[rancid] Curious Cisco ASA problem

[Ian Murphy]

Ok I tried this:

clogin -u rancid -p loginPW -e enablePW -c "sh ver" kansascityASA5520

and got the expected results. The device returned the version info.

Here's my .cloginrc file:

#custom user name and password for KC ASA
add user kansascityASA5520 {rancid}
add password kansascityASA5520 { loginPW } { enablePW }
add user * {rancid}
add password * { loginPW } { enablePW }

and clogin kansascityASA5520 fail to get eabled.


-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ian Murphy
Sent: Friday, February 04, 2011 3:24 PM
To: Chris Gauthier; rancid-discuss at shrubbery.net
Subject: Re: [rancid] Curious Cisco ASA problem

Hi Chris,

Thanks for the reply. I added the username and password above the "global" password as you suggested and I still get the same result. Autoenable is not applied to that device. One thing I noticed about the difference between the ASA and another device

Here's a snip from a working device:

edge4503a>enable
Password: 
edge4503a#

and from the nonworking device:

kansascityASA5520> enable
Password: ********
Invalid password
Password: ********
Invalid password
Password: ********
Invalid password
Access denied.
kansascityASA5520>

It looks like it's passing the creds differently. Maybe I have the ASA classified wrong in router.db? Is it supposed to be something other than type cisco?

Thanks,

Ian


-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Gauthier
Sent: Friday, February 04, 2011 3:09 PM
To: rancid-discuss at shrubbery.net
Subject: Re: [rancid] Curious Cisco ASA problem

<snip>
You are connected to:  kansascityASA5520.pop.local  

Type help or '?' for a list of available commands.
kansascityASA5520> enable
Password: ********
Invalid password
Password: ********
Invalid password
Password: ********
Invalid password
Access denied.
kansascityASA5520> 
Error: Check your Enable passwd

kansascityASA5520>


I gets connected just fine then drops to the unprivileged account. 

I have tried to add a specific username and password for this device like this:

#add user kansascityASA5520* {user}
#add password kansascityASA5520* {password} {password}


-----My reply----
Be sure that the username and password are defined before the "global" username and password.  Also, make sure the passwords are the same.  Is autoenable turned on?  If so, turn it off for that device.  Lastly, what is the * used for in the example above?  I am not sure that is a permissible character in the hostname field.

Chris

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
CONFIDENTIALITY NOTICE
Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies.
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


The information contained in this electronic communication, as well as in any attachments, may contain confidential or privileged information and may constitute non-public information, and is intended solely for use by the addressee(s). Any other use, disclosure, dissemination, distribution or copying of this electronic communication is strictly prohibited, may constitute an interference with Populous confidential business relationships and may be unlawful. If you received this communication in error, please notify me immediately and permanently delete the original and any electronic or printed copies of this electronic communication (including any attachments). Populous makes no representation regarding the absence of any virus in any attachment and expressly disclaims any responsibility for any damage suffered from the presence of a virus.

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss