From heas at shrubbery.net  Fri Mar  1 18:26:08 2013
From: heas at shrubbery.net (heasley)
Date: Fri, 1 Mar 2013 18:26:08 +0000
Subject: [rancid] Minor fix/update for hlogin  ( and *login?).
In-Reply-To: <512DBA12.1030909@chalmers.se>
References: <512DBA12.1030909@chalmers.se>
Message-ID: <20130301182608.GG27275@shrubbery.net>

Wed, Feb 27, 2013 at 08:47:30AM +0100, Per-Olof Olsson:
> Hello
> 
> 
> Testing some minor update for hlogin (rancid 2.3.8).
> 
> Sometimes I use hlogin to login to switches but get the session filtered by
> hpuifilter. A bit hard to work with that output. I think this helps.

I've always liked that it didnt mess with my terminal; ie: truncate it to
24 lines.  but, ok; committed.

> rancid at host bin]$ diff -c hlogin.in_ORG hlogin.in
> *** hlogin.in_ORG       2013-01-21 07:05:47.357345221 +0100
> --- hlogin.in   2013-02-27 07:56:51.332898135 +0100
> ***************
> *** 328,336 ****
	...

> Testing to set negative port number to telnet shows that it don't work on RHlinux
> (from "man cloginrc" " Example: add method * {ssh} {telnet:-3000} {rsh}").
> 
> Tested "add method <hostname> {telnet:-23}"
> 
> -----------------------
> $ telnet <hostname> -23
> telnet: invalid option -- '2'
> Usage: telnet [-8] [-E] [-L] [-S tos] [-a] [-c] [-d] [-e char] [-l user]
>         [-n tracefile] [-b hostalias ] [-r]
>  [host-name [port]]
> --------------------
> 
> I have to add "--" to telnet args in hlogin,  "telnet -- $router $port"
> 
> or used positive port number and put
> ----------------------
> DEFAULT
> 	mode character
> ----------------------
> or
> ----------------------
> <hostname>
> 	mode character
> ----------------------
> in ~/.telnetrc
> 
> 
> Is telnet special for RHlinux or update needed for telnet in all *login scripts
> and/or add some notes in man page for cloginrc about ~/.telnetrc?

I dont remember which client required the -; could have been BSD/OS.  removed.

there is a note in the page referring to telnetrc; I dont want to duplicate the
manpage there, I would surely get it wrong or miss nuances of particular
implementations.

From heas at shrubbery.net  Fri Mar  1 23:19:45 2013
From: heas at shrubbery.net (heasley)
Date: Fri, 1 Mar 2013 23:19:45 +0000
Subject: [rancid] HP procurve Menu logon
In-Reply-To: <5125CF67.7000006@chalmers.se>
References: <1156DBA5-8167-4772-B42B-620AA8D3ED2F@univ-lr.fr>
	<20130219051133.GC93736@shrubbery.net>
	<0FD58A9A-E69C-40E8-AC7E-109AB0EF65FF@univ-lr.fr>
	<20130219183726.GK12440@shrubbery.net>
	<8E1B0503-040E-4ABF-992E-AA6A16300A9E@univ-lr.fr>
	<20130220174317.GG58636@shrubbery.net> <51253DEB.9000301@ale.cx>
	<5125CF67.7000006@chalmers.se>
Message-ID: <20130301231945.GU27275@shrubbery.net>

Thu, Feb 21, 2013 at 08:40:23AM +0100, Per-Olof Olsson:
> Alex DEKKER skrev 02/20/2013 10:19 PM:
> > On 20/02/13 17:43, heasley wrote:
> >> btw, is this menu a standard thing with procurves?  I've never seen it,
> >> but the one that i have is a lower-end model.
> > It's not the default on current Procurves, you can access it with 'menu'. From what Marc
> > is saying, it sounds like there is a way to make it go straight into the menu on login for
> > a given username.
> >
> > alexd
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> 
> Only setting I found for this is in "8. Run Setup" menu
> where you select "Logon Default" to "CLI" or "Menu"

Would you propose a patch for this, since you can test it?

> /Peo
> ----------------------------------------------------------
> Per-Olof Olsson               Email: peo at chalmers.se
> Chalmers tekniska h?gskola    IT-service
> H?rsalsv?gen 5                412 96 G?teborg
> Tel: 031/772 6738  Fax: 031/772 8660
> ----------------------------------------------------------
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From peo at chalmers.se  Mon Mar  4 15:35:54 2013
From: peo at chalmers.se (Per-Olof Olsson)
Date: Mon, 4 Mar 2013 16:35:54 +0100
Subject: [rancid] Minor fix/update for hlogin  ( and *login?).
In-Reply-To: <20130301182608.GG27275@shrubbery.net>
References: <512DBA12.1030909@chalmers.se>
	<20130301182608.GG27275@shrubbery.net>
Message-ID: <5134BF5A.3090704@chalmers.se>

On 03/01/2013 07:26 PM, heasley wrote:
> Wed, Feb 27, 2013 at 08:47:30AM +0100, Per-Olof Olsson:
>> Hello
>>
>>
>> Testing some minor update for hlogin (rancid 2.3.8).
>>
>> Sometimes I use hlogin to login to switches but get the session filtered by
>> hpuifilter. A bit hard to work with that output. I think this helps.
> 
> I've always liked that it didnt mess with my terminal; ie: truncate it to
> 24 lines.  but, ok; committed.
> 
Yes, good old HP2524 and HP41xx switches using 24 lines window.

New switches try to probe window size at login so it works well,
using proper window size.

>> rancid at host bin]$ diff -c hlogin.in_ORG hlogin.in
>> *** hlogin.in_ORG       2013-01-21 07:05:47.357345221 +0100
>> --- hlogin.in   2013-02-27 07:56:51.332898135 +0100
>> ***************
>> *** 328,336 ****
> 	...
> 
>> Testing to set negative port number to telnet shows that it don't work on RHlinux
>> (from "man cloginrc" " Example: add method * {ssh} {telnet:-3000} {rsh}").
>>
>> Tested "add method <hostname> {telnet:-23}"
>>
>> -----------------------
>> $ telnet <hostname> -23
>> telnet: invalid option -- '2'
>> Usage: telnet [-8] [-E] [-L] [-S tos] [-a] [-c] [-d] [-e char] [-l user]
>>         [-n tracefile] [-b hostalias ] [-r]
>>  [host-name [port]]
>> --------------------
>>
>> I have to add "--" to telnet args in hlogin,  "telnet -- $router $port"
>>
>> or used positive port number and put
>> ----------------------
>> DEFAULT
>> 	mode character
>> ----------------------
>> or
>> ----------------------
>> <hostname>
>> 	mode character
>> ----------------------
>> in ~/.telnetrc
>>
>>
>> Is telnet special for RHlinux or update needed for telnet in all *login scripts
>> and/or add some notes in man page for cloginrc about ~/.telnetrc?
> 
> I dont remember which client required the -; could have been BSD/OS.  removed.
> 
> there is a note in the page referring to telnetrc; I dont want to duplicate the
> manpage there, I would surely get it wrong or miss nuances of particular
> implementations.
> 

After I look in manuals ones more, I think all info needed is there.

It's best to restrict and not use options like "--" and negative port number to telnet
command, before tested it on all platforms.

Just recomend use of ~/.telnetrc to get "character mode", if port number is used.


/Peo




From peo at chalmers.se  Mon Mar  4 16:00:37 2013
From: peo at chalmers.se (Per-Olof Olsson)
Date: Mon, 4 Mar 2013 17:00:37 +0100
Subject: [rancid] HP procurve Menu logon
In-Reply-To: <20130301231945.GU27275@shrubbery.net>
References: <1156DBA5-8167-4772-B42B-620AA8D3ED2F@univ-lr.fr>
	<20130219051133.GC93736@shrubbery.net>
	<0FD58A9A-E69C-40E8-AC7E-109AB0EF65FF@univ-lr.fr>
	<20130219183726.GK12440@shrubbery.net>
	<8E1B0503-040E-4ABF-992E-AA6A16300A9E@univ-lr.fr>
	<20130220174317.GG58636@shrubbery.net>
	<51253DEB.9000301@ale.cx> <5125CF67.7000006@chalmers.se>
	<20130301231945.GU27275@shrubbery.net>
Message-ID: <5134C525.7020506@chalmers.se>

On 03/02/2013 12:19 AM, heasley wrote:
> Thu, Feb 21, 2013 at 08:40:23AM +0100, Per-Olof Olsson:
>> Alex DEKKER skrev 02/20/2013 10:19 PM:
>>> On 20/02/13 17:43, heasley wrote:
>>>> btw, is this menu a standard thing with procurves?  I've never seen it,
>>>> but the one that i have is a lower-end model.
>>> It's not the default on current Procurves, you can access it with 'menu'. From what Marc
>>> is saying, it sounds like there is a way to make it go straight into the menu on login for
>>> a given username.
>>>
>>> alexd
>>> _______________________________________________
>>> Rancid-discuss mailing list
>>> Rancid-discuss at shrubbery.net
>>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>>
>> Only setting I found for this is in "8. Run Setup" menu
>> where you select "Logon Default" to "CLI" or "Menu"
> 
> Would you propose a patch for this, since you can test it?

Yes but it will take some time to have it to work and is fully tested.

telnet/ssh login to manager and/or operator level
ssh key-login
and some switch types.

"5" only works if you do direct login to manager level.
Login to operator level needs "3" for "CLI exit".

And one more thing.
When you start menu mode and not saved config
  "Do you want to save current configuration"-prompt
shows up before menu is started, even at login.

...

Have part of it working but not all.

>
>> /Peo
>> ----------------------------------------------------------
>> Per-Olof Olsson               Email: peo at chalmers.se
>> Chalmers tekniska h?gskola    IT-service
>> H?rsalsv?gen 5                412 96 G?teborg
>> Tel: 031/772 6738  Fax: 031/772 8660
>> ----------------------------------------------------------
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


/Peo





From Robert.Skoog at safelite.com  Tue Mar  5 15:14:40 2013
From: Robert.Skoog at safelite.com (Skoog, Robert)
Date: Tue, 5 Mar 2013 15:14:40 +0000
Subject: [rancid] fnlogin patch to correct issues with and without multiple
 vdoms on fortinet devices
Message-ID: <BC6A3970A7859C41A0A882FA56906B0702EC559B@VMEUSWPEM117.us.int.safelite.net>

Hi,
We noticed that some devices behaved oddly when the config global command was sent and didn't have VDOMs enabled.  This patch looks at the device to first see if VDOMs are enabled and only if they are is the config global command sent.  The patch also enables paging again before fnlogin exits leaving the device unchanged.   This diff also includes other changes I found on the mailing list to resolve other fortinet issues and can be safely applied to the 2.3.8 version to get fortinet devices working.  These changes have been tested over the last 3 months on a group of about 20 test sites.  You will also need fnrancid patch which was posted here: http://www.shrubbery.net/pipermail/rancid-discuss/2011-February/005488.html in order for fortinet devices to work well with rancid.

