From TERRY at tmk.com Thu Sep 3 07:11:03 2015 From: TERRY at tmk.com (Terry Kennedy) Date: Thu, 03 Sep 2015 03:11:03 -0400 (EDT) Subject: [rancid] "show env all" vs. "show env" on Cisco IOS Message-ID: <01PQAOPF2QHW0024UA@tmk.com> I'm trying to monitor power supply / fan status on assorted Cisco gear. However, the Cisco CLI is inconsistent (so, what else is new?) across the various platforms. Here is a brief summary (all running their respective latest IOS - 15 for everything except the 4948, 3750 and 2651XM, which are running 12). "Expected output" indicates a full (for that platform) report, while any- thing else is the error message or one-line status: Platform "show env all" "show env" --------------------- ------------------------ -------------------- Catalyst 4500X-16SFP+ "Invalid input detected" Expected output Catalyst 4948-10GE "Invalid input detected" Expected output Catalyst 3750-48TS Expected output "Incomplete command" 3845 Expected output Expected output 7206VXR / NPE-1 Expected output "All measured values are normal" ASR1000 Expected output Expected output 2651XM Expected output Expected output ASA5506 "Invalid input detected" Expected output Some platforms only accept "show env all", some only accept "show env", some accept both and produce identical output and some accept both and produce different output. It seems that "the right thing" would be to try the "show env all" and only if that reports an error, try "show env". Simply sending both com- mands would seem to risk duplicate lines in the RANCID file for the cases where the device returns the same data for both commands, or a spurious "All measured values are normal" if it accepts both commands but returns different data. I could clone the cisco device from rancid.types.base into multiple different sub-device types in rancid.types.conf, but that means a lot of extra work dealing with new RANCID versions. But that has the advan- tage of not having to parse wildly different output types in the same routine. What would be great is if rancid.types.conf had an "inherit" state- ment that would let me include a device type from rancid.types.base and then let me add (or possibly remove) commands, something like this: cisco-env;inherit;cisco cisco-env;command;ios_local::ShowEnv_local;show env cisco-no-env;inherit;cisco cisco-no-env;nocommand;;show env all Has anybody waded through this morass previously and come up with a good solution? Terry Kennedy http://www.tmk.com terry at tmk.com New York, NY USA From heas at shrubbery.net Thu Sep 3 20:48:15 2015 From: heas at shrubbery.net (heasley) Date: Thu, 3 Sep 2015 20:48:15 +0000 Subject: [rancid] "show env all" vs. "show env" on Cisco IOS In-Reply-To: <01PQAOPF2QHW0024UA@tmk.com> References: <01PQAOPF2QHW0024UA@tmk.com> Message-ID: <20150903204815.GE9766@shrubbery.net> Thu, Sep 03, 2015 at 03:11:03AM -0400, Terry Kennedy: > I'm trying to monitor power supply / fan status on assorted Cisco gear. > However, the Cisco CLI is inconsistent (so, what else is new?) across the > various platforms. > > Here is a brief summary (all running their respective latest IOS - 15 > for everything except the 4948, 3750 and 2651XM, which are running 12). > "Expected output" indicates a full (for that platform) report, while any- > thing else is the error message or one-line status: > > Platform "show env all" "show env" > --------------------- ------------------------ -------------------- > Catalyst 4500X-16SFP+ "Invalid input detected" Expected output > Catalyst 4948-10GE "Invalid input detected" Expected output > Catalyst 3750-48TS Expected output "Incomplete command" > 3845 Expected output Expected output > 7206VXR / NPE-1 Expected output "All measured values > are normal" > ASR1000 Expected output Expected output > 2651XM Expected output Expected output > ASA5506 "Invalid input detected" Expected output > > Some platforms only accept "show env all", some only accept "show env", > some accept both and produce identical output and some accept both and > produce different output. > > It seems that "the right thing" would be to try the "show env all" and > only if that reports an error, try "show env". Simply sending both com- > mands would seem to risk duplicate lines in the RANCID file for the cases > where the device returns the same data for both commands, or a spurious > "All measured values are normal" if it accepts both commands but returns > different data. there is code in ShowEnv to skip a second copy of the output if the first succeeded. > I could clone the cisco device from rancid.types.base into multiple > different sub-device types in rancid.types.conf, but that means a lot > of extra work dealing with new RANCID versions. But that has the advan- > tage of not having to parse wildly different output types in the same > routine. > > What would be great is if rancid.types.conf had an "inherit" state- > ment that would let me include a device type from rancid.types.base > and then let me add (or possibly remove) commands, something like this: > > cisco-env;inherit;cisco > cisco-env;command;ios_local::ShowEnv_local;show env > > cisco-no-env;inherit;cisco > cisco-no-env;nocommand;;show env all > > Has anybody waded through this morass previously and come up with a > good solution? thats an interesting idea. more grammar would be needed for commands that are order dependant. From TERRY at tmk.com Sat Sep 5 23:23:13 2015 From: TERRY at tmk.com (Terry Kennedy) Date: Sat, 05 Sep 2015 19:23:13 -0400 (EDT) Subject: [rancid] "show env all" vs. "show env" on Cisco IOS In-Reply-To: "Your message dated Thu, 03 Sep 2015 20:48:15 +0000" <20150903204815.GE9766@shrubbery.net> References: <01PQAOPF2QHW0024UA@tmk.com> Message-ID: <01PQEEKDAU48001WFX@tmk.com> > > What would be great is if rancid.types.conf had an "inherit" state- > > ment that would let me include a device type from rancid.types.base > > and then let me add (or possibly remove) commands, something like this: > > > > cisco-env;inherit;cisco > > cisco-env;command;ios_local::ShowEnv_local;show env > > > > cisco-no-env;inherit;cisco > > cisco-no-env;nocommand;;show env all > > thats an interesting idea. more grammar would be needed for commands that > are order dependant. Perhaps numbering the lines in the rancid.types.base file, similar to the way IOS numbers entries in access lists to allow insertions? It would probably make sense to add this to the end of each command and make it optional so existing local rancid.types.conf files wouldn't break due to the syntax change. Something like: # Cisco IOS device & Allied Telesis AW+ cisco;script;rancid -t cisco cisco;login;clogin cisco;module;ios cisco;inloop;ios::inloop cisco;command;ios::ShowVersion;show version;100 cisco;command;ios::ShowRedundancy;show redundancy secondary;110 cisco;command;ios::ShowIDprom;show idprom backplane;120 cisco;command;ios::ShowInstallActive;show install active;130 cisco;command;ios::ShowEnv;show env all;140 cisco;command;ios::ShowRSP;show rsp chassis-info;150 cisco;command;ios::ShowGSR;show gsr chassis;160 cisco;command;ios::ShowGSR;show diag chassis-info;170 ... and then rancid.types.conf would have: # Replace sequence 140 cisco-env;inherit;cisco cisco-env;command;ios_local::ShowEnv_local;show env;140 # Add new sequence 145 cisco-add-env;inherit;cisco cisco-add-env;command;ios_local::ShowEnv_local;show env;145 # Delete sequence 140 cisco-no-env;inherit;cisco cisco-no-env;nocommand;140 Alternatively, if some device require the use of semicolons in their commands, the syntax could be: cisco;command:100;ios::ShowVersion;show version; cisco;command:110;ios::ShowRedundancy;show redundancy secondary cisco;command:120;ios::ShowIDprom;show idprom backplane cisco;command:130;ios::ShowInstallActive;show install active cisco;command:140;ios::ShowEnv;show env all cisco;command:150;ios::ShowRSP;show rsp chassis-info cisco;command:160;ios::ShowGSR;show gsr chassis cisco;command:170;ios::ShowGSR;show diag chassis-info The use of colons to indicate the command sequence should still keep old files compatible - if there is no colon in the command, simply execute them in the order found (the old way). Terry Kennedy http://www.tmk.com terry at tmk.com New York, NY USA From subash.khati