[rancid] Curious Cisco ASA problem

[Ian Murphy]

Eric, thanks for the reply.

when I manually log in as rancid I can only gain enable by using the local enable secret


-----Original Message-----
From: Eric Girard [mailto:egirard at focustsi.com] 
Sent: Friday, February 04, 2011 3:53 PM
To: Ian Murphy; 'Chris Gauthier'; 'rancid-discuss at shrubbery.net'
Subject: RE: Curious Cisco ASA problem

Ian,
	Does your ASA have TACACS turned on for enable access as well as telnet/SSH?  All of my ASA's are in RANCID as type 'cisco', I think you just have some sort of password mismatch.  Can you log in manually using the credentials you have specificed in your cloginrc?

Eric

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ian Murphy
Sent: Friday, February 04, 2011 4:24 PM
To: Chris Gauthier; rancid-discuss at shrubbery.net
Subject: Re: [rancid] Curious Cisco ASA problem

Hi Chris,

Thanks for the reply. I added the username and password above the "global" password as you suggested and I still get the same result. Autoenable is not applied to that device. One thing I noticed about the difference between the ASA and another device

Here's a snip from a working device:

edge4503a>enable
Password: 
edge4503a#

and from the nonworking device:

kansascityASA5520> enable
Password: ********
Invalid password
Password: ********
Invalid password
Password: ********
Invalid password
Access denied.
kansascityASA5520>

It looks like it's passing the creds differently. Maybe I have the ASA classified wrong in router.db? Is it supposed to be something other than type cisco?

Thanks,

Ian


-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Gauthier
Sent: Friday, February 04, 2011 3:09 PM
To: rancid-discuss at shrubbery.net
Subject: Re: [rancid] Curious Cisco ASA problem

<snip>
You are connected to:  kansascityASA5520.pop.local  

Type help or '?' for a list of available commands.
kansascityASA5520> enable
Password: ********
Invalid password
Password: ********
Invalid password
Password: ********
Invalid password
Access denied.
kansascityASA5520> 
Error: Check your Enable passwd

kansascityASA5520>


I gets connected just fine then drops to the unprivileged account. 

I have tried to add a specific username and password for this device like this:

#add user kansascityASA5520* {user}
#add password kansascityASA5520* {password} {password}


-----My reply----
Be sure that the username and password are defined before the "global" username and password.  Also, make sure the passwords are the same.  Is autoenable turned on?  If so, turn it off for that device.  Lastly, what is the * used for in the example above?  I am not sure that is a permissible character in the hostname field.

Chris

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
CONFIDENTIALITY NOTICE
Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies.
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


The information contained in this electronic communication, as well as in any attachments, may contain confidential or privileged information and may constitute non-public information, and is intended solely for use by the addressee(s). Any other use, disclosure, dissemination, distribution or copying of this electronic communication is strictly prohibited, may constitute an interference with Populous confidential business relationships and may be unlawful. If you received this communication in error, please notify me immediately and permanently delete the original and any electronic or printed copies of this electronic communication (including any attachments). Populous makes no representation regarding the absence of any virus in any attachment and expressly disclaims any responsibility for any damage suffered from the presence of a virus.

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss