5bvHLacyB6 KQog==
Date: Thu, 17 May 2018 14:48:21 +1000
X-PMX-Spam: Gauge=IIIIIIIII, Probability=9%, Report=' HTML_70_90 0.1, HTML_FONT_INVISIBLE 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTH_SIZE_3000_MORE 0, BODYTEXTP_SIZE_3000_LESS 0, BOUNCE_AUTORESP 0, BOUNCE_GENERIC 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_AUTORESP_SUBJ 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HTML_TAG_DIV 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.17.44216
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPwcX2fMGuC0hzITU6cDE+73HbiLQiKI95lQrjnb9WdGFD2dFHehp BXvvQhb++De2pyShgIfT4YJ4sJVE/lQ+e5P3F1Hz0+DQ
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-9711-1526532570-1811.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 763

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 5737

sorry ignore prev reply.

in line 133 , in line 148, they evaluate the priv protocol without any condition and of course it fails (when security level ais either noAuthnoPriv or authNoPriv).

In Net::SNMP::Security::USM : 141 foreach (keys %argv) { 142 143 if (/^-?authoritative$/i) { 144 $this->{_authoritative} = (delete $argv{$_}) ? TRUE : FALSE; 145 } elsif (/^-?authprotocol$/i) { 146 $this->_auth_protocol(delete $argv{$_}); 147 } elsif (/^-?privprotocol$/i) { 148 $this->_priv_protocol(delete $argv{$_}); 149 }

There should be a filter to only invoke _priv_protocol() ONLY IF $argv{ $key } was defined

Should look like this:

147 } elsif (/^-?privprotocol$/i) { 148 if ( defined($argv{$$})) 149 { 150 $this->_priv_protocol(delete $argv{$_}); 151 } 152 }


Thu May 17 00:51:12 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-4.666 tagged_above=-99.9 required=10 tests=[AWL=0.667, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <CAEoBQ97hn+e9v-jkRLkZDmObWYiavoB1_x_wKCzj9P6PpcfQJg@mail.gmail.com>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org> <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com> <CAEoBQ97hn+e9v-jkRLkZDmObWYiavoB1_x_wKCzj9P6PpcfQJg@mail.gmail.com>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:b384:: with SMTP id s4-v6mr3566925edd.28.1526532663712; Wed, 16 May 2018 21:51:03 -0700 (PDT)
Message-ID: <CAEoBQ95bX4TC+6_vcKju+7WS+KmCzcRKMLU0RGxMQOBV6ZUVFw@mail.gmail.com>
Content-Type: multipart/alternative; boundary="000000000000289edd056c5f9581"
X-Spam-Score: -4.666
