From mathiruban at gmail.com Tue Dec 1 04:24:03 2009 From: mathiruban at gmail.com (Mathiruban Rajagopal) Date: Tue, 1 Dec 2009 09:54:03 +0530 Subject: [rancid] router.db Message-ID: <136e115c0911302024w1233a46at1704619dbe593639@mail.gmail.com> Dear all, My rancid is working fine but after deleting one router from router.db I am getting retrieving revision for router.db every one hour. What is the wrong with my configuration? Pls let me know. Rgds, Mathy -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/00ab49ba/attachment.html From mstefani at redhat.com Tue Dec 1 09:38:40 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Tue, 01 Dec 2009 10:38:40 +0100 Subject: [rancid] Re: Backing Up Cisco ACE Modules In-Reply-To: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com> References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com> Message-ID: <4B14E420.5080909@redhat.com> Hi Bill, Brown IV, Bill (MFT) wrote: > I?ve been trying to backup the Cisco ACE but Rancid seems to time out > during the connection. I think it has to do with the pager. On the > ACE, every time I login the pager gets set back to its default. Logging > in and then setting ?term length 0? only works for the session. After > Rancid logs out, the pager gets reset. you can try to use my patch from http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html > Scenario: I can login to the device using clogin. Issuing a ?show run? > from there reveals that the pager is set, (noted by the --more-- > prompt). I set ?term length 0? and ?sho run? completes with no pager. > Logging out and then back in reveals that the pager is once again set. > Using the rancid script with ?d, the last output is: > > > > HIT COMMAND:/Admin#show running-config > > In WriteTerm: /Admin#show running-config > > HIT COMMAND: /Admin#write term > > In WriteTerm: /Admin#write term > > : End of run not found > > : End of run not found > > > > My assumption is that somehow Rancid is expecting the enable prompt but > not getting it because of the pager. I looked at the rancid script but > I?m just not proficient enough to know where to hard code a ?term length > 0? and I definitely don?t want to change the behavior for other devices, > (I don?t want to ?mess up?). Does anyone have a piece of code that will > accomplish this? It's not the pager but rancid's detection of the end of the config file which goes wrong. > If possible, if you have it, I would really like to backup all the > contexts within the ACE as well. For now you have to give each context an IP and use that. I plan to add that feature but I'm pretty busy lately. bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera From remyheiden at gmail.com Tue Dec 1 12:35:59 2009 From: remyheiden at gmail.com (Remy Heiden) Date: Tue, 1 Dec 2009 13:35:59 +0100 Subject: [rancid] Re: Backing Up Cisco ACE Modules In-Reply-To: <4B14E420.5080909@redhat.com> References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com> <4B14E420.5080909@redhat.com> Message-ID: Strange.. We backup our ACEs with no trouble at all.. Just using the standard rancid script and separate management IP's on the contexts. No issues with pagers or end of config files... I'll have a look to see if i can find some details.. Remy On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc wrote: > Hi Bill, > > Brown IV, Bill (MFT) wrote: > > I?ve been trying to backup the Cisco ACE but Rancid seems to time out > > during the connection. I think it has to do with the pager. On the > > ACE, every time I login the pager gets set back to its default. Logging > > in and then setting ?term length 0? only works for the session. After > > Rancid logs out, the pager gets reset. > you can try to use my patch from > http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html > > > Scenario: I can login to the device using clogin. Issuing a ?show run? > > from there reveals that the pager is set, (noted by the --more-- > > prompt). I set ?term length 0? and ?sho run? completes with no pager. > > Logging out and then back in reveals that the pager is once again set. > > Using the rancid script with ?d, the last output is: > > > > > > > > HIT COMMAND:/Admin#show running-config > > > > In WriteTerm: /Admin#show running-config > > > > HIT COMMAND: /Admin#write term > > > > In WriteTerm: /Admin#write term > > > > : End of run not found > > > > : End of run not found > > > > > > > > My assumption is that somehow Rancid is expecting the enable prompt but > > not getting it because of the pager. I looked at the rancid script but > > I?m just not proficient enough to know where to hard code a ?term length > > 0? and I definitely don?t want to change the behavior for other devices, > > (I don?t want to ?mess up?). Does anyone have a piece of code that will > > accomplish this? > It's not the pager but rancid's detection of the end of the config file > which goes wrong. > > > If possible, if you have it, I would really like to backup all the > > contexts within the ACE as well. > For now you have to give each context an IP and use that. I plan to add > that feature but I'm pretty busy lately. > > bye > michael > -- > Michael Stefaniuc Tel.: +49-711-96437-199 > Consulting Communications Engineer Fax.: +49-711-96437-111 > -------------------------------------------------------------------- > Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach > Handelsregister: Amtsgericht Muenchen HRB 153243 > Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, > Charles Cachera > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss -- ========================================================== "The smell, you know that gasoline smell, the whole hill. Smelled like... victory." (Lieutenant Colonel Bill Kilgore) ========================================================== -- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/3cbd6b45/attachment.html From remyheiden at gmail.com Tue Dec 1 12:43:19 2009 From: remyheiden at gmail.com (Remy Heiden) Date: Tue, 1 Dec 2009 13:43:19 +0100 Subject: [rancid] Re: Backing Up Cisco ACE Modules In-Reply-To: References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com> <4B14E420.5080909@redhat.com> Message-ID: Actually, we do have a slight issue with thge ACEs... Rancid ONLY collects the configs and not any of the other commands: !RANCID-CONTENT-TYPE: cisco ! ! ! ! ! ! ! ! ! ! ^ % invalid command detected at '^' marker. Generating configuration.... As for now we only are interested in the configs this is no issue for us. R. On Tue, Dec 1, 2009 at 1:35 PM, Remy Heiden wrote: > Strange.. > > We backup our ACEs with no trouble at all.. > Just using the standard rancid script and separate management IP's on the > contexts. > > No issues with pagers or end of config files... > > I'll have a look to see if i can find some details.. > > Remy > > > On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc wrote: > >> Hi Bill, >> >> Brown IV, Bill (MFT) wrote: >> > I?ve been trying to backup the Cisco ACE but Rancid seems to time out >> > during the connection. I think it has to do with the pager. On the >> > ACE, every time I login the pager gets set back to its default. Logging >> > in and then setting ?term length 0? only works for the session. After >> > Rancid logs out, the pager gets reset. >> you can try to use my patch from >> http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html >> >> > Scenario: I can login to the device using clogin. Issuing a ?show run? >> > from there reveals that the pager is set, (noted by the --more-- >> > prompt). I set ?term length 0? and ?sho run? completes with no pager. >> > Logging out and then back in reveals that the pager is once again set. >> > Using the rancid script with ?d, the last output is: >> > >> > >> > >> > HIT COMMAND:/Admin#show running-config >> > >> > In WriteTerm: /Admin#show running-config >> > >> > HIT COMMAND: /Admin#write term >> > >> > In WriteTerm: /Admin#write term >> > >> > : End of run not found >> > >> > : End of run not found >> > >> > >> > >> > My assumption is that somehow Rancid is expecting the enable prompt but >> > not getting it because of the pager. I looked at the rancid script but >> > I?m just not proficient enough to know where to hard code a ?term length >> > 0? and I definitely don?t want to change the behavior for other devices, >> > (I don?t want to ?mess up?). Does anyone have a piece of code that will >> > accomplish this? >> It's not the pager but rancid's detection of the end of the config file >> which goes wrong. >> >> > If possible, if you have it, I would really like to backup all the >> > contexts within the ACE as well. >> For now you have to give each context an IP and use that. I plan to add >> that feature but I'm pretty busy lately. >> >> bye >> michael >> -- >> Michael Stefaniuc Tel.: +49-711-96437-199 >> Consulting Communications Engineer Fax.: +49-711-96437-111 >> -------------------------------------------------------------------- >> Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach >> Handelsregister: Amtsgericht Muenchen HRB 153243 >> Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, >> Charles Cachera >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at shrubbery.net >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > > > > -- > ========================================================== > > "The smell, you know that gasoline smell, the whole hill. Smelled like... > victory." > > (Lieutenant Colonel Bill Kilgore) > > ========================================================== > -- > > -- ========================================================== "The smell, you know that gasoline smell, the whole hill. Smelled like... victory." (Lieutenant Colonel Bill Kilgore) ========================================================== -- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/fd48149c/attachment.html From remyheiden at gmail.com Tue Dec 1 12:50:50 2009 From: remyheiden at gmail.com (Remy Heiden) Date: Tue, 1 Dec 2009 13:50:50 +0100 Subject: [rancid] Re: Problems retrieving configs with rancid-run In-Reply-To: <7a76d30f0911260430k4a9d4cd7oa2729ca09f1d13dd@mail.gmail.com> References: <7a76d30f0911260430k4a9d4cd7oa2729ca09f1d13dd@mail.gmail.com> Message-ID: Hi, Let me guess, whel logging in with bin/clogin, you cannot enter any commands or hit return? If this is the case, most probably the device you are accessing doesn't have an enable-mode and you should replace the 'autoenable' command in .clogin with 'noenable'. Hope this helps. Remy 2009/11/26 Ronni Jensen > Hi, > > I hope you can help me getting rancid to work. > > When I run "bin/clogin 10.10.10.10" from rancid homedir, it logs into the > target switch and enters enable mode - autoenable is set to 1. But after a > little while, it disconnects again with message: > > --- > *Switch10# > Error: TIMEOUT reached* > --- > > When I run "bin/rancid-run switches", where switches is the group where > 10.10.10.10 - and only that one switch for now - resides, I get the > following in logfile: > > > > *starting: Thu Nov 26 12:33:19 CET 2009* > ** > *Trying to get all of the configs. > 10.10.10.10 clogin error: Error: TIMEOUT reached > 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp > chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:, > show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all > disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves > lot2:,dir /all disk0:,show install active,show bootvar,dir /all > slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv > ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all > sec-disk0:,dir /all harddiskb:,show variables boot,show bo > ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin > show env all,show controllers,admin show version,show diag > bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom > backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al > l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all > slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr > ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all > slaveslot1:,dir /all nvram:,show version,show vlan-switch,a > dmin show variables boot,show redundancy secondary,show running-config,show > c7200,dir /all slot1: > 10.10.10.10: End of run not found > ! > ===================================== > Getting missed routers: round 1. > 10.10.10.10 clogin error: Error: TIMEOUT reached > 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp > chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:, > show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all > disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves > lot2:,dir /all disk0:,show install active,show bootvar,dir /all > slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv > ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all > sec-disk0:,dir /all harddiskb:,show variables boot,show bo > ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin > show env all,show controllers,admin show version,show diag > bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom > backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al > l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all > slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr > ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all > slaveslot1:,dir /all nvram:,show version,show vlan-switch,a > dmin show variables boot,show redundancy secondary,show running-config,show > c7200,dir /all slot1: > 10.10.10.10: End of run not found > ! > ===================================== > Getting missed routers: round 2. > 10.10.10.10 clogin error: Error: TIMEOUT reached > 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp > chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:, > show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all > disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves > lot2:,dir /all disk0:,show install active,show bootvar,dir /all > slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv > ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all > sec-disk0:,dir /all harddiskb:,show variables boot,show bo > ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin > show env all,show controllers,admin show version,show diag > bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom > backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al > l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all > slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr > ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all > slaveslot1:,dir /all nvram:,show version,show vlan-switch,a > dmin show variables boot,show redundancy secondary,show running-config,show > c7200,dir /all slot1: > 10.10.10.10: End of run not found > ! > ===================================== > Getting missed routers: round 3. > 10.10.10.10 clogin error: Error: TIMEOUT reached > 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp > chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:, > show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all > disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves > lot2:,dir /all disk0:,show install active,show bootvar,dir /all > slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv > ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all > sec-disk0:,dir /all harddiskb:,show variables boot,show bo > ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin > show env all,show controllers,admin show version,show diag > bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom > backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al > l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all > slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr > ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all > slaveslot1:,dir /all nvram:,show version,show vlan-switch,a > dmin show variables boot,show redundancy secondary,show running-config,show > c7200,dir /all slot1: > 10.10.10.10: End of run not found > ! > ===================================== > Getting missed routers: round 4. > 10.10.10.10 clogin error: Error: TIMEOUT reached > 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp > chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:, > show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all > disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves > lot2:,dir /all disk0:,show install active,show bootvar,dir /all > slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv > ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all > sec-disk0:,dir /all harddiskb:,show variables boot,show bo > ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin > show env all,show controllers,admin show version,show diag > bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom > backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al > l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all > slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr > ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all > slaveslot1:,dir /all nvram:,show version,show vlan-switch,a > dmin show variables boot,show redundancy secondary,show running-config,show > c7200,dir /all slot1: > 10.10.10.10: End of run not found > !