<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks so much. Hopefully I have some success to share in the next couple of months.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Kevin<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> doug.hughes@keystonenap.com [mailto:doug.hughes@keystonenap.com]
<br>
<b>Sent:</b> Friday, March 2, 2018 9:26 AM<br>
<b>To:</b> heasley <heas@shrubbery.net>; Kevin Geil <KGeil@orda.org><br>
<b>Cc:</b> rancid-discuss@shrubbery.net<br>
<b>Subject:</b> RE: [rancid] Sonicwall: clogin sends password after first login?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">you'll probably have to (or want to) for clogin into something like soniclogin so that it can do what is necessary to get the login prompt determination right. (see also the paloalto login script)<br>
And you'll want a forked rancid from one of the other examples like urancid that sends the right sets of commands. Urancid for ubiquiti devices is a pretty simple and good one to copy, or the fortinet one.<br>
<br>
<br>
<span style="color:#888888">Sent from my android device.</span><br>
<br>
-----Original Message-----<br>
From: Kevin Geil <<a href="mailto:KGeil@orda.org">KGeil@orda.org</a>><br>
To: heasley <<a href="mailto:heas@shrubbery.net">heas@shrubbery.net</a>>, "<a href="mailto:doug.hughes@keystonenap.com">doug.hughes@keystonenap.com</a>" <<a href="mailto:doug.hughes@keystonenap.com">doug.hughes@keystonenap.com</a>><br>
Cc: "<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>" <<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>><br>
Sent: Fri, 02 Mar 2018 9:11<br>
Subject: RE: [rancid] Sonicwall: clogin sends password after first login?<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Thanks, I figured it was something like that. Is it recommended to use a custom version of clogin, or do I just discard the error text when I write the script that retrieves the configuration?
<br>
<br>
Thanks again, <br>
<br>
Kevin <br>
-----Original Message----- <br>
From: heasley [mailto:<a href="mailto:heas@shrubbery.net">heas@shrubbery.net</a>]
<br>
Sent: Thursday, March 1, 2018 6:38 PM <br>
To: <a href="mailto:doug.hughes@keystonenap.com">doug.hughes@keystonenap.com</a> <br>
Cc: <a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>; Kevin Geil <<a href="mailto:KGeil@orda.org">KGeil@orda.org</a>>
<br>
Subject: Re: [rancid] Sonicwall: clogin sends password after first login? <br>
<br>
Thu, Mar 01, 2018 at 05:23:20PM -0500, <a href="mailto:doug.hughes@keystonenap.com">
doug.hughes@keystonenap.com</a>: <br>
> most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
<br>
> <br>
> <br>
> Sent from my android device. <br>
> <br>
> -----Original Message----- <br>
> From: Kevin Geil <<a href="mailto:KGeil@orda.org">KGeil@orda.org</a>> <br>
> To: "<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>" <<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>>
<br>
> Sent: Thu, 01 Mar 2018 16:06 <br>
> Subject: [rancid] Sonicwall: clogin sends password after first login? <br>
> <br>
> Hi, I hope some<a href="geo:0,0?q=one+can+point+me+in">one can point me in</a> the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but
it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance
to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.
<br>
<br>
There is no support for Sonic. So, I do not know if clogin would work with it. you will need to add support yourself.
<br>
<br>
> Thanks again, <br>
> <br>
> Kevin <br>
> <br>
> <br>
> My .cloginrc file looks like this: <br>
> <br>
> add noenable sonic {1} <br>
> add method sonic ssh <br>
> add cyphertype sonic aes128-ctr <br>
> add user sonic ReadOnlyAdmin <br>
> add password sonic {mypassword} <br>
> <br>
> And the output looks like this: <br>
> root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc <br>
> -noenable sonic <br>
> <br>
> ReadOnlyAdmin@sonic's password: <br>
> <br>
> Copyright (c) 2016 Dell | SonicWALL, Inc. <br>
> Using username 'ReadOnlyAdmin'. <br>
> Password: <br>
> ReadOnlyAdmin@MY NSA4600_Primary> mypassword % Error encountered at <br>
> '^' marker: <br>
> mypassword <br>
> ^ <br>
> % Error: No matching command found. <br>
> ReadOnlyAdmin@MY NSA4600_Primary> <br>
> <br>
> <br>
<br>
> _______________________________________________ <br>
> Rancid-discuss mailing list <br>
> <a href="mailto:Rancid-discuss@shrubbery.net">Rancid-discuss@shrubbery.net</a> <br>
> <a href="http://www.shrubbery.net/mailman/listinfo/rancid-discuss">http://www.shrubbery.net/mailman/listinfo/rancid-discuss</a>
<o:p></o:p></p>
</div>
</body>
</html>