X-Google-SMTP-Source: AB8JxZo+2WUqYD209w4Iy1LqStlSr1UxlO4EmeIdchf25pyULCxC+PfOxlFcrDxM9rHUPQKJiH4XpSykZO7J1yu9fZg=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id AD008240312 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:51:11 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OHTWlT6fvEtN for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:51:10 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id D44B62402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 00:51:09 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 1FC9311D890 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:51:09 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id 9881411D9AE for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:51:07 -0700 (PDT)
Received: from mail-wm0-f52.google.com (mail-wm0-f52.google.com [74.125.82.52]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id 4241A11D890 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:51:05 -0700 (PDT)
Received: by mail-wm0-f52.google.com with SMTP id o78-v6so6527150wmg.0 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:51:05 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 21:50:23 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] AutoReply: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=/LwN0f//lqarm6hScOsAcXgg+WKw2u/iLi462/gAud0=; b=nHq5aMop3I1S8JwhR2fz8GiNX6sLAQRyVJZIJOK3QbwcysIm0VMp/sNj+KBN9kB4J4 PPhZ2owdu9xCv49U7dOFMTafjAqtsB3ZVgMHNMxxBOUJwbevP240cSTBqrBasJ08N1wM TVHrt6Mcn0vVqNztwR8MDc6sksJ/nH2lLnnd2ytNqMAZo08auZ9O0+MqnivZ7dO1icuY BRfHOT071hmmLYEiagem2ozdz0cY+cb4AtVdK+d7Dl+4Blb5URFgr/I8hUy/5d6piSfw bIHjN6BYGNQXG50c6OFkbeHaQ55ooCw+KiOqLVE6SGn1jyj3zeYtt/A8QHF5UD5p5Vdx TM6A==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=/LwN0f//lqarm6hScOsAcXgg+WKw2u/iLi462/gAud0=; b=s36EuHixFoGSkVKkDHeeBuR0mZLpGHDF+Tn2QNP7IFpGYjxmSpsJ55Nh5OrLhJPixU ArDIiy/HqzzDDyVSCjRRliUMMYfykeL3y4sqY2J8D/Q7TUEk/1nfB5XTnzcXLFqtaIz+ ls5Cc1tbB5xOZYR8ypMPyqatujLia5/GxD1vkRf131eP0tyIvv1QszW1/L2buqJXli+G ZdG/cqtVCEGkH15E363tFZBvFEoQf4Y5QrXsCm7g1JZODsKkA/92XRvuTJauA7wjYQir SQFaDCA9uBr0RKWVn2/7kL73L8u5SoaoVhKbG/mqDxLA5UBm8x4wYnLBpfFxUzsqzNdM jyJA==
Date: Thu, 17 May 2018 14:50:23 +1000
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_50_70 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_2000_2999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BOUNCE_AUTORESP 0, BOUNCE_GENERIC 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_AUTORESP_SUBJ 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.4.8.232716
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPwdtUJDsChT09YA/XqaHY5x05qT9kvZBsmQ8D6A3dAtWbwjzXy7Q qgRp0jblja6kAwCAhhcmvdAF4Lby4yqcexIvDi7OGkQj
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-9711-1526532672-1685.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 498