at tashicell.com Mon Sep 7 06:17:34 2015 From: subash.khati at tashicell.com (Subash Khati) Date: Mon, 7 Sep 2015 12:17:34 +0600 Subject: [rancid] Rancid Config BackUp Issue on V3.1 Message-ID: <55ED2BFE.1030005@tashicell.com> Sir, I have installed the rancid v3.1 and when I check my config file it shows !RANCID-CONTENT-TYPE: cisco ! And below is my log file when I do run the comman rancid-run cvs remove: scheduling `x.x.x.x' for removal cvs remove: use 'cvs commit' to remove this file permanently Removing x.x.x.x; /opt/rancid/var/CVS/test/configs/x.x.x.x,v <-- x.x.x.x new revision: delete; previous revision: 1.2 done Deleted x.x.x.x Checking in router.db; /opt/rancid/var/CVS/test/router.db,v <-- router.db new revision: 1.3; previous revision: 1.2 done If you could guide me set up rancid correctly or guide me where I am doing wrong. -- TashiCell Subash Khati Tashi InfoComm Ltd Webmaster | Core Network & ISP | Thimphu tel: 77889977 ext-8831 | mobile: +975 77156677 website | facebook | vCard | map | email -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: TashiCell_Logo.png Type: image/png Size: 17691 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: subash_khati.vcf Type: text/x-vcard Size: 164 bytes Desc: not available URL: From dmcgill at youngliving.com Wed Sep 9 22:03:41 2015 From: dmcgill at youngliving.com (Daren McGill) Date: Wed, 9 Sep 2015 22:03:41 +0000 Subject: [rancid] Palo Alto issue Message-ID: I just upgraded to 3.2 as Palo Alto was now integrated ran into the following issue. If I run the command in rancid it goes to run the right command but comes back with nothing. However if I run the command for panlogin direct it works great. See output below. [rancid at lei-tac-prd-254 ~]$ export NOPIPE=YES; rancid -d -t paloalto crp01-pan02 loadtype: device type paloalto loadtype: found device type paloalto in /usr/local/rancid/etc/rancid.types.base executing panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 crp01-pan02: missed cmd(s): all commands crp01-pan02: End of run not found crp01-pan02: End of run not found [rancid at lei-tac-prd-254 ~]$ panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 crp01-pan02 spawn ssh -c 3des -x -l svc-rancid crp01-pan02 Password: Last login: Wed Sep 9 15:59:34 2015 from 10.2.10.254 Welcome svc-rancid. svc-rancid at CRP01-PAN02(active)> svc-rancid at CRP01-PAN02(active)> svc-rancid at CRP01-PAN02(active)> set cli scripting-mode on svc-rancid at CRP01-PAN02(active)> set cli pager off svc-rancid at CRP01-PAN02(active)> show system info hostname: CRP01-PAN02 The config scrolls after this with no issues. Thanks, Daren -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Thu Sep 10 00:05:20 2015 From: heas at shrubbery.net (heasley) Date: Thu, 10 Sep 2015 00:05:20 +0000 Subject: [rancid] Palo Alto issue In-Reply-To: References: Message-ID: <20150910000520.GB11904@shrubbery.net> Wed, Sep 09, 2015 at 10:03:41PM +0000, Daren McGill: > I just upgraded to 3.2 as Palo Alto was now integrated ran into the following issue. If I run the command in rancid it goes to run the right command but comes back with nothing. However if I run the command for panlogin direct it works great. See output below. have you applied the patch for 3.2 from the ftp site? > [rancid at lei-tac-prd-254 ~]$ export NOPIPE=YES; rancid -d -t paloalto crp01-pan02 > loadtype: device type paloalto > loadtype: found device type paloalto in /usr/local/rancid/etc/rancid.types.base > executing panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02: missed cmd(s): all commands > crp01-pan02: End of run not found > crp01-pan02: End of run not found > > > [rancid at lei-tac-prd-254 ~]$ panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02 > spawn ssh -c 3des -x -l svc-rancid crp01-pan02 > Password: > Last login: Wed Sep 9 15:59:34 2015 from 10.2.10.254 > Welcome svc-rancid. > > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> set cli scripting-mode on > svc-rancid at CRP01-PAN02(active)> set cli pager off > svc-rancid at CRP01-PAN02(active)> show system info > > hostname: CRP01-PAN02 > > The config scrolls after this