netsnmp 0.0.2 → 0.1.0

data/lib/netsnmp/v3_session.rb

@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+module NETSNMP
+  # Abstraction for the v3 semantics.
+  class V3Session < Session
+
+    # @param [String, Integer] version SNMP version (always 3)
+    def initialize(version: 3, context: "", **opts)
+      @context = context
+      @security_parameters = opts.delete(:security_parameters) 
+      super
+    end
+
+    # @see {NETSNMP::Session#build_pdu}
+    #
+    # @return [NETSNMP::ScopedPDU] a pdu
+    def build_pdu(type, *vars)
+      engine_id = security_parameters.engine_id
+      pdu = ScopedPDU.build(type, headers: [engine_id, @context], varbinds: vars)
+    end
+
+    # @see {NETSNMP::Session#send}
+    def send(*)
+      pdu, _ = super
+      pdu
+    end
+
+    private
+
+    def validate(**options)
+      super
+      if s = @security_parameters
+        # inspect public API
+        unless s.respond_to?(:encode) &&
+               s.respond_to?(:decode) &&
+               s.respond_to?(:sign)   &&
+               s.respond_to?(:verify)
+          raise Error, "#{s} doesn't respect the sec params public API (#encode, #decode, #sign)" 
+        end 
+      else
+        @security_parameters = SecurityParameters.new(security_level: options[:security_level], 
+                                                      username:       options[:username],
+                                                      auth_protocol:  options[:auth_protocol],
+                                                      priv_protocol:  options[:priv_protocol],
+                                                      auth_password:  options[:auth_password],
+                                                      priv_password:  options[:priv_password])
+  
+      end
+    end
+
+    def security_parameters
+      if @security_parameters.engine_id.empty?
+        @security_parameters.engine_id = probe_for_engine
+      end
+      @security_parameters
+    end
+
+    # sends a probe snmp v3 request, to get the additional info with which to handle the security aspect
+    #
+    def probe_for_engine
+      report_sec_params = SecurityParameters.new(security_level: 0,
+                                                 username: @security_parameters.username)
+      pdu = ScopedPDU.build(:get, headers: [])
+      encoded_report_pdu = Message.encode(pdu, security_parameters: report_sec_params)
+
+      encoded_response_pdu = @transport.send(encoded_report_pdu)
+
+      _, engine_id, @engine_boots, @engine_time = decode(encoded_response_pdu, security_parameters: report_sec_params)
+      engine_id
+    end
+
+    def encode(pdu)
+      Message.encode(pdu, security_parameters: @security_parameters, 
+                          engine_boots: @engine_boots,
+                          engine_time: @engine_time)
+    end
+
+    def decode(stream, security_parameters: @security_parameters)
+      Message.decode(stream, security_parameters: security_parameters)
+    end
+  end
+end

data/lib/netsnmp/varbind.rb

@@ -1,181 +1,90 @@
+# frozen_string_literal: true
 module NETSNMP
   # Abstracts the PDU variable structure into a ruby object
   #
   class Varbind
-    Error = Class.new(Error)
 
-    attr_reader :struct
+    attr_reader :oid, :value
 
-    # @param [FFI::Pointer] pointer to the variable list
-    def initialize(pointer)
-      @struct = Core::Structures::VariableList.new(pointer)
+    def initialize(oid , value: nil, type: nil)
+      @oid = OID.build(oid)
+      @type = type
+      @value = convert_val(value) if value
     end
-  end
-
-
-  # Abstracts the Varbind used for the PDU Request
-  class RequestVarbind < Varbind
 
-    # @param [RequestPDU] pdu the request pdu for this varbind
-    # @param [OID] oid the oid for this varbind
-    # @param [Object] value the value for the oid
-    # @param [Hash] options additional options
-    # @option options [Symbol, Integer, nil] :type C net-snmp type flag,  
-    #   type-label for value (see #convert_type), if not set it's inferred from the value
-    #
-    def initialize(pdu, oid, value, options={})
-      type = case options[:type]
-        when Integer then options[:type] # assume that the code is properly passed
-        when Symbol  then convert_type(options[:type]) # DSL-specific API
-        when nil     then infer_from_value(value)
-        else 
-          raise Error, "#{options[:type]} is an unsupported type"
-      end
-
-      value_length = case type
-        when Core::Constants::ASN_NULL,
-             Core::Constants::SNMP_NOSUCHOBJECT,
-             Core::Constants::SNMP_NOSUCHINSTANCE,
-             Core::Constants::SNMP_ENDOFMIBVIEW
-          0
-        else value ? value.size : 0 
-      end
-      value = convert_value(value, type)
-
-      pointer = Core::LibSNMP.snmp_pdu_add_variable(pdu.pointer, oid.pointer, oid.length, type, value, value_length) 
-      super(pointer)
+    def to_s
+      "#<#{self.class}:0x#{object_id.to_s(16)} @oid=#{@oid} @value=#{@value}>"
     end
 
