rancid: ciscos, clogin and AAA

Mohacsi Janos mohacsi at niif.hu
Tue May 24 07:35:09 UTC 2005





On Mon, 23 May 2005, john heasley wrote:

> Mon, May 23, 2005 at 10:10:14PM -0400, Mordechai T. Abzug:
>>
>> If one has a device that logs one in at Cisco level 2 rather than 1 or
>> 15, the prompt has "#" but clogin still needs to run enable to achieve
>> level 15.  autoenable won't help because it assumes you're at enable
>> 15.
>>
>> The attached (trivial) patch deals with this.  I'm fairly sure it
>> doesn't break backwards compatibility.
>
> I do not think that will work.  can you try clogin with an incorrect
> enable password?  it might fail; as in not return an error.  Meaning
> that the matches might need adjustment in do_enable().


I think this might work, if you use autoenable 1 . This is waht I do in my 
environment.
Regards,


Janos Mohacsi
Network Engineer, Research Associate
NIIF/HUNGARNET, HUNGARY
Key 00F9AF98: 8645 1312 D249 471B DBAE  21A2 9F52 0D1F 00F9 AF98
>
>> Thanks!
>>
>> - Morty
>
>> *** rancid/bin/clogin.dist	Tue Apr 26 03:14:41 2005
>> --- rancid/bin/clogin.in	Tue May 24 02:00:23 2005
>> ***************
>> *** 634,640 ****
>>   	} else {
>>   	    set autoenable 0
>>   	    set enable $avenable
>> ! 	    set prompt ">"
>>   	}
>>       }
>>
>> --- 634,640 ----
>>   	} else {
>>   	    set autoenable 0
>>   	    set enable $avenable
>> ! 	    set prompt "(>|#)"
>>   	}
>>       }
>>
>
>



More information about the Rancid-discuss mailing list