[1.2.30] - Validation error occours when selecting SHA/DES

[bmfmancini]

If a user selects SHA and DES the following exception is raised but settings still save
When the device is opened again an error message is displayed immediately

(Part of the paths redacted)

This is on a RHEL 9 server where DES is not supported any longer I am wondering if net-snmp is throwing the error
and not cacti

2025-06-21 03:07:24 - ERROR PHP ERROR: Uncaught ValueError: Security protocol must be one of "AES128", or "AES" in /lib/snmp.php:110 Stack trace: #0 snmp.php(110): SNMP->setSecurity() #1 api_device.php(1548): cacti_snmp_session() #2 host.php(143): api_device_ping_device() #3 {main} thrown in file: /lib/snmp.php on line: 110

.

[TheWitness]

Is this with php-snmp enabled or disabled? What version of net-snmp is running under the covers?

[seanmancini]

@TheWitness this is because of net-snmp grrr
Should not have been installed anyway when its not present the validation error is not present when net-snmp is not installed

[TheWitness]

So, you are using php-snmp?

[bmfmancini]

Usually no but this install had it

[TheWitness]

Ok, now caused by net-snmp or php-snmp?

[seanmancini]

php-snmp

[TheWitness]

So, when you uninstall php-snmp and try to run the same command, does it still fail?

[TheWitness]

Make sure you restart php-fpm.

[bmfmancini]

No once you uninstall php-snmp the error doesn't appear Thank you Sean Mancini,(Six Sigma LBBIT®, ITIL,CEA-IT®,SCRUM SMPC®) Owner/Principal Engineer www.seanmancini.com “Companies spend millions of dollars on firewalls, encryption, and secure access devices, and it’s money wasted because none of these measures address the weakest link in the security chain.” *– Kevin Mitnick*

…

On Thu, Jun 26, 2025, 22:01 TheWitness ***@***.***> wrote: *TheWitness* left a comment (Cacti/cacti#6268) <#6268 (comment)> Make sure you restart php-fpm. — Reply to this email directly, view it on GitHub <#6268 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADGEXTHLIPDRYSRQX7MLXVT3FSQV5AVCNFSM6AAAAAB7ZTE7NSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJRGA4TOMJUGQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[TheWitness]

Awesome. I'm going to close this then :)

[bmfmancini]

Yea I agree we recommend not having php-snmp installed with v3 anyway Thank you Sean Mancini,(Six Sigma LBBIT®, ITIL,CEA-IT®,SCRUM SMPC®) Owner/Principal Engineer www.seanmancini.com “Companies spend millions of dollars on firewalls, encryption, and secure access devices, and it’s money wasted because none of these measures address the weakest link in the security chain.” *– Kevin Mitnick*

…

On Thu, Jun 26, 2025, 22:10 TheWitness ***@***.***> wrote: *TheWitness* left a comment (Cacti/cacti#6268) <#6268 (comment)> Awesome. I'm going to close this then :) — Reply to this email directly, view it on GitHub <#6268 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADGEXTC24EU35LQVMQG2RTT3FSRYRAVCNFSM6AAAAAB7ZTE7NSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJRGEYTKOBZGA> . You are receiving this because you authored the thread.Message ID: ***@***.***>