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 1323

actually, the filter to make sure the $argv{$key} should apply to all..
 Should look like this:

 143       if ( defined($argv{$$}))
 144       {
 145         if (/^-?authoritative$/i) {
 146            $this->{_authoritative} = (delete $argv{$_}) ? TRUE : FALSE;
 147         } elsif (/^-?authprotocol$/i) {
 148            $this->_auth_protocol(delete $argv{$_});
 149         } elsif (/^-?privprotocol$/i) {
 150              $this->_priv_protocol(delete $argv{$_});
 151         }
 152       }

Thu May 17 00:52:13 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-4.833 tagged_above=-99.9 required=10 tests=[AWL=0.500, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <CAEoBQ95bX4TC+6_vcKju+7WS+KmCzcRKMLU0RGxMQOBV6ZUVFw@mail.gmail.com>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org> <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com> <CAEoBQ97hn+e9v-jkRLkZDmObWYiavoB1_x_wKCzj9P6PpcfQJg@mail.gmail.com> <CAEoBQ95bX4TC+6_vcKju+7WS+KmCzcRKMLU0RGxMQOBV6ZUVFw@mail.gmail.com>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:86dc:: with SMTP id 28-v6mr4974754edu.177.1526532724912; Wed, 16 May 2018 21:52:04 -0700 (PDT)
Message-ID: <CAEoBQ97F9z7b4C1yxTXqDsP5woe9hpi=7qEW0r0K9pYwxL1S-Q@mail.gmail.com>
Content-Type: multipart/alternative; boundary="000000000000ce744b056c5f982a"
X-Spam-Score: -4.833
X-Google-SMTP-Source: AB8JxZpjVBy2MHY9AmpNEMd0XNVc2ytkw++o+1Yc9I6K+6d+wSI7rPsCQK/RjPZKxA82Pe/4Ypn1HcHBHrOYCyVLB8o=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id C78EE2402EF for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:52:12 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b-JsV9ODX+jT for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 00:52:11 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id 128062402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 00:52:11 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 5B57511DBDD for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:52:10 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id A6FB311EC82 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:52:08 -0700 (PDT)
Received: from mail-wm0-f54.google.com (mail-wm0-f54.google.com [74.125.82.54]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id 6108511DBDD for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:52:06 -0700 (PDT)
Received: by mail-wm0-f54.google.com with SMTP id w194-v6so5983489wmf.2 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 21:52:06 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 21:51:24 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] AutoReply: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=LL9cJEpoW7829oy5y2hqsCpKXhelWzbWRPte6i+ndeE=; b=SrR9cLdDrPZFVgWK5PKwo9YAuyWMcScrYRSsvXPTxou9d0QGdYkEerWQIjVYTC5Nq1 kf+1pIVYDwnmUH9BpJsZ9SuDNemQo0GQyMYXtcPCnUYAvOvTHPOon759KNCjgmwr3eyH 1FuKB0bKD/m1WNjZRVcDSxfCuTnHRe/Q8IVFeYC9f/iI2HBSdlpTPiAC0KHZtJNmudMp /vmZJxPXdBgRUVkM66AG/A4FGDMs+W+kLTsU9Dt7IZtdyYk2SDUSLa+Uugkt8lPvR9kf v1OL6qMEILdSRkA1iKDm4Tv+cRZ/1tMUUuol4T8+b2orHTUsgKZ1JSQtq0+BKbtWYkbh U1SA==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=LL9cJEpoW7829oy5y2hqsCpKXhelWzbWRPte6i+ndeE=; b=oCJWG3OZj05AgC9aY8U4+gbB8p1wIoAucMMtpHmloZ9bSrFmKvgFtSYlQWn014NqUk Y79PdmetuzImST9Q+vdn+zuTupD9Qzyi9wsSBaP4/vWY7+fQawSKxx5IgxXPs1IPNWlY 4TdBvzBnspeHhhpgrqdP0x3Yie0IlKH+vmaF3+Kyc9+bdfjOZKsaWY7oawD5Wn/KlF9C pYAp0ecPKER7531wIa7vgUVFDGJU5IJLbXmMdg3tYU1uu4gLU7GEyGCaTkdl/6jHr5Fd s/UMuu1O+Jzi4iD4IWYAWmnhAtwIgMpBNgxlOWMA51ZL+0PkJauHS4g5tQFXqeg9aA7y N6KA==
Date: Thu, 17 May 2018 14:51:24 +1000
X-PMX-Spam: Gauge=IIIIIIIII, Probability=9%, Report=' HTML_70_90 0.1, HTML_FONT_INVISIBLE 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_3000_3999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BOUNCE_AUTORESP 0, BOUNCE_GENERIC 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_AUTORESP_SUBJ 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.17.44216
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPweBJvrGCPGBQAQR/2hll9o1n8Cuz69S7GD7Nc3iIfR0DyrBMtuT WzPSpBeu2HFCm+Q8tKx/y5BrrWWh4+kDA/ElIzLTLT1i
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-9711-1526532733-833.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 411

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 2385

actually, the filter to make sure the $argv{$key} should apply to all..
 Should look like this:

 143       if ( defined($argv{$}))
 144       {
 145         if (/^-?authoritative$/i) {
 146            $this->{_authoritative} = (delete $argv{$_}) ? TRUE : FALSE;
 147         } elsif (/^-?authprotocol$/i) {
 148            $this->_auth_protocol(delete $argv{$_});
 149         } elsif (/^-?privprotocol$/i) {

