Limits to SNMPv3 auth and priv passwords in LMS4.0?

I'm required to build an LMS 4.0 server that meets DISA STIGs. One of the requirements is to meet the password complexity rules. DISA requires at least 15 characters (2 upper, 2 lower, 2 numeric, 2 special and the rest are dealer's choice).
While 12.x and 15.x IOS will support this length (as validated by using Solarwinds), LMS reports the SNMPv3 secure device as unreachable.
Unless I've missed it, I can't find anything in the LMS docs that tells me what LMS' limits are for SNMPv3 auth password and priv password.
In my own testing, I've managed to get it to accept eight (8) character (alpha, num, sym) auth passwords and 10 character (alpha, num, sym) priv passwords. However, if I take the auth password up to 12, LMS reports the device as unreachable again and complains about a digest error.
Anyone else run into this?
Thanks.

Hi Afroy,
What is the command for the view.
We configured SNMPv3 with 2 lines
snmp-server group v3 priv
snmp-server user ...
what do we have to do with view?
Steffen

Similar Messages

HTTP Basic Auth and Proxy Auth

Hi,
i have a problem with the authentication against a proxy server and against a content provider. At first I have to authenticate against the proxy to get "free internet". The next step is to authenticate against the content provider to get a html or xml file.
The following source code runs very good in Eclipse, i.e. as JUnitTest. But If I execute the same code within a weblogic server, I will get an error (not authenticated). I believe I get this message from the content provider and not from the proxy because If I test this code within the weblogic server and with no authentication (i.e. google needs no authentication), I will get a valide xml/html file.
StringBuffer sb = new StringBuffer();
          SimpleAuthenticator simple = new SimpleAuthenticator("joeuser","a.b.C.D"); //from openbook
          Authenticator.setDefault(simple);
          String strUrl = "http://www.rahul.net/joeuser/";
          URL url = null;
          try {
               url = new URL(strUrl);
          } catch (MalformedURLException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          URLConnection conn = null;
          InetSocketAddress addr = new InetSocketAddress("proxy.domain",8080);
          Proxy proxy = new Proxy(Proxy.Type.HTTP, addr);
          try {
               conn = url.openConnection(proxy);
          } catch (IOException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          String proxyStr = "username" + ":" + "passwordl";
          String encoded = new String(Base64.encodeBase64(proxyStr.getBytes()));
          conn.setRequestProperty("Proxy-Authorization", "Basic " + encoded);
          // get http status code which is located in header field 0
          String status = conn.getHeaderField(0);
          if (status.contains("200")) {
               BufferedReader in = null;
               try {
                    in = new BufferedReader(new InputStreamReader(conn.getInputStream(),
                              "ISO-8859-1"));
                    String inputLine;
                    while ((inputLine = in.readLine()) != null) {
                         sb.append(inputLine);
                    in.close();
               } catch (UnsupportedEncodingException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
               } catch (IOException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
          else {
               System.out.println("Error");
          System.out.println(sb.toString());
public class SimpleAuthenticator
extends Authenticator
     private String username,
     password;
     public SimpleAuthenticator(String username,String password)
          this.username = username;
          this.password = password;
     protected PasswordAuthentication getPasswordAuthentication()
          return new PasswordAuthentication(
                    username,password.toCharArray());
Does somebody know a solution? I need the authentication against proxy and content provider in "one application".
Thank you very much,
André

I typically have used Apache Commons HttpClient for anything but trivial URL connections, and especially when combining both basic auth and proxy auth. When you use it, be aware of the "preemptive authentication" flag. One server I worked with didn't send the correct parameters back on particular requests, so I had to turn on this flag to get it to work.

Basic auth and MSIE

Hi,
I'm using basic auth and used to send username/password with
the URL to authenticate from another webserver (with some other
kind of authentication), but - as you know - Microsoft doesn't
support that any longer and so this works for some other
webclients but not for IE (or only with a patch, that isn't installed
everywhere).
Now I have seen that for Apache there is a module called
mod_auth_cookie to fake that kind of implicit authentification.
My Question: has anybody done this for SJWS or can't that
be done?
TIA
Reinfried

Hi,
Please check the below link
Re: Accessing Portal component without login screen
hope is solve your problem.
Raghu

Integration between WLC WEb auth and NGS

Im trying to integrate WLC and NGS and getting this error message:
Preauthentication ACL needs to be configured/selected for external webauth to work.
Where do I need to configure ACL?
Thanks

Hi Surendra,
Thanks for the links.
Even though im using the 5500 WLC I still need to add the ACL!
Looking at the attachment , if I permit ANY source and dest, then I can connect to the internet, but it didint go through the login page and ask for the username and password, I could access the Internet without any authentication. If I set the rules as shown in the attachment, it get me to the logon page (which is good) but I could not logon, here's the radius log:
rad_recv: Status-Server packet from host 127.0.0.1 port 43507, id=90, length=38
        Message-Authenticator = 0xf7233fc3f00a133f273b87e9c2359199
Sending Access-Accept of id 90 to 127.0.0.1 port 43507
Finished request 111.
Cleaning up request 111 ID 90 with timestamp +5120
Going to the next request
Ready to process requests.
rad_recv: Access-Request packet from host x.x.x.164 port 32770, id=65, length=169
        User-Name = ""
        CHAP-Challenge =
        CHAP-Password =
        Service-Type = Login-User
        NAS-IP-Address = x.x.x.164
        NAS-Port = 1
        NAS-Identifier = ""
        NAS-Port-Type = Wireless-802.11
        Airespace-Wlan-Id = 10
        Calling-Station-Id = "x.x.x.x"
        Called-Station-Id = "x.x.x.164"
        Message-Authenticator =
+- entering group authorize {...}
[radius-user-auth]      expand: %{User-Name} ->
[radius-user-auth]      expand: %{User-Password} ->
[radius-user-auth]      expand: %{NAS-IP-Address} -> x.x.x.164
[radius-user-auth]      expand: %{Calling-Station-Id} ->
Exec-Program output:
Exec-Program: returned: 1
++[radius-user-auth] returns reject
Delaying reject of request 112 for 1 seconds
Going to the next request
Waking up in 0.7 seconds.
Sending delayed reject for request 112
Sending Access-Reject of id 65 to x.x.x.164 port 32770
Waking up in 4.9 seconds.
Cleaning up request 112 ID 65 with timestamp +5144
Ready to process requests.
What is this message mean "++[radius-user-auth] returns reject"?
Thanks for your time.

I have an Iphone 4 and it keeps kicking in the 3G instead of using my wifi. My wifi works well with all other devices and the password is fine. I connect and it show the connection then goes back to 3G. Thank you

I have an Iphone 4 and it keeps kicking in the 3G instead of using my wifi. My wifi works well with all other devices and the password is fine. I connect and it show the connection then goes back to 3G. Thank you

This crap just happened to me this morning where I was sent 90% data plan threshold warningfrom AT&T (while sleeping at 7:09am) then 5 minutes later getting the Overage data plan warning from AT&T. This is all while I'm asleep right next to my phone plugged into a (non-Apple) dock on my clock radio.
Android has a limiting feature, why can't the "smart" guys at Apple learn from this??

If someone has wiped my ipad and changed passwords on icloud how do i get my data back

if someone has wiped my ipad and changed passwords on icloud how do i get my data back? please could someone help me out thanks

How did they wipe it? By using Find My iPad and performing a wipe? If so, that means they have your icloud ID and password, not a good thing.
You could try connecting it to iTunes and performing a restore from iCloud. But if they changed password, then you are out of the loop. How did they get your password in order to change it?

I am unable to access iCloud because my iPhone states that my Apple ID and\or password is incorrect. Based on Apple's own policy my current ID and P/W should be fine to access iCloud. Any suggestions?