with no issues. > > Thanks, > Daren > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo/rancid-discuss From dmcgill at youngliving.com Thu Sep 10 00:20:53 2015 From: dmcgill at youngliving.com (Daren McGill) Date: Thu, 10 Sep 2015 00:20:53 +0000 Subject: [rancid] Palo Alto issue In-Reply-To: <20150910000520.GB11904@shrubbery.net> References: , <20150910000520.GB11904@shrubbery.net> Message-ID: <71E264A151F2E73C.064C1837-9E04-42A4-9579-9B648FC32991@mail.outlook.com> Probably not I will do that Sent from Outlook On Wed, Sep 9, 2015 at 5:05 PM -0700, "heasley" > wrote: Wed, Sep 09, 2015 at 10:03:41PM +0000, Daren McGill: > I just upgraded to 3.2 as Palo Alto was now integrated ran into the following issue. If I run the command in rancid it goes to run the right command but comes back with nothing. However if I run the command for panlogin direct it works great. See output below. have you applied the patch for 3.2 from the ftp site? > [rancid at lei-tac-prd-254 ~]$ export NOPIPE=YES; rancid -d -t paloalto crp01-pan02 > loadtype: device type paloalto > loadtype: found device type paloalto in /usr/local/rancid/etc/rancid.types.base > executing panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02: missed cmd(s): all commands > crp01-pan02: End of run not found > crp01-pan02: End of run not found > > > [rancid at lei-tac-prd-254 ~]$ panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02 > spawn ssh -c 3des -x -l svc-rancid crp01-pan02 > Password: > Last login: Wed Sep 9 15:59:34 2015 from 10.2.10.254 > Welcome svc-rancid. > > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> set cli scripting-mode on > svc-rancid at CRP01-PAN02(active)> set cli pager off > svc-rancid at CRP01-PAN02(active)> show system info > > hostname: CRP01-PAN02 > > The config scrolls after this with no issues. > > Thanks, > Daren > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From dmcgill at youngliving.com Thu Sep 10 01:23:30 2015 From: dmcgill at youngliving.com (Daren McGill) Date: Thu, 10 Sep 2015 01:23:30 +0000 Subject: [rancid] Palo Alto issue In-Reply-To: <20150910000520.GB11904@shrubbery.net> References: , <20150910000520.GB11904@shrubbery.net> Message-ID: <71E264A151F2E73C.C29A7357-8827-4EEE-A9A8-6F2674FC60BE@mail.outlook.com> Sorry to bug you been looking for good info on how to patch do you have a link by any chance? Thanks, Daren Sent from Outlook On Wed, Sep 9, 2015 at 5:05 PM -0700, "heasley" > wrote: Wed, Sep 09, 2015 at 10:03:41PM +0000, Daren McGill: > I just upgraded to 3.2 as Palo Alto was now integrated ran into the following issue. If I run the command in rancid it goes to run the right command but comes back with nothing. However if I run the command for panlogin direct it works great. See output below. have you applied the patch for 3.2 from the ftp site? > [rancid at lei-tac-prd-254 ~]$ export NOPIPE=YES; rancid -d -t paloalto crp01-pan02 > loadtype: device type paloalto > loadtype: found device type paloalto in /usr/local/rancid/etc/rancid.types.base > executing panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02: missed cmd(s): all commands > crp01-pan02: End of run not found > crp01-pan02: End of run not found > > > [rancid at lei-tac-prd-254 ~]$ panlogin -t 90 -c"set cli scripting-mode on;set cli pager off;show system info;show config running" crp01-pan02 > crp01-pan02 > spawn ssh -c 3des -x -l svc-rancid crp01-pan02 > Password: > Last login: Wed Sep 9 15:59:34 2015 from 10.2.10.254 > Welcome svc-rancid. > > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> > svc-rancid at CRP01-PAN02(active)> set cli scripting-mode on > svc-rancid at CRP01-PAN02(active)> set cli pager off > svc-rancid at CRP01-PAN02(active)> show system info > > hostname: CRP01-PAN02 > > The config scrolls after this with no issues. > > Thanks, > Daren > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From mscholes at our-corner.net Tue Sep 15 19:54:00 2015 From: mscholes at our-corner.net (Minh Scholes) Date: Tue, 15 Sep 2015 12:54:00 -0700 Subject: [rancid] New installation not working Message-ID: Installed Rancid and SVN on fedora21 host. Tested