[rancid] issue with bigip rancid diff | riverbed issue

[Shaun Krok]

Hi there Heasley

Thank you -- that worked like a charm.
Seems to throw some small errors in the log but still works.

I have another small question for you if I may ?

Riverbed and rancid  -- I have configured rancid to login to the appliance with sshv1 without issue and can get it to the enable prompt.
But am having issues with the actual config. --
I am using rblogin which I have copied to rbrancid and have updated rancid-fe to include the vendor riverbed,
But it just does not work ... 

Any suggestions for me to use ?

With thanks

Shaun


-----Original Message-----
From: heasley [mailto:heas at shrubbery.net] 
Sent: Wednesday, December 05, 2012 3:24 AM
To: Shaun Krok
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] issue with bigip rancid diff

Sun, Dec 02, 2012 at 07:44:14AM +0000, Shaun Krok:
> > Thu, Nov 29, 2012 at 09:20:53AM +0000, Shaun Krok:
> > > Hi there
> > > 
> > > Please could I ask if someone has some input as to how fix/stop the following issue.
> > > Rancid and BIGIP boxes using tmsh F5 rancid script are working 100%
> > > 
> > > But the problem is that the cron which runs every hour is generating an email that shows the following :
> > > The same is generated for every F5 device in that is being monitored by Rancid.
> > > It would seem the issue is that the F5 seems to be changing or re-hashing the SNMP password or something like this.
> > > 
> > > Any help would be much appreciated ???
> > 
> > you would need to add a filter to the script.  i'm fairly ignorant of the F5; in the output of which command does this appear?
> > 
> > > 
> > > // snip of email diff 
> > > **********************************************************************
> > > *******************
> > > 
> > >           iENM_F5_SNMP_1 {
> > > 
> > > -             auth-password-encrypted ";ZdCaD>7S2YO,J6I\\C<dSO;HMSK<,4uDl4AHPXXhcb8Ta>p"
> > > 
> > > +             auth-password-encrypted "KAaTUL;ZRHjJDPG,SLGKlXZ3JlReGCL;mORiEcKek_cUS9a"
> > > 
> > >               auth-protocol sha
> > > 
> > >               oid-subset .1
> > > 
> > > -             privacy-password-encrypted @fG9HR]i^K4YOVM<g:jTAKFBWN1b,7_RA*mFq_5lg\\P2Z9h
> > > 
> > > +             privacy-password-encrypted "P;`P9[6`e1iD\\[>UbCakLYcSLm<\?\?=dWCEdcbSXoe[Q;U7o"
> > > 
> > >               privacy-protocol des
> > > 
> > >               security-level auth-privacy
> > > 
> > >               username ENM_F5_SNMP

as follows:

Index: bin/f5rancid.in
===================================================================
--- bin/f5rancid.in	(revision 2654)
+++ bin/f5rancid.in	(working copy)
@@ -184,6 +184,8 @@
 	if (!$line++) {
 	    ProcessHistory("SHOWBASE","","","#\n#base:\n");
 	}
+	if (/(auth-password-encrypted )\S+/) &&
+	    ProcessHistory("SHOWBASE","","","# $1 <removed>") && next;
 	ProcessHistory("SHOWBASE","","","# $_") && next;
     }
     return(0);