Bug 1640638

Summary: SNMP provided by RHGSWA doesn't work with enabled FIPS
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Filip Balák <fbalak>
Component: web-admin-tendrl-notifierAssignee: Timothy Asir <tjeyasin>
Status: CLOSED DEFERRED QA Contact: sds-qe-bugs
Severity: high Docs Contact:
Priority: unspecified    
Version: rhgs-3.4CC: ccalhoun, mbukatov, nthomas, rhs-bugs, tjeyasin
Target Milestone: ---Keywords: ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-07 08:16:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1513066    
Bug Blocks:    

Description Filip Balák 2018-10-18 13:07:24 UTC 
Description of problem:
SNMP with alerting is not working on host which is used for receiving SNMP alerts if there is enabled fips on this client.

Version-Release number of selected component (if applicable):
tendrl-ansible-1.6.3-8.el7rhgs.noarch
tendrl-api-1.6.3-7.el7rhgs.noarch
tendrl-api-httpd-1.6.3-7.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch
tendrl-gluster-integration-1.6.3-12.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-14.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-14.el7rhgs.noarch
tendrl-node-agent-1.6.3-10.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-ui-1.6.3-11.el7rhgs.noarch


How reproducible:
100%

Steps to Reproduce:
1. Install RHGSWA and update it to BU 1.
2. Enable fips on gluster nodes and client with SNMP.
3. Setup SNMP and notifier to send SNMP messages to client according to [1].
4. # journalctl -u snmptrapd

[1] https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.4/html/monitoring_guide/alerts_and_notifications#snmpv3_notification_configuration

Actual results:
There are no notifier alerts related to RHGSWA. There are only notifications that there is problem with authentication.

Oct 18 11:31:28 fbalak-client systemd[1]: Starting Simple Network Management Protocol (SNMP) Trap Daemon....
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: /etc/snmp/snmptrapd.conf: line 8: Error: could not generate the authentication key from the supplied pass phrase.
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: net-snmp: 1 error(s) in config file(s)
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: NET-SNMP version 5.7.2
Oct 18 11:31:28 fbalak-client systemd[1]: Started Simple Network Management Protocol (SNMP) Trap Daemon..
Oct 18 11:33:17 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
Oct 18 11:33:17 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
Oct 18 11:33:18 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
...

There is probably problem with usage of MD5 as passphrase as seen in:
# cat /etc/snmp/snmptrapd.conf
authUser log tendrlTrapUser
createUser -e 8000000001020304 tendrlTrapUser MD5 <somehash> DES <someotherhash>

Expected results:
SNMP should work.

Additional info:
It is caused by problem described in https://bugzilla.redhat.com/show_bug.cgi?id=1513066