Thanks,
Rob

--- fnlogin.orig        2012-12-04 19:29:52.000000000 -0500
+++ fnlogin     2012-12-10 10:11:31.000000000 -0500
@@ -291,7 +291,7 @@
        incr progs -1
        if [string match "telnet*" $prog] {
            regexp {telnet(:([^[:space:]]+))*} $prog command suffix port
-           if {"$port" == ""} {
+           if {"$port" != ""} {
                set retval [ catch {spawn telnet $router} reason ]
            } else {
                set retval [ catch {spawn telnet $router $port} reason ]
@@ -303,9 +303,8 @@
        } elseif [string match "ssh*" $prog] {
            regexp {ssh(:([^[:space:]]+))*} $prog methcmd suffix port
            set cmd $sshcmd
-           if {"$port" == ""} {
-               #set cmd "$cmd -p $port"
-               set cmd "$cmd -p 22"
+           if {"$port" != ""} {
+               set cmd "$cmd -p $port"
            }
            set retval [ catch {eval spawn [split "$cmd -c $cyphertype -x -l $user $router" { }]} reason ]
            if { $retval } {
@@ -445,12 +444,17 @@
     global in_proc
     set in_proc 1

-    # For use when vdoms are enabled
-    send "config global\r"
     # Disable output paging.
-    send -- "config system console\r"
+    log_user 0
+    send -- "get system status \r"
+    expect {
+        -re "tion: ena" { expect -re $prompt; send "config global\r"}
+        -re "tion: dis" {}
+       }
+    expect -re $prompt; send -- "config system console\r"
     expect -re $prompt; send -- "set output standard\r"
     expect -re $prompt; send -- "end\r"
+    log_user 1
     expect -re $prompt;

     set commands [split $command \;]
@@ -461,19 +465,26 @@
             -re "$prompt"                      { send "\r"
                                                  sleep 0.5
                                                }
-           -gl "--More--"                      { send " "
+           -gl "--More--\[^\n\r]*"                     { send " "
                                                  exp_continue
-           -re "\[\n\r]+"                      { exp_continue }
+           -re "\[^\r\n]*\[\n\r]+"             { send_user -- "expect_out(buffer)"
+                                                 exp_continue }
                                                }
        }
      }
      expect {
        -re "$prompt$"                          {
-                                                 #send "config global\r"
-                                                 #send "config system console\r"
-                                                 #send "set output more\r"
-                                                 #send "end\r"
-                                                 send "exit\r"
+                                                  log_user 0
+                                                  send -- "get system status \r"
+                                                 expect {
+                                                         -re "tion: ena" { expect -re $prompt; send "config global\r"}
+                                                         -re "tion: dis" {}
+                                                         }
+                                                  expect -re $prompt; send -- "config system console\r"
+                                                  expect -re $prompt; send -- "set output more\r"
+                                                  expect -re $prompt; send -- "end\r"
+                                                  log_user 1
+                                                 expect -re $prompt; send "exit\r"
                                                  sleep 0.5
                                                  exp_continue
                                                }
@@ -579,18 +590,18 @@
        }
     } elseif { $do_script } {
        # Disable output paging.
-       # For use when vdoms are enabled
-       send "config global\r"
-       send "config system console\r"
-       send "set output standard\r"
-       send "end\r"
+        log_user 0
+        send -- "get system status \r"
+        expect {
+               -re "tion: ena" { expect -re $prompt; send "config global\r"}
+               -re "tion: dis" {}
+              }
+       expect -re $prompt; send "config system console\r"
+       expect -re $prompt; send "set output standard\r"
+       expect -re $prompt; send "end\r"
+        log_user 1
        expect -re $prompt      {}
        source $sfile
-       #undo paging
-       #send "config global\r"
-        #send "config system console\r"
-        #send "set output more\r"
-        #send "end\r"
        catch {close};
     } else {
        label $router
____________________________________________________________
This message, including any attachments, may contain confidential information intended for a specific individual and purpose, and may be protected by law. If you are not the intended recipient please delete this message immediately. Any disclosure, copying or distribution of this message, or the taking of any action based on it, by any unintended recipient is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130305/1cea8c0a/attachment.html>

From Danica_Alcaraz at fd.org  Tue Mar  5 15:41:06 2013
From: Danica_Alcaraz at fd.org (Danica L Alcaraz)
Date: Tue, 5 Mar 2013 09:41:06 -0600
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
Message-ID: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>


Guys,

I'm STILL not able to get my RANCID to successfully login to our Cisco ASA
firewalls.  We've got TACACS+ (which is not that big a deal) but they
insisted on giving usernames that had spaces in them and the script doesn't
like anything I've tried to get it to take the string literally (mostly
used {user name} or "user name").  I'm using Ubuntu 12.10 with RANCID
2.3.8.  It insists that I designate the method ssh so I can't work it like
my HP boxes.  I need some more suggestions on this if you've got them.

I've tried many things based on what I've seen in the blogs but here's my
current:

add user 	192.168.*.* 	{user name}		<< or "user name" (or even
{"user name"}
add password 	192.168.*.* 	{password} {password}
add method	192.168.*.*	ssh
add autoenable 192.168.*.*	{1}

prompt$ /usr/local/rancid/bin/clogin 192.168.*.*
192.168.*.*
spawn ssh -c 3des -x -l user name 192.168.*.*		<< with quotes or
squiggly brackets it still only reads the second word of the username
ssh:  Couldn't resolve hostname name: Name or service not known

Error:  Couldn't login:  192.168.*.*

Has anyone gotten it to work using another device script?
Are there other ways to tell Ubuntu to read the username with a space
literally?
My HP devices take the string literally without help from {} or "" but only
if I remove the add method directive,  Hmmm, I wonder if I make it think
it's an HP.