Thu May 17 01:04:06 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-4.933 tagged_above=-99.9 required=10 tests=[AWL=0.400, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <CAEoBQ97F9z7b4C1yxTXqDsP5woe9hpi=7qEW0r0K9pYwxL1S-Q@mail.gmail.com>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-26271-1526531898-553.125332-3-0@rt.cpan.org> <CAEoBQ97=juONJdtzrfTW5n3=g_9smKqCGHMz-yQag6rY4B9fcg@mail.gmail.com> <CAEoBQ97hn+e9v-jkRLkZDmObWYiavoB1_x_wKCzj9P6PpcfQJg@mail.gmail.com> <CAEoBQ95bX4TC+6_vcKju+7WS+KmCzcRKMLU0RGxMQOBV6ZUVFw@mail.gmail.com> <CAEoBQ97F9z7b4C1yxTXqDsP5woe9hpi=7qEW0r0K9pYwxL1S-Q@mail.gmail.com>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:b384:: with SMTP id s4-v6mr3608978edd.28.1526533431942; Wed, 16 May 2018 22:03:51 -0700 (PDT)
Message-ID: <CAEoBQ95NmsDF8DBwG-Zjwnqf+XPaiZsWxN7LO1tE3-KFwVNzbA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="000000000000f2e308056c5fc27d"
X-Spam-Score: -4.933
X-Google-SMTP-Source: AB8JxZpMT43BuxRdtH92JMualNFZ4hb6OQyaDQ8KaMvH0Kmf8L5he+x1ByL1DUCvW7/VYksm9uZ31qgVsuu2EbE2VjI=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id 1FB042402EF for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 01:04:05 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GrfeursOt4b9 for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 01:04:03 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id 9A3082402C2 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 01:04:03 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 75D9D11DA2E for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 22:04:02 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id 436CA66FF9 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 22:04:00 -0700 (PDT)
Received: from mail-wm0-f65.google.com (mail-wm0-f65.google.com [74.125.82.65]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id B681411DA2E for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 22:03:53 -0700 (PDT)
Received: by mail-wm0-f65.google.com with SMTP id o78-v6so6562597wmg.0 for <bug-Net-SNMP@rt.cpan.org>; Wed, 16 May 2018 22:03:53 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Wed, 16 May 2018 22:03:11 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] AutoReply: Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=O5d1iAernaEXSHplqguKqohUbtjimqr3f1T9OCEPwB0=; b=YvmONxFalf6LvxqXfIeRRlB+fLhXl43Yo/WWEMZjfJoB7jwU2ONzUgD2aeofdDGe79 enojB0iqWZeyd3Zt38hEqkZ3CEUHscIRDuL413siBmVeHNajdpHJDpMeLLJ9AIc0w6B+ 6JCGNZqSv2U8yXd0dX3IzznLYuSNwHLY4D0y09kEXZG9AGrcIpiI07b27iqrfdpzL4ae e0njhmgwPv+ZQNFZMZeqivp2pfTAUojAnS/GAoKMVbuE31sktAxJVw9g4IEl6EWyEbqj mz4yUwtRlD1wBaR9tY34X/Bh2sxpHu8oW0bFhr9cor912tetYXPx4LnlAlZa+vWRv5mH YZ7g==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=O5d1iAernaEXSHplqguKqohUbtjimqr3f1T9OCEPwB0=; b=hdHgH9BqR/htWroy+f0Fj2b8a+Rrc9ntI/4bWbOEgxjo4m3YVebWaySf2tI7XjpW6W 2GIHTDQPL2/9alulCjrPY2C8/v8qWKqHbouO/BLeAUrmLLXZEJmL7IlfrZZ7VgzUJmSD b3EHqV3a3PIMYVC9q8FnKFZbcTotz7Ud+pjxPcqSVdQDZQR9eMVujQDjWib/14GQhhTW zJ3HBA+LtOGj84yyi39See7Sgq/b6oAlCJh/DeLeIPvmUaC3mBDeftAinUCsP0/ENI07 CLh+r4uSNIlh3tQqY0uS7Y4w5xzUNKe3bzWiNVBj/Vwo/oIRqz4CosDZkgXHj7o74Am0 +LSw==
Date: Thu, 17 May 2018 15:03:11 +1000
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_50_70 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTH_SIZE_3000_MORE 0, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_4000_4999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BOUNCE_AUTORESP 0, BOUNCE_GENERIC 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_AUTORESP_SUBJ 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __INVOICE_MULTILINGUAL 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.17.45716
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPweSomHkGlTtUck9ErP6VNrtENNcgqNSk5CRNX8nT6Vzzav56Jjv ELvd+NWJ2q1RpoQLFnEI+VHA78lrop4tnvNQ8v3NfGQV
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-7365-1526533446-1252.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 1176

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 2638

this is another stupid mistake. Different security levels such as authNoPriv dont give a fuck about privpassword or privprotocol. So why check for it? 

