<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-GB link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>Problem solved<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>I had a stunning idea to check
the logs for the pix on rancid... lord only knows why I didn’t think to
do this sooner, but in there it stated that /tmp/.pix.run.lock existed.
Knowing that rancid was not running, I removed this file, and ran rancid, and
now we have updates on all the pix firewalls. :) <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>The stupid thing is that I had
ran ls /tmp numerous times, and not seen anything there, so assumed that the
lock file wasn’t there. Stupid me forgot to run –a with ls so
I see hidden files!! I might change rancid’s scripts to not make the lock
file a hidden file so ls will see it by default hehe<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Anyway, thanks for the help on
this one!! More often than not explaining your actions to someone gives
you a clue.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Note to self... check logs for
problems first!<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Steve Ousley - SO620-RIPE<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Nuco Technologies Ltd<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><a
href="mailto:steve@host-it.co.uk"><span style='font-size:10.5pt;font-family:
Consolas'>steve@host-it.co.uk</span></a></span><span style='font-size:10.5pt;
font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><a
href="http://www.nucotechnologies.com/"><span style='font-size:10.5pt;
font-family:Consolas'>www.nucotechnologies.com</span></a></span><span
style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Tel. 0870 165 1300<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'>Nuco Technologies Ltd is a company registered in England and
Wales<br>
with company number 04470751</span><span style='color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:
"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> rancid-discuss-bounces@shrubbery.net
[mailto:rancid-discuss-bounces@shrubbery.net] <b>On Behalf Of </b>Steve Ousley<br>
<b>Sent:</b> 15 July 2008 12:29<br>
<b>To:</b> rancid-discuss@shrubbery.net<br>
<b>Subject:</b> [rancid] Re: Problems with getting configuration from a PIX
501.<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='color:#1F497D'>Sorry for the fast follow on to
this.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>I have now found out that it is
actually like this on ALL pix’s that we have. Any ASA that we have
is working fine, however no pix is updating.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>I have tried running rancid-r
<pix> and that runs, for about 1 second, then finishes, where running
this on an ASA takes approximately 10 seconds. There is however no error
on the command line when I run “rancid –r <pix>”.
This is now confusing me even more! As far as I can tell, rancid is
trying to get the pix configurations, but failing somewhere that I cannot
tell. Is there a way to manually run the process that rancid-run would do
in order to try and see if there’s a problem somewhere?<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Thanks<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Steve Ousley - SO620-RIPE<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Nuco Technologies Ltd<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><a
href="mailto:steve@host-it.co.uk"><span style='font-size:10.5pt;font-family:
Consolas'>steve@host-it.co.uk</span></a></span><span style='font-size:10.5pt;
font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><a
href="http://www.nucotechnologies.com/"><span style='font-size:10.5pt;
font-family:Consolas'>www.nucotechnologies.com</span></a></span><span
style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Tel. 0870 165 1300<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'>Nuco Technologies Ltd is a company registered in England and
Wales<br>
with company number 04470751</span><span style='color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:
"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> rancid-discuss-bounces@shrubbery.net
[mailto:rancid-discuss-bounces@shrubbery.net] <b>On Behalf Of </b>Steve Ousley<br>
<b>Sent:</b> 15 July 2008 12:20<br>
<b>To:</b> rancid-discuss@shrubbery.net<br>
<b>Subject:</b> [rancid] Problems with getting configuration from a PIX 501.<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I have had rancid installed a little while now, and am
noticing problems with rancid on one pix (not sure if it’s on more or
not, but this is the only one I can confirm without going through manually
checking all of them).<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>The problem is that it doesn’t seem to be updating the
CVS repo with the latest configurations.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I do know that we occasionally get problems like this with
pix’s where the ssh connection doesn’t work (usually tell this by
running clogin to the pix) however this manages to ssh in no problems, and gets
the enable prompt, see below:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>[CODE]<o:p></o:p></p>
<p class=MsoNormal>nagios-1:/usr/local/rancid/var/asa# clogin <firewall><o:p></o:p></p>
<p class=MsoNormal><firewall><o:p></o:p></p>
<p class=MsoNormal>spawn ssh -c 3des -x -l <rancid-user> <firewall><o:p></o:p></p>
<p class=MsoNormal><rancid-user>@<firewall>'s password:<o:p></o:p></p>
<p class=MsoNormal>Type help or '?' for a list of available commands.<o:p></o:p></p>
<p class=MsoNormal><firewall>><o:p></o:p></p>
<p class=MsoNormal><firewall>> enable<o:p></o:p></p>
<p class=MsoNormal>Password: *<o:p></o:p></p>
<p class=MsoNormal><firewall>#<o:p></o:p></p>
<p class=MsoNormal>[/CODE]<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>As you can see, this is logging into the pix no problems (I
have changed any instance of the hostname to <firewall> and the rancid
user, and no the password isn’t 1 character long).<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Using clogin to log into the firewall, I can also run
various commands successfully (sh run, sh ver etc). However the firewall
still will not update. <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Does anyone have any ideas?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I have also set the pix to “down” and back to
“up” and ran rancid again, to no avail. This is really
confusing me! Since all our other pix’s seem to be working no problems, <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Steve Ousley - SO620-RIPE<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Nuco Technologies Ltd<o:p></o:p></span></p>
<p class=MsoNormal><a href="mailto:steve@host-it.co.uk"><span style='font-size:
10.5pt;font-family:Consolas'>steve@host-it.co.uk</span></a><span
style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><a href="http://www.nucotechnologies.com/"><span
style='font-size:10.5pt;font-family:Consolas'>www.nucotechnologies.com</span></a><span
style='font-size:10.5pt;font-family:Consolas;color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.5pt;font-family:Consolas;
color:#1F497D'>Tel. 0870 165 1300<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'>Nuco Technologies Ltd is a company registered in England and
Wales<br>
with company number 04470751</span><span style='color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>