RANCID indiscretion

john heasley heas at shrubbery.net
Thu Nov 14 21:03:10 UTC 2002


Thu, Nov 14, 2002 at 09:07:29AM +0100, Janos Mohacsi:
> 
> 
> On Wed, 13 Nov 2002, Robert Brewer wrote:
> 
> > I've noticed that for our Juniper M5s, RANCID insists on including
> > encrypted passwords in email diffs. I know that for some config fields on
> > some devices, RANCID knows to censor the email, but that doesn't seem to
> > happen for JUNOS:
> 
> Not the e-mail censored, but the config file can be stored in secured way:
> Set up
> FILTER_PWDS=ALL; export FILTER_PWDS
> 
> in your rancid env file. By default passwords are not filtered.
> 	Janos Mohacsi
> 

by default, only easily reversable passwords are filtered.  also see
the NOCOMMSTR variable in evn(5).



More information about the Rancid-discuss mailing list