 160    # Now validate the rest of the passed arguments
 161
 162    for (keys %argv) {
 163
 164       if (/^-?version$/i) {
 165          $this->_version($argv{$_});
 166       } elsif (/^-?debug$/i) {
 167          $this->debug($argv{$_});
 168       } elsif ((/^-?engineid$/i) && ($this->{_authoritative})) {
 169          $this->_engine_id($argv{$_});
 170       } elsif (/^-?username$/i) {
 171          $this->_user_name($argv{$_});
 172       } elsif (/^-?authkey$/i) {
 173          $this->_auth_key($argv{$_});
 174       } elsif (/^-?authpassword$/i) {
 175          $this->_auth_password($argv{$_});
 176       } elsif (/^-?privkey$/i) {
 177          $this->_priv_key($argv{$_});
 178       } elsif (/^-?privpassword$/i) {
 179          $this->_priv_password($argv{$_});
 180       } else {
 181          $this->_error('The argument "%s" is unknown', $_);
 182       }
 183
 184       if (defined $this->{_error}) {
 185          return wantarray ? (undef, $this->{_error}) : undef;
 186       }
 187
 188    }

Thu May 17 16:04:58 2018 dtown [...] cpan.org - Status changed from 'new' to 'open'
Thu May 17 16:04:58 2018 dtown [...] cpan.org - Taken
Thu May 17 16:04:58 2018 dtown [...] cpan.org - Severity Normal added
Thu May 17 16:07:40 2018 dtown [...] cpan.org - Correspondence added
MIME-Version: 1.0
In-Reply-To: <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com>
X-Mailer: MIME-tools 5.504 (Entity 5.504)
Content-Disposition: inline
X-RT-Interface: Web
References: <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Message-ID: <rt-4.0.18-4627-1526587660-1556.125332-0-0@rt.cpan.org>
Content-Transfer-Encoding: binary
X-RT-Original-Encoding: utf-8
X-RT-Encrypt: 0
X-RT-Sign: 0
Content-Length: 242