* > *cvs diff: Diffing . > cvs diff: Diffing configs > cvs commit: Examining . > cvs commit: Examining configs* > *ending: Thu Nov 26 12:40:58 CET 2009* > > > > > Any ideas how to solve the problem? I am using: > > - Fedora release 12 (Constantine) > - rancid 2.3.2 > - expect-5.43.0-19.fc12.i686 (installed from yum) > - tcl-8.5.7-4.fc12.i686 (installed from yum) > > Best regards, > Ronni > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > -- ========================================================== "The smell, you know that gasoline smell, the whole hill. Smelled like... victory." (Lieutenant Colonel Bill Kilgore) ========================================================== -- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/30c67601/attachment.html From mstefani at redhat.com Tue Dec 1 12:51:49 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Tue, 01 Dec 2009 13:51:49 +0100 Subject: [rancid] [PATCH] Remove empty lines at the beginning of the running-config Message-ID: <4B151165.5060401@redhat.com> Hello, I've finally found the time to migrated to from 2.3.2a8 to the final 2.3.2. The difference between the two is that WriteTerm() relies now on "more system:running-config". On newer IOS (seen it on 12.4(22)Tx but not on 12.4(15)T or older) that will start with an empty line which gets saved to the config file giving: ! config-register 0x2102 ! version 12.4 The attached patch strips empty lines at the beginning of the running-config. License: Whatever it takes to get it accepted to rancid. bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera -------------- next part -------------- A non-text attachment was scrubbed... Name: rancid-2.3.2-skipempty.patch Type: text/x-patch Size: 477 bytes Desc: not available Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/3aba964a/attachment.bin From mstefani at redhat.com Tue Dec 1 13:02:48 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Tue, 01 Dec 2009 14:02:48 +0100 Subject: [rancid] [PATCH] Handle "invalid command" / " ^" lines in WriteTerm too Message-ID: <4B1513F8.9090509@redhat.com> Hello, the ACE and SANOS devices do not know the "more system:running-config" thus ^ % invalid command detected at '^' marker. will show up in the saved config. The ASAs do not know the command either but they return "Invalid input" which rancid already detects. Nevertheless a stray ^ will be added to the saved config file. The attached patch deals with both problems. License: Whatever it takes to get it accepted to rancid. bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera -------------- next part -------------- A non-text attachment was scrubbed... Name: rancid-2.3.2-invalidcommand.patch Type: text/x-patch Size: 645 bytes Desc: not available Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/5589cdaf/attachment.bin From mstefani at redhat.com Tue Dec 1 13:05:27 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Tue, 01 Dec 2009 14:05:27 +0100 Subject: [rancid] [PATCH] Filter out more keys from the ASA Message-ID: <4B151497.3020809@redhat.com> Hello, the attached patch removes more keys from the ASA; basically every line in the format: key Seen it on the ASAs for TACACS+ and radius keys. License: Whatever it takes to get it accepted to rancid. bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera -------------- next part -------------- A non-text attachment was scrubbed... Name: rancid-2.3.2-asakey.patch Type: text/x-patch Size: 481 bytes Desc: not available Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/950f70fa/attachment.bin From mstefani at redhat.com Tue Dec 1 13:08:06 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Tue, 01 Dec 2009 14:08:06 +0100 Subject: [rancid] Re: Backing Up Cisco ACE Modules In-Reply-To: References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com> <4B14E420.5080909@redhat.com> Message-ID: <4B151536.2030900@redhat.com> Remy Heiden wrote: > Actually, we do have a slight issue with thge ACEs... > > Rancid ONLY collects the configs and not any of the other commands: The "right" commands for the ACE aren't in and the IOS ones aren't known. > !RANCID-CONTENT-TYPE: cisco > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > > ^ > % invalid command detected at '^' marker. This is actually a different bug for which I have just sent a patch: http://www.shrubbery.net/pipermail/rancid-discuss/2009-December/004447.html bye michael > Generating configuration.... > > > As for now we only are interested in the configs this is no issue for us. > > R. > > > On Tue, Dec 1, 2009 at 1:35 PM, Remy Heiden > wrote: > > Strange.. > > We backup our ACEs with no trouble at all.. > Just using the standard rancid script and separate management IP's > on the contexts. > > No issues with pagers or end of config files... > > I'll have a look to see if i can find some details.. > > Remy > > > On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc > > wrote: > > Hi Bill, > > Brown IV, Bill (MFT) wrote: > > I?ve been trying to backup the Cisco ACE but Rancid seems to > time out > > during the connection. I think it has to do with the pager. > On the > > ACE, every time I login the pager gets set back to its > default. Logging > > in and then setting ?term length 0? only works for the > session. After > > Rancid logs out, the pager gets reset. > you can try to use my patch from > http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html > > > Scenario: I can login to the device using clogin. Issuing a > ?show run? > > from there reveals that the pager is set, (noted by the --more-- > > prompt). I set ?term length 0? and ?sho run? completes with > no pager. > > Logging out and then back in reveals that the pager is once > again set. > > Using the rancid script with ?d, the last output is: > > > > > > > > HIT COMMAND:/Admin#show running-config > > > > In WriteTerm: /Admin#show running-config > > > > HIT COMMAND: /Admin#write term > > > > In WriteTerm: /Admin#write term > > > > : End of run not found > > > > : End of run not found > > > > > > > > My assumption is that somehow Rancid is expecting the enable > prompt but > > not getting it because of the pager. I looked at the rancid > script but > > I?m just not proficient enough to know where to hard code a > ?term length > > 0? and I definitely don?t want to change the behavior for > other devices, > > (I don?t want to ?mess up?). Does anyone have a piece of code > that will > > accomplish this? > It's not the pager but rancid's detection of the end of the > config file > which goes wrong. > > > If possible, if you have it, I would really like to backup all the > > contexts within the ACE as well. > For now you have to give each context an IP and use that. I plan > to add > that feature but I'm pretty busy lately. -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera From mv652 at softhome.net Tue Dec 1 14:28:45 2009 From: mv652 at softhome.net (mv652 at softhome.net) Date: Tue, 01 Dec 2009 07:28:45 -0700 Subject: [rancid] Re: Applying Expect Patch Manually In-Reply-To: <20091127203734.GC7853@shrubbery.net> References: <20091127203734.GC7853@shrubbery.net> Message-ID: Thanks. Ok, I couldn't work out how to correctly patch the already-installed expect 5.43.0-5.1, so I uninstalled it and tcl 8.4.13-4.el5 and used the pre-patched versions from your FTP site. They both seemed to compile and install fine. Unfortunately I am still have a 'freezing' with two CISCO 800 devices. I have 3 catalyst switches (4948 and 3750) and two routers (2811) which work fine. The only difference with the CISCO 800 is that there is a to login rather than simply a . The log file from rancid-run shows: clogin error: Error: TIMEOUT reached ..... : End of run not found A clogin test shows: ./clogin spawn telnet Trying 172.16.11.1... Connected to (172.16.11.1). Escape character is '^]'. User Access Verification Username: administrator Password: # and then it just stays there. I thought that maybe it was the expect bug mentioned on your website, but it seems the freeze is still happening. Could someone advise on what to check next? Mario john heasley writes: > Fri, Nov 27, 2009 at 11:30:30AM -0700, mv652 at softhome.net: >> Hello, >> >> Please excuse this mail if this has been answered before, but I have >> completed a new rancid install and only need to apply the expect patch >> (running on Linux). >> >> Could someone please provide the syntax to apply the patch manually? > > see patch(1). > >> I'm running expect 5.43 on CentOS. >> >> >> >> Thank you, >> Mario >> >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at shrubbery.net >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From mv652 at softhome.net Tue Dec 1 14:40:44 2009 From: mv652 at softhome.net (mv652 at softhome.net) Date: Tue, 01 Dec 2009 07:40:44 -0700 Subject: [rancid] Re: Applying Expect Patch Manually In-Reply-To: References: <20091127203734.GC7853@shrubbery.net> Message-ID: Scratch the post below, I just read a reply to someone else's post and the solution was there (I had to autoenable ). Regards and thanks, mv652 at softhome.net writes: > Thanks. > > Ok, I couldn't work out how to correctly patch the already-installed expect > 5.43.0-5.1, so I uninstalled it and tcl 8.4.13-4.el5 and used the > pre-patched versions from your FTP site. > > They both seemed to compile and install fine. > > Unfortunately I am still have a 'freezing' with two CISCO 800 devices. I > have 3 catalyst switches (4948 and 3750) and two routers (2811) which work > fine. > > The only difference with the CISCO 800 is that there is a > to login rather than simply a . > > > The log file from rancid-run shows: > clogin error: Error: TIMEOUT reached > ..... > : End of run not found > > > A clogin test shows: > > ./clogin > > > spawn telnet > Trying 172.16.11.1... > Connected to (172.16.11.1). > Escape character is '^]'. > > > User Access Verification > > Username: administrator > Password: > > # > > and then it just stays there. I thought that maybe it was the expect bug > mentioned on your website, but it seems the freeze is still happening. > > > Could someone advise on what to check next? > > > Mario > > > > john heasley writes: > >> Fri, Nov 27, 2009 at 11:30:30AM -0700, mv652 at softhome.net: >>> Hello, >>> >>> Please excuse this mail if this has been answered before, but I have >>> completed a new rancid install and only need to apply the expect patch >>> (running on Linux). >>> >>> Could someone please provide the syntax to apply the patch manually? >> >> see patch(1). >> >>> I'm running expect 5.43 on CentOS. >>> >>> >>> >>> Thank you, >>> Mario >>> >>> _______________________________________________ >>> Rancid-discuss mailing list >>> Rancid-discuss at shrubbery.net >>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From cgauthier at mapscu.com Tue Dec 1 19:36:36 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Tue, 1 Dec 2009 11:36:36 -0800 Subject: [rancid] Re: [PATCH] Filter out more keys from the ASA In-Reply-To: <4B151497.3020809@redhat.com> References: <4B151497.3020809@redhat.com> Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com> Personally, I would vote against a patch that removes more keys. If anything, since this is used to archive configurations as well as track changes, I think keys should be included. Here is where some of my ignorance will probably show, but here goes anyway: How about a command line option that you can turn on or off hiding the key values? Chris Gauthier Network Administrator MaPS Credit Union v: 503.375.2445 f: 503.779.1083 http://www.mapscu.com ?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.? ?Leonardo da Vinci -----Original Message----- From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael Stefaniuc Sent: Tuesday, December 01, 2009 5:05 AM To: rancid-discuss at shrubbery.net Subject: [rancid] [PATCH] Filter out more keys from the ASA Hello, the attached patch removes more keys from the ASA; basically every line in the format: key Seen it on the ASAs for TACACS+ and radius keys. License: Whatever it takes to get it accepted to rancid. bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera From heas at shrubbery.net Tue Dec 1 20:06:49 2009 From: heas at shrubbery.net (john heasley) Date: Tue, 1 Dec 2009 12:06:49 -0800 Subject: [rancid] Re: [PATCH] Filter out more keys from the ASA In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com> References: <4B151497.3020809@redhat.com> <0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com> Message-ID: <20091201200649.GZ9706@shrubbery.net> Tue, Dec 01, 2009 at 11:36:36AM -0800, Chris Gauthier: > Personally, I would vote against a patch that removes more keys. If anything, since this is used to archive configurations as well as track changes, I think keys should be included. Here is where some of my ignorance will probably show, but here goes anyway: How about a command line option that you can turn on or off hiding the key values? see rancid.conf(5) > Chris Gauthier > Network Administrator > MaPS Credit Union > v: 503.375.2445 > f: 503.779.1083 > http://www.mapscu.com > > > ?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.? > ?Leonardo da Vinci > > -----Original Message----- > From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael Stefaniuc > Sent: Tuesday, December 01, 2009 5:05 AM > To: rancid-discuss at shrubbery.net > Subject: [rancid] [PATCH] Filter out more keys from the ASA > > Hello, > > the attached patch removes more keys from the ASA; basically every line in the format: > key > Seen it on the ASAs for TACACS+ and radius keys. > > License: Whatever it takes to get it accepted to rancid. > > bye > michael > -- > Michael Stefaniuc Tel.: +49-711-96437-199 > Consulting Communications Engineer Fax.: +49-711-96437-111 > -------------------------------------------------------------------- > Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach > Handelsregister: Amtsgericht Muenchen HRB 153243 > Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, > Charles Cachera > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From steve.obrien at hdesd.org Wed Dec 2 01:21:24 2009 From: steve.obrien at hdesd.org (Steve O'Brien) Date: Tue, 1 Dec 2009 17:21:24 -0800 Subject: [rancid] Rancid Emailing Blank Diffs and Foundry Message-ID: Hi All, I am sure this was probably covered at some point but google and the keyword rancid do not make for an easy search... 1.)I am getting notified with blank emails when nothing changes in my configs, any way to stop that? 2.) I have some foundry gear that gives me some bogus diffs in regards to fan speed changes, flash space, etc... How to have rancid ignore? @@ -64,15 +64,14 @@ ! Power supply 3 (32005000 - AC - Regular) present, status ok ! Power supply 4 (30351100 - AC - Regular) present, status ok !=20 - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4 - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4 - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4 - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4 - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4 - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4 + ! Fan 1 ok + ! Fan 2 ok + ! Fan 3 ok + ! Fan 4 ok + ! Fan 5 ok + ! Fan 6 ok !=20 !=20 - ! Fan speed switching temperature thresholds: !=20 ! !Module: Module Status Ports Starting MAC =20 Index: configs/router =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D - -- configs/router (revision 2404) @@ -20,9 +20,6 @@ ! Boot Prom MAC: 000c.dbd1.da8c ! Management MAC: 000c.dbd1.da8c ! - !Module: Invalid input -> module - !Module: Type ? for a list - ! !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1 (FES04101.bin) !Flash: Compressed Sec Code size =3D 3887438, Version 04.1.01aTc3 (FER04101a.bin) !Flash: Compressed Boot-Monitor Image size =3D 50505, Version 04.1.01Tc4 Index: configs/s-core-rhs.redmond.k12.or.us =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D - -- configs/router (revision 2381) @@ -51,7 +51,6 @@ !Flash: Used Configuration Flash Size=3D24572, Max Configuration Flash Size=3D262144. ! !Building configuration... - !Current configuration : 24569 bytes ! ! ! =20 TIA, Steve -------------- next part -------------- A non-text attachment was scrubbed... Name: winmail.dat Type: application/ms-tnef Size: 3492 bytes Desc: not available Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/547919a3/attachment.bin From jeremys at rickyninja.net Wed Dec 2 03:51:27 2009 From: jeremys at rickyninja.net (Jeremy Singletary) Date: Tue, 1 Dec 2009 20:51:27 -0700 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: References: Message-ID: <20091202035127.GA15298@pegasus.billn.net> Read this thread for information on how to adjust or ignore foundry output: http://www.shrubbery.net/pipermail/rancid-discuss/2008-January/002652.html -jeremy On 12/01/09, Steve O'Brien said: > Hi All, > I am sure this was probably covered at some point but google and the > keyword rancid do not make for an easy search... > > 1.)I am getting notified with blank emails when nothing changes in my > configs, any way to stop that? > > 2.) I have some foundry gear that gives me some bogus diffs in regards > to fan speed changes, flash space, etc... How to have rancid ignore? > > @@ -64,15 +64,14 @@ > ! Power supply 3 (32005000 - AC - Regular) present, status ok > ! Power supply 4 (30351100 - AC - Regular) present, status ok > !=20 > - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4 > + ! Fan 1 ok > + ! Fan 2 ok > + ! Fan 3 ok > + ! Fan 4 ok > + ! Fan 5 ok > + ! Fan 6 ok > !=20 > !=20 > - ! Fan speed switching temperature thresholds: > !=20 > ! > !Module: Module Status > Ports Starting MAC =20 > Index: configs/router > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > - -- configs/router (revision 2404) > @@ -20,9 +20,6 @@ > ! Boot Prom MAC: 000c.dbd1.da8c > ! Management MAC: 000c.dbd1.da8c > ! > - !Module: Invalid input -> module > - !Module: Type ? for a list > - ! > !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1 > (FES04101.bin) > !Flash: Compressed Sec Code size =3D 3887438, Version > 04.1.01aTc3 (FER04101a.bin) > !Flash: Compressed Boot-Monitor Image size =3D 50505, Version > 04.1.01Tc4 > Index: configs/s-core-rhs.redmond.k12.or.us > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > - -- configs/router (revision 2381) > @@ -51,7 +51,6 @@ > !Flash: Used Configuration Flash Size=3D24572, Max Configuration > Flash Size=3D262144. > ! > !Building configuration... > - !Current configuration : 24569 bytes > ! > ! > ! > =20 > > TIA, > Steve > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From mathiruban at gmail.com Wed Dec 2 10:02:49 2009 From: mathiruban at gmail.com (Mathiruban Rajagopal) Date: Wed, 2 Dec 2009 15:32:49 +0530 Subject: [rancid] Same config diff mail Message-ID: <136e115c0912020202s1a221ffcjd1c4960c2ded42bb@mail.gmail.com> Hello all, After deleting one router from the device group I am getting same config diff mail. Pls refer the log below and advice me. Trying to get all of the configs. All routers sucessfully completed. cvs diff: Diffing . cvs diff: Diffing configs *cvs diff: cannot find configs/idc1 cvs commit: Examining . cvs commit: Examining configs cvs commit: Up-to-date check failed for `configs/idc1' cvs [commit aborted]: correct above errors first!