I am unable to access iCloud because my iPhone states that my Apple ID and\or password is incorrect. Based on Apple's own policy my current ID and P/W should be fine to access iCloud. Any suggestions?

You will have to contact Apple Care and ask for account security for help. Apple ID: Contacting Apple for help with Apple ID account security

TS3276 Cannot send mail from my iPad...."user name and or password is incorrect"......mail can be sent from my iPhone

Why do I get the message "Cannot send mail, the user name and or password for my email outgoing server is incorrect"? I use the same account, etc. on my iPhone and haven't any trouble sending mail.

If your email requires a password for the SMTP server you can set it up in the settings in the General mail setup. Some i.e Gmail require a password for SMTP.
Otherwise you will probably get better answers in the iPad forum.
https://discussions.apple.com/community/ipad/using_ipad

When I try to send email from my iPad and iphone it says that I have the incorrect username and/or password, but I know they are correct, can someone help me?

When I try to send email from my iPad and iPhone it says that I have the wrong username and/or password, but I know they are correct. Can someone help me?

"Your email account" means to tap on the name of your email account. Whatever it is listed as in the settings.
In my mail settings, one of my email accounts is a Comcast account. I tap on the Comcast name and it brings up this window.
Then I tap on the arrow under the Outgoing mail server smtp setting to get to the next window.
In the resulting window, I then tap on the arrow next to the smtp server under the Primary Server setting.
That brings up this window in which I check to make sure that my user name and password have been entered correctly. If those items are missing, enter them in the appropriate fields and then tap done.

Before my PC had iTunes, I loaded Aps from store onto my daughter's PC with iPad connected. I indicated my email address and Apple password. Now I want to upgrade to next iPad but Aps in my iPad are not on my PC iTunes. Do I have to buy again to keep them

I'm a new user of an iPad. Before my PC had iTunes (it does now), I loaded Aps from from the iStore using my daughter's PC with my iPad cable-connected. I indicated my email address and Apple password--not hers and paid for these Aps--receipts arrived via my email. Now I want to upgrade to 5.1 but the Aps now loaded on my iPad do not show up on my PC iTunes library. When I click 'Upgrade' I get a warning message that says all Aps currently on the iPad will be obliterated in the process which of course I don't want to have happen because they're not showing up on my PC which presumably means my PC is not aware of what's on my iPad. Do I have to buy these same Aps again to keep them if I'm going to upgrade to 5.1, and how do I get my iTunes on my PC to back up the Aps currently loaded onto my iPad?

You should be able to copy the apps (and any other iTunes purchases) over to your computer's iTunes via File > Transfer Purchases. And as long as apps remain available in the store, and you use the same iTunes account as you originally used to purchase them, you should be able to re-download them in the future : http://support.apple.com/kb/HT2519
If you are already on iOS 5+ on your iPad then you should be able to update the iPad directly on the iPad via Settings > General > Software Update .

When I open firefox and check box to keep me logged in, it doesn't. I have to login and enter password everytime. This just started happening, not that way in the past. Also, not remebering id's for bookmarke sites.

When I start firefox, it used to send me directly to my home page, now I have to login and enter password everytime, even when checking box to leave me logged in. Also, its not rememberin ids and passwords for my bookmarked sites.

Make sure that you do not run Firefox in permanent Private Browsing mode.
*https://support.mozilla.org/kb/Private+Browsing
To see all History and Cookie settings, choose:
*Tools > Options > Privacy, choose the setting Firefox will: Use custom settings for history
*Deselect: [ ] "Always use private browsing mode"
If clearing the cookies doesn't help then it is possible that the file cookies.sqlite that stores the cookies is corrupted. 
Rename (or delete) cookies.sqlite (cookies.sqlite.old) and delete other present cookie files like cookies.sqlite-journal in the Firefox Profile Folder in case the file cookies.sqlite got corrupted.
*http://kb.mozillazine.org/Cookies
You can also try to update to Firefox 9.0.1

I have an IPad mini and I changed the Apple ID and the password almost one year ago and, for a while, a message asking me to sign in to iCloud pops- up constantly. My iCloud account is registered with an old email and password. I do not remember the

I have an IPad mini and I changed the Apple ID and the password almost one year ago and, for a while, a message asking me to sign in to ICloud pops- up constantly. My ICloud account is registered with an old email address and password. I do not remember the password to my ICloud account, and ID address that my ICloud account is registered under is an old email adress which is deleted right now (the old mail account is deleted). I don’t have a rescue email adress and I don’t know the answers to the security questions, so I have no way of changing the ICloud password. A message asking me to sign in to ICloud pops up constantly, but I always just hit cancel. However, now I am unable to access Find My IPad. How do I get my ICloud account changed and registered to be under my current Apple ID (email) and password? It is possible to set the device as New Ipad?

Welcome to the Apple community.
If you are unable to remember your password, security questions, don’t have access to your rescue address or are unable to reset your password for whatever reason, your only option is to contact Apple ID Support, upon speaking to an operator you should explain that your problem is related to your Apple ID, this way you will not be charged for assistance, even if you don’t have an AppleCare plan.
The operator will take you through some steps you may have already tried, however they need to be sure they have exhausted all usual approaches before trying to reset your account, so you should try to be helpful and show patience with the procedure.
The operator will need to verify they are speaking to the account holder and may ask you some questions that only the account holder could know, and you will need to answer them if the process is to proceed.
Once the operator has verified your identity they will send a message through to your device which contains an alpha numeric code, which you will need to read back to them.
Once this has been completed they will send an email to your iCloud email address after a period of 24 hours, so you should check that mail is enabled in your devices iCloud settings.
Upon receipt of the email, use the reset link provided to reset your password, after which you should be able to make the adjustments to iCloud that you wish to do.

SSL and keystore password

I am creating a server and using JSSE. All the examples I see pass the Keystore and Keystore password as a java enviromnent variable when starting the server. Does this seem a little unsecure to pass the password on the command line? Is there any other way to pass the keystore password?

I am creating a server and using JSSE. All the
examples I see pass the Keystore and Keystore password
as a java enviromnent variable when starting the
server. Does this seem a little unsecure to pass the
password on the command line? Is there any other way
to pass the keystore password?Think hard on this one - what "more secure way" are you going to use? Sooner or later, somebody who knows has to give the code a password to use.
Most of the systems I've seen haven't even required it on the command line - it's been written down in a script or .properties file, so the app can start/restart without human intervention. The files containing the passwords are protected by whatever the host OS uses to keep files private (e.g., owned by root, owner-read-only perms on Unix).
No matter how much encryption you put in place, at the bottom of the chain there's a plain-text password entered SOMEwhere...
Grant

How to connect an apple tv to an enterprise network with a username and a password? I need to use it over my university's wifi. theres no option to enter username and password. how to connect the apple tv to such enterprise network?

How to connect an apple tv to an enterprise network with a username and a password?
I need to use it over my university's wifi. theres no option to enter username and password. how to connect the apple tv to such enterprise network?

Contact the University's IT dept, they may be able to set something up on the network to allow the ATV to connect without the need for a user name/password.

What is the difference between the passcode on my iPhone 5 and a password? I am locked out of my phone.

What is the difference between the passcode on my iPhone 5 and a password? I am locked out of my phone.

Not entirely sure what you are asking, but a passcode to unlock an iOS device is normally 4 digits long (so is a 4 digit code), though you can make it alphanumeric and longer (so effectively becomes a password).
If you don't know the passcode to unlock your phone or it's showing the disabled screen then there are instructions on this page for how to reset a device : http://support.apple.com/kb/HT1212 - you should then be able to restore/resync your content to it.

Limits to SNMPv3 auth and priv passwords in LMS4.0?

Similar Messages

Maybe you are looking for