-
-    private
-
-    # @param [Object] value value to infer the type from
-    # @return [Integer] the C net-snmp flag indicating the type
-    # @raise [Error] when the value is from an unexpected type
-    #
-    def infer_from_value(value)
-      case value
-        when String then Core::Constants::ASN_OCTET_STR
-        when Fixnum then Core::Constants::ASN_INTEGER
-        when OID then Core::Constants::ASN_OBJECT_ID
-        when nil then Core::Constants::ASN_NULL
-        else raise Error, "#{value} is from an unsupported type"
-      end
+    def to_der
+      to_asn.to_der
     end
 
-    # @param [Symbol] symbol_type symbol representing the type
-    # @return [Integer] the C net-snmp flag indicating the type
-    # @raise [Error] when the symbol is unsupported
-    #
-    def convert_type(symbol_type)
-      case symbol_type
-        when :integer    then Core::Constants::ASN_INTEGER
-        when :gauge      then Core::Constants::ASN_GAUGE
-        when :counter    then Core::Constants::ASN_COUNTER
-        when :timeticks  then Core::Constants::ASN_TIMETICKS
-        when :unsigned   then Core::Constants::ASN_UNSIGNED
-        when :boolean    then Core::Constants::ASN_BOOLEAN
-        when :string     then Core::Constants::ASN_OCTET_STR
-        when :binary     then Core::Constants::ASN_BIT_STR
-        when :ip_address then Core::Constants::ASN_IPADDRESS
-        else 
-          raise Error, "#{symbol_type} cannot be converted"
-      end
-    end
-
-    # @param [Object] value the value to convert
-    # @param [Integer] type the C net-snmp level object type flakg
-    #
-    # @return [FFI::Pointer] pointer to the memory location where the value is stored
-    #
-    def convert_value(value, type)
-      case type
-        when Core::Constants::ASN_INTEGER,
-             Core::Constants::ASN_GAUGE,
-             Core::Constants::ASN_COUNTER,
-             Core::Constants::ASN_TIMETICKS,
-             Core::Constants::ASN_UNSIGNED
-          new_val = FFI::MemoryPointer.new(:long)
-          new_val.write_long(value)
-          new_val
-        when Core::Constants::ASN_OCTET_STR,
-             Core::Constants::ASN_BIT_STR,
-             Core::Constants::ASN_OPAQUE
-          value
-        when Core::Constants::ASN_IPADDRESS
-            # TODO
-        when Core::Constants::ASN_OBJECT_ID
-          value.pointer
-        when Core::Constants::ASN_NULL,
-             Core::Constants::SNMP_NOSUCHOBJECT,
-             Core::Constants::SNMP_NOSUCHINSTANCE,
-             Core::Constants::SNMP_ENDOFMIBVIEW
-            nil
+    def to_asn
+      asn_oid = OID.to_asn(@oid)
+      asn_val = if @type
+        asn_type, asn_val = convert_to_asn(@type, @value)
+        OpenSSL::ASN1::ASN1Data.new(asn_val, asn_type, :APPLICATION)
+      else
+        case @value
+        when String
+          OpenSSL::ASN1::OctetString
+        when Integer
+          OpenSSL::ASN1::Integer
+        when true, false
+          OpenSSL::ASN1::Boolean
+        when nil
+          OpenSSL::ASN1::Null
         else
-          raise Error, "Unknown variable type: #{type}" 
+          raise Error, "#{@value}: unsupported varbind type"
+        end.new(@value)
       end
+      OpenSSL::ASN1::Sequence.new( [asn_oid, asn_val] )
     end
-  end
-
-  # Abstracts the Varbind used for the PDU Response
-  # 
-  class ResponseVarbind < Varbind
 
