[rancid] Re: Timeouts on Cisco ASA

Tue Apr 28 08:46:13 UTC 2009

On Tuesday 21 April 2009 16:55:07 john heasley wrote:
> you havent included enough of the output.

Here's the full debug output for a normal run and then for a run with 
noenable:

The clogin snippet:

<paste>
rancid at mon:~/rancid/bin$ grep 10.1.2.1 /home/rancid/.cloginrc
add user 10.1.2.1               {user}
add password 10.1.2.1           {loginpass} {enablepass}
add method 10.1.2.1             ssh
add enableprompt 10.1.2.1       {"\[Pp]assword:"}
add autoenable 10.1.2.1         {0}
</paste>

A manual clogin run:

<paste>
rancid at mon:~/rancid/bin$ ./clogin -t 10 10.1.2.1
10.1.2.1
spawn ssh -c 3des -x -l user 10.1.2.1
user at 10.1.2.1's password:
Type help or '?' for a list of available commands.
ciscoasa>

Error: TIMEOUT reached
</paste>

A run with full debug:

<paste>
rancid at mon:~/rancid/bin$ ./clogin -t 10 -d 10.1.2.1
10.1.2.1                                               
spawn ssh -c 3des -x -l user 10.1.2.1               
parent: waiting for sync byte                          
parent: telling child to go ahead                      
parent: now unsynchronized from child                  
spawn: returns {26050}                                 

expect: does "" (spawn_id exp6) match regular expression "(Connection refused|
Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no                                                            

expect: does "" (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does "" (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no                                       
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no                                
"Offending key for .* (yes/no)?"? no                                             
"(denied|Sorry)"? no                                                             
"Login failed"? no                                                               
"% (Bad passwords|Authentication failed)"? no                                    
"Press any key to continue"? no                                                  
"Enter Selection: "? no                                                          
"Last login:"? no                                                                
"@[^\r\n]+ ([Pp]assword|passwd):"? no                                            
"(Username|Login|login|user name|User):"? no                                     
"([Pp]assword|passwd):"? no                                                      
"(#| \(enable\))"? no                                                            
"Login invalid"? no                                                              
user at 10.1.2.1's password:                                                     
expect: does "user at 10.1.2.1's password: " (spawn_id exp6) match regular 
expression "(Connection refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no                                                                                         

expect: does "user at 10.1.2.1's password: " (spawn_id exp6) match glob pattern 
"unknown host\r"? no

expect: does "user at 10.1.2.1's password: " (spawn_id exp6) match glob pattern 
"Host is unreachable"? no
"No address associated with name"? no                                                                    
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no                        
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no                                                        
"Offending key for .* (yes/no)?"? no                                                                     
"(denied|Sorry)"? no                                                                                     
"Login failed"? no                                                                                       
"% (Bad passwords|Authentication failed)"? no                                                            
"Press any key to continue"? no                                                                          
"Enter Selection: "? no                                                                                  
"Last login:"? no                                                                                        
"@[^\r\n]+ ([Pp]assword|passwd):"? yes                                                                   
expect: set expect_out(0,string) "@10.1.2.1's password:"                                                 
expect: set expect_out(1,string) "password"                                                              
expect: set expect_out(spawn_id) "exp6"                                                                  
expect: set expect_out(buffer) "user at 10.1.2.1's password:"                                            
send: sending "loginpass\r" to { exp6 }                                                                   
expect: continuing expect                                                                                

expect: does " " (spawn_id exp6) match regular expression "(Connection 
refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no                                                             

expect: does " " (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no                                        
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no                                
"Offending key for .* (yes/no)?"? no                                             
"(denied|Sorry)"? no                                                             
"Login failed"? no                                                               
"% (Bad passwords|Authentication failed)"? no                                    
"Press any key to continue"? no                                                  
"Enter Selection: "? no                                                          
"Last login:"? no                                                                
"@[^\r\n]+ ([Pp]assword|passwd):"? no                                            
"(Username|Login|login|user name|User):"? no                                     
"([Pp]assword|passwd):"? no                                                      
"(#| \(enable\))"? no                                                            
"Login invalid"? no                                                              

expect: does " \r\n" (spawn_id exp6) match regular expression "(Connection 
refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no                                                                 

expect: does " \r\n" (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " \r\n" (spawn_id exp6) match glob pattern "Host is unreachable"? 
no
"No address associated with name"? no                                            
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no                                
"Offending key for .* (yes/no)?"? no                                             
"(denied|Sorry)"? no                                                             
"Login failed"? no                                                               
"% (Bad passwords|Authentication failed)"? no                                    
"Press any key to continue"? no                                                  
"Enter Selection: "? no                                                          
"Last login:"? no                                                                
"@[^\r\n]+ ([Pp]assword|passwd):"? no                                            
"(Username|Login|login|user name|User):"? no                                     
"([Pp]assword|passwd):"? no                                                      
"(#| \(enable\))"? no                                                            
"Login invalid"? no                                                              
Type help or '?' for a list of available commands.                               

expect: does " \r\nType help or '?' for a list of available commands.\r\n" 
(spawn_id exp6) match regular expression "(Connection refused|Secure 
connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no                                                                                                                       

expect: does " \r\nType help or '?' for a list of available commands.\r\n" 
(spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " \r\nType help or '?' for a list of available commands.\r\n" 
(spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no                                                                                                  
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no                                                      
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no                                                                                      
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
"(#| \(enable\))"? no
"Login invalid"? no
ciscoasa>
expect: does " \r\nType help or '?' for a list of available commands.
\r\n\rciscoasa> " (spawn_id exp6) match regular expression "(Connection 
refused|Secure connection [^\n\r]+ refused)"? no
"(Connection closed by|Connection to [^\n\r]+ closed)"? no

expect: does " \r\nType help or '?' for a list of available commands.
\r\n\rciscoasa> " (spawn_id exp6) match glob pattern "unknown host\r"? no

expect: does " \r\nType help or '?' for a list of available commands.
\r\n\rciscoasa> " (spawn_id exp6) match glob pattern "Host is unreachable"? no
"No address associated with name"? no
"(Host key not found |The authenticity of host .* be established).*(yes/no)?"? 
no
"HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
"Offending key for .* (yes/no)?"? no
"(denied|Sorry)"? no
"Login failed"? no
"% (Bad passwords|Authentication failed)"? no
"Press any key to continue"? no
"Enter Selection: "? no
"Last login:"? no
"@[^\r\n]+ ([Pp]assword|passwd):"? no
"(Username|Login|login|user name|User):"? no
"([Pp]assword|passwd):"? no
"(#| \(enable\))"? no
"Login invalid"? no
expect: timed out

Error: TIMEOUT reached
write() failed to write anything - will sleep(1) and retry...
</paste>

noenable run:

<paste>
rancid at mon:~/rancid/bin$ ./clogin -t 10 -d -noenable 10.1.2.1      
10.1.2.1                                                               
spawn ssh -c 3des -x -l user 10.1.2.1                               
parent: waiting for sync byte                                          
parent: telling child to go ahead                                      
parent: now unsynchronized from child                                  
spawn: returns {26441}                                                 