Any ideas appreciated.  Thanks.


Sincerely,



Danica Alcaraz
Network Administrator
ODS-ITD NITOAD Branch
Administrative Office of the U.S. Courts
7550 IH 10 West, Suite 200
San Antonio, Texas 78229-5821
Direct:  (210) 308-3217
Fax:  (210) 308-3225
danica_alcaraz at fd.org


From mwlucas at blackhelicopters.org  Tue Mar  5 15:55:54 2013
From: mwlucas at blackhelicopters.org (Michael W. Lucas)
Date: Tue, 5 Mar 2013 10:55:54 -0500
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
Message-ID: <20130305155554.GA19263@bewilderbeast.blackhelicopters.org>


Usernames with spaces? Wow.

What I normally do with devices that need weird SSH commands is run an
external script. (Properly escaping spaces in shell in Tcl in Expect
is hard.) You can find an example at
http://blather.michaelwlucas.com/archives/422

==ml


On Tue, Mar 05, 2013 at 09:41:06AM -0600, Danica L Alcaraz wrote:
> 
> Guys,
> 
> I'm STILL not able to get my RANCID to successfully login to our Cisco ASA
> firewalls.  We've got TACACS+ (which is not that big a deal) but they
> insisted on giving usernames that had spaces in them and the script doesn't
> like anything I've tried to get it to take the string literally (mostly
> used {user name} or "user name").  I'm using Ubuntu 12.10 with RANCID
> 2.3.8.  It insists that I designate the method ssh so I can't work it like
> my HP boxes.  I need some more suggestions on this if you've got them.
> 
> I've tried many things based on what I've seen in the blogs but here's my
> current:
> 
> add user 	192.168.*.* 	{user name}		<< or "user name" (or even
> {"user name"}
> add password 	192.168.*.* 	{password} {password}
> add method	192.168.*.*	ssh
> add autoenable 192.168.*.*	{1}
> 
> prompt$ /usr/local/rancid/bin/clogin 192.168.*.*
> 192.168.*.*
> spawn ssh -c 3des -x -l user name 192.168.*.*		<< with quotes or
> squiggly brackets it still only reads the second word of the username
> ssh:  Couldn't resolve hostname name: Name or service not known
> 
> Error:  Couldn't login:  192.168.*.*
> 
> Has anyone gotten it to work using another device script?
> Are there other ways to tell Ubuntu to read the username with a space
> literally?
> My HP devices take the string literally without help from {} or "" but only
> if I remove the add method directive,  Hmmm, I wonder if I make it think
> it's an HP.
> 
> Any ideas appreciated.  Thanks.
> 
> 
> Sincerely,
> 
> 
> 
> Danica Alcaraz
> Network Administrator
> ODS-ITD NITOAD Branch
> Administrative Office of the U.S. Courts
> 7550 IH 10 West, Suite 200
> San Antonio, Texas 78229-5821
> Direct:  (210) 308-3217
> Fax:  (210) 308-3225
> danica_alcaraz at fd.org
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

-- 
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.

From jethro.binks at strath.ac.uk  Tue Mar  5 16:03:19 2013
From: jethro.binks at strath.ac.uk (Jethro R Binks)
Date: Tue, 5 Mar 2013 16:03:19 +0000 (GMT)
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
Message-ID: <alpine.BSF.2.02.1303051601290.11393@qrswnz.pp.fgengu.np.hx>

On Tue, 5 Mar 2013, Danica L Alcaraz wrote:

> We've got TACACS+ (which is not that big a deal) but they insisted on 
> giving usernames that had spaces in them

Regardless of the problem with rancid or not, that seems to be decision 
that is ripe for producing problems in many areas!

Not that that means applications shouldn't be able to handle it of course, 
but it seems somewhat self-inflicted torture when they don't.

Jethro.

.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK

The University of Strathclyde is a charitable body, registered in
Scotland, number SC015263.

From peo at chalmers.se  Tue Mar  5 17:55:58 2013
From: peo at chalmers.se (Per-Olof Olsson)
Date: Tue, 5 Mar 2013 18:55:58 +0100
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
Message-ID: <513631AE.2040301@chalmers.se>

Hello

Space in user name. Crazy!

Impossible or just to fix the scope for "split" and quote the username 
in clogin...

Not tested to do a complete login but the ssh password prompt looks 
correct including a space.

 >clogin host
...
user name at host's password:
...

diff clogin clogin_special
350c350
<           set retval [catch {eval spawn [split "$cmd -c $cyphertype -x 
-l $user $router" { }]} reason]
---
 >           set retval [catch {eval spawn [split "$cmd -c $cyphertype 
-x -l" { }] \"$user\" $router } reason]


/Peo
----------------------------------------------------------
Per-Olof Olsson               Email: peo at chalmers.se
Chalmers tekniska h?gskola    IT-service
H?rsalsv?gen 5                412 96 G?teborg
Tel: 031/772 6738  Fax: 031/772 8680
----------------------------------------------------------

Danica L Alcaraz wrote 2013-03-05 16:41:
>
> Guys,
>
> I'm STILL not able to get my RANCID to successfully login to our Cisco ASA
> firewalls.  We've got TACACS+ (which is not that big a deal) but they
> insisted on giving usernames that had spaces in them and the script doesn't
> like anything I've tried to get it to take the string literally (mostly
> used {user name} or "user name").  I'm using Ubuntu 12.10 with RANCID
> 2.3.8.  It insists that I designate the method ssh so I can't work it like
> my HP boxes.  I need some more suggestions on this if you've got them.
>
> I've tried many things based on what I've seen in the blogs but here's my
> current:
>
> add user 	192.168.*.* 	{user name}		<< or "user name" (or even
> {"user name"}
> add password 	192.168.*.* 	{password} {password}
> add method	192.168.*.*	ssh
> add autoenable 192.168.*.*	{1}
>
> prompt$ /usr/local/rancid/bin/clogin 192.168.*.*
> 192.168.*.*
> spawn ssh -c 3des -x -l user name 192.168.*.*		<< with quotes or
> squiggly brackets it still only reads the second word of the username
> ssh:  Couldn't resolve hostname name: Name or service not known
>
> Error:  Couldn't login:  192.168.*.*
>
> Has anyone gotten it to work using another device script?
> Are there other ways to tell Ubuntu to read the username with a space
> literally?
> My HP devices take the string literally without help from {} or "" but only
> if I remove the add method directive,  Hmmm, I wonder if I make it think
> it's an HP.
>
> Any ideas appreciated.  Thanks.
>
>
> Sincerely,
>
>
>
> Danica Alcaraz
> Network Administrator
> ODS-ITD NITOAD Branch
> Administrative Office of the U.S. Courts
> 7550 IH 10 West, Suite 200
> San Antonio, Texas 78229-5821
> Direct:  (210) 308-3217
> Fax:  (210) 308-3225
> danica_alcaraz at fd.org
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>




From Danica_Alcaraz at fd.org  Tue Mar  5 18:54:46 2013
From: Danica_Alcaraz at fd.org (Danica L Alcaraz)
Date: Tue, 5 Mar 2013 12:54:46 -0600
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <513631AE.2040301@chalmers.se>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
	<513631AE.2040301@chalmers.se>
Message-ID: <OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>

/PEO, you are a GD genius!

You obviously understand all the underlying code that I do not.  Can I tell
these types of devices to look at the clogin_special script just by using a
different device than cisco in the router.db configuration?  How to I
direct it to do that?  Or can I feel safe in loading this change into the
clogin file and not impact other devices?


Sincerely,



Danica Alcaraz
Network Administrator
ODS-ITD NITOAD Branch
Administrative Office of the U.S. Courts
7550 IH 10 West, Suite 200
San Antonio, Texas 78229-5821
Direct:  (210) 308-3217
Fax:  (210) 308-3225
danica_alcaraz at fd.org




From:	Per-Olof Olsson <peo at chalmers.se>
To:	Danica L Alcaraz <Danica_Alcaraz at fd.org>,
Cc:	<rancid-discuss at shrubbery.net>
Date:	03/05/2013 11:56 AM
Subject:	Re: [rancid] The reoccurring question - Cisco ASA Login
            failures



Hello

Space in user name. Crazy!

Impossible or just to fix the scope for "split" and quote the username
in clogin...

Not tested to do a complete login but the ssh password prompt looks
correct including a space.

 >clogin host
...
user name at host's password:
...

diff clogin clogin_special
350c350
<           set retval [catch {eval spawn [split "$cmd -c $cyphertype -x
-l $user $router" { }]} reason]
---
 >           set retval [catch {eval spawn [split "$cmd -c $cyphertype
-x -l" { }] \"$user\" $router } reason]


/Peo
----------------------------------------------------------
Per-Olof Olsson               Email: peo at chalmers.se
Chalmers tekniska h?gskola    IT-service
H?rsalsv?gen 5                412 96 G?teborg
Tel: 031/772 6738  Fax: 031/772 8680
----------------------------------------------------------

Danica L Alcaraz wrote 2013-03-05 16:41:
>
> Guys,
>
> I'm STILL not able to get my RANCID to successfully login to our Cisco
ASA
> firewalls.  We've got TACACS+ (which is not that big a deal) but they
> insisted on giving usernames that had spaces in them and the script
doesn't
> like anything I've tried to get it to take the string literally (mostly
> used {user name} or "user name").  I'm using Ubuntu 12.10 with RANCID
> 2.3.8.  It insists that I designate the method ssh so I can't work it
like
> my HP boxes.  I need some more suggestions on this if you've got them.
>
> I've tried many things based on what I've seen in the blogs but here's my
> current:
>
> add user 		 192.168.*.* 		 {user name}
 << or "user name" (or even
> {"user name"}
> add password 		 192.168.*.* 		 {password} {password}
> add method		 192.168.*.*		 ssh
> add autoenable 192.168.*.*		 {1}
>
> prompt$ /usr/local/rancid/bin/clogin 192.168.*.*
> 192.168.*.*
> spawn ssh -c 3des -x -l user name 192.168.*.*		 		 << with
quotes or
> squiggly brackets it still only reads the second word of the username
> ssh:  Couldn't resolve hostname name: Name or service not known
>
> Error:  Couldn't login:  192.168.*.*
>
> Has anyone gotten it to work using another device script?
> Are there other ways to tell Ubuntu to read the username with a space
> literally?
> My HP devices take the string literally without help from {} or "" but
only
> if I remove the add method directive,  Hmmm, I wonder if I make it think
> it's an HP.
>
> Any ideas appreciated.  Thanks.
>
>
> Sincerely,
>
>
>
> Danica Alcaraz
> Network Administrator
> ODS-ITD NITOAD Branch
> Administrative Office of the U.S. Courts
> 7550 IH 10 West, Suite 200
> San Antonio, Texas 78229-5821
> Direct:  (210) 308-3217
> Fax:  (210) 308-3225
> danica_alcaraz at fd.org
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>






From heas at shrubbery.net  Tue Mar  5 19:29:55 2013
From: heas at shrubbery.net (heasley)
Date: Tue, 5 Mar 2013 19:29:55 +0000
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
	<513631AE.2040301@chalmers.se>
	<OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>
Message-ID: <20130305192955.GJ75662@shrubbery.net>

Tue, Mar 05, 2013 at 12:54:46PM -0600, Danica L Alcaraz:
> /PEO, you are a GD genius!
> 
> You obviously understand all the underlying code that I do not.  Can I tell
> these types of devices to look at the clogin_special script just by using a
> different device than cisco in the router.db configuration?  How to I
> direct it to do that?  Or can I feel safe in loading this change into the
> clogin file and not impact other devices?

add password glob {foo\ bar}

should be all that is necessary, as .

clogin -d ....

send: sending "foo bar\r" to { exp4 }


From Danica_Alcaraz at fd.org  Tue Mar  5 19:31:37 2013
From: Danica_Alcaraz at fd.org (Danica L Alcaraz)
Date: Tue, 5 Mar 2013 13:31:37 -0600
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <20130305192955.GJ75662@shrubbery.net>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
	<513631AE.2040301@chalmers.se>
	<OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>
	<20130305192955.GJ75662@shrubbery.net>
Message-ID: <OF3926923D.4205F42D-ON86257B25.006B392D-86257B25.006B43E1@fd.org>

That didn't work for me.

~Danica



From:	heasley <heas at shrubbery.net>
To:	Danica L Alcaraz <Danica_Alcaraz at fd.org>,
Cc:	Per-Olof Olsson <peo at chalmers.se>, rancid-discuss at shrubbery.net
Date:	03/05/2013 01:29 PM
Subject:	Re: [rancid] The reoccurring question - Cisco ASA Login
            failures



Tue, Mar 05, 2013 at 12:54:46PM -0600, Danica L Alcaraz:
> /PEO, you are a GD genius!
>
> You obviously understand all the underlying code that I do not.  Can I
tell
> these types of devices to look at the clogin_special script just by using
a
> different device than cisco in the router.db configuration?  How to I
> direct it to do that?  Or can I feel safe in loading this change into the
> clogin file and not impact other devices?

add password glob {foo\ bar}

should be all that is necessary, as .

clogin -d ....

send: sending "foo bar\r" to { exp4 }




From shouldbeq931 at gmail.com  Tue Mar  5 20:02:17 2013
From: shouldbeq931 at gmail.com (shouldbe q931)
Date: Tue, 5 Mar 2013 20:02:17 +0000
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
Message-ID: <CAP1_MOAEcyO+oRFziPAexPY+yW+BV95wcWra_OB7dY6rSWuYRg@mail.gmail.com>

On Tue, Mar 5, 2013 at 3:41 PM, Danica L Alcaraz <Danica_Alcaraz at fd.org> wrote:
>
> insisted on giving usernames that had spaces in them

Somebody should point out to them that enforcing a space is like
enforcing _any_ other character.

Sounds like security by "management types"...

Cheers

Arne

From heas at shrubbery.net  Tue Mar  5 21:15:55 2013
From: heas at shrubbery.net (heasley)
Date: Tue, 5 Mar 2013 21:15:55 +0000
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <OF3926923D.4205F42D-ON86257B25.006B392D-86257B25.006B43E1@fd.org>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
	<513631AE.2040301@chalmers.se>
	<OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>
	<20130305192955.GJ75662@shrubbery.net>
	<OF3926923D.4205F42D-ON86257B25.006B392D-86257B25.006B43E1@fd.org>
Message-ID: <20130305211555.GS75662@shrubbery.net>

Tue, Mar 05, 2013 at 01:31:37PM -0600, Danica L Alcaraz:
> That didn't work for me.

it should have; dont know why it work for me but not for you.  try the -d
option and look for what it actually sending.  you might also try downloading
the original package and installing that, in case ubuntu has modified it in
some manner.

> From:	heasley <heas at shrubbery.net>
> To:	Danica L Alcaraz <Danica_Alcaraz at fd.org>,
> Cc:	Per-Olof Olsson <peo at chalmers.se>, rancid-discuss at shrubbery.net
> Date:	03/05/2013 01:29 PM
> Subject:	Re: [rancid] The reoccurring question - Cisco ASA Login
>             failures
> 
> 
> 
> Tue, Mar 05, 2013 at 12:54:46PM -0600, Danica L Alcaraz:
> > /PEO, you are a GD genius!
> >
> > You obviously understand all the underlying code that I do not.  Can I
> tell
> > these types of devices to look at the clogin_special script just by using
> a
> > different device than cisco in the router.db configuration?  How to I
> > direct it to do that?  Or can I feel safe in loading this change into the
> > clogin file and not impact other devices?
> 
> add password glob {foo\ bar}
> 
> should be all that is necessary, as .
> 
> clogin -d ....
> 
> send: sending "foo bar\r" to { exp4 }
> 
> 

From Danica_Alcaraz at fd.org  Tue Mar  5 22:30:16 2013
From: Danica_Alcaraz at fd.org (Danica L Alcaraz)
Date: Tue, 5 Mar 2013 16:30:16 -0600
Subject: [rancid] The reoccurring question - Cisco ASA Login failures
In-Reply-To: <51365E5E.5090901@chalmers.se>
References: <OFE8C60BD6.5061C430-ON86257B25.00532C7C-86257B25.00562970@fd.org>
	<513631AE.2040301@chalmers.se>
	<OFA801F94B.76D42D58-ON86257B25.00678675-86257B25.0067E44C@fd.org>
	<51365E5E.5090901@chalmers.se>
Message-ID: <OFABDE41D6.31F64F18-ON86257B25.007B5935-86257B25.007B9F05@fd.org>

I copied the clogin file to a backup, changed the line in clogin you
suggested and ran rancid.  SUCCESS!  It doesn't appear to have created a
problem for any of my other cisco devices.  Now I can include all the ASA's
without a problem.  Thanks again Peo!