using clogin and tested fine. added host to router.db and ran rancid-run. Immediately moves host to router.down. Only output in log is property 'svn:ignore' set on '.' property 'svn:ignore' set on 'configs' Updating '.': At revision 5. How to debug why rancid is placing host down? google search so far has been futile. -------------- next part -------------- An HTML attachment was scrubbed... URL: From mscholes at our-corner.net Tue Sep 15 22:41:58 2015 From: mscholes at our-corner.net (Minh Scholes) Date: Tue, 15 Sep 2015 15:41:58 -0700 Subject: [rancid] New installation not working In-Reply-To: References: Message-ID: Thanks. All the build help docs I was using used the colon instead of the semi-colon. that was completely throwing me off. Now I have to figure out websvn permission issue....... -------------- next part -------------- An HTML attachment was scrubbed... URL: From alan.mckinnon at gmail.com Wed Sep 16 06:26:23 2015 From: alan.mckinnon at gmail.com (Alan McKinnon) Date: Wed, 16 Sep 2015 08:26:23 +0200 Subject: [rancid] New installation not working In-Reply-To: References: Message-ID: <55F90B8F.7000403@gmail.com> On 16/09/2015 00:41, Minh Scholes wrote: > Thanks. All the build help docs I was using used the colon instead of > the semi-colon. that was completely throwing me off. You should ignore most, if not all, rancid HOWTOs out there on the intertubes. Most of them are flat-out wrong, and outdated. The docs shipped in the tarball are ideal and contain everything you need to know > Now I have to figure out websvn permission issue....... Your webserver minimally needs to have read permission to the SVN tree. Often this entails making the webserver user a member of the rancid group, and giving read permission on the group for the whole SVN tree -- Alan McKinnon alan.mckinnon at gmail.com From allonon at gmail.com Wed Sep 16 16:06:49 2015 From: allonon at gmail.com (allonon) Date: Wed, 16 Sep 2015 09:06:49 -0700 Subject: [rancid] New Rancid Install Message-ID: Working through installing rancid on my own for the first time. I've used it at previous companies but having to install it myself at this company. So far have managed to get everything mostly working but am confused by rancid-run. Everything I've read says I need to setup a cron job to have it run. which is fine, that is what I expect. However in my install it seems that it is already running hourly. I can't seem to find where that is configured. Given the CPU hit on the cisco devices, 1 hour is too often for our environment installed this on fedora 21, directly from the repo -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Wed Sep 16 18:55:41 2015 From: heas at shrubbery.net (heasley) Date: Wed, 16 Sep 2015 18:55:41 +0000 Subject: [rancid] New Rancid Install In-Reply-To: References: Message-ID: <20150916185541.GG63809@shrubbery.net> Wed, Sep 16, 2015 at 09:06:49AM -0700, allonon: > So far have managed to get everything mostly working but am confused by > rancid-run. Everything I've read says I need to setup a cron job to have > it run. which is fine, that is what I expect. However in my install it > seems that it is already running hourly. I can't seem to find where that > is configured. Given the CPU hit on the cisco devices, 1 hour is too often > for our environment > > installed this on fedora 21, directly from the repo directly from what repo? and, it must be running from cron; some crons support more than one way to configure a job and i presume fedora's does. see its manpage. From andrewm659 at gmail.com Mon Sep 28 13:33:13 2015 From: andrewm659 at gmail.com (Andrew Meyer) Date: Mon, 28 Sep 2015 08:33:13 -0500 Subject: [rancid] rancid with svn Message-ID: I was able to setup Ranicd with SVN however I added a new device and made a few changes to my own hardware and I don't see the updates reflecting in in websvn. Anyone else have this problem? Andrew Meyer andrewm659 at gmail.com ameyer at tsg2.com 314-266-4837 -------------- next part -------------- An HTML attachment was scrubbed... URL: From alan.mckinnon at gmail.com Mon Sep 28 13:58:55 2015 From: alan.mckinnon