-    attr_reader :value, :oid_code
 
-    # @param [FFI::Pointer] pointer pointer to the response varbind structure
-    # 
-    # @note it loads the value and oid code on initialization
-    #
-    def initialize(pointer)
-      super
-      @value    = load_varbind_value
-      @oid_code = load_oid_code
+    def convert_val(asn_value)
+      case asn_value
+      when OpenSSL::ASN1::Primitive
+        val = asn_value.value
+        val = val.to_i if val.is_a?(OpenSSL::BN)
+        val
+      when OpenSSL::ASN1::ASN1Data
+        # application data
+        convert_application_asn(asn_value)
+      when OpenSSL::BN
+      else
+       asn_value # assume it's already primitive
+      end 
     end
 
-    private
-
-    # @return [String] the oid code from the varbind
-    def load_oid_code
-      OID.read_pointer(@struct[:name], @struct[:name_length])
+    def convert_to_asn(typ, value)
+      return [typ, value] unless typ.is_a?(Symbol)
+      case typ
+        when :ipaddress then 0
+        when :counter32 then 1
+        when :gauge then 2
+        when :timetick then [3, [ value].pack("N") ]
+        when :opaque then 4
+        when :nsap then 5
+        when :counter64 then 6
+        when :uinteger then 7
+      end
     end
 
-    # @return [Object] the value for the varbind (a ruby type, a string, an integer, a symbol etc...)
-    #
-    def load_varbind_value
-      object_type = @struct[:type]
-      case object_type
-      when Core::Constants::ASN_OCTET_STR, 
-           Core::Constants::ASN_OPAQUE
-        @struct[:val][:string].read_string(@struct[:val_len])
-      when Core::Constants::ASN_INTEGER
-        @struct[:val][:integer].read_long
-      when Core::Constants::ASN_UINTEGER, 
-           Core::Constants::ASN_TIMETICKS,  
-           Core::Constants::ASN_COUNTER, 
-           Core::Constants::ASN_GAUGE
-        @struct[:val][:integer].read_ulong
-      when Core::Constants::ASN_IPADDRESS
-        @struct[:val][:objid].read_string(@struct[:val_len]).unpack('CCCC').join(".")
-      when Core::Constants::ASN_NULL
-        nil
-      when Core::Constants::ASN_OBJECT_ID
-        OID.from_pointer(@struct[:val][:objid], @struct[:val_len] / OID.default_size)
-      when Core::Constants::ASN_COUNTER64
-        counter = Core::Structures::Counter64.new(@struct[:val][:counter64])
-        counter[:high] * 2^32 + counter[:low]
-      when Core::Constants::ASN_BIT_STR
-        # XXX not sure what to do here.  Is this obsolete?
-      when Core::Constants::SNMP_ENDOFMIBVIEW
-        :endofmibview
-      when Core::Constants::SNMP_NOSUCHOBJECT
-        :nosuchobject
-      when Core::Constants::SNMP_NOSUCHINSTANCE
-        :nosuchinstance
-      else
-        raise Error, "#{object_type} is an invalid type"
+    def convert_application_asn(asn)
+      case asn.tag
+        when 0 # IP Address
+        when 1 # ASN counter 32
+          asn.value.unpack("n*")[0] || 0
+        when 2 # gauge
+        when 3 # timeticks
+          asn.value.unpack("N*")[0] || 0
+        when 4 # opaque
+        when 5 # NSAP
+        when 6 # ASN Counter 64
+        when 7 # ASN UInteger
       end
     end
-
   end
 end

data/lib/netsnmp/version.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 module NETSNMP
-  VERSION = '0.0.2'.freeze
+  VERSION = '0.1.0'
 end

data/netsnmp.gemspec

@@ -14,8 +14,8 @@ DESC
   gem.email       = "cardoso_tiago@hotmail.com"
   gem.homepage    = ""
   gem.platform    = Gem::Platform::RUBY
-  gem.required_ruby_version = '>=2.0.0'
-  gem.metadata["allowed_push_hosts"] = "https://rubygems.org/"
+  gem.required_ruby_version = '>=2.1.0'
+  gem.metadata["allowed_push_host"] = "https://rubygems.org/"
 