Here's the change suggested by Peo:

 diff clogin clogin_special
> 350c350
> <           set retval [catch {eval spawn [split "$cmd -c $cyphertype -x
> -l $user $router" { }]} reason]
> ---
>   >           set retval [catch {eval spawn [split "$cmd -c $cyphertype
> -x -l" { }] \"$user\" $router } reason]

Sincerely,



Danica Alcaraz
Network Administrator
ODS-ITD NITOAD Branch
Administrative Office of the U.S. Courts
7550 IH 10 West, Suite 200
San Antonio, Texas 78229-5821
Direct:  (210) 308-3217
Fax:  (210) 308-3225
danica_alcaraz at fd.org




From:	Per-Olof Olsson <peo at chalmers.se>
To:	Danica L Alcaraz <Danica_Alcaraz at fd.org>,
Date:	03/05/2013 03:06 PM
Subject:	Re: [rancid] The reoccurring question - Cisco ASA Login
            failures



Hi

I don't think this fix will have any impact on other devices that is
using clogin. It's important that "split" cover "$cmd" on the changed line.

Can't you test some other cisco's if "clogin_special" work even for
them. Find a time gap when cron not running rancid-run or trun of cron
scrip a short time, replacing clogin and run rancid on a small group of
switches? ...



To create a new device typ you have to copy files and edit some.
No typo!!!

Shot one for a "cisco copy".
XX,, YY, ZZ unique names.

Add new type to translate in rancid-fe.
     'XX'  => 'YY',
copy rancid to YY
     edit YY to call ZZ instead of clogin.
copy clogin to ZZ
change device type in  routers.db to XX.

Read FAQ:n. How to run and test scripts.
  YY <hostname>
  rancid-run -r <hostname> <group>


/Peo

Danica L Alcaraz skrev 2013-03-05 19:54:
> /PEO, you are a GD genius!
>
> You obviously understand all the underlying code that I do not.  Can I
tell
> these types of devices to look at the clogin_special script just by using
a
> different device than cisco in the router.db configuration?  How to I
> direct it to do that?  Or can I feel safe in loading this change into the
> clogin file and not impact other devices?
>
>
> Sincerely,
>
>
>
> Danica Alcaraz
> Network Administrator
> ODS-ITD NITOAD Branch
> Administrative Office of the U.S. Courts
> 7550 IH 10 West, Suite 200
> San Antonio, Texas 78229-5821
> Direct:  (210) 308-3217
> Fax:  (210) 308-3225
> danica_alcaraz at fd.org
>
>
>
>
> From:		 Per-Olof Olsson <peo at chalmers.se>
> To:		 Danica L Alcaraz <Danica_Alcaraz at fd.org>,
> Cc:		 <rancid-discuss at shrubbery.net>
> Date:		 03/05/2013 11:56 AM
> Subject:		 Re: [rancid] The reoccurring question - Cisco ASA Login
>              failures
>
>
>
> Hello
>
> Space in user name. Crazy!
>
> Impossible or just to fix the scope for "split" and quote the username
> in clogin...
>
> Not tested to do a complete login but the ssh password prompt looks
> correct including a space.
>
>   >clogin host
> ...
> user name at host's password:
> ...
>
> diff clogin clogin_special
> 350c350
> <           set retval [catch {eval spawn [split "$cmd -c $cyphertype -x
> -l $user $router" { }]} reason]
> ---
>   >           set retval [catch {eval spawn [split "$cmd -c $cyphertype
> -x -l" { }] \"$user\" $router } reason]
>
>
> /Peo
> ----------------------------------------------------------
> Per-Olof Olsson               Email: peo at chalmers.se
> Chalmers tekniska h?gskola    IT-service
> H?rsalsv?gen 5                412 96 G?teborg
> Tel: 031/772 6738  Fax: 031/772 8680
> ----------------------------------------------------------
>
> Danica L Alcaraz wrote 2013-03-05 16:41:
>>
>> Guys,
>>
>> I'm STILL not able to get my RANCID to successfully login to our Cisco
> ASA
>> firewalls.  We've got TACACS+ (which is not that big a deal) but they
>> insisted on giving usernames that had spaces in them and the script
> doesn't
>> like anything I've tried to get it to take the string literally (mostly
>> used {user name} or "user name").  I'm using Ubuntu 12.10 with RANCID
>> 2.3.8.  It insists that I designate the method ssh so I can't work it
> like
>> my HP boxes.  I need some more suggestions on this if you've got them.
>>
>> I've tried many things based on what I've seen in the blogs but here's
my
>> current:
>>
>> add user 		 		  192.168.*.*
{user name}
>   << or "user name" (or even
>> {"user name"}
>> add password 		 		  192.168.*.*
{password} {password}
>> add method		 		  192.168.*.*
ssh
>> add autoenable 192.168.*.*		 		  {1}
>>
>> prompt$ /usr/local/rancid/bin/clogin 192.168.*.*
>> 192.168.*.*
>> spawn ssh -c 3des -x -l user name 192.168.*.*
	 		  << with
> quotes or
>> squiggly brackets it still only reads the second word of the username
>> ssh:  Couldn't resolve hostname name: Name or service not known
>>
>> Error:  Couldn't login:  192.168.*.*
>>
>> Has anyone gotten it to work using another device script?
>> Are there other ways to tell Ubuntu to read the username with a space
>> literally?
>> My HP devices take the string literally without help from {} or "" but
> only
>> if I remove the add method directive,  Hmmm, I wonder if I make it think
>> it's an HP.
>>
>> Any ideas appreciated.  Thanks.
>>
>>
>> Sincerely,
>>
>>
>>
>> Danica Alcaraz
>> Network Administrator
>> ODS-ITD NITOAD Branch
>> Administrative Office of the U.S. Courts
>> 7550 IH 10 West, Suite 200
>> San Antonio, Texas 78229-5821
>> Direct:  (210) 308-3217
>> Fax:  (210) 308-3225
>> danica_alcaraz at fd.org
>>
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>>
>
>
>
>
>