at gmail.com (Alan McKinnon) Date: Mon, 28 Sep 2015 15:58:55 +0200 Subject: [rancid] rancid with svn In-Reply-To: References: Message-ID: <5609479F.1080101@gmail.com> On 28/09/2015 15:33, Andrew Meyer wrote: > I was able to setup Ranicd with SVN however I added a new device and > made a few changes to my own hardware and I don't see the updates > reflecting in in websvn. > > Anyone else have this problem? You have misconfigured your software and there are many ways yu can ge this wrong. Please supply lots more information, minimally your config, relevant file permissions and logs -- Alan McKinnon alan.mckinnon at gmail.com From andrewm659 at yahoo.com Tue Sep 29 01:56:54 2015 From: andrewm659 at yahoo.com (Andrew Meyer) Date: Tue, 29 Sep 2015 01:56:54 +0000 (UTC) Subject: [rancid] rancid with svn Message-ID: <872274701.2503479.1443491814654.JavaMail.yahoo@mail.yahoo.com> I was able to setup Ranicd with SVN however I added a new device and made a few changes to my own hardware and I don't see the updates reflecting in in websvn. Here is my configs:FreeBSD 10.1 running in Jail using ezjail with routing inside the jail.root at rancid2svn:~ # cat /usr/local/etc/rancid/rancid.conf # rancid 2.3.8 # This file sets up the environment used for rancid. see rancid.conf(5) # # This will be site specific # TERM=network;export TERM # # Collating locale LC_COLLATE="POSIX"; export LC_COLLATE # # Create files w/o world read/write/exec permissions, but read/exec permissions # for group. umask 027 # # Under BASEDIR (i.e.: --localstatedir), there will be a "logs" directory for # the logs from rancid and a directory for each group of routers defined in # LIST_OF_GROUPS (below). In addition to these, there will be a "CVS" # directory which is the cvs (or Subversion) repository. # # Use a full path (no sym-links) for BASEDIR. # TMPDIR=/tmp; export TMPDIR # Be careful changing this, it affects CVSROOT below. It should be a FQPN, not # relative. BASEDIR=/usr/local/var/rancid; export BASEDIR PATH=/usr/local/libexec/rancid:/usr/local/bin:/usr/sbin:/usr/bin:.:/bin:/usr/bin; export PATH # Location of the CVS/SVN repository. Be careful changing this. # If RCSSYS is svn, this can be: # - an (absolute) path (a subdirectory of BASEDIR by default). # - any URL that subversion understands, but beware that: # - no attempt will be made to create the repository when running rancid-cvs. # - authentication credentials, if necessary, MUST be cached (see the SVN # book, Ch. 3, Network Model, Caching credentials) before non-interactive # commands can run, e.g. by running rancid-cvs after installation. CVSROOT=$BASEDIR/SVN; export CVSROOT # Location of log files produced by rancid-run(1). LOGDIR=$BASEDIR/logs; export LOGDIR # # Select which RCS system to use, "cvs" (default) or "svn". Do not change # this after CVSROOT has been created with rancid-cvs. Changing between these # requires manual conversions. RCSSYS=svn; export RCSSYS # # if ACLSORT is NO, access-lists will NOT be sorted. #ACLSORT=YES; export ACLSORT # # if NOPIPE is set, temp files will be used instead of a cmd pipe during # collection from the router(s). #NOPIPE=YES; export NOPIPE # # FILTER_PWDS determines which passwords are filtered from configs by the # value set (NO | YES | ALL). see rancid.conf(5). #FILTER_PWDS=YES; export FILTER_PWDS # # if NOCOMMSTR is set, snmp community strings will be stripped from the configs #NOCOMMSTR=YES; export NOCOMMSTR # # How many times failed collections are retried (for each run) before # giving up. Minimum: 1 #MAX_ROUNDS=4; export MAX_ROUNDS # # How many hours should pass before complaining about routers that # can not be reached. The value should be greater than the number # of hours between your rancid-run cron job. Default: 24 #OLDTIME=4; export OLDTIME # # How many hours should pass before complaining that a group's collection # (the age of it's lock file) is hung. #LOCKTIME=4; export LOCKTIME # # The number of devices to collect simultaneously. #PAR_COUNT=5; export PAR_COUNT # # list of rancid groups LIST_OF_GROUPS="NetworkDevices" # more groups... #LIST_OF_GROUPS="$LIST_OF_GROUPS