Can you provide an example of the SNMPv3 security arguments that you are passing the Net::SNMP constructor which are resulting in the security level always being set to "noAuthNoPriv"? The security level is derived from the passed arguments.
Thu May 17 20:34:50 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-5 tagged_above=-99.9 required=10 tests=[AWL=0.333, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <rt-4.0.18-4627-1526587660-679.125332-6-0@rt.cpan.org>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-4627-1526587660-679.125332-6-0@rt.cpan.org>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:aa7:d6c2:: with SMTP id x2-v6mr9586111edr.219.1526603680415; Thu, 17 May 2018 17:34:40 -0700 (PDT)
Message-ID: <CAEoBQ94a8YTBL1gNhNGoPD7XrkcfNteYOrfQ6O_+FLijX33s+g@mail.gmail.com>
Content-Type: multipart/alternative; boundary="0000000000001582e8056c701e07"
X-Spam-Score: -5
X-Google-SMTP-Source: AB8JxZqBXxzURsp/UfwCsbEZ/D67tALW+aqSWcdfYDqOSsNhv8MeFMI99LYJ+5JK7d47lyhwjfzs69EcV0516M26uVI=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id CF91224032A for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 20:34:49 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A6mBMtoNs-5y for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 20:34:48 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id D8C312401D9 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 20:34:47 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 5519011EDB6 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:34:46 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id E692811EDBB for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:34:43 -0700 (PDT)
Received: from mail-wm0-f41.google.com (mail-wm0-f41.google.com [74.125.82.41]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id 06F7711EDB6 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:34:42 -0700 (PDT)
Received: by mail-wm0-f41.google.com with SMTP id n10-v6so12025101wmc.1 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:34:42 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Thu, 17 May 2018 17:34:00 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=MoWVkJYMRibWy9VU2C9fGn6TM87YVNpE6k1wBcG/TQg=; b=HfVZJTgOJqa6rdsXDvIXxF0fq5Dm/BkCoykTjqKhnOgeWkHFxr1go7kKP4E5XBzIOa 4phah+jn0yEvZj0UuvceZjwJtderWjMedDSSWPAwzSvuieYpsD7XgnxiU6VJWvcFha2R xhM3VT84MzTXgIFCdXB8JaXMxhpsFtWG5Ko/rQCsqe6nggPeN2saIFxMVTSn08w4/PxO wt3SaszkQiEPPhi2dE0BszXmYSFG8H8owdhG7/uBlJRTDDs5hoH1Ex8ncqFgLtkiDUBm 2h1S6/58EXmYCpbGNCDwVz+9KV4km8oF7ZoHhmaeOUL+4xDEX6/WJmfYXJlKKCOdODxd LFjw==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=MoWVkJYMRibWy9VU2C9fGn6TM87YVNpE6k1wBcG/TQg=; b=ROqWwVekMuDO39Yl/D6SdJswd54JeZPVz1eXwyPSiXZQffPF0n/kezjlKtW/JMaT9P fL3as2eXDYr8BUcaD9sw5vhL3h2DRq9D2SoADhDkWogPeZVsRBKr69Am/US+0QTtNOnR O0d6gk/1J+6mLBJcsx8OD+vx3sf+sFQyKaM8msL0MiStz4R+iOeE2BfogX88WlhlKAeK D2xuVMGhYD6PqHSp4wJu+k6Wp2LCgyJVqq7JufPgurykXuWAjtcRaU5eMKXo23t+NzZJ q4HfxpW5jctRuiCH1EJrN1IpZcSFBnR1PJblnzU8LJ/sYA9nKRNkpzMTmWEDjw/kM0ux W6qQ==
Date: Fri, 18 May 2018 10:34:00 +1000
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_70_90 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTH_SIZE_3000_MORE 0, BODYTEXTP_SIZE_3000_LESS 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __FUR_RDNS_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.18.2717
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPwem2Ew4P48Ar12VhS9NBSZ7Ui3HwfvZh99wDdcxaaPIevGalju8 8HiQoxl0Nhv0OY103A5kSnISDSuP5OTDyh9RRxNRXQ/d
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-10932-1526603690-1731.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 1146

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 5324


$VAR1 = {
          '-version' => 3,
          '-port' => 161,
          '-authpassword' => 't3stPasWOQD',
          '-domain' => 'udp4',
          '-username' => 'test_authnopriv',
          '-authprotocol' => 'SHA',
          '-hostname' =>  <deleted>
        };

Seems that once it gets to privPassword, it bails out.
 Then again , by passing in authpassword and authprotocol, that should be a good sign I want authNoPriv as a security level (since we cannot explicitly define the security level).


I had also tried the following and it still fails because when it gets to privPassword in %argv, it will also evaluate the _discovery and _authorirty attributes thus causing the security level to move from authNoPriv to authPriv thus a failure in my snmp get request.



