[rancid] Re: Redback timeouts lockout admin accounts

Ed Ravin eravin at panix.com
Mon Jul 17 16:05:21 UTC 2006


On Mon, Jul 17, 2006 at 10:42:43AM -0500, Gary L Roberts wrote:
> Running ./clogin produces this output:
> 
> [rancid at Rancid bin]$ ./clogin 10.xxx.xxx.xxx
> 10.xxx.xxx.xxx
> spawn ssh -c 3des -x -l adminlogin 10.xxx.xxx.xxx
> adminlogin at 10.xxx.xxx.xxx's password:
> [local]REDBACK#show config
> 
> Error: TIMEOUT reached
> [rancid at Rancid bin]$ show config
> bash: show: command not found
> 
> 
> Redback only allows so many admin sessions at one time to be logged into 
> the system.
> And since RANCID errors out, it is not closing the ssh session. so after 
> 1 days time, it completely locks out remote access to the router.

I think I fixed that problem with clogin a couple of months ago - see
patch below.  clogin wasn't properly closing the SSH/telnet session
if there was a timeout error.

@@ -626,7 +644,7 @@
                                                  exp_continue
                                                }
        -re "\[\n\r]+"                          { exp_continue }
-       timeout                                 { return 0 }
+       timeout                                 { close; return 0 }
        eof                                     { return 0 }
     }
     set in_proc 0




More information about the Rancid-discuss mailing list