* ** ** Rgds, Mathy. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091202/792ae7a2/attachment.html From jethro.binks at strath.ac.uk Wed Dec 2 13:29:23 2009 From: jethro.binks at strath.ac.uk (Jethro R Binks) Date: Wed, 2 Dec 2009 13:29:23 +0000 (GMT) Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: References: Message-ID: On Tue, 1 Dec 2009, Steve O'Brien wrote: > 2.) I have some foundry gear that gives me some bogus diffs in regards > to fan speed changes, flash space, etc... How to have rancid ignore? I can't remember how much is now in the distributed francid, but my ShowChassis subroutine looks like this, to filter out some of that extra crud. It is apparently based on francid.in,v 1.48. sub ShowChassis { my($skip) = 0; print STDERR " In ShowChassis: $_" if ($debug); while () { tr/\015//d; last if (/^$prompt/); next if (/ from /); next if (/current temperature/i); if (/^---/ || /^$/) { # next section reached $skip = 0; } if (/(POWERS|TEMPERATURE READINGS)/) { $skip = 1; } if (/fan controlled temperature:/i) { $skip = 1; } if (/THERMAL PLANE/) { $skip = 1; } if (/temperature:/i) { $skip = 1; } s/(Fan \d+ \S+), speed .*/$1/; if (/speed/i) { $skip = 1; } next if $skip; ProcessHistory("CHASSIS","","","! $_"); } ProcessHistory("CHASSIS","","","!\n"); return(0); } . . . . . . . . . . . . . . . . . . . . . . . . . Jethro R Binks Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK From dpz at berkeley.edu Wed Dec 2 17:56:00 2009 From: dpz at berkeley.edu (David Paul Zimmerman) Date: Wed, 2 Dec 2009 09:56:00 -0800 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: References: <20091127064115.GL22013@shrubbery.net> Message-ID: <3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu> On Nov 27, 2009, at 5:27 AM, Randy Bush wrote: > i was wondering if any fellow freebsd users had tried a newew tcl, > e.g. 8.4.19 or 8.5.8 or 8.6.b.1, and would be willing to declare it > usable. > > randy dpz at pourri$ uname -s -r FreeBSD 7.2-RELEASE-p3 dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk rancid-2.3.2 Really Awesome New Cisco confIg Differ tcl-8.4.19_3,1 Tool Command Language Running solid for months, no hangs. dp From heas at shrubbery.net Thu Dec 3 00:09:10 2009 From: heas at shrubbery.net (john heasley) Date: Wed, 2 Dec 2009 16:09:10 -0800 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: References: Message-ID: <20091203000910.GI18370@shrubbery.net> Wed, Dec 02, 2009 at 01:29:23PM +0000, Jethro R Binks: > On Tue, 1 Dec 2009, Steve O'Brien wrote: > > > 2.) I have some foundry gear that gives me some bogus diffs in regards > > to fan speed changes, flash space, etc... How to have rancid ignore? > > I can't remember how much is now in the distributed francid, but my > ShowChassis subroutine looks like this, to filter out some of that extra > crud. It is apparently based on francid.in,v 1.48. i believe these are all in rancid 2.3.2. > sub ShowChassis { > my($skip) = 0; > > print STDERR " In ShowChassis: $_" if ($debug); > > while () { > tr/\015//d; > last if (/^$prompt/); > next if (/ from /); > next if (/current temperature/i); > > if (/^---/ || /^$/) { # next section reached > $skip = 0; > } > if (/(POWERS|TEMPERATURE READINGS)/) { > $skip = 1; > } > if (/fan controlled temperature:/i) { > $skip = 1; > } > if (/THERMAL PLANE/) { > $skip = 1; > } > if (/temperature:/i) { > $skip = 1; > } > s/(Fan \d+ \S+), speed .*/$1/; > if (/speed/i) { > $skip = 1; > } > next if $skip; > > ProcessHistory("CHASSIS","","","! $_"); > } > ProcessHistory("CHASSIS","","","!\n"); > return(0); > } > > > > . . . . . . . . . . . . . . . . . . . . . . . . . > Jethro R Binks > Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From heas at shrubbery.net Thu Dec 3 00:13:22 2009 From: heas at shrubbery.net (john heasley) Date: Wed, 2 Dec 2009 16:13:22 -0800 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: <20091202035127.GA15298@pegasus.billn.net> References: <20091202035127.GA15298@pegasus.billn.net> Message-ID: <20091203001322.GJ18370@shrubbery.net> Tue, Dec 01, 2009 at 08:51:27PM -0700, Jeremy Singletary: > Read this thread for information on how to adjust or ignore foundry > output: > http://www.shrubbery.net/pipermail/rancid-discuss/2008-January/002652.html rancid 2.3.2 also has this fix. From heas at shrubbery.net Thu Dec 3 00:19:28 2009 From: heas at shrubbery.net (john heasley) Date: Wed, 2 Dec 2009 16:19:28 -0800 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: References: Message-ID: <20091203001928.GM18370@shrubbery.net> Tue, Dec 01, 2009 at 05:21:24PM -0800, Steve O'Brien: > 1.)I am getting notified with blank emails when nothing changes in my > configs, any way to stop that? it shouldnt occur. for what device types? are control characters getting into the config? is the cvs out-of-date? > 2.) I have some foundry gear that gives me some bogus diffs in regards > to fan speed changes, flash space, etc... How to have rancid ignore? this is a weird diff. it looks like rancid pre-2.3.2 vs 2.3.2. > @@ -64,15 +64,14 @@ > ! Power supply 3 (32005000 - AC - Regular) present, status ok > ! Power supply 4 (30351100 - AC - Regular) present, status ok > !=20 > - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4 > + ! Fan 1 ok > + ! Fan 2 ok > + ! Fan 3 ok > + ! Fan 4 ok > + ! Fan 5 ok > + ! Fan 6 ok > !=20 > !=20 > - ! Fan speed switching temperature thresholds: > !=20 > ! > !Module: Module Status > Ports Starting MAC =20 > Index: configs/router > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > - -- configs/router (revision 2404) > @@ -20,9 +20,6 @@ > ! Boot Prom MAC: 000c.dbd1.da8c > ! Management MAC: 000c.dbd1.da8c > ! > - !Module: Invalid input -> module > - !Module: Type ? for a list > - ! > !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1 > (FES04101.bin) > !Flash: Compressed Sec Code size =3D 3887438, Version > 04.1.01aTc3 (FER04101a.bin) > !Flash: Compressed Boot-Monitor Image size =3D 50505, Version > 04.1.01Tc4 > Index: configs/s-core-rhs.redmond.k12.or.us > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > - -- configs/router (revision 2381) > @@ -51,7 +51,6 @@ > !Flash: Used Configuration Flash Size=3D24572, Max Configuration > Flash Size=3D262144. > ! > !Building configuration... > - !Current configuration : 24569 bytes > ! > ! > ! > =20 > > TIA, > Steve > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From randy at psg.com Thu Dec 3 06:58:33 2009 From: randy at psg.com (Randy Bush) Date: Wed, 02 Dec 2009 22:58:33 -0800 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: <3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu> References: <20091127064115.GL22013@shrubbery.net> <3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu> Message-ID: > dpz at pourri$ uname -s -r > FreeBSD 7.2-RELEASE-p3 > > dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" > expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk > rancid-2.3.2 Really Awesome New Cisco confIg Differ > tcl-8.4.19_3,1 Tool Command Language thanks maybe i will try to break things if my meeting gets boring tomorrow randy From ronnij at gmail.com Thu Dec 3 09:21:49 2009 From: ronnij at gmail.com (Ronni Jensen) Date: Thu, 3 Dec 2009 10:21:49 +0100 Subject: [rancid] Problems with rancid CVS Message-ID: <7a76d30f0912030121v54a940far2514d8b5d35e6f8d@mail.gmail.com> Hello, I have rancid running (nearly). but have some issues with CVS.. I hope you can help! I have the following in rancid.conf: *BASEDIR=/var/rancid; export BASEDIR* *LIST_OF_GROUPS="firewalls ipt accesspoints switches"* And after "rancis-cvs" I have the following dirs in /var/rancid/ as the above suggests: *drwxr-x--- 4 rancid rancid 4096 2009-12-03 10:08 accesspoints drwxrwxr-x 4 rancid rancid 4096 2009-12-02 14:49 CVS drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 firewalls drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 ipt drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 logs drwxr-xr-x 3 rancid rancid 4096 2009-12-03 10:10 switches* It retrieves configs from all groups, but only for "accesspoints" it does the CVS stuff corretly: *starting: Thu Dec 3 10:12:32 CET 2009* *Trying to get all of the configs.* *cvs diff: Diffing . cvs diff: Diffing configs cvs commit: Examining . cvs commit: Examining configs* *ending: Thu Dec 3 10:20:11 CET 2009* For the other groups e.g. "switches" it looks like: *cvs [add aborted]: there is no version here; do 'cvs checkout' first cvs added missing router umus-sw05 cvs status: cannot open CVS/Entries for reading: No such file or directory cvs status: use `cvs add' to create an entry for umus-sw06 cvs add: in directory .: cvs [add aborted]: there is no version here; do 'cvs checkout' first cvs added missing router umus-sw06* *Trying to get all of the configs. All routers sucessfully completed.* *cvs diff: in directory .: cvs [diff aborted]: there is no version here; run 'cvs checkout' first cvs commit: in directory .: cvs [commit aborted]: there is no version here; run 'cvs checkout' first* *ending: Thu Dec 3 10:02:23 CET 2009* I don't know if this is the error.. but as you can see only accesspoints dir has the subdir "CVS" to it: [rancid at LinuxSrv ~]$ ls -la /var/rancid/* /var/rancid/accesspoints: total 36 drwxr-x--- 4 rancid rancid 4096 2009-12-03 10:17 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:17 configs drwxr-x--- 2 rancid rancid 4096 2009-12-02 15:54 CVS -rw-r----- 1 rancid rancid 47 2009-12-02 15:37 .cvsignore -rw-r----- 1 rancid rancid 774 2009-12-02 15:36 router.db -rw-r----- 1 rancid rancid 650 2009-12-03 10:12 routers.all -rw-r----- 1 rancid rancid 0 2009-12-03 10:12 routers.down -rw-r----- 1 rancid rancid 650 2009-12-03 10:12 routers.up -rw-r----- 1 rancid rancid 19 2009-12-03 10:17 routers.up.missed /var/rancid/CVS: total 20 drwxrwxr-x 4 rancid rancid 4096 2009-12-02 14:49 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxrwxr-x 3 rancid rancid 4096 2009-12-03 10:12 accesspoints drwxrwxr-x 3 rancid rancid 4096 2009-12-02 15:54 CVSROOT -rw-r----- 1 rancid rancid 21 2009-12-02 14:49 Entries.Log /var/rancid/firewalls: total 16 drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 configs -rw-r----- 1 rancid rancid 47 2009-12-02 15:01 .cvsignore -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 router.db -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.all -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.down -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.up /var/rancid/ipt: total 16 drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 configs -rw-r----- 1 rancid rancid 47 2009-12-02 15:01 .cvsignore -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 router.db -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.all -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.down -rw-r----- 1 rancid rancid 0 2009-12-03 10:01 routers.up /var/rancid/logs: total 8 drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. /var/rancid/mpls: total 12 drwxr-x--- 3 rancid rancid 4096 2009-12-02 14:29 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 configs -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 router.db -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 routers.all -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 routers.down -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 routers.up /var/rancid/switches: total 28 drwxr-xr-x 3 rancid rancid 4096 2009-12-03 10:10 . drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 .. drwxr-x--- 2 rancid rancid 4096 2009-12-03 10:10 configs -rw-r----- 1 rancid rancid 47 2009-12-02 14:53 .cvsignore -rw-r--r-- 1 rancid rancid 618 2009-11-28 13:29 router.db -rw-r----- 1 rancid rancid 0 2009-12-02 14:29 router.db.dist -rw-r----- 1 rancid rancid 525 2009-12-03 10:08 routers.all -rw-r----- 1 rancid rancid 0 2009-12-03 10:08 routers.down -rw-r----- 1 rancid rancid 525 2009-12-03 10:08 routers.up I tried re-run rancid-cvs to see if it would do the trick, but no.. I hope someone here can help to a solution? Best regards, ronnij -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/1a2ad91f/attachment.html From steve.obrien at hdesd.org Thu Dec 3 17:07:07 2009 From: steve.obrien at hdesd.org (Steve O'Brien) Date: Thu, 3 Dec 2009 09:07:07 -0800 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: <20091203001322.GJ18370@shrubbery.net> References: <20091202035127.GA15298@pegasus.billn.net> <20091203001322.GJ18370@shrubbery.net> Message-ID: On Wed, 2009-12-02 at 16:13 -0800, john heasley wrote: > rancid 2.3.2 also has this fix. I am running 2.3.2. I am looking at trying to get those lines ignored. Thanks, Steve -------------- next part -------------- A non-text attachment was scrubbed... Name: winmail.dat Type: application/ms-tnef Size: 3017 bytes Desc: not available Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/fe619b3a/attachment.bin From Dan_Mitton at YMP.GOV Thu Dec 3 19:50:07 2009 From: Dan_Mitton at YMP.GOV (Dan_Mitton at YMP.GOV) Date: Thu, 3 Dec 2009 11:50:07 -0800 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: Message-ID: Where can I get the expect-nox11-5.44.1.11_1 package?? Thanks, Dan Sent by: rancid-discuss-bounces at shrubbery.net To: David Paul Zimmerman cc: rancid (bcc: Dan Mitton/YD/RWDOE) Subject: [rancid] Re: freebsd, tcl and expect LSN: Not Relevant - Not Privileged User Filed as: Excl/AdminMgmt-14-4/QA:N/A > dpz at pourri$ uname -s -r > FreeBSD 7.2-RELEASE-p3 > > dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" > expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk > rancid-2.3.2 Really Awesome New Cisco confIg Differ > tcl-8.4.19_3,1 Tool Command Language thanks maybe i will try to break things if my meeting gets boring tomorrow randy _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/6e4f82d3/attachment.html From adudek16 at gmail.com Thu Dec 3 20:18:41 2009 From: adudek16 at gmail.com (Aaron Dudek) Date: Thu, 3 Dec 2009 15:18:41 -0500 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: References: Message-ID: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com> ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz more sites listed here. http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html 2009/12/3 : > > Where can I get the expect-nox11-5.44.1.11_1 package?? > > Thanks, > > Dan > > > Sent by: ? ? ? ?rancid-discuss-bounces at shrubbery.net > > To: ? ? ? ?David Paul Zimmerman > cc: ? ? ? ?rancid (bcc: Dan Mitton/YD/RWDOE) > Subject: ? ? ? ?[rancid] Re: freebsd, tcl and expect > > LSN: Not Relevant - Not Privileged > User Filed as: Excl/AdminMgmt-14-4/QA:N/A > >> dpz at pourri$ uname -s -r >> FreeBSD 7.2-RELEASE-p3 >> >> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" >> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk >> rancid-2.3.2 ? ? ? ?Really Awesome New Cisco confIg Differ >> tcl-8.4.19_3,1 ? ? ?Tool Command Language > > thanks > > maybe i will try to break things if my meeting gets boring tomorrow > > randy > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > From heas at shrubbery.net Thu Dec 3 20:51:52 2009 From: heas at shrubbery.net (john heasley) Date: Thu, 3 Dec 2009 12:51:52 -0800 Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry In-Reply-To: References: <20091202035127.GA15298@pegasus.billn.net> <20091203001322.GJ18370@shrubbery.net> Message-ID: <20091203205150.GQ16944@shrubbery.net> Thu, Dec 03, 2009 at 09:07:07AM -0800, Steve O'Brien: > On Wed, 2009-12-02 at 16:13 -0800, john heasley wrote: > > rancid 2.3.2 also has this fix. > > I am running 2.3.2. I am looking at trying to get those lines ignored. Well, this filtering: > @@ -64,15 +64,14 @@ > ! Power supply 3 (32005000 - AC - Regular) present, status ok > ! Power supply 4 (30351100 - AC - Regular) present, status ok > !=20 > - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4 > - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4 > + ! Fan 1 ok > + ! Fan 2 ok > + ! Fan 3 ok > + ! Fan 4 ok > + ! Fan 5 ok > + ! Fan 6 ok is already in 2.3.2. so, please make sure that you dont have two versions installed or have some alpha/rc version. From adudek16 at gmail.com Thu Dec 3 21:25:33 2009 From: adudek16 at gmail.com (Aaron Dudek) Date: Thu, 3 Dec 2009 16:25:33 -0500 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: References: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com> Message-ID: <96ba9bee0912031325v721eed4ex1f79011cab5be790@mail.gmail.com> Hmm. weird On Thu, Dec 3, 2009 at 16:03, wrote: > > Nope, not out there. > > > > To: ? ? ? ?Dan_Mitton at ymp.gov > cc: ? ? ? ?Randy Bush , rancid > Subject: ? ? ? ?Re: [rancid] Re: freebsd, tcl and expect > > LSN: Not Relevant - Not Privileged > User Filed as: Excl/AdminMgmt-14-4/QA:N/A > > ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz > > more sites listed here. > http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html > > 2009/12/3 ?: >> >> Where can I get the expect-nox11-5.44.1.11_1 package?? >> >> Thanks, >> >> Dan >> >> >> Sent by: ? ? ? ?rancid-discuss-bounces at shrubbery.net >> >> To: ? ? ? ?David Paul Zimmerman >> cc: ? ? ? ?rancid (bcc: Dan >> Mitton/YD/RWDOE) >> Subject: ? ? ? ?