   # Manifest
   gem.files         = `git ls-files`.split("\n") - Dir['tmp/**/*']
@@ -24,14 +24,8 @@ DESC
   gem.require_paths = ["lib"]
 
   gem.executables = Dir["bin/*"].map { |e| File.basename e }
-  gem.add_runtime_dependency "ffi", ["~> 1.9"]
-  unless RUBY_PLATFORM == "java"
-    gem.add_runtime_dependency "RubyInline", ["~> 3.12"]
-  end
-
   gem.add_development_dependency "rake", ["~> 10.4.2"]
   gem.add_development_dependency "rspec", ["~> 3.3.0"]
 
-  gem.add_development_dependency "em-synchrony", ["~> 1.0.4"]
   gem.add_development_dependency "celluloid-io", ["~> 0.17.2"]
 end

data/spec/client_spec.rb

@@ -1,119 +1,167 @@
+require_relative "support/request_examples"
+
 RSpec.describe NETSNMP::Client do
   let(:host) { "localhost" }
-  let(:host_options) { {
+
+  let(:device_options) { {
     peername: "localhost",
-    port: SNMPPORT,
-    username: "simulator",
-    auth_password: "auctoritas",
-    auth_protocol: :md5,
-    priv_password: "privatus",
-    priv_protocol: :des
+    port: SNMPPORT
   } }
-
-  subject { described_class.new(host, options) }
-
-  describe "establishing session" do
-    let(:oid) { "1.3.6.1.2.1.1.5.0" } # sysName.0
-    context "with a wrong auth password" do
-      let(:options) { host_options.merge( auth_password: "auctoritas2", timeout: 5) }
-      it { 
-        expect { 
-          subject.get(oid)
-        }.to raise_error(NETSNMP::ConnectionFailed) 
+  describe "v1" do
+    it_behaves_like "an snmp client" do
+      let(:protocol_options) { {
+        version: "1",
+        community: "public"
+      } }
+      let(:get_oid) { "1.3.6.1.2.1.1.5.0" }
+      let(:next_oid) { "1.3.6.1.2.1.1.6.0" }
+      let(:walk_oid) { "1.3.6.1.2.1.1" }
+      let(:set_oid) { "1.3.6.1.2.1.1.3.0" } # sysUpTimeInstance
+      let(:get_result) { "DEVICE-192.168.1.1" }
+      let(:next_result) { "The Cloud" }
+      let(:walk_result) { <<-WALK
+1.3.6.1.2.1.1.1.0: Device description
+1.3.6.1.2.1.1.2.0: 1.3.6.1.4.1.3454
+1.3.6.1.2.1.1.3.0: 78171676
+1.3.6.1.2.1.1.4.0: The Owner
+1.3.6.1.2.1.1.5.0: DEVICE-192.168.1.1
+1.3.6.1.2.1.1.6.0: The Cloud
+1.3.6.1.2.1.1.7.0: 72
+1.3.6.1.2.1.1.8.0: 0
+WALK
       }
+      let(:set_oid_result) { 43 }
     end
-    context "with a wrong priv password" do
-      let(:options) { host_options.merge( priv_password: "privatus2", timeout: 5) }
-      it { 
-        expect { 
-          subject.get(oid)
-        }.to raise_error(NETSNMP::ConnectionFailed) 
+  end
+  describe "v2" do
+    it_behaves_like "an snmp client" do
+      let(:protocol_options) { {
+        version: "2c",
+        community: "public"
+      } }
+      let(:get_oid) { "1.3.6.1.2.1.1.5.0" }
+      let(:next_oid) { "1.3.6.1.2.1.1.6.0" }
+      let(:walk_oid) { "1.3.6.1.2.1.1" }
+      let(:set_oid) { "1.3.6.1.2.1.1.3.0" }
+      let(:get_result) { "DEVICE-192.168.1.1" }
+      let(:next_result) { "The Cloud" }
+      let(:walk_result) { <<-WALK
+1.3.6.1.2.1.1.1.0: Device description
+1.3.6.1.2.1.1.2.0: 1.3.6.1.4.1.3454
+1.3.6.1.2.1.1.3.0: 78171676
+1.3.6.1.2.1.1.4.0: The Owner
+1.3.6.1.2.1.1.5.0: DEVICE-192.168.1.1
+1.3.6.1.2.1.1.6.0: The Cloud
+1.3.6.1.2.1.1.7.0: 72
+1.3.6.1.2.1.1.8.0: 0
+WALK
       }
-    end
+      let(:set_oid_result) { 43 }
 
