<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:#0563C1;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">I have an ASA firewall running version 9.8(2), and the clogin script is missing something in the sequence such that I don’t get to the enable mode properly.</p>
<p class="MsoNormal"><span style="font-size:7.0pt; font-family:"Courier New"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">[rancid3]$ bin/clogin asa</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">spawn ssh -c aes256-cbc -x -l <username> asa</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""><username>@asa's password:</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">User logged in to ASA</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Logins over the last 4 days: 28. Last login: 22:33:20 UTC Sep 10 2017 from x.y.z.a</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Failed logins since the last login: 0. Last failed login: 06:03:53 UTC Sep 8 2017 from x.y.z.a</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Type help or '?' for a list of available commands.</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">ASA> <username></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> ^</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">ERROR: % Invalid input detected at '^' marker.</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> </span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Error: Unrecognized command, check your enable command</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">ASA> <username></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> ^</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">ERROR: % Invalid input detected at '^' marker.</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">ASA> enable</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Password:</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New"">Password:</span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> </span></p>
<p class="MsoNormal">And that is where it stops (never tries to type in the enable password). If I manually input the enable password that I have in .clogin, it lets me into enable mode. Other ASA’s with older versions work fine, the .clogin file is properly
written for this device. Could upgrading to the current version of rancid solve this (currently on v3.1)?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Thanks,</p>
<p class="MsoNormal">Wayne</p>
<p class="MsoNormal"><span style="font-family:"Courier New""> </span></p>
</div>
<br>
<hr>
<font face="Arial" color="Blue" size="1"><br>
The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to
the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.<br>
</font>
</body>
</html>