[rancid] Re: freebsd, tcl and expect >> >> LSN: Not Relevant - Not Privileged >> User Filed as: Excl/AdminMgmt-14-4/QA:N/A >> >>> dpz at pourri$ uname -s -r >>> FreeBSD 7.2-RELEASE-p3 >>> >>> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" >>> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk >>> rancid-2.3.2 ? ? ? ?Really Awesome New Cisco confIg Differ >>> tcl-8.4.19_3,1 ? ? ?Tool Command Language >> >> thanks >> >> maybe i will try to break things if my meeting gets boring tomorrow >> >> randy >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at shrubbery.net >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss >> >> >> >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at shrubbery.net >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss >> > > > From vishal.ud at directi.com Fri Dec 4 09:21:35 2009 From: vishal.ud at directi.com (vishal.ud) Date: Fri, 04 Dec 2009 14:51:35 +0530 Subject: [rancid] CVS Errors Message-ID: <4B18D49F.80400@directi.com> Hey , i get the below errors in my log files wen rancid runs cvs status: cannot open CVS/Entries for reading: Permission denied cvs [status aborted]: cannot open file 172.16.134.13 for comparing: Permission denied any idea as to what cud have caused this ?? From vishal.ud at directi.com Fri Dec 4 11:08:07 2009 From: vishal.ud at directi.com (vishal.ud) Date: Fri, 04 Dec 2009 16:38:07 +0530 Subject: [rancid] Re: CVS Errors In-Reply-To: <4B18D49F.80400@directi.com> References: <4B18D49F.80400@directi.com> Message-ID: <4B18ED97.8010702@directi.com> my /CVS/Switches directory and all files inside have read permission for the rancid user . I don understand what cud have caused the below error rancid at m1-vs-rancid:~/var/CVS/Switches/configs$ ls -al total 152 drwxrwxr-x 2 rancid rancid 4096 2009-12-04 15:55 . drwxrwxr-x 3 rancid rancid 4096 2009-12-04 15:55 .. -r--r--r-- 1 root root 3607 2009-11-30 22:42 172.16.130.10,v -r--r--r-- 1 rancid rancid 3471 2009-11-24 16:40 172.16.130.11,v -r--r--r-- 1 rancid rancid 3473 2009-11-24 16:40 172.16.130.12,v -r--r--r-- 1 rancid rancid 2497 2009-11-30 22:20 172.16.130.13,v -r--r--r-- 1 rancid rancid 4042 2009-11-27 17:54 172.16.130.1,v -r--r--r-- 1 rancid rancid 3165 2009-11-24 16:40 172.16.131.5,v -r--r--r-- 1 rancid rancid 3214 2009-11-24 16:40 172.16.131.6,v -r--r--r-- 1 rancid rancid 3251 2009-11-24 16:40 172.16.131.7,v -r--r--r-- 1 rancid rancid 3318 2009-11-24 16:40 172.16.131.8,v -r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.10,v -r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.11,v -r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.12,v -r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.13,v -r--r--r-- 1 rancid rancid 1726 2009-11-24 16:40 172.16.132.14,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.5,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.6,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.7,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.8,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.9,v -r--r--r-- 1 rancid rancid 3246 2009-11-24 16:40 172.16.134.10,v -r--r--r-- 1 rancid rancid 3255 2009-11-24 16:40 172.16.134.11,v -r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.134.12,v -r--r--r-- 1 rancid rancid 3332 2009-11-24 16:40 172.16.134.13,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.134.5,v -r--r--r-- 1 rancid rancid 3241 2009-11-24 16:40 172.16.134.6,v -r--r--r-- 1 rancid rancid 3241 2009-11-24 16:40 172.16.134.7,v -r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.134.8,v -r--r--r-- 1 rancid rancid 3413 2009-11-27 17:54 172.16.134.9,v -r--r--r-- 1 rancid rancid 1546 2009-11-24 16:40 172.16.136.10,v -r--r--r-- 1 rancid rancid 1517 2009-11-24 16:40 172.16.136.11,v -r--r--r-- 1 rancid rancid 1667 2009-11-24 16:40 172.16.136.12,v -r--r--r-- 1 rancid rancid 1678 2009-11-24 16:40 172.16.136.5,v -r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.6,v -r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.7,v -r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.8,v -r--r--r-- 1 rancid rancid 1547 2009-11-24 16:40 172.16.136.9,v vishal.ud wrote: > Hey , > > i get the below errors in my log files wen rancid runs > > cvs status: cannot open CVS/Entries for reading: Permission denied > cvs [status aborted]: cannot open file 172.16.134.13 for comparing: > Permission denied > > any idea as to what cud have caused this ?? > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > From shane.kavanagh at gmail.com Fri Dec 4 11:39:07 2009 From: shane.kavanagh at gmail.com (Shane Kavanagh) Date: Fri, 4 Dec 2009 11:39:07 +0000 Subject: [rancid] Rancid Ignores autoenable for host name but not IP address Message-ID: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com> All (are there parameters on the hostname) I have a problem with Rancid, its ignoring autoenable (and method) for new hostnames.. Here is running clogin manually for the IP first which works and then Hostname which does not, also see snip from my .cloginrc *rancid at gbedub-rancid01:~$ clogin 10.132.50.103* 10.132.50.103 spawn telnet 10.132.50.103 Trying 10.132.50.103... Connected to 10.132.50.103. Escape character is '^]'. User Access Verification Username: shanek Password: GBEHP-SWH-Prd-WAD101# GBEHP-SWH-Prd-WAD101#exit Connection closed by foreign host. *rancid at gbedub-rancid01:~$ clogin GBEHP-SWH-Prd-WAD101* gbehp-swh-prd-wad101 spawn telnet gbehp-swh-prd-wad101 Trying 10.132.50.103... Connected to gbehp-swh-prd-wad101.GBE.local. Escape character is '^]'. User Access Verification Username: shanek Password: GBEHP-SWH-Prd-WAD101#* Error: TIMEOUT reached* rancid at gbedub-rancid01:~$ Snip from rancid at gbedub-rancid01:~$ ls -l .cloginrc -rw-r----- 1 rancid rancid 6333 2009-12-04 11:25 .cloginrc add method GBEHP-SWH-Prd-WAD101 telnet # add method GBEHP-SWH-Prd-WAD101 ssh add autoenable GBEHP-SWH-Prd-WAD101 1 add autoenable 10.132.50.103 1 add method * telnet -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/3ded3f63/attachment.html From Dan_Mitton at YMP.GOV Thu Dec 3 21:03:33 2009 From: Dan_Mitton at YMP.GOV (Dan_Mitton at YMP.GOV) Date: Thu, 3 Dec 2009 13:03:33 -0800 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com> Message-ID: Nope, not out there. To: Dan_Mitton at ymp.gov cc: Randy Bush , rancid Subject: Re: [rancid] Re: freebsd, tcl and expect LSN: Not Relevant - Not Privileged User Filed as: Excl/AdminMgmt-14-4/QA:N/A ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz more sites listed here. http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html 2009/12/3 : > > Where can I get the expect-nox11-5.44.1.11_1 package?? > > Thanks, > > Dan > > > Sent by: rancid-discuss-bounces at shrubbery.net > > To: David Paul Zimmerman > cc: rancid (bcc: Dan Mitton/YD/RWDOE) > Subject: [rancid] Re: freebsd, tcl and expect > > LSN: Not Relevant - Not Privileged > User Filed as: Excl/AdminMgmt-14-4/QA:N/A > >> dpz at pourri$ uname -s -r >> FreeBSD 7.2-RELEASE-p3 >> >> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" >> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk >> rancid-2.3.2 Really Awesome New Cisco confIg Differ >> tcl-8.4.19_3,1 Tool Command Language > > thanks > > maybe i will try to break things if my meeting gets boring tomorrow > > randy > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/2816f8af/attachment.html From jamess at newedgenetworks.com Fri Dec 4 16:35:04 2009 From: jamess at newedgenetworks.com (Sutherland, James) Date: Fri, 4 Dec 2009 08:35:04 -0800 Subject: [rancid] missed cmd(s): write term In-Reply-To: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com> References: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com> Message-ID: Suddenly rancid cannot talk to one of my routers. Router is a 7206, just like many others. clogin against this router works fine. A packet trace shows that all the data gets sent to rancid, even on write term the routers sends it whole config and rancid sends "exit" after that. Here is what the logs show. Anyone have any ideas? The router that doesn't work is called "van-priv1" look for that string in the logs below. --log output- starting: Fri Dec 4 08:17:39 PST 2009 Trying to get all of the configs. write(spawn_id=4): invalid argument while executing "send -h "exit\r"" invoked from within "expect -nobrace -re {^[^ ^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} { # the Cisco CE and Jnx ERX # return to non-enabled mode ..." invoked from within "expect { -re "^\[^\n\r *]*$reprompt" { # the Cisco CE and Jnx ERX # return to non-enabled mode # on exit in enabled mode. ..." (procedure "run_commands" line 110) invoked from within "run_commands $prompt $command" ("foreach" body line 152) invoked from within "foreach router [lrange $argv $i end] { set router [string tolower $router] # attempt at platform switching. set platform "" send_user ..." (file "/opt/rancid/bin/clogin" line 734) van-priv1.net.newedgenetworks.com: missed cmd(s): write term ===================================== Getting missed routers: round 1. write(spawn_id=4): invalid argument while executing "send -h "exit\r"" invoked from within "expect -nobrace -re {^[^ ^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} { # the Cisco CE and Jnx ERX # return to non-enabled mode ..." invoked from within "expect { -re "^\[^\n\r *]*$reprompt" { # the Cisco CE and Jnx ERX # return to non-enabled mode # on exit in enabled mode. ..." (procedure "run_commands" line 110) invoked from within "run_commands $prompt $command" ("foreach" body line 152) invoked from within "foreach router [lrange $argv $i end] { set router [string tolower $router] # attempt at platform switching. set platform "" send_user ..." (file "/opt/rancid/bin/clogin" line 734) van-priv1.net.newedgenetworks.com: missed cmd(s): write term cvs diff: Diffing . cvs diff: Diffing configs cvs commit: Examining . cvs commit: Examining configs ending: Fri Dec 4 08:18:15 PST 2009 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/9fc7f82a/attachment.html From jamess at newedgenetworks.com Fri Dec 4 16:47:13 2009 From: jamess at newedgenetworks.com (Sutherland, James) Date: Fri, 4 Dec 2009 08:47:13 -0800 Subject: [rancid] missed cmd(s): write term Message-ID: Suddenly rancid cannot talk to one of my routers. Router is a 7206, just like many others. clogin against this router works fine. A packet trace shows that all the data gets sent to rancid, even on write term the routers sends it whole config and rancid sends "exit" after that. Here is what the logs show. Anyone have any ideas? The router that doesn't work is called "van-priv1" look for that string in the logs below. --log output- starting: Fri Dec 4 08:17:39 PST 2009 Trying to get all of the configs. write(spawn_id=4): invalid argument while executing "send -h "exit\r"" invoked from within "expect -nobrace -re {^[^ ^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} { # the Cisco CE and Jnx ERX # return to non-enabled mode ..." invoked from within "expect { -re "^\[^\n\r *]*$reprompt" { # the Cisco CE and Jnx ERX # return to non-enabled mode # on exit in enabled mode. ..." (procedure "run_commands" line 110) invoked from within "run_commands $prompt $command" ("foreach" body line 152) invoked from within "foreach router [lrange $argv $i end] { set router [string tolower $router] # attempt at platform switching. set platform "" send_user ..." (file "/opt/rancid/bin/clogin" line 734) van-priv1.net.newedgenetworks.com: missed cmd(s): write term ===================================== Getting missed routers: round 1. write(spawn_id=4): invalid argument while executing "send -h "exit\r"" invoked from within "expect -nobrace -re {^[^ ^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} { # the Cisco CE and Jnx ERX # return to non-enabled mode ..." invoked from within "expect { -re "^\[^\n\r *]*$reprompt" { # the Cisco CE and Jnx ERX # return to non-enabled mode # on exit in enabled mode. ..." (procedure "run_commands" line 110) invoked from within "run_commands $prompt $command" ("foreach" body line 152) invoked from within "foreach router [lrange $argv $i end] { set router [string tolower $router] # attempt at platform switching. set platform "" send_user ..." (file "/opt/rancid/bin/clogin" line 734) van-priv1.net.newedgenetworks.com: missed cmd(s): write term cvs diff: Diffing . cvs diff: Diffing configs cvs commit: Examining . cvs commit: Examining configs ending: Fri Dec 4 08:18:15 PST 2009 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/8df47056/attachment.html From heas at shrubbery.net Fri Dec 4 20:14:30 2009 From: heas at shrubbery.net (john heasley) Date: Fri, 4 Dec 2009 12:14:30 -0800 Subject: [rancid] Re: missed cmd(s): write term In-Reply-To: References: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com> Message-ID: <20091204201430.GA22387@shrubbery.net> Fri, Dec 04, 2009 at 08:35:04AM -0800, Sutherland, James: > Suddenly rancid cannot talk to one of my routers. Router is a 7206, > just like many others. clogin against this router works fine. A packet > trace shows that all the data gets sent to rancid, even on write term > the routers sends it whole config and rancid sends "exit" after that. > > > > Here is what the logs show. Anyone have any ideas? > it seems the device disconnected prematurely, before the exit command was sent. you should be able to see that in your packet trace. you can also use clogin -d -c 'list_the_rancid_commands' to help trace it. also look on the device for errors, such as memory exhaustion or AAA authorization failures. From dpz at berkeley.edu Sat Dec 5 01:04:26 2009 From: dpz at berkeley.edu (David Paul Zimmerman) Date: Fri, 4 Dec 2009 17:04:26 -0800 Subject: [rancid] Re: freebsd, tcl and expect In-Reply-To: References: Message-ID: <50D98E4E-44F1-48F0-854D-2D9918D8EF8E@berkeley.edu> That package is just a version of expect without X11. I use the portupgrade port to manage my ports, so to get expect to build that way, I modified /usr/local/etc/pkgtools.conf to have the following stanza: MAKE_ARGS = { 'lang/expect*' => 'WITHOUT_X11=yes', } and then told portinstall to install lang/expect-devel. expect-devel is currently expect-5.44.1.11_1 in the ports, so with the 'WITHOUT_X11' directive, portinstall will install expect- nox11-5.44.1.11_1. dp On Dec 3, 2009, at 11:50 AM, Dan_Mitton at YMP.GOV wrote: > > Where can I get the expect-nox11-5.44.1.11_1 package?? > > Thanks, > > Dan > > > Sent by: rancid-discuss-bounces at shrubbery.net > > To: David Paul Zimmerman > cc: rancid (bcc: Dan Mitton/YD/ > RWDOE) > Subject: [rancid] Re: freebsd, tcl and expect > > > LSN: Not Relevant - Not Privileged > User Filed as: Excl/AdminMgmt-14-4/QA:N/A > > > dpz at pourri$ uname -s -r > > FreeBSD 7.2-RELEASE-p3 > > > > dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect" > > expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk > > rancid-2.3.2 Really Awesome New Cisco confIg Differ > > tcl-8.4.19_3,1 Tool Command Language > > thanks > > maybe i will try to break things if my meeting gets boring tomorrow > > randy > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > From radwep at gmail.com Tue Dec 8 08:40:20 2009 From: radwep at gmail.com (Rad Wep) Date: Tue, 8 Dec 2009 09:40:20 +0100 Subject: [rancid] "rancid-cvs" file not found Message-ID: <7efdf8de0912080040q5e38577cge1da5c311962281e@mail.gmail.com> Hello everybody, Yesterday, I tried to install Rancid but I have an issues : i dont found the rancid-cvs file, I only got rancid-cvs.in file. Do anyone have a solution? Cheers, Bastien -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091208/21a51039/attachment.html From dan.schmidt at uplinkdata.com Wed Dec 9 16:49:31 2009 From: dan.schmidt at uplinkdata.com (Schmidt, Daniel) Date: Wed, 9 Dec 2009 09:49:31 -0700 Subject: [rancid] Terminal Width Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com> I would like to modify my terminal width, but I notice some devices do not seem to like it as I get missed cmds. Perhaps I require an expect or something between the two commands? 605 } else { 606 send "terminal length 0\r" 607 send "terminal width 80\r" 608 } From dan.schmidt at uplinkdata.com Wed Dec 9 17:07:33 2009 From: dan.schmidt at uplinkdata.com (Schmidt, Daniel) Date: Wed, 9 Dec 2009 10:07:33 -0700 Subject: [rancid] Re: Terminal Width In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com> References: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com> Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B38@che-exch-003.uplinkdata.com> Never mind. This was, indeed, a stupid question. -----Original Message----- From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Schmidt, Daniel Sent: Wednesday, December 09, 2009 9:50 AM To: rancid-discuss at shrubbery.net Subject: [rancid] Terminal Width I would like to modify my terminal width, but I notice some devices do not seem to like it as I get missed cmds. Perhaps I require an expect or something between the two commands? 605 } else { 606 send "terminal length 0\r" 607 send "terminal width 80\r" 608 } _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From isabelle at ctbc.com.br Wed Dec 9 17:45:06 2009 From: isabelle at ctbc.com.br (isabelle at ctbc.com.br) Date: Wed, 9 Dec 2009 14:45:06 -0300 Subject: [rancid] CVS history Message-ID: An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091209/e85d5f03/attachment.html From smunzani at comcast.net Wed Dec 9 17:31:39 2009 From: smunzani at comcast.net (Sam Munzani) Date: Wed, 09 Dec 2009 11:31:39 -0600 Subject: [rancid] SVN list all old versions and check out all versions Message-ID: <4B1FDEFB.5090401@comcast.net> Team, Does anyone know how to list all the version in SVN for a specific device and check out all the version configs in full or get the full config on 1st revision and get diff or all versions after that? Thanks, sam From heas at shrubbery.net Wed Dec 9 18:55:15 2009 From: heas at shrubbery.net (john heasley) Date: Wed, 9 Dec 2009 10:55:15 -0800 Subject: [rancid] Re: SVN list all old versions and check out all versions In-Reply-To: <4B1FDEFB.5090401@comcast.net> References: <4B1FDEFB.5090401@comcast.net> Message-ID: <20091209185515.GF7142@shrubbery.net> Wed, Dec 09, 2009 at 11:31:39AM -0600, Sam Munzani: > Team, > > Does anyone know how to list all the version in SVN for a specific > device and check out all the version configs in full or get the full > config on 1st revision and get diff or all versions after that? svn log configs/name gives you all revisions for that file svn diff -r x:y configs/name gives you diffs between versions x and y svn update -r x configs/name gives you that file svn help svn log --help svn diff --help svn update --help and see the "red book" http://svnbook.red-bean.com/en/1.5/svn-book.html > Thanks, > sam > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From heas at shrubbery.net Wed Dec 9 18:57:02 2009 From: heas at shrubbery.net (john heasley) Date: Wed, 9 Dec 2009 10:57:02 -0800 Subject: [rancid] Re: CVS history In-Reply-To: References: Message-ID: <20091209185702.GG7142@shrubbery.net> Wed, Dec 09, 2009 at 02:45:06PM -0300, isabelle at ctbc.com.br: > I'm new to Rancid and I would just like to know for how long is the history saved in CVS? Is it possible to set a maximum history file size or maximum number of revisions (or something similar)?