-    context "with an unexisting user" do
-      let(:options) { host_options.merge(username: "simulata", timeout: 5) }
-      it { 
-        expect { 
-          subject.get(oid)
-        }.to raise_error(NETSNMP::ConnectionFailed) 
-      }
     end
   end
 
-  describe "#get" do
-    let(:oid) { "1.3.6.1.2.1.1.5.0" } # sysName.0
-    let(:value) { subject.get(oid) }
-    let(:options) { host_options.merge(context: "a172334d7d97871b72241397f713fa12") }
-    it "fetches the varbinds for a given oid" do
-      expect(value).to eq("tt")
-    end
-  end
 
-  describe "#get_next" do
-    let(:oid) { "1.3.6.1.2.1.1.5.0" } # sysName.0
-    let(:value) { subject.get_next(oid) }
-    let(:options) { host_options.merge(context: "a172334d7d97871b72241397f713fa12") }
-    it "fetches the varbinds for the next oid" do
-      expect(value).to start_with("KK12")
-    end
-  end
+  describe "v3" do
+    let(:extra_options) { {} }
+    let(:version_options) { {
+      version: "3",
+      context: "a172334d7d97871b72241397f713fa12",
+    } }
+    let(:get_oid) { "1.3.6.1.2.1.1.5.0" }
+    let(:next_oid) { "1.3.6.1.2.1.1.6.0" }
+    let(:set_oid) { "1.3.6.1.2.1.1.3.0" } # sysUpTimeInstance
+    let(:walk_oid) { "1.3.6.1.2.1.1.9.1.3" }
+    let(:get_result) { "tt" }
+    let(:next_result) { "KK12" }
+    let(:walk_result) { <<-WALK
+1.3.6.1.2.1.1.9.1.3.1: The SNMP Management Architecture MIB.
+1.3.6.1.2.1.1.9.1.3.2: The MIB for Message Processing and Dispatching.
+1.3.6.1.2.1.1.9.1.3.3: The management information definitions for the SNMP User-based Security Model.
+1.3.6.1.2.1.1.9.1.3.4: The MIB module for SNMPv2 entities
+1.3.6.1.2.1.1.9.1.3.5: The MIB module for managing TCP implementations
+1.3.6.1.2.1.1.9.1.3.6: The MIB module for managing IP and ICMP implementations
+1.3.6.1.2.1.1.9.1.3.7: The MIB module for managing UDP implementations
+1.3.6.1.2.1.1.9.1.3.8: View-based Access Control Model for SNMP.
+WALK
+    }
+    let(:set_oid_result) { 43}
+    context "with a no auth no priv policy" do
+      let(:user_options) { { username: "unsafe", security_level: :noauth } }
+      it_behaves_like "an snmp client" do
+        let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        # why is this here? that variation/notification community causes the simulagtor to go down
+        # until I find the origin of the issue and patched it with an appropriated community, this
+        # is here so that I test the set call at least once, although I'm sure it'll work always
+        # for v3
+        describe "#set" do
+          let(:extra_options) { { #community: "variation/notification", 
+                                  context: "0886e1397d572377c17c15036a1e6c66" } }
+          it "updates the value of the oid" do
+            prev_value = subject.get(oid: set_oid)
+            expect(prev_value).to be_a(Integer)
+        
+            # without type
+            subject.set(oid: set_oid, value: set_oid_result)
+            expect(subject.get(oid: set_oid)).to eq(set_oid_result)
 
-  describe "#walk" do
-    let(:oid) { "1.3.6.1.2.1.1.9.1.3" } # sysORDescr
-    let(:value) { subject.walk(oid) }
-    let(:options) { host_options.merge(context: "a172334d7d97871b72241397f713fa12") }
-    it "fetches the varbinds for the next oid" do
-      expect(value.next).to eq(["#{oid}.1","The SNMP Management Architecture MIB."])
-      expect(value.next).to eq(["#{oid}.2","The MIB for Message Processing and Dispatching."])
-      expect(value.next).to eq(["#{oid}.3","The management information definitions for the SNMP User-based Security Model."])
-      expect(value.next).to eq(["#{oid}.4","The MIB module for SNMPv2 entities"])
-      expect(value.next).to eq(["#{oid}.5","The MIB module for managing TCP implementations"])
-      expect(value.next).to eq(["#{oid}.6","The MIB module for managing IP and ICMP implementations"])
-      expect(value.next).to eq(["#{oid}.7","The MIB module for managing UDP implementations"])
-      expect(value.next).to eq(["#{oid}.8","View-based Access Control Model for SNMP."])
-      expect{ value.next }.to raise_error(StopIteration)
-    end
-  end
+            subject.set(oid: set_oid, value: prev_value)
+          end
+        end
 