noc billybobisp" # # For each group, define a list of people to receive the diffs. # in sendmail's /etc/aliases. # rancid-group: joe,moe at foo # rancid-admin-group: hostmaster # be sure to read ../README regarding aliases. # # If your MTA configuration is broken or you want mail to be forwarded to a # domain not the same as the local one, define that domain here. "@" must be # included, as this is simply appended to the usual recipients. It is NOT # appended to recipients specified in rancid-run's -m option. #MAILDOMAIN="@example.com"; export MAILDOMAIN # # By default, rancid mail is marked with precedence "bulk". This may be # changed by setting the MAILHEADERS variable; for example no header by setting # it to "" or adding X- style headers. Individual headers must be separated # by a \n. #MAILHEADERS="Precedence: bulk"; export MAILHEADERS root at rancid2svn:~ # root at rancid2svn:~ # cat /usr/local/var/rancid/SVN/conf/svnserve.conf### This file controls the configuration of the svnserve daemon, if you### use it to allow access to this repository. ?(If you only allow### access through http: and/or file: URLs, then this file is### irrelevant.) ### Visit http://subversion.apache.org/ for more information. [general]### The anon-access and auth-access options control access to the### repository for unauthenticated (a.k.a. anonymous) users and### authenticated users, respectively.### Valid values are "write", "read", and "none".### Setting the value to "none" prohibits both reading and writing;### "read" allows read-only access, and "write" allows complete### read/write access to the repository.### The sample settings below are the defaults and specify that anonymous### users have read-only access to the repository, while authenticated### users have read and write access to the repository.anon-access = readauth-access = write### The password-db option controls the location of the password### database file. ?Unless you specify a path starting with a /,### the file's location is relative to the directory containing### this configuration file.### If SASL is enabled (see below), this file will NOT be used.### Uncomment the line below to use the default password file.password-db = /usr/local/var/rancid/SVN/conf/passwd### The authz-db option controls the location of the authorization### rules for path-based access control. ?Unless you specify a path### starting with a /, the file's location is relative to the### directory containing this file. ?The specified path may be a### repository relative URL (^/) or an absolute file:// URL to a text### file in a Subversion repository. ?If you don't specify an authz-db,### no path-based access control is done.### Uncomment the line below to use the default authorization file.# authz-db = authz### The groups-db option controls the location of the groups file.### Unless you specify a path starting with a /, the file's location is### relative to the directory containing this file. ?The specified path### may be a repository relative URL (^/) or an absolute file:// URL to a### text file in a Subversion repository.# groups-db = groups### This option specifies the authentication realm of the repository.### If two repositories have the same authentication realm, they should### have the same password database, and vice versa. ?The default realm### is repository's uuid.# realm = My First Repository### The force-username-case option causes svnserve to case-normalize### usernames before comparing them against the authorization rules in the### authz-db file configured above. ?Valid values are "upper" (to upper-### case the usernames), "lower" (to lowercase the usernames), and### "none" (to compare usernames as-is without case conversion, which### is the default behavior).# force-username-case = none### The hooks-env options specifies a path to the hook script environment### configuration file. This option overrides the per-repository default### and can be used to configure the hook script environment for multiple### repositories in a single file, if an absolute path is specified.