Any help would be appreciated.
 
Thank you very much for your time.
 

Isabelle.


its retained forever, unless you delete it with cvs admin -o. see the manual. you're probably wasting your time, if your concern is disk. From isabelle at ctbc.com.br Fri Dec 11 11:49:28 2009 From: isabelle at ctbc.com.br (isabelle at ctbc.com.br) Date: Fri, 11 Dec 2009 08:49:28 -0300 Subject: [rancid] Aliases and wildcards Message-ID: An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/83a76974/attachment.html From bohara at ripe.net Fri Dec 11 11:36:19 2009 From: bohara at ripe.net (Ben O'Hara) Date: Fri, 11 Dec 2009 12:36:19 +0100 Subject: [rancid] [patch] f5rancid - ignore fans/configsync times Message-ID: Hi, We have a pair of f5 BigIPs which we backup configs with rancid. Noticed the latest f5 firmware changed the output for fan modules and when used in a failover pair was including config sync times (we sync our configs automatically so rancid saw a diff of only the time) Heres is a patch to fix this behaviour, can this get commited? diff -u f5rancid.old f5rancid.new --- f5rancid.old 2009-12-07 13:13:39.000000000 +0100 +++ f5rancid.new 2009-12-11 11:52:18.000000000 +0100 @@ -206,7 +206,7 @@ ProcessHistory("SHOWDB","","","#\n#database:\n"); } /UCS.LoadTime/ && next; - /Configsync.LocalConfigTime/ && next; + /Configsync.*Time/ && next; /LTM.ConfigTime/ && next; if (/^(snmp\..*\.community\..* =) (.+)/i) { @@ -291,6 +291,7 @@ return(-1) if (/command authorization failed/i); /fan speed/i && next; + /rpm/i && next; /chassis temperature/i && next; /degC/ && next; s/^\|//; Cheers Ben -- Ben O'Hara RIPE Network Coordination Center Systems Engineer Singel 258, Amsterdam, NL http://www.ripe.net +31 20 535 4444 PGP Fingerprint: 080A 52FF BF0A A7FB F176 E7DB 513D 9A3D E968 7DBC From kyudayev at verizon.com Fri Dec 11 16:24:32 2009 From: kyudayev at verizon.com (Konstantin Yudayev) Date: Fri, 11 Dec 2009 11:24:32 -0500 Subject: [rancid] how to ignore timestamps in config Message-ID: <1260548672.4662.28.camel@Boolean-L.restoncampus.com> Hello, We have upgraded code on Cisco CRS router and looks like Cisco is now putting time stamp in front of every output (show ru, dir /all etc). RANCID believes that line belongs to config and has changed as a result I have a lot of "noise" in diff at every run. I have no problems adding regexp to exclude timestamps from the final output. Could Shrubbery guys advise on how to fix that problem (ignore timestamps in front of every output)? Here are some examples: RP/0/RP1/CPU0:*********#show ru Fri Dec 11 16:17:01.115 UTC Building configuration... !! IOS XR Configuration !! Last configuration change at Thu Dec 10 18:16:46 2009 by ! service timestamps log datetime localtime msec show-timezone service timestamps debug datetime localtime msec show-timezone ......... ..... RP/0/RP1/CPU0:*********#dir /all disk0: Fri Dec 11 16:21:04.666 UTC Directory of disk0: 2 drwx 32768 Thu Oct 8 09:37:25 2009 LOST.DIR 19493 dr-x 32768 Wed Dec 9 06:41:17 2009 bcm-cur ..... .... As a result diff report is full of this stuff: -!BootFlash: Thu Dec 10 10:01:37.984 UTC +!BootFlash: Fri Dec 11 10:01:32.729 UTC Thank you - Konstantin Yudayev @Verizon -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/bf95341a/attachment.html From kyudayev at verizon.com Fri Dec 11 16:34:40 2009 From: kyudayev at verizon.com (Konstantin Yudayev) Date: Fri, 11 Dec 2009 11:34:40 -0500 Subject: [rancid] Re: Aliases and wildcards In-Reply-To: References: Message-ID: <1260549280.4662.34.camel@Boolean-L.restoncampus.com> Isabelle, I don't think it is possible to use wildcards in /etc/aliases since the username is being looked up by getpwname system function. But it can be done through patching bin/control_rancid. On Fri, 2009-12-11 at 08:49 -0300, isabelle at ctbc.com.br wrote: > Hello! > > I would just like to know if its possible to use wildcards in > the "aliases" file or if I can set an e-mail that will receive mail > from all groups. What I intended to do was something like this: > > # rancid/etc/aliases > > rancid-admin-* mail at mail.com > rancid-* mail at mail.com > > Any help would be appreciated. > > Thank you very much for your time. > > Best regards, > > Isabelle. > > > > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/5e5d995b/attachment.html From Voitek_Kozak at Cable.Comcast.com Fri Dec 11 16:58:26 2009 From: Voitek_Kozak at Cable.Comcast.com (Kozak, Voitek) Date: Fri, 11 Dec 2009 11:58:26 -0500 Subject: [rancid] Re: how to ignore timestamps in config In-Reply-To: <1260548672.4662.28.camel@Boolean-L.restoncampus.com> References: <1260548672.4662.28.camel@Boolean-L.restoncampus.com> Message-ID: <76EA980B393A584084B397FCA1D2551910132137@NJCHLEXCMB01.cable.comcast.com> look in archive for the thread ?Disabling timestamp on Cisco IO devices? was time stamp on my email Tue 11/17/2009 4:08 AM, worked for me on crs. -:) thanks, -voitek., From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Konstantin Yudayev Sent: Friday, December 11, 2009 11:25 AM To: rancid-discuss at shrubbery.net Subject: [rancid] how to ignore timestamps in config Hello, We have upgraded code on Cisco CRS router and looks like Cisco is now putting time stamp in front of every output (show ru, dir /all etc). RANCID believes that line belongs to config and has changed as a result I have a lot of "noise" in diff at every run. I have no problems adding regexp to exclude timestamps from the final output. Could Shrubbery guys advise on how to fix that problem (ignore timestamps in front of every output)? Here are some examples: RP/0/RP1/CPU0:*********#show ru Fri Dec 11 16:17:01.115 UTC Building configuration... !! IOS XR Configuration !! Last configuration change at Thu Dec 10 18:16:46 2009 by ! service timestamps log datetime localtime msec show-timezone service timestamps debug datetime localtime msec show-timezone ......... ..... RP/0/RP1/CPU0:*********#dir /all disk0: Fri Dec 11 16:21:04.666 UTC Directory of disk0: 2 drwx 32768 Thu Oct 8 09:37:25 2009 LOST.DIR 19493 dr-x 32768 Wed Dec 9 06:41:17 2009 bcm-cur ..... .... As a result diff report is full of this stuff: -!BootFlash: Thu Dec 10 10:01:37.984 UTC +!BootFlash: Fri Dec 11 10:01:32.729 UTC Thank you - Konstantin Yudayev @Verizon -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/8967da31/attachment.html From cgauthier at mapscu.com Fri Dec 11 17:32:01 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Fri, 11 Dec 2009 09:32:01 -0800 Subject: [rancid] Re: Aliases and wildcards In-Reply-To: <1260549280.4662.34.camel@Boolean-L.restoncampus.com> References: <1260549280.4662.34.camel@Boolean-L.restoncampus.com> Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F277@mshin01.mapscu.com> To the best of my knowledge, you?re mixing apples and oranges there. Rancid does not actually control /etc/aliases at all. The ?aliases? file is used by your MTA (sendmail, postfix, et al) to provide specific direction for various email addresses on the system. All rancid does is append the rancid group name to either the ?rancid-? or ?rancid-admin-? string and use standard mailing calls to whatever MTA is running. The MTA is what governs the format of the /etc/aliases file. Chris Gauthier Network Administrator MaPS Credit Union v: 503.375.2445 f: 503.779.1083 http://www.mapscu.com ?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.? ?Leonardo da Vinci From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Konstantin Yudayev Sent: Friday, December 11, 2009 8:35 AM To: rancid-discuss at shrubbery.net Subject: [rancid] Re: Aliases and wildcards Isabelle, I don't think it is possible to use wildcards in /etc/aliases since the username is being looked up by getpwname system function. But it can be done through patching bin/control_rancid. On Fri, 2009-12-11 at 08:49 -0300, isabelle at ctbc.com.br wrote: Hello! I would just like to know if its possible to use wildcards in the "aliases" file or if I can set an e-mail that will receive mail from all groups. What I intended to do was something like this: # rancid/etc/aliases rancid-admin-* mail at mail.com rancid-* mail at mail.com Any help would be appreciated. Thank you very much for your time. Best regards, Isabelle. _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/a9a5dfea/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 497 bytes Desc: image001.gif Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/a9a5dfea/attachment.gif From mksmith at adhost.com Fri Dec 11 17:42:22 2009 From: mksmith at adhost.com (Michael K. Smith - Adhost) Date: Fri, 11 Dec 2009 09:42:22 -0800 Subject: [rancid] Lock files not being removed Message-ID: <17838240D9A5544AAA5FF95F8D520316071DF1A8@ad-exh01.adhost.lan> Hello: This is a FreeBSD installation. The /tmp/.*.lock files are not being removed at the end of the run. Then, I get about 50 expect/perl processes that stick around. Finally, when I got and manually delete the tmp files I get 7000 messages about stuck lock files. Has anyone run into this and, if so, is there a fix? Regards, Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksmith at adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9 84BB E61E 38C0 (Key ID: 0x9A96777D) From heas at shrubbery.net Fri Dec 11 18:22:35 2009 From: heas at shrubbery.net (john heasley) Date: Fri, 11 Dec 2009 10:22:35 -0800 Subject: [rancid] Re: how to ignore timestamps in config In-Reply-To: <1260548672.4662.28.camel@Boolean-L.restoncampus.com> References: <1260548672.4662.28.camel@Boolean-L.restoncampus.com> Message-ID: <20091211182235.GB25931@shrubbery.net> Fri, Dec 11, 2009 at 11:24:32AM -0500, Konstantin Yudayev: > Hello, > > We have upgraded code on Cisco CRS router and looks like Cisco is now > putting time stamp in front of every output (show ru, dir /all etc). > RANCID believes that line belongs to config and has changed as a result > I have a lot of "noise" in diff at every run. I have no problems adding > regexp to exclude timestamps from the final output. Could Shrubbery guys > advise on how to fix that problem (ignore timestamps in front of every > output)? Here are some examples: turn them off. this must be the single most dysfunctional "feature" to ever come out of cisco. > > > > RP/0/RP1/CPU0:*********#show ru > Fri Dec 11 16:17:01.115 UTC > Building configuration... > !! IOS XR Configuration > !! Last configuration change at Thu Dec 10 18:16:46 2009 by > ! > service timestamps log datetime localtime msec show-timezone > service timestamps debug datetime localtime msec show-timezone > ......... > ..... > > > > > RP/0/RP1/CPU0:*********#dir /all disk0: > Fri Dec 11 16:21:04.666 UTC > > Directory of disk0: > > 2 drwx 32768 Thu Oct 8 09:37:25 2009 LOST.DIR > 19493 dr-x 32768 Wed Dec 9 06:41:17 2009 bcm-cur > ..... > .... > > > > > As a result diff report is full of this stuff: > > -!BootFlash: Thu Dec 10 10:01:37.984 UTC > > +!BootFlash: Fri Dec 11 10:01:32.729 UTC > > > Thank you > > - Konstantin Yudayev @Verizon > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From pierg75 at yahoo.it Wed Dec 16 15:32:18 2009 From: pierg75 at yahoo.it (Pier) Date: Wed, 16 Dec 2009 15:32:18 +0000 (GMT) Subject: [rancid] Rancid and Fortinet Message-ID: <67402.14488.qm@web28602.mail.ukl.yahoo.com> Hi all. I started to use rancid to make backups of some routers and switches configurations and it works well. But we have problem with a fortigate firewall, the same described here: http://www.shrubbery.net/pipermail/rancid-discuss/2009-April/003840.html Are there any news for this problem? Thanks Pier From ports at raveland.org Wed Dec 16 16:50:13 2009 From: ports at raveland.org (Pierre-Emmanuel Andre) Date: Wed, 16 Dec 2009 17:50:13 +0100 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <67402.14488.qm@web28602.mail.ukl.yahoo.com> References: <67402.14488.qm@web28602.mail.ukl.yahoo.com> Message-ID: <20091216165012.GE651@coredump.raveland.priv> On Wed, Dec 16, 2009 at 03:32:18PM +0000, Pier wrote: > Hi all. > I started to use rancid to make backups of some routers and switches configurations and it works well. > But we have problem with a fortigate firewall, the same described here: > > http://www.shrubbery.net/pipermail/rancid-discuss/2009-April/003840.html > > Are there any news for this problem? > Thanks > > Pier Hi Pier, It depends on your firmware level. On the new firmware (> 3 iirc), the good commands are: + get system status (for GetSystem) + show (for GetConf) I use rancid to backup a lot of Fortinet (~ 200) without pbs. Regards, -- Pierre-Emmanuel Andr? GPG key: 0x7AE329DC From pierg75 at yahoo.it Wed Dec 16 17:12:09 2009 From: pierg75 at yahoo.it (Pier) Date: Wed, 16 Dec 2009 17:12:09 +0000 (GMT) Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <20091216165012.GE651@coredump.raveland.priv> Message-ID: <616125.15144.qm@web28603.mail.ukl.yahoo.com> > Hi Pier, > > It depends on your firmware level. > On the new firmware (> 3 iirc), the good commands are: > + get system status (for GetSystem) > + show (for GetConf) > > I use rancid to backup a lot of Fortinet (~ 200) without > pbs. > > Regards, The fortinet is using a version 3 firmware. I get a timeout error...do i have to modify something to make it work? Thanks Pier From ronnij at gmail.com Thu Dec 17 07:30:49 2009 From: ronnij at gmail.com (Ronni Jensen) Date: Thu, 17 Dec 2009 08:30:49 +0100 Subject: [rancid] Problem getting config from Cisco ASA firewalls Message-ID: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> Hi, My rancid installation works perfectly for Cisco Catalyst switches and other stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get the "clogin error: Error: TIMEOUT reached" error. .cloginrc for a particular FW looks like: add password 10.10.1.2 {exec_pass} {enable_pass} add method 10.10.1.2 telnet add autoenable 10.10.1.2 {1} I've also tried replacing IP-address with DNS hostname or just using a wildcard star... no difference. When I telnet directly from the server to the firewall, the sequence looks like: *[me at LinuxSrv ~]$ telnet 192.168.1.2 Trying 10.10.1.2... Connected to 10.10.1.2. Escape character is '^]'.* *User Access Verification* *Password: * *Type help or '?' for a list of available commands. UMUSASA01> * *Password: ******* UMUSASA01# * Any ideas? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/d68ca4a1/attachment.html From diego.ercolani at ssis.sm Thu Dec 17 08:08:30 2009 From: diego.ercolani at ssis.sm (Diego Ercolani) Date: Thu, 17 Dec 2009 09:08:30 +0100 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <616125.15144.qm@web28603.mail.ukl.yahoo.com> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> Message-ID: <200912170908.30592.diego.ercolani@ssis.sm> I submitted a patch to correct problems on my fortinet during June.... http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html Please feel free to modify and adapt to your installation but please return it to the community Hope This Help Diego In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto: : > > Hi Pier, > > > > It depends on your firmware level. > > On the new firmware (> 3 iirc), the good commands are: > > + get system status (for GetSystem) > > + show (for GetConf) > > > > I use rancid to backup a lot of Fortinet (~ 200) without > > pbs. > > > > Regards, > > The fortinet is using a version 3 firmware. > I get a timeout error...do i have to modify something to make it work? > Thanks > > Pier From willay at gmail.com Thu Dec 17 08:10:49 2009 From: willay at gmail.com (William) Date: Thu, 17 Dec 2009 08:10:49 +0000 Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls In-Reply-To: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> Message-ID: Ronni, According to your email when accessing the firewall manually there is no autoenable, so I would try the following config for your device: add userprompt 10.10.1.2 pix add method 10.10.1.2 telnet add password 10.10.1.2 {exec_pass} {enable_pass} hope this helps. Cheers, Will 2009/12/17 Ronni Jensen : > Hi, > > My rancid installation works perfectly for Cisco Catalyst switches and other > stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get > the "clogin error: Error: TIMEOUT reached" error. > > .cloginrc for a particular FW looks like: > > add password 10.10.1.2??????? {exec_pass} {enable_pass} > add method 10.10.1.2????????? telnet > add autoenable 10.10.1.2????? {1} > > I've also tried replacing IP-address with DNS hostname or just using a > wildcard star... no difference. When I telnet directly from the server to > the firewall, the sequence looks like: > > > [me at LinuxSrv ~]$ telnet 192.168.1.2 > Trying 10.10.1.2... > Connected to 10.10.1.2. > Escape character is '^]'. > User Access Verification > Password: > Type help or '?' for a list of available commands. > UMUSASA01> > Password: ******* > UMUSASA01# > > Any ideas? > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > From ronnij at gmail.com Thu Dec 17 10:00:55 2009 From: ronnij at gmail.com (Ronni Jensen) Date: Thu, 17 Dec 2009 11:00:55 +0100 Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls In-Reply-To: References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> Message-ID: <7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com> Hi, I tried with the example you wrote, but it didn't change anything.. I still get the "clogin error: Error: TIMEOUT reached" errors in the logfile. Any other suggestions how I can fix the error? Best regards, Ronni On Thu, Dec 17, 2009 at 9:10 AM, William wrote: > Ronni, > > According to your email when accessing the firewall manually there is > no autoenable, so I would try the following config for your device: > > add userprompt 10.10.1.2 pix > add method 10.10.1.2 telnet > add password 10.10.1.2 {exec_pass} {enable_pass} > > > hope this helps. > > Cheers, > > Will > > 2009/12/17 Ronni Jensen : > > Hi, > > > > My rancid installation works perfectly for Cisco Catalyst switches and > other > > stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get > > the "clogin error: Error: TIMEOUT reached" error. > > > > .cloginrc for a particular FW looks like: > > > > add password 10.10.1.2 {exec_pass} {enable_pass} > > add method 10.10.1.2 telnet > > add autoenable 10.10.1.2 {1} > > > > I've also tried replacing IP-address with DNS hostname or just using a > > wildcard star... no difference. When I telnet directly from the server to > > the firewall, the sequence looks like: > > > > > > [me at LinuxSrv ~]$ telnet 192.168.1.2 > > Trying 10.10.1.2... > > Connected to 10.10.1.2. > > Escape character is '^]'. > > User Access Verification > > Password: > > Type help or '?' for a list of available commands. > > UMUSASA01> > > Password: ******* > > UMUSASA01# > > > > Any ideas? > > _______________________________________________ > > Rancid-discuss mailing list > > Rancid-discuss at shrubbery.net > > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/7b438fa0/attachment.html From ronnij at gmail.com Thu Dec 17 11:20:20 2009 From: ronnij at gmail.com (Ronni Jensen) Date: Thu, 17 Dec 2009 12:20:20 +0100 Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls In-Reply-To: References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> <7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com> <7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com> Message-ID: <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com> Oh, it also got onto the box before, it's just the enable part that seems to be the problem.. This is without debug stuff: [rancid at LinuxSrv ~]$ /usr/libexec/rancid/clogin -t 10 192.168.1.2 192.168.1.2 spawn telnet 192.168.1.2 Trying 192.168.1.2... Connected to 192.168.1.2. Escape character is '^]'. User Access Verification Password: Type help or '?' for a list of available commands. ASAFW01> Error: TIMEOUT reached [rancid at LinuxSrv ~]$ On Thu, Dec 17, 2009 at 11:36 AM, William wrote: > so its getting onto the box now... but doesnt enable... whats the > output without all the debug junk? > > 2009/12/17 Ronni Jensen : > > It's like it never gets to the enable-part.. Here is the debug output of > a > > manual clogin run: > > > > > > [rancid at LinuxSrv ~]$ /usr/libexec/rancid/clogin -d -t 10 10.10.1.2 > > 10.10.1.2 > > spawn telnet 10.10.1.2 > > parent: waiting for sync byte > > parent: telling child to go ahead > > parent: now unsynchronized from child > > spawn: returns {13658} > > expect: does "" (spawn_id exp4) match regular expression "(Connection > > refused|Secure connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does "" (spawn_id exp4) match glob pattern "unknown host\r"? no > > expect: does "" (spawn_id exp4) match glob pattern "Host is unreachable"? > no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? no > > "(#| \(enable\))"? no > > "Login invalid"? no > > Trying 10.10.1.2... > > Connected to 10.10.1.2. > > Escape character is '^]'. > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n" (spawn_id exp4) match regular expression > > "(Connection refused|Secure connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n" (spawn_id exp4) match glob pattern "unknown > > host\r"? no > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n" (spawn_id exp4) match glob pattern "Host is > > unreachable"? no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? no > > "(#| \(enable\))"? no > > "Login invalid"? no > > User Access Verification > > Password: > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword: > " > > (spawn_id exp4) match regular expression "(Connection refused|Secure > > connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword: > " > > (spawn_id exp4) match glob pattern "unknown host\r"? no > > expect: does "Trying 10.10.1.2...\r\r\nConnected to > 10.10.1.2.\r\r\nEscape > > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword: > " > > (spawn_id exp4) match glob pattern "Host is unreachable"? no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? yes > > expect: set expect_out(0,string) "Password:" > > expect: set expect_out(1,string) "Password" > > expect: set expect_out(spawn_id) "exp4" > > expect: set expect_out(buffer) "Trying 10.10.1.2...\r\r\nConnected to > > 10.10.1.2.\r\r\nEscape character is '^]'.\r\r\n\r\n\r\nUser Access > > Verification\r\n\r\nPassword:" > > send: sending "exec_pass\r" to { exp4 } > > expect: continuing expect > > expect: does " " (spawn_id exp4) match regular expression "(Connection > > refused|Secure connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does " " (spawn_id exp4) match glob pattern "unknown host\r"? no > > expect: does " " (spawn_id exp4) match glob pattern "Host is > unreachable"? > > no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? no > > "(#| \(enable\))"? no > > "Login invalid"? no > > expect: does " \r\n" (spawn_id exp4) match regular expression > "(Connection > > refused|Secure connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does " \r\n" (spawn_id exp4) match glob pattern "unknown host\r"? > no > > expect: does " \r\n" (spawn_id exp4) match glob pattern "Host is > > unreachable"? no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? no > > "(#| \(enable\))"? no > > "Login invalid"? no > > Type help or '?' for a list of available commands. > > ASAFW01> > > expect: does " \r\nType help or '?' for a list of available > > commands.\r\n\rASAFW01> " (spawn_id exp4) match regular expression > > "(Connection refused|Secure connection [^\n\r]+ refused)"? no > > "(Connection closed by|Connection to [^\n\r]+ closed)"? no > > expect: does " \r\nType help or '?' for a list of available > > commands.\r\n\rASAFW01> " (spawn_id exp4) match glob pattern "unknown > > host\r"? no > > expect: does " \r\nType help or '?' for a list of available > > commands.\r\n\rASAFW01> " (spawn_id exp4) match glob pattern "Host is > > unreachable"? no > > "No address associated with name"? no > > "(Host key not found |The authenticity of host .* be > > established).*(yes/no)?"? no > > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no > > "Offending key for .* (yes/no)?"? no > > "(denied|Sorry)"? no > > "Login failed"? no > > "% (Bad passwords|Authentication failed)"? no > > "Press any key to continue"? no > > "Enter Selection: "? no > > "Last login:"? no > > "@[^\r\n]+ ([Pp]assword|passwd):"? no > > "pix"? no > > "([Pp]assword|passwd):"? no > > "(#| \(enable\))"? no > > "Login invalid"? no > > expect: timed out > > Error: TIMEOUT reached > > [rancid at LinuxSrv ~]$ > > > > > > > > On Thu, Dec 17, 2009 at 11:03 AM, William wrote: > >> > >> Ronni, > >> > >> Try running the clogin program manually, for example type from the > >> command prompt (as the rancid user): > >> > >> clogin 10.10.1.2 > >> > >> and paste the output? > >> > >> Cheers, > >> > >> > >> > >> 2009/12/17 Ronni Jensen : > >> > Hi, > >> > > >> > I tried with the example you wrote, but it didn't change anything.. I > >> > still > >> > get the "clogin error: Error: TIMEOUT reached" errors in the logfile. > >> > > >> > Any other suggestions how I can fix the error? > >> > > >> > Best regards, > >> > Ronni > >> > > >> > On Thu, Dec 17, 2009 at 9:10 AM, William wrote: > >> >> > >> >> Ronni, > >> >> > >> >> According to your email when accessing the firewall manually there is > >> >> no autoenable, so I would try the following config for your device: > >> >> > >> >> add userprompt 10.10.1.2 pix > >> >> add method 10.10.1.2 telnet > >> >> add password 10.10.1.2 {exec_pass} {enable_pass} > >> >> > >> >> > >> >> hope this helps. > >> >> > >> >> Cheers, > >> >> > >> >> Will > >> >> > >> >> 2009/12/17 Ronni Jensen : > >> >> > Hi, > >> >> > > >> >> > My rancid installation works perfectly for Cisco Catalyst switches > >> >> > and > >> >> > other > >> >> > stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, > I > >> >> > get > >> >> > the "clogin error: Error: TIMEOUT reached" error. > >> >> > > >> >> > .cloginrc for a particular FW looks like: > >> >> > > >> >> > add password 10.10.1.2 {exec_pass} {enable_pass} > >> >> > add method 10.10.1.2 telnet > >> >> > add autoenable 10.10.1.2 {1} > >> >> > > >> >> > I've also tried replacing IP-address with DNS hostname or just > using > >> >> > a > >> >> > wildcard star... no difference. When I telnet directly from the > >> >> > server > >> >> > to > >> >> > the firewall, the sequence looks like: > >> >> > > >> >> > > >> >> > [me at LinuxSrv ~]$ telnet 192.168.1.2 > >> >> > Trying 10.10.1.2... > >> >> > Connected to 10.10.1.2. > >> >> > Escape character is '^]'. > >> >> > User Access Verification > >> >> > Password: > >> >> > Type help or '?' for a list of available commands. > >> >> > UMUSASA01> > >> >> > Password: ******* > >> >> > UMUSASA01# > >> >> > > >> >> > Any ideas? > >> >> > _______________________________________________ > >> >> > Rancid-discuss mailing list > >> >> > Rancid-discuss at shrubbery.net > >> >> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > >> >> > > >> > > >> > > > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/25bb571f/attachment.html From rwest at zyedge.com Thu Dec 17 14:06:22 2009 From: rwest at zyedge.com (Ryan West) Date: Thu, 17 Dec 2009 14:06:22 +0000 Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls In-Reply-To: <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com> References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> <7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com> <7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com> <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com> Message-ID: <5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local> Ronnie, From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ronni Jensen Sent: Thursday, December 17, 2009 6:20 AM To: William User Access Verification Password: Type help or '?' for a list of available commands. ASAFW01> Error: TIMEOUT reached [rancid at LinuxSrv ~]$ Looks like there is no AAA (local or otherwise) being used, you should just need: add method 10.10.1.2 telnet add password 10.10.1.2 {exec_pass} {enable_pass} add autoenable 10.10.1.2 0 -ryan -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/ca8f64a3/attachment.html From ronnij at gmail.com Thu Dec 17 15:38:45 2009 From: ronnij at gmail.com (Ronni Jensen) Date: Thu, 17 Dec 2009 16:38:45 +0100 Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls In-Reply-To: <5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local> References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com> <7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com> <7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com> <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com> <5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local> Message-ID: <7a76d30f0912170738m5bd76e64h78b7ff4b325d38fa@mail.gmail.com> Ryan, Thanks a mill... that worked like a charm :-D On Thu, Dec 17, 2009 at 3:06 PM, Ryan West wrote: > Ronnie, > > > > *From:* rancid-discuss-bounces at shrubbery.net [mailto: > rancid-discuss-bounces at shrubbery.net] *On Behalf Of *Ronni Jensen > *Sent:* Thursday, December 17, 2009 6:20 AM > *To:* William > > > User Access Verification > > Password: > Type help or '?' for a list of available commands. > ASAFW01> > > Error: TIMEOUT reached > [rancid at LinuxSrv ~]$ > > > > > > > > Looks like there is no AAA (local or otherwise) being used, you should just > need: > > > > add method 10.10.1.2 telnet > > add password 10.10.1.2 {exec_pass} {enable_pass} > > add autoenable 10.10.1.2 0 > > > > -ryan > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/5c8e70c8/attachment.html From pierg75 at yahoo.it Thu Dec 17 20:01:45 2009 From: pierg75 at yahoo.it (Pierguido) Date: Thu, 17 Dec 2009 21:01:45 +0100 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <200912170908.30592.diego.ercolani@ssis.sm> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> Message-ID: <4B2A8E29.4000306@yahoo.it> Diego Ercolani wrote: > I submitted a patch to correct problems on my fortinet during June.... > > http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html > > Please feel free to modify and adapt to your installation but please return it > to the community > > Hope This Help Yes, thank you, With those patches i'm able to backups the configs of the fortinet. I saw you made a patch also for the 3coms, which "type" do i have to put in the router.db? Thanks Pier From dan.schmidt at uplinkdata.com Thu Dec 17 22:22:14 2009 From: dan.schmidt at uplinkdata.com (Schmidt, Daniel) Date: Thu, 17 Dec 2009 15:22:14 -0700 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <200912170908.30592.diego.ercolani@ssis.sm> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> Perhaps somebody would be interested in compiling all the unofficial/beta patches in one place so people don't have to search through the list archives? -----Original Message----- From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego Ercolani Sent: Thursday, December 17, 2009 1:08 AM To: rancid-discuss at shrubbery.net Subject: [rancid] Re: Rancid and Fortinet I submitted a patch to correct problems on my fortinet during June.... http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html Please feel free to modify and adapt to your installation but please return it to the community Hope This Help Diego In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto: : > > Hi Pier, > > > > It depends on your firmware level. > > On the new firmware (> 3 iirc), the good commands are: > > + get system status (for GetSystem) > > + show (for GetConf) > > > > I use rancid to backup a lot of Fortinet (~ 200) without > > pbs. > > > > Regards, > > The fortinet is using a version 3 firmware. > I