Fails to configure snmpd with DTLS settings

Question

Clean ubuntu 16.04 OpenSSL 1.0.2g Downloaded net-snmp5.7.3 and ran ./configure to configure for TLSTCP,DTLSUDP

After generating and moving the necessary files (.crt, .csr and .key) according to this tutorial, I started editing snmpd.conf file. After editing, I restarted the snmpd service and checked the status. So the snmpd was running, but it reported errors and some warnings that it did not recognize the tokens: So, it complains about the three lines I added to the /etc/snmp/snmpd.conf file at the beginning of the file (does it matter where those lines should go?):

24 [snmp] serverCert <fingerprint>
25 sertName 10 <fingerprint> --cn
26 rwuser -s tsm "username"

Any ideas what's the problem there?

Answer 1

I also faced this issue and here is why this issue can occur.

In my case, I was using debian 9. As the snmp package on debian 9 doesn't comes with the tsm (dtlsudp) support, I downloaded the net-snmp package from its official site and tried compiling it. After I did make install, I too faced the same problem.

The reason for that was some of the libsnmp libraries from official debian's snmp packages was already installed in the system and the compiled snmpd was ending up using those libraries.

Check if snmp packages are already installed, by using

dpkg -l libsnmp*
dpkg -l snmp*

remove them from the system using

dpkg --purge --force-depends libsnmp* snmp*

Now install the compiled version using

make install