### Unless you specify an absolute path, the file's location is relative### to the directory containing this file.# hooks-env = hooks-env [sasl]### This option specifies whether you want to use the Cyrus SASL### library for authentication. Default is false.### This section will be ignored if svnserve is not built with Cyrus### SASL support; to check, run 'svnserve --version' and look for a line### reading 'Cyrus SASL authentication is available.'# use-sasl = true### These options specify the desired strength of the security layer### that you want SASL to provide. 0 means no encryption, 1 means### integrity-checking only, values larger than 1 are correlated### to the effective key length for encryption (e.g. 128 means 128-bit### encryption). The values below are the defaults.# min-encryption = 0# max-encryption = 256root at rancid2svn:~ # root at rancid2svn:~ # su - rancid$ ls -altotal 164drwxrwxr-x ?7 rancid ?rancid ? ? 512 Sep 24 18:01 .drwxr-xr-x ?4 root ? ?wheel ? ? ?512 Aug ?8 21:39 ..-rw------- ?1 rancid ?rancid ? ? 388 Sep 24 18:03 .cloginrc-rw-r--r-- ?1 rancid ?rancid ? ?1066 Aug ?8 21:44 .cshrc-rw-r--r-- ?1 rancid ?rancid ? ? 252 Aug ?8 21:44 .login-rw-r--r-- ?1 rancid ?rancid ? ? 163 Aug ?8 21:44 .login_conf-rw------- ?1 rancid ?rancid ? ? 379 Aug ?8 21:44 .mail_aliases-rw-r--r-- ?1 rancid ?rancid ? ? 336 Aug ?8 21:44 .mailrc-rw-r--r-- ?1 rancid ?rancid ? ? 817 Aug ?8 21:44 .profile-rw------- ?1 rancid ?rancid ? ? 281 Aug ?8 21:44 .rhosts-rw-r--r-- ?1 rancid ?rancid ? ? 978 Aug ?8 21:44 .shrcdrwx------ ?2 rancid ?rancid ? ? 512 Aug ?8 22:00 .sshdrwxr-x--- ?3 rancid ?rancid ? ? 512 Aug ?8 21:46 .subversion-rw------- ?1 rancid ?rancid ? ?2215 Sep 24 18:01 .viminfodrwxr-x--- ?4 rancid ?rancid ? ? 512 Sep 24 18:01 NetworkDevicesdrwxrwx--- ?6 rancid ?www ? ? ? ?512 Aug ?8 21:46 SVNdrwxr-x--- ?2 rancid ?rancid ?101888 Sep 28 20:00 logs$ $ cat NetworkDevices.20150928.200000starting: Mon Sep 28 20:00:00 CDT 2015 hourly config diffs failed: /tmp/.NetworkDevices.run.lock exists-rw-r----- ?1 rancid ?wheel ?0 Aug 20 09:30 /tmp/.NetworkDevices.run.lock ending: Mon Sep 28 20:00:00 CDT 2015$ -------------- next part -------------- An HTML attachment was scrubbed... URL: From jordan.cook at gyron.net Tue Sep 29 10:55:51 2015 From: jordan.cook at gyron.net (Jordan Cook - Gyron Networks) Date: Tue, 29 Sep 2015 10:55:51 +0000 Subject: [rancid] MRV optidriver Message-ID: <53500458A0EBBD40A91A2D5CDE5D3B6606C2EF7F@exchange-a.ad.gyron.net> Hey, Has anyone managed to get MRVs Optidrivers working in rancid? This message may be private and confidential. If you have received this message in error, please notify us and remove it from your system. Gyron may monitor email traffic data and the content of email for the purposes of security and staff training. Gyron Internet Ltd is a limited company registered in England and Wales. Registered number: 4239332. Registered office: 3 Centro, Boundary Way, Hemel Hempstead, HP2 7SU. VAT reg no 804 2532 63. Gyron is a registered trademark. Gyron is a Deloitte Technology Fast 50 ranked company. From heas at shrubbery.net Tue Sep 29 15:52:57 2015 From: heas at shrubbery.net (heasley) Date: Tue, 29 Sep 2015 15:52:57 +0000 Subject: [rancid] rancid with svn In-Reply-To: <872274701.2503479.1443491814654.JavaMail.yahoo@mail.yahoo.com> References: <872274701.2503479.1443491814654.JavaMail.yahoo@mail.yahoo.com> Message-ID: <20150929155257.GB73360@shrubbery.net> Tue, Sep 29, 2015 at 01:56:54AM +0000, Andrew Meyer: > I was able to setup Ranicd with SVN however I added a new device and made a few changes to my own hardware and I don't see the updates reflecting in in websvn. Here is my configs:FreeBSD 10.1 running in Jail using ezjail with routing inside the jail.root at rancid2svn:~ # cat /usr/local/etc/rancid/rancid.conf > # rancid 2.3.8 please move to 3.2. > > $ cat NetworkDevices.20150928.200000starting: Mon Sep 28 20:00:00 CDT 2015 > hourly config diffs failed: /tmp/.NetworkDevices.run.lock exists-rw-r----- ?1 rancid ?wheel ?0 Aug 20 09:30 /tmp/.NetworkDevices.run.lock > ending: Mon Sep 28 20:00:00 CDT 2015$ correct this first. this lock is stale or there is a hung process.