$VAR1 = {
          '-version' => 3,
          '-port' => 161,
          '-authpassword' => ' t3stPasWOQD ',
          '-privprotocol' => 'AES',
          '-domain' => 'udp4',
          '-privpassword' => '  ',
          '-username' => ' test_authnopriv ',
          '-authoritative' => 1,
          '-authprotocol' => 'SHA',
          '-hostname' => <deleted>
        };

Thu May 17 20:43:33 2018 anexiole [...] gmail.com - Correspondence added
MIME-Version: 1.0
X-Spam-Status: No, score=-5.047 tagged_above=-99.9 required=10 tests=[AWL=0.286, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_OUR_RT=-4, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=ham
In-Reply-To: <CAEoBQ94a8YTBL1gNhNGoPD7XrkcfNteYOrfQ6O_+FLijX33s+g@mail.gmail.com>
X-Cpan.org: This message routed through the cpan.org mail forwarding service. Please use PAUSE pause.perl.org to configure your delivery settings.
X-Spam-Flag: NO
X-RT-Interface: API
References: <RT-Ticket-125332@rt.cpan.org> <CAEoBQ97zdU3qDc7Ttu2j+VW8-8tv351Q5iHc0eZLfBMEk9qf9g@mail.gmail.com> <rt-4.0.18-4627-1526587660-679.125332-6-0@rt.cpan.org> <CAEoBQ94a8YTBL1gNhNGoPD7XrkcfNteYOrfQ6O_+FLijX33s+g@mail.gmail.com>
X-Virus-Scanned: Debian amavisd-new at bestpractical.com
X-Received: by 2002:a50:ca85:: with SMTP id x5-v6mr9537222edh.40.1526604204797; Thu, 17 May 2018 17:43:24 -0700 (PDT)
Message-ID: <CAEoBQ95f9BDWaMgRpO09owzYTQ5G_Pu2z5tPNMG6qOtFgMixJQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="00000000000056f354056c703d52"
X-Spam-Score: -5.047
X-Google-SMTP-Source: AB8JxZq2i+a2P388teREAk9mUR/AaZpJaUAPoA5vD24TfdziHluFBCnZkXQt/VT4fdJkiq3mL392BViXn/sO7bE+c+o=
Authentication-Results: hipster.bestpractical.com (amavisd-new); dkim=pass header.i=@gmail.com
Received: from localhost (localhost [127.0.0.1]) by hipster.bestpractical.com (Postfix) with ESMTP id 9BF7224032A for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 20:43:32 -0400 (EDT)
Received: from hipster.bestpractical.com ([127.0.0.1]) by localhost (hipster.bestpractical.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AVy1gtnwXmjS for <cpan-bug+Net-SNMP@hipster.bestpractical.com>; Thu, 17 May 2018 20:43:31 -0400 (EDT)
Received: from xx1.develooper.com (xx1.develooper.com [207.171.7.115]) by hipster.bestpractical.com (Postfix) with ESMTPS id 25A162401D9 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 20:43:31 -0400 (EDT)
Received: from localhost (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with ESMTP id 36CC911EF2F for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:43:30 -0700 (PDT)
Received: from xx1.develooper.com (xx1.develooper.com [127.0.0.1]) by localhost (Postfix) with SMTP id 196E211EF3F for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:43:28 -0700 (PDT)
Received: from mail-wm0-f52.google.com (mail-wm0-f52.google.com [74.125.82.52]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by xx1.develooper.com (Postfix) with ESMTPS id 6116011EF2F for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:43:26 -0700 (PDT)
Received: by mail-wm0-f52.google.com with SMTP id f8-v6so12102284wmc.4 for <bug-Net-SNMP@rt.cpan.org>; Thu, 17 May 2018 17:43:26 -0700 (PDT)
Received: by 10.167.216.12 with HTTP; Thu, 17 May 2018 17:42:44 -0700 (PDT)
Delivered-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