-  describe "#get_bulk" do
-    let(:oid) { "1.3.6.1.2.1.1.9.1.3" }
-    let(:value) { subject.get_bulk(oid) }
-    let(:options) { host_options.merge(context: "a172334d7d97871b72241397f713fa12") }
-    it "fetches the varbinds for the next oid" do
-      expect(value.next).to eq(["#{oid}.1","The SNMP Management Architecture MIB."])
-      expect(value.next).to eq(["#{oid}.2","The MIB for Message Processing and Dispatching."])
-      expect(value.next).to eq(["#{oid}.3","The management information definitions for the SNMP User-based Security Model."])
-      expect(value.next).to eq(["#{oid}.4","The MIB module for SNMPv2 entities"])
-      expect(value.next).to eq(["#{oid}.5","The MIB module for managing TCP implementations"])
-      expect(value.next).to eq(["#{oid}.6","The MIB module for managing IP and ICMP implementations"])
-      expect(value.next).to eq(["#{oid}.7","The MIB module for managing UDP implementations"])
-      expect(value.next).to eq(["#{oid}.8","View-based Access Control Model for SNMP."])
-      expect(value.next).to eq(["1.3.6.1.2.1.1.9.1.4.1",2])
-      expect(value.next).to eq(["1.3.6.1.2.1.1.9.1.4.2",2])
-      expect{ value.next }.to raise_error(StopIteration)
+      end
     end
-  end
-
- 
-  # TODO: use this oid to test error calls
-  #  let(:oid) { "SNMPv2-MIB::sysORDescr.1" }
+    context "with an only auth policy" do
+      context "speaking md5" do
+        let(:user_options) { { username: "authmd5", security_level: :auth_no_priv, 
+                               auth_password: "maplesyrup", auth_protocol: :md5 } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
+      context "speaking sha" do
+        let(:user_options) { { username: "authsha", security_level: :auth_no_priv, 
+                               auth_password: "maplesyrup", auth_protocol: :sha } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
 
-  describe "#set" do
-    let(:options) { host_options.merge(context: "0886e1397d572377c17c15036a1e6c66") } # write cache
-    let(:oid) { "1.3.6.1.2.1.1.3.0" } # sysUpTimeInstance
-    let(:new_value) { 43 }
-    after { subject.set(oid, value: 42) }
-    it "updates the value of the oid" do
-      expect(subject.get(oid)).to be(42)
-  
-      # without type
-      subject.set(oid, value: 43)
-      expect(subject.get(oid)).to be(43)
-
-      subject.set(oid, value: 44, type: :integer)
-      expect(subject.get(oid)).to be(44)
+    end
+    context "with an auth priv policy" do
+      context "auth in md5, encrypting in des" do
+        let(:user_options) { { username: "authprivmd5des", auth_password: "maplesyrup",
+                               auth_protocol: :md5, priv_password: "maplesyrup",
+                               priv_protocol: :des } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
+      context "auth in sha, encrypting in des" do
+        let(:user_options) { { username: "authprivshades", auth_password: "maplesyrup",
+                               auth_protocol: :sha, priv_password: "maplesyrup",
+                               priv_protocol: :des } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
 
+      context "auth in md5, encrypting in aes" do
+        let(:user_options) { { username: "authprivmd5aes", auth_password: "maplesyrup",
+                               auth_protocol: :md5, priv_password: "maplesyrup",
+                               priv_protocol: :aes } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
+      context "auth in sha, encrypting in aes" do
+        let(:user_options) { { username: "authprivshaaes", auth_password: "maplesyrup",
+                               auth_protocol: :sha, priv_password: "maplesyrup",
+                               priv_protocol: :aes } }
+        it_behaves_like "an snmp client" do
+          let(:protocol_options) { version_options.merge(user_options).merge(extra_options) }
+        end
+      end
     end
   end
 end