get a timeout error...do i have to modify something to make it work? > Thanks > > Pier _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From heas at shrubbery.net Thu Dec 17 22:27:32 2009 From: heas at shrubbery.net (john heasley) Date: Thu, 17 Dec 2009 14:27:32 -0800 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> Message-ID: <20091217222732.GC6944@shrubbery.net> Thu, Dec 17, 2009 at 03:22:14PM -0700, Schmidt, Daniel: > Perhaps somebody would be interested in compiling all the unofficial/beta patches in one place so people don't have to search through the list archives? it'd be great if someone other than the poster would verify that patches actually work for platforms that I can't verify myself. > -----Original Message----- > From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego Ercolani > Sent: Thursday, December 17, 2009 1:08 AM > To: rancid-discuss at shrubbery.net > Subject: [rancid] Re: Rancid and Fortinet > > I submitted a patch to correct problems on my fortinet during June.... > > http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html > > Please feel free to modify and adapt to your installation but please return it > to the community > > Hope This Help > Diego > > In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto: > : > > Hi Pier, > > > > > > It depends on your firmware level. > > > On the new firmware (> 3 iirc), the good commands are: > > > + get system status (for GetSystem) > > > + show (for GetConf) > > > > > > I use rancid to backup a lot of Fortinet (~ 200) without > > > pbs. > > > > > > Regards, > > > > The fortinet is using a version 3 firmware. > > I get a timeout error...do i have to modify something to make it work? > > Thanks > > > > Pier > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From dan.schmidt at uplinkdata.com Thu Dec 17 22:34:47 2009 From: dan.schmidt at uplinkdata.com (Schmidt, Daniel) Date: Thu, 17 Dec 2009 15:34:47 -0700 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <20091217222732.GC6944@shrubbery.net> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> <20091217222732.GC6944@shrubbery.net> Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC2@che-exch-003.uplinkdata.com> Hence said need for the page - can't expect John to do everything. Well, that and maybe for patches that John and I disagree on. ;-) -----Original Message----- From: john heasley [mailto:heas at shrubbery.net] Sent: Thursday, December 17, 2009 3:28 PM To: Schmidt, Daniel Cc: Diego Ercolani; rancid-discuss at shrubbery.net Subject: Re: [rancid] Re: Rancid and Fortinet Thu, Dec 17, 2009 at 03:22:14PM -0700, Schmidt, Daniel: > Perhaps somebody would be interested in compiling all the unofficial/beta patches in one place so people don't have to search through the list archives? it'd be great if someone other than the poster would verify that patches actually work for platforms that I can't verify myself. > -----Original Message----- > From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego Ercolani > Sent: Thursday, December 17, 2009 1:08 AM > To: rancid-discuss at shrubbery.net > Subject: [rancid] Re: Rancid and Fortinet > > I submitted a patch to correct problems on my fortinet during June.... > > http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html > > Please feel free to modify and adapt to your installation but please return it > to the community > > Hope This Help > Diego > > In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto: > : > > Hi Pier, > > > > > > It depends on your firmware level. > > > On the new firmware (> 3 iirc), the good commands are: > > > + get system status (for GetSystem) > > > + show (for GetConf) > > > > > > I use rancid to backup a lot of Fortinet (~ 200) without > > > pbs. > > > > > > Regards, > > > > The fortinet is using a version 3 firmware. > > I get a timeout error...do i have to modify something to make it work? > > Thanks > > > > Pier > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From diego.ercolani at ssis.sm Fri Dec 18 09:04:23 2009 From: diego.ercolani at ssis.sm (Diego Ercolani) Date: Fri, 18 Dec 2009 10:04:23 +0100 Subject: [rancid] Re: Rancid and Fortinet In-Reply-To: <4B2A8E29.4000306@yahoo.it> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> <4B2A8E29.4000306@yahoo.it> Message-ID: <200912181004.23553.diego.ercolani@ssis.sm> It's an enhancement for Baseline Switches (the model I've developed on is 3comBLS2948), so obviously the "machine type" to put in router.db is 3combls I remember that I have also made some enhancements to .clogin parser needed by my linux enhancements to build the correct database. I hope these enhancement will be included and maintained in next releases of rancid. Diego In data gioved? 17 dicembre 2009 21:01:45, Pierguido ha scritto: : > Diego Ercolani wrote: > > I submitted a patch to correct problems on my fortinet during June.... > > > > http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html > > > > Please feel free to modify and adapt to your installation but please > > return it to the community > > > > Hope This Help > > Yes, thank you, With those patches i'm able to backups the configs of > the fortinet. > I saw you made a patch also for the 3coms, which "type" do i have to put > in the router.db? > > Thanks > > Pier From mstefani at redhat.com Fri Dec 18 10:14:33 2009 From: mstefani at redhat.com (Michael Stefaniuc) Date: Fri, 18 Dec 2009 11:14:33 +0100 Subject: [rancid] Patch List (Was: Re: Rancid and Fortinet) In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> References: <616125.15144.qm@web28603.mail.ukl.yahoo.com> <200912170908.30592.diego.ercolani@ssis.sm> <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com> Message-ID: <4B2B5609.2070803@redhat.com> Schmidt, Daniel wrote: > Perhaps somebody would be interested in compiling all the > unofficial/beta patches in one place so people don't have to search > through the list archives? That's actually a perfect use case for a wiki. Does a wiki exist for rancid (the software and not the band ;)? bye michael -- Michael Stefaniuc Tel.: +49-711-96437-199 Consulting Communications Engineer Fax.: +49-711-96437-111 -------------------------------------------------------------------- Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach Handelsregister: Amtsgericht Muenchen HRB 153243 Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham, Charles Cachera From radwep at gmail.com Fri Dec 18 14:56:36 2009 From: radwep at gmail.com (Rad Wep) Date: Fri, 18 Dec 2009 15:56:36 +0100 Subject: [rancid] Is it possible to modify the diff email? Message-ID: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com> Hello everybody, Rancid works great but I have a little problem about the mail we receive when there is a configuration modification. We would like to know if rancid can alert us without sending the configuration in the mail because it's a security issue! We just want to have a mail like "routerX has been modified". Is is possible? Where can we do that? Many Thanks in advance -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091218/38947088/attachment.html From heas at shrubbery.net Fri Dec 18 18:12:58 2009 From: heas at shrubbery.net (john heasley) Date: Fri, 18 Dec 2009 10:12:58 -0800 Subject: [rancid] Re: Is it possible to modify the diff email? In-Reply-To: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com> References: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com> Message-ID: <20091218181258.GB13449@shrubbery.net> Fri, Dec 18, 2009 at 03:56:36PM +0100, Rad Wep: > Hello everybody, > > Rancid works great but I have a little problem about the mail we receive > when there is a configuration modification. > We would like to know if rancid can alert us without sending the > configuration in the mail because it's a security issue! > We just want to have a mail like "routerX has been modified". > > Is is possible? Where can we do that? change the cvs diff code in control_rancid. From radwep at gmail.com Fri Dec 18 21:33:12 2009 From: radwep at gmail.com (Rad Wep) Date: Fri, 18 Dec 2009 22:33:12 +0100 Subject: [rancid] Re: Is it possible to modify the diff email? In-Reply-To: <20091218181258.GB13449@shrubbery.net> References: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com> <20091218181258.GB13449@shrubbery.net> Message-ID: <7efdf8de0912181333i312ef1f5vf037e641434fa953@mail.gmail.com> Hello Thanks! But where is that code? Second Question : Can we keep the different passwords of the config and don't have " password " ? Thx! 2009/12/18 john heasley > Fri, Dec 18, 2009 at 03:56:36PM +0100, Rad Wep: > > Hello everybody, > > > > Rancid works great but I have a little problem about the mail we receive > > when there is a configuration modification. > > We would like to know if rancid can alert us without sending the > > configuration in the mail because it's a security issue! > > We just want to have a mail like "routerX has been modified". > > > > Is is possible? Where can we do that? > > change the cvs diff code in control_rancid. > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091218/753536c4/attachment.html From zeusdadog at gmail.com Fri Dec 18 21:45:36 2009 From: zeusdadog at gmail.com (Jay Nakamura) Date: Fri, 18 Dec 2009 16:45:36 -0500 Subject: [rancid] Rancid and Extreme switch Message-ID: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com> I can't for the life of me get RANCID to work with our Extreme switch. Extreme Summit X350 12.0.4.5 This is the output from xrancid $ ./xrancid -V rancid 2.3.2a10 $ ./xrancid -d 192.168.45.13 executing clogin -t 90 -c "show version;show memory;show diag;show switch;show slot;show configuration detail;show configuration" 192.168.45.13 PROMPT MATCH: core2-indy[:.]\d+ ?# HIT COMMAND:core2-indy.1 # show version In ShowVersion: core2-indy.1 # show version Then it just hangs there. Any ideas? Thanks! From zeusdadog at gmail.com Mon Dec 21 16:30:47 2009 From: zeusdadog at gmail.com (Jay Nakamura) Date: Mon, 21 Dec 2009 11:30:47 -0500 Subject: [rancid] Re: Rancid and Extreme switch In-Reply-To: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com> References: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com> Message-ID: <9418aca70912210830m627ea68dy68c15c66cf606873@mail.gmail.com> Someone suggested installing the expect patch. I rebuilt Expect with the patch but still seeing the same issue. Any other suggestions? On Fri, Dec 18, 2009 at 4:45 PM, Jay Nakamura wrote: > I can't for the life of me get RANCID to work with our Extreme switch. > > Extreme Summit X350 > 12.0.4.5 > > This is the output from xrancid > $ ./xrancid -V > rancid 2.3.2a10 > $ ./xrancid -d 192.168.45.13 > executing clogin -t 90 -c "show version;show memory;show diag;show > switch;show slot;show configuration detail;show configuration" > 192.168.45.13 > PROMPT MATCH: core2-indy[:.]\d+ ?# > HIT COMMAND:core2-indy.1 # ?show version > ? ?In ShowVersion: core2-indy.1 # ?show version > > Then it just hangs there. > > Any ideas? > > Thanks! > From cgauthier at mapscu.com Mon Dec 21 22:38:03 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Mon, 21 Dec 2009 14:38:03 -0800 Subject: [rancid] Re: upgrade from 2.3.2-a7-2? In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com> Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com> Thanks to John for the answer he sent me about this earlier. I thought I would share my feedback for anyone using Ubuntu 8.04 LTS Server: I had the 3 packages mentioned previously installed. What someone did when packaging for Ubuntu was to split the installation into 3 different debian packages (why??? Who knows...) The rancid-cgi was the looking glass installation. The rancid-core is just that, the core files, and the rancid-util includes the /share directory (rtronline, downtime, etc). I uninstalled all three packages and built the 2.3.2 version install with the following parameters: ~ # tar zxf rancid-2.3.2.tar.gz ~/rancid-2.3.2 # ./configure --prefix=/var/lib/rancid --exec-prefix=/usr/lib/rancid --datadir=/usr/share --sysconfdir=/etc/rancid --mandir=/usr/share/man ~/rancid-2.3.2 # make ~/rancid-2.3.2 # make install ~/rancid-2.3.2 # ln -s /usr/lib/rancid/bin ~rancid/bin ~/rancid-2.3.2 # ln -s /var/log/rancid ~rancid/logs Everything works normally in terms of getting the info. However, it remains to be seen how the configs do over time (do I get annoying change emails every time or not?). Chris From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Gauthier Sent: Friday, November 06, 2009 10:50 AM To: rancid-discuss at shrubbery.net Subject: [rancid] upgrade from 2.3.2-a7-2? So, now that I have installed my new ASA5520, I have the same "coredump" file issue that had been previously reported by others.? I know the fix is to upgrade to 2.3.2, but I'm not sure of the best way to do that since my installation is an ubuntu package installation. If I uninstall the package, then I will lose my configs and repository, right? How would you handle this?? I think I need to uninstall the 3 rancid packages and build from source.? I just don't want to lose everything in the process. Here are the 3 packages (all 2.3.20-a7-2) rancid-cgi rancid-core rancid-util Ideas? Chris Gauthier Network Administrator MaPS Credit Union v: 503.375.2445 f: 503.779.1083 http://www.mapscu.com "For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return." -Leonardo da Vinci From cgauthier at mapscu.com Mon Dec 21 22:41:13 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Mon, 21 Dec 2009 14:41:13 -0800 Subject: [rancid] Cisco ASA Coredump bug--fixed yet? Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> Did anyone ever find a solution to the coredump bug on the Cisco ASA? Did TAC ever come back with anything? Thanks, Chris "For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return." -Leonardo da Vinci -----Original Message----- From: rancid at example.com Sent: Monday, December 21, 2009 2:32 PM To: rancid-firewalls at example.com Subject: firewalls router config diffs Index: configs/firewall.example.com =================================================================== retrieving revision 1.13 diff -U 4 -r1.13 firewall.example.com @@ -41,9 +41,9 @@ !Flash: 329 3756345 Feb 05 2009 02:44:30 anyconnect-linux-2.2.0133-k9.pkg !Flash: 330 11348300 Nov 06 2009 00:48:08 asdm-621.bin !Flash: 511 987 Nov 17 2009 17:31:13 dap.xml !Flash: 346 4096 Nov 06 2009 00:55:40 coredumpinfo - !Flash: 347 43 Dec 21 2009 00:12:15 coredumpinfo/coredump.cfg + !Flash: 347 43 Dec 21 2009 14:16:31 coredumpinfo/coredump.cfg !Flash: 255844352 bytes total (171683840 bytes free) ! !Flash: disk0: Directory of disk0:/ !Flash: disk0: 314 -rwx 14137344 16:06:18 Dec 31 2002 asa804-k8.bin From ron.whitney at doitbest.com Mon Dec 21 23:37:14 2009 From: ron.whitney at doitbest.com (Ron Whitney) Date: Mon, 21 Dec 2009 18:37:14 -0500 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> Message-ID: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> > Did anyone ever find a solution to the coredump bug on the > Cisco ASA? Did TAC ever come back with anything? Here's the last status I received (about a week ago) on that bug: The following bug(s) you have subscribed to have been updated as follows: ------------------------------------------------------------------------ ---------- BugID: CSCsz85597 What Changed: Fixed in version Title: coredump.cfg file gets rewritten every time show run is executed Technology: nav Version: 8.2(1) Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M Severity: 2 State: Verified Bug Details: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method =fetchBugDetails&bugId=CSCsz85597 From rwest at zyedge.com Mon Dec 21 23:45:01 2009 From: rwest at zyedge.com (Ryan West) Date: Mon, 21 Dec 2009 23:45:01 +0000 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> References: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> Message-ID: <594485F7-7426-4D1B-AD5B-7F9D613B82E6@zyedge.com> 8.2.1(11) interim has the fix. Sent from handheld. On Dec 21, 2009, at 6:37 PM, "Ron Whitney" wrote: > >> Did anyone ever find a solution to the coredump bug on the >> Cisco ASA? Did TAC ever come back with anything? > > Here's the last status I received (about a week ago) on that bug: > > The following bug(s) you have subscribed to have been updated as > follows: > > --- > --------------------------------------------------------------------- > ---------- > > BugID: CSCsz85597 > What Changed: Fixed in version > Title: coredump.cfg file gets rewritten every time show run is > executed > Technology: nav > Version: 8.2(1) > Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M > Severity: 2 > State: Verified > Bug Details: > http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method > =fetchBugDetails&bugId=CSCsz85597 > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From moens at carrier2carrier.com Mon Dec 21 23:47:38 2009 From: moens at carrier2carrier.com (M. Moens) Date: Tue, 22 Dec 2009 00:47:38 +0100 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> Message-ID: <1261439258.8959.6.camel@acer> Chris, Upgrading to the latest ASA software solves the problem. No need to change anything on rancid. Martin On ma, 2009-12-21 at 14:41 -0800, Chris Gauthier wrote: > Did anyone ever find a solution to the coredump bug on the Cisco ASA? > Did TAC ever come back with anything? > > Thanks, > > Chris > > "For once you have tasted flight you will walk the earth with your eyes > turned skywards, for there you have been and there you will long to > return." > -Leonardo da Vinci > > -----Original Message----- > From: rancid at example.com > Sent: Monday, December 21, 2009 2:32 PM > To: rancid-firewalls at example.com > Subject: firewalls router config diffs > > > Index: configs/firewall.example.com > =================================================================== > retrieving revision 1.13 > diff -U 4 -r1.13 firewall.example.com > @@ -41,9 +41,9 @@ > !Flash: 329 3756345 Feb 05 2009 02:44:30 > anyconnect-linux-2.2.0133-k9.pkg > !Flash: 330 11348300 Nov 06 2009 00:48:08 asdm-621.bin > !Flash: 511 987 Nov 17 2009 17:31:13 dap.xml > !Flash: 346 4096 Nov 06 2009 00:55:40 coredumpinfo > - !Flash: 347 43 Dec 21 2009 00:12:15 > coredumpinfo/coredump.cfg > + !Flash: 347 43 Dec 21 2009 14:16:31 > coredumpinfo/coredump.cfg > !Flash: 255844352 bytes total (171683840 bytes free) > ! > !Flash: disk0: Directory of disk0:/ > !Flash: disk0: 314 -rwx 14137344 16:06:18 Dec 31 2002 > asa804-k8.bin > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From perc69 at gmail.com Tue Dec 22 09:50:07 2009 From: perc69 at gmail.com (Per Carlson) Date: Tue, 22 Dec 2009 10:50:07 +0100 Subject: [rancid] Re: upgrade from 2.3.2-a7-2? In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com> <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com> Message-ID: <746ca6da0912220150l3d5592d5q842dd7cb68aad7da@mail.gmail.com> Hi. This is more related to managing a Debian-based (like Ubuntu) server than a RANCID topic, but I'll answer it here anyway. > I had the 3 packages mentioned previously installed. ?What someone did when packaging for Ubuntu was to split the installation into 3 different debian packages (why??? Who knows...) This is a very normal approach in the Debian world. If, for example, a software is a bundle of several components that functions seperatly, some users are only interested in componentA, while others in componentB. Why forcing users to install components (which potentionally could be large) they don't use? Instead Debian splits the (binary) package in componentA and B, and gives the users the freedom to choose. That's exactly the argument here: some wants to run the looking glass portion of RANCID, and others want to run the configuration maintenance task, and some of *those* also want the web-ui. (There are other arguments behind splitting a package, but they don't apply to RANCID.) > If I uninstall the package, then I will lose my configs and repository, right? No you won't (but a backup never hurts). Debian differs between "uninstall" and "purge". Uninstall don't remove any config files or data files, just binaries (this is not 100% correct, but I'll drop the details here). Purge on the other hand also removes the config files, and potentionally the data files. > How would you handle this?? I think I need to uninstall the 3 rancid packages and build from source.? I just don't want to lose everything in the process. The best way to do this is using multiple package sources. You can use the normal repository for Hardy as normal, and add a "lastest and greatest" repository separatly. You then use APT-Pinning to set the priorities between the repositories (Hardy as default, "lastest and greatest" when specifically asked for). A simple web-search returns a lot of guides and howto's on the topic. As a side note: tracking "lastest and greatest" is much easier in Debian (always testing and/or unstable) then in Ubuntu (right now: lucid). -- Pelle From tsai at eng.fsu.edu Tue Dec 22 14:28:27 2009 From: tsai at eng.fsu.edu (Jack Tsai) Date: Tue, 22 Dec 2009 09:28:27 -0500 Subject: [rancid] /root/.clogin.rc Message-ID: <4B30D78B.5030409@eng.fsu.edu> Recently we changed our login method to the Cisco switches as follows: Username: hello (no password needed, user hello automatically login to privilege level 7, a restricted user) Hostname# enable Password: LetMeIn Hostname# (now we are in the enable mode with privilege level 15) Please teach me how to set up the /root/.cloginrc in order to allow rancid to obtain the full privilege. Thanks, Jack network administrator From tsai at eng.fsu.edu Tue Dec 22 14:32:49 2009 From: tsai at eng.fsu.edu (Jack Tsai) Date: Tue, 22 Dec 2009 09:32:49 -0500 Subject: [rancid] /root/.cloginrc Message-ID: <4B30D891.8030808@eng.fsu.edu> We are using the rancid version available in March, 2009. Sometimes {LetMeIn!} does not work as a password and LetMeIn! does. Sometimes {h at llo} does not work as a username and h at llo does. When should we use ssh instead of {ssh}? Thanks, Jack From heas at shrubbery.net Tue Dec 22 16:23:51 2009 From: heas at shrubbery.net (john heasley) Date: Tue, 22 Dec 2009 08:23:51 -0800 Subject: [rancid] Re: /root/.clogin.rc In-Reply-To: <4B30D78B.5030409@eng.fsu.edu> References: <4B30D78B.5030409@eng.fsu.edu> Message-ID: <20091222162351.GH3767@shrubbery.net> Tue, Dec 22, 2009 at 09:28:27AM -0500, Jack Tsai: > Recently we changed our login method to the Cisco switches as follows: > Username: hello > (no password needed, user hello automatically login to privilege > level 7, a restricted user) > Hostname# enable > Password: LetMeIn > Hostname# > (now we are in the enable mode with privilege level 15) > > Please teach me how to set up the /root/.cloginrc in order to allow > rancid to obtain the full privilege. clogin doesnt support this. it presumes that a # prompt indicates enabled mode, which it does (not level 1). so, in your case it think it is already enabled. From heas at shrubbery.net Tue Dec 22 16:29:32 2009 From: heas at shrubbery.net (john heasley) Date: Tue, 22 Dec 2009 08:29:32 -0800 Subject: [rancid] Re: /root/.cloginrc In-Reply-To: <4B30D891.8030808@eng.fsu.edu> References: <4B30D891.8030808@eng.fsu.edu> Message-ID: <20091222162932.GI3767@shrubbery.net> Tue, Dec 22, 2009 at 09:32:49AM -0500, Jack Tsai: > We are using the rancid version available in March, 2009. > Sometimes {LetMeIn!} does not work as a password and LetMeIn! does. > Sometimes {h at llo} does not work as a username and h at llo does. > When should we use ssh instead of {ssh}? this one doesn't matter. the {}s are like quotes; its good ritual to just use them for all of the arguments. {LetMeIn!} or {h at llo} not working sometimes but working others is unexpected behavior. it should at least be consistent. if it were consistent, try escaping the special characters, though I don't think that escaping those is necessary. see cloginrc(5). From cgauthier at mapscu.com Tue Dec 22 18:34:26 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Tue, 22 Dec 2009 10:34:26 -0800 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com> I went to Cisco.com and looked for the fixed versions and they were not there. So, even after my attempts to just "fix it", I still had to contact the TAC for the files. They set me up with version 8.2.1.4 (Interim). Thanks for pointing out the Bug ID, that made the case SUPER easy for me to describe to TAC and for TAC to just give me what I needed. Chris -----Original Message----- From: Ron Whitney [mailto:ron.whitney at doitbest.com] Sent: Monday, December 21, 2009 3:37 PM To: Chris Gauthier; rancid-discuss at shrubbery.net Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet? > Did anyone ever find a solution to the coredump bug on the > Cisco ASA? Did TAC ever come back with anything? Here's the last status I received (about a week ago) on that bug: The following bug(s) you have subscribed to have been updated as follows: ------------------------------------------------------------------------ ---------- BugID: CSCsz85597 What Changed: Fixed in version Title: coredump.cfg file gets rewritten every time show run is executed Technology: nav Version: 8.2(1) Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M Severity: 2 State: Verified Bug Details: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method =fetchBugDetails&bugId=CSCsz85597 From pc50000 at gmail.com Wed Dec 23 16:50:08 2009 From: pc50000 at gmail.com (P C) Date: Wed, 23 Dec 2009 11:50:08 -0500 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com> Message-ID: <47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com> You should also be able to go to suppport > download software > security > firweall > firewall appliances > cisco asa 55x0 > cisco asa software > drill down to 8.2, and 8.2.1.11 is posted and downloadable as a more TAC-posted and more thoroughly tested interim build. It's been fixed since 8.2.1.2 On Tue, Dec 22, 2009 at 1:34 PM, Chris Gauthier wrote: > I went to Cisco.com and looked for the fixed versions and they were not > there. So, even after my attempts to just "fix it", I still had to > contact the TAC for the files. They set me up with version 8.2.1.4 > (Interim). > > Thanks for pointing out the Bug ID, that made the case SUPER easy for me > to describe to TAC and for TAC to just give me what I needed. > > Chris > > -----Original Message----- > From: Ron Whitney [mailto:ron.whitney at doitbest.com] > Sent: Monday, December 21, 2009 3:37 PM > To: Chris Gauthier; rancid-discuss at shrubbery.net > Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet? > > > > Did anyone ever find a solution to the coredump bug on the > > Cisco ASA? Did TAC ever come back with anything? > > Here's the last status I received (about a week ago) on that bug: > > The following bug(s) you have subscribed to have been updated as > follows: > > ------------------------------------------------------------------------ > ---------- > > BugID: CSCsz85597 > What Changed: Fixed in version > Title: coredump.cfg file gets rewritten every time show run is executed > Technology: nav > Version: 8.2(1) > Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M > Severity: 2 > State: Verified > Bug Details: > http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method > =fetchBugDetails&bugId=CSCsz85597 > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091223/d420b2e1/attachment.html From cgauthier at mapscu.com Wed Dec 23 17:04:47 2009 From: cgauthier at mapscu.com (Chris Gauthier) Date: Wed, 23 Dec 2009 09:04:47 -0800 Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet? In-Reply-To: <47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com> References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com> <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com> <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com> <47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com> Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F6AF@mshin01.mapscu.com> While I should be able to follow that path, the only result available is "8.2(1)" and it does not get more specific than that. Here is an excerpt from the site: asa821-k8.bin Release Date: 06/May/2009 Cisco Adaptive Security Appliance Software version 8.2(1) for the ASA 5505, 5510, 5520, 5540, and ASA5550. Please read the Release Note prior to downloading this release. Size: 15894.00 KB (16275456 bytes) However, Cisco also has, in a different spot (now that I notice it differently), an 8.2.1.ED and then 8.2.1.11. ugh.... Sometimes Cisco really frustrates me. I'll be changing to 8.2.1.11 vs the 8.2.1.4 given me by the TAC. Chris From: P C [mailto:pc50000 at gmail.com] Sent: Wednesday, December 23, 2009 8:50 AM To: Chris Gauthier Cc: rancid-discuss at shrubbery.net Subject: Re: [rancid] Re: Cisco ASA Coredump bug--fixed yet? You should also be able to go to suppport? > download software > security > firweall > firewall appliances > cisco asa 55x0 > cisco asa software > drill down to 8.2, and 8.2.1.11 is posted and downloadable as a more TAC-posted and more thoroughly tested interim build.? It's been fixed since 8.2.1.2 On Tue, Dec 22, 2009 at 1:34 PM, Chris Gauthier wrote: I went to Cisco.com and looked for the fixed versions and they were not there. ?So, even after my attempts to just "fix it", I still had to contact the TAC for the files. ?They set me up with version 8.2.1.4 (Interim). Thanks for pointing out the Bug ID, that made the case SUPER easy for me to describe to TAC and for TAC to just give me what I needed. Chris -----Original Message----- From: Ron Whitney [mailto:ron.whitney at doitbest.com] Sent: Monday, December 21, 2009 3:37 PM To: Chris Gauthier; rancid-discuss at shrubbery.net Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet? > Did anyone ever find a solution to the coredump bug on the > Cisco ASA? Did TAC ever come back with anything? Here's the last status I received (about a week ago) on that bug: The following bug(s) you have subscribed to have been updated as follows: ------------------------------------------------------------------------ ---------- BugID: CSCsz85597 What Changed: Fixed in version Title: coredump.cfg file gets rewritten every time show run is executed Technology: nav Version: 8.2(1) Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M Severity: 2 State: Verified Bug Details: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method =fetchBugDetails&bugId=CSCsz85597 _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From david.mantock at gmx.ch Tue Dec 29 09:03:39 2009 From: david.mantock at gmx.ch (David Mantock) Date: Tue, 29 Dec 2009 10:03:39 +0100 Subject: [rancid] cannot open file router.db for comparing Message-ID: <20091229090339.107190@gmx.net> I am running rancid 2.3.2 on OpenSolaris, I have a problem that it seems that the router.db is not found when it has not been updated. cvs diff: Diffing . cvs [diff aborted]: cannot open file router.db for comparing: No such file or directory cvs commit: Examining . cvs commit: Examining configs Previously it ran OK and router.db was found when router.db was updated. cvs diff: Diffing . cvs diff: Diffing configs cvs commit: Examining . cvs commit: Examining configs /tank/rancid/xxxxx/CVS/XXXXX_RouterSwitch/router.db,v <-- router.db I have a remote CVS repository that is updated via SSH. Configs are being backed up OK and I can see diffs on the routers. Any suggestions? -- Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 - sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser