Bug 1640638 - SNMP provided by RHGSWA doesn't work with enabled FIPS
Summary: SNMP provided by RHGSWA doesn't work with enabled FIPS
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: web-admin-tendrl-notifier
Version: rhgs-3.4
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: ---
Assignee: Timothy Asir
QA Contact: sds-qe-bugs
URL:
Whiteboard:
Depends On: 1513066
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-10-18 13:07 UTC by Filip Balák
Modified: 2020-02-07 08:16 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-02-07 08:16:57 UTC
Embargoed:


Attachments (Terms of Use)

Description Filip Balák 2018-10-18 13:07:24 UTC
Description of problem:
SNMP with alerting is not working on host which is used for receiving SNMP alerts if there is enabled fips on this client.

Version-Release number of selected component (if applicable):
tendrl-ansible-1.6.3-8.el7rhgs.noarch
tendrl-api-1.6.3-7.el7rhgs.noarch
tendrl-api-httpd-1.6.3-7.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch
tendrl-gluster-integration-1.6.3-12.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-14.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-14.el7rhgs.noarch
tendrl-node-agent-1.6.3-10.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-ui-1.6.3-11.el7rhgs.noarch


How reproducible:
100%

Steps to Reproduce:
1. Install RHGSWA and update it to BU 1.
2. Enable fips on gluster nodes and client with SNMP.
3. Setup SNMP and notifier to send SNMP messages to client according to [1].
4. # journalctl -u snmptrapd

[1] https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.4/html/monitoring_guide/alerts_and_notifications#snmpv3_notification_configuration

Actual results:
There are no notifier alerts related to RHGSWA. There are only notifications that there is problem with authentication.

Oct 18 11:31:28 fbalak-client systemd[1]: Starting Simple Network Management Protocol (SNMP) Trap Daemon....
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: /etc/snmp/snmptrapd.conf: line 8: Error: could not generate the authentication key from the supplied pass phrase.
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: net-snmp: 1 error(s) in config file(s)
Oct 18 11:31:28 fbalak-client snmptrapd[3434]: NET-SNMP version 5.7.2
Oct 18 11:31:28 fbalak-client systemd[1]: Started Simple Network Management Protocol (SNMP) Trap Daemon..
Oct 18 11:33:17 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
Oct 18 11:33:17 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
Oct 18 11:33:18 fbalak-client snmptrapd[3434]: Authentication failed for tendrlTrapUser
...

There is probably problem with usage of MD5 as passphrase as seen in:
# cat /etc/snmp/snmptrapd.conf
authUser log tendrlTrapUser
createUser -e 8000000001020304 tendrlTrapUser MD5 <somehash> DES <someotherhash>

Expected results:
SNMP should work.

Additional info:
It is caused by problem described in https://bugzilla.redhat.com/show_bug.cgi?id=1513066


Note You need to log in before you can comment on or make changes to this bug.