Symptom

ISE 3.2 Patch 2 > We were able to successfully create any snmpv3 user but when we used auth password or priv password of exactly 40 characters length, we got an error ?% Error: String to hex failed for authPassword? After Upgrading to patch 3 > We got same Error for 40 character Auth or Priv Password, however when we tried to use any password passwords of length greater or less than 40 character we got error ?% Error: SNMP Server is not running. Please start SNMP server via 'snmp-server enable' command before adding or removing a user? It was seen that the ?sh running-config | in snmp? shows that snmp is enabled. Further, If we try to disable snmp ?no snmp-server enable? and then enable it back ? snmp-server enable? we were able to create users with password length other than 40 characters. There seems to be issue with passwords of 40 character length. We also need to check about ?SNMP server is not running? Error. The issue is easily reproducible. Need to have a server on the same version and try enabling snmp-server and creating a snmp v3 user.

Conditions

ISE 3.2 Patch 2 > We were able to successfully create any snmpv3 user but when we used auth password or priv password of exactly 40 characters length, we got an error ?% Error: String to hex failed for authPassword? After Upgrading to patch 3 > We got same Error for 40 character Auth or Priv Password, however when we tried to use any password passwords of length greater or less than 40 character we got error ?% Error: SNMP Server is not running. Please start SNMP server via 'snmp-server enable' command before adding or removing a user? It was seen that the ?sh running-config | in snmp? shows that snmp is enabled. Further, If we try to disable snmp ?no snmp-server enable? and then enable it back ? snmp-server enable? we were able to create users with password length other than 40 characters. There seems to be issue with passwords of 40 character length. We also need to check about ?SNMP server is not running? Error. The issue is easily reproducible. Need to have a server on the same version and try enabling snmp-server and creating a snmp v3 user.

Workaround

For "SNMP server is not running Error" We can try "no snmp-server enable" followed by "snmp-server enable" command. After this the issue is isolated to 40 character issue only.

Further Problem Description