Subject: Re: [rt.cpan.org #125332] Bug: security level is always set to noauthnopriv
Return-Path: <anexiole@gmail.com>
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=73DcEhFYH70LomWFNC26h2RRsbxoR5Aslw7c3teYRxE=; b=sXmLZK3bw8n6BYgvK7e9ms8RvKG6y/nlGG3WPrFD9kSU9YpFRPpslFf+0ZdL9594Wm ICjDXXxwlZB3fey6+EmZLWvJjack1WHCB5msZ9xiVjUHOOxM9rggWmr0hoYuXM1X7ZkP v2/crLfw50MprZkGNDF+sFlmU49SsnE0aLmnrA6a3pTsWklBRyxUcXaPJFRZi354h73+ OIrRlXjNVsgWYMyAA29OVnKkjAh2GQD1SWX9OI3RtjDpvVsgTJRxT998ed9cS7Q6ZBjn BWA5u8lpHAprhPRsX7VZyTA9Y89QlFNXCe292xA1g+LC7Rk627WVzf0/GKFZDhiqFgwA jHDA==
X-Original-To: cpan-bug+Net-SNMP@hipster.bestpractical.com
X-RT-Mail-Extension: net-snmp
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=73DcEhFYH70LomWFNC26h2RRsbxoR5Aslw7c3teYRxE=; b=ZrketOw8ketabUKzEn1bTa2TEst31tWdhvWlVw7+BgbYZvScq1Vgz3tl/bityVqqJ/ azJ07eLMoCdAmi5co1iSAUOiXGcUWk31nneh3WTYuewTC8jP+bTmME3e+v3c2GObE2BW em1evdXfGkdvdNOCSDfwKnWA8tnAoXw/I4tXxSXLEJ9gjk2q2tMzgbEpQMJpvZ6LLlKH yvd19yCy+xIHzzACBsoC0/F5+0MiY5xyC3P7t740lVPfNBOPO49dCxocESxfQq1zD7rZ Sbctll0swCyBv3MC/o38+h4hNWlVZNaTeeJtRwHqj0a5SVnWHYeu3kZaXeAZm2wcX0SI jFLw==
Date: Fri, 18 May 2018 10:42:44 +1000
X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' HTML_70_90 0.1, HTML_NO_HTTP 0.1, BODYTEXTH_SIZE_10000_LESS 0, BODYTEXTP_SIZE_3000_LESS 0, BODYTEXTP_SIZE_400_LESS 0, BODY_SIZE_1800_1899 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, DKIM_SIGNATURE 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_URI_HTTPS 0, REFERENCES 0, SPF_PASS 0, WEBMAIL_SOURCE 0, __ANY_URI 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_NEG_HEUR 0, __DQ_NEG_IP 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_DOLLAR 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_FROM 0, __FROM_GMAIL 0, __FUR_RDNS_GMAIL 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HELO_GMAIL 0, __HEX28_LC_BOUNDARY 0, __HIGHBITS 0, __HTML_TAG_DIV 0, __INVOICE_MULTILINGUAL 0, __IN_REP_TO 0, __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __PHISH_SPEAR_HTTP_RECEIVED 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_SUBJ_SUBJECT 0, __RDNS_GMAIL 0, __REFERENCES 0, __RNDS_WEBMAIL 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_REPLY 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __YOUTUBE_RCVD 0, __zen.spamhaus.org_ERROR '
X-Spam-Level:
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2018.5.18.3617
To: bug-Net-SNMP@rt.cpan.org
X-GM-Message-State: ALKqPwfQTrNclNYxpeXM2KnMzRqs2lyL5vvLmb44eUGnkSrh8704xeC8 raOS/6HMqWtAxI5Mjnxvl0Evl44HOWTPjDnrbCXw1gOt
From: Gordon Yeong <anexiole@gmail.com>
RT-Message-ID: <rt-4.0.18-12210-1526604213-1068.125332-0-0@rt.cpan.org>
Content-Length: 0
content-type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Content-Length: 293

content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Content-Length: 1136

the bug here is such that there should NEVER be a check for the -priv_password 
when authNoPriv is being used (ie. no privacy attributes are being fed to the constructor), Net::SNMP::Security::USM::new()


      elsif (/^-?privpassword$/i) {
          $this->_priv_password($argv{$_});
      }

This service runs on Request Tracker, is sponsored by The Perl Foundation, and maintained by Best Practical Solutions.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.