<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
K K wrote:
<blockquote
cite="mid:dc718edc0903311107u23424291yb73af68fbbb009f5@mail.gmail.com"
type="cite">
<pre wrap="">2009/3/31 Paul Buts <a class="moz-txt-link-rfc2396E" href="mailto:paul@paulbuts.nl"><paul@paulbuts.nl></a>:
</pre>
<blockquote type="cite">
<pre wrap="">There is only one thing I want to know: is it possible to show who made the
changes in telnet? At this moment the webpage is telling me that the unix
user (who runned Rancid) has made the changes. For example, I have more
telnet accounts. One for Paul and one for Peter. If Paul made one change,
and Peter made two changes, I want that the webpage is telling me exactly
who made a change.
Any hints or keywords would be really appreciated. Thanks!
</pre>
</blockquote>
<pre wrap=""><!---->
If Paul makes one change at noon, then Peter logs in at 4PM and makes
two more, and then Rancid finally runs at 6PM, you'll get one change
email, showing the sum of all changes and (usually) showing that Peter
was the last one to make a change.
One workaround to this is to enable SNMP traps and/or syslog on each
device, and tie you trapper/syslogger into your rancid server.
</pre>
</blockquote>
If the device you are dealing with is a cisco router or switch, it
generates a trap when you do write mem. Set an action script for that
OID that triggers rancid. At home I built a concept setup where I do
this. Configure net-snmp's snmptrapd.conf so that for OID X it triggers
rancid-run. This will ensure you are 100% up to date on the backup. I
don't have access to my box now otherwise I could send you a sample
snmptrapd.conf.<br>
<br>
Thanks,<br>
sam<br>
<blockquote
cite="mid:dc718edc0903311107u23424291yb73af68fbbb009f5@mail.gmail.com"
type="cite">
<pre wrap="">
I have mine configured such that syslog-ng writes all events related
to Cisco configuration changes to a directory change-events, into
files named for the source device and hour of the day. Then each hour
a cron job executes, reads the list of these files, and runs Rancid
against the specific devices found. At the end of the script, it
deletes any file in change-events older than 20 hours.
This still won't catch every change by every user. For that, at least
on Cisco, you can enable per-command logging.
_______________________________________________
Rancid-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Rancid-discuss@shrubbery.net">Rancid-discuss@shrubbery.net</a>
<a class="moz-txt-link-freetext" href="http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss">http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss</a>
</pre>
</blockquote>
<br>
</body>
</html>