From brokenflea at gmail.com  Wed Mar  6 08:24:49 2013
From: brokenflea at gmail.com (Khurram Khan)
Date: Wed, 6 Mar 2013 01:24:49 -0700
Subject: [rancid] custom command table and grep
Message-ID: <CAP8URM00Mj12RAUq=ro+aYKqcA=cw3L6Ux6QBKu-rsAyvvNEdw@mail.gmail.com>

Hello All,

I've got a device that I'm building a custom command table for and trying
to grep out a ssh key that I don't want displayed in the configuration.
When running the command from cli on the device, the syntax looks like:

show configuration | grep -v "ssh "

and the cli command does what it's supposed to.

How do I incorporate the start/end quotes in the command table? I've tried
a couple of variations and the script errors out.

@commandtable = (
        {'no timestamps'      => 'DoNothing' },
        {'show configuration | grep -v "ssh "' => 'WriteTerm' },
);

Thanks in advance!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130306/ae95f11a/attachment.html>

From heas at shrubbery.net  Wed Mar  6 18:32:40 2013
From: heas at shrubbery.net (heasley)
Date: Wed, 6 Mar 2013 18:32:40 +0000
Subject: [rancid] custom command table and grep
In-Reply-To: <CAP8URM00Mj12RAUq=ro+aYKqcA=cw3L6Ux6QBKu-rsAyvvNEdw@mail.gmail.com>
References: <CAP8URM00Mj12RAUq=ro+aYKqcA=cw3L6Ux6QBKu-rsAyvvNEdw@mail.gmail.com>
Message-ID: <20130306183240.GI3961@shrubbery.net>

Wed, Mar 06, 2013 at 01:24:49AM -0700, Khurram Khan:
> Hello All,
> 
> I've got a device that I'm building a custom command table for and trying
> to grep out a ssh key that I don't want displayed in the configuration.
> When running the command from cli on the device, the syntax looks like:
> 
> show configuration | grep -v "ssh "
> 
> and the cli command does what it's supposed to.
> 
> How do I incorporate the start/end quotes in the command table? I've tried
> a couple of variations and the script errors out.
> 
> @commandtable = (
>         {'no timestamps'      => 'DoNothing' },
>         {'show configuration | grep -v "ssh "' => 'WriteTerm' },
> );

dont do it that way.  add your filter in WriteTerm, if you must.

> 
> Thanks in advance!

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


From brokenflea at gmail.com  Wed Mar  6 18:39:46 2013
From: brokenflea at gmail.com (Khurram Khan)
Date: Wed, 6 Mar 2013 11:39:46 -0700
Subject: [rancid] custom command table and grep
In-Reply-To: <20130306183240.GI3961@shrubbery.net>
References: <CAP8URM00Mj12RAUq=ro+aYKqcA=cw3L6Ux6QBKu-rsAyvvNEdw@mail.gmail.com>
	<20130306183240.GI3961@shrubbery.net>
Message-ID: <CAP8URM24_WPp6dEBSGbVd9uqarn+Dd0XAXZ7pbSGGo7zRiEtjA@mail.gmail.com>

I wrote a filter, and perhaps I'm not doing it right but the one I've got
in the script is:

        if (/\s+ssh key \S / && filter_pwds >= 1) {
                ProcessHistory("ADMIN","","","#ssh key <removed>\n");
                next;
        }

the configuration from cli looks like this:

    ssh key
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
len 488 type v2-rsa



On Wed, Mar 6, 2013 at 11:32 AM, heasley <heas at shrubbery.net> wrote:

> Wed, Mar 06, 2013 at 01:24:49AM -0700, Khurram Khan:
> > Hello All,
> >
> > I've got a device that I'm building a custom command table for and trying
> > to grep out a ssh key that I don't want displayed in the configuration.
> > When running the command from cli on the device, the syntax looks like:
> >
> > show configuration | grep -v "ssh "
> >
> > and the cli command does what it's supposed to.
> >
> > How do I incorporate the start/end quotes in the command table? I've
> tried
> > a couple of variations and the script errors out.
> >
> > @commandtable = (
> >         {'no timestamps'      => 'DoNothing' },
> >         {'show configuration | grep -v "ssh "' => 'WriteTerm' },
> > );
>
> dont do it that way.  add your filter in WriteTerm, if you must.
>
> >
> > Thanks in advance!
>
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>


-- 
- kk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130306/aef31afa/attachment.html>

From kbonner at gmail.com  Thu Mar  7 20:10:48 2013
From: kbonner at gmail.com (Kevin Bonner)
Date: Thu, 07 Mar 2013 15:10:48 -0500
Subject: [rancid] h3crancid doesn't filter passwords
Message-ID: <2229835.5gRsn0jDSs@casilla>

*newly subscribed... sorry for the missing message IDs*

I've recently setup rancid to monitor several HP A5120 switches and ran into 
this same issue.

My diff for h3crancid is:
--- /home/keb/tmp/h3crancid     2013-03-07 14:57:09.574706088 -0500
+++ ./h3crancid 2013-02-28 11:40:31.725587845 -0500
@@ -361,9 +361,16 @@
 #        s/\s*---- More ----\s*//;
 
     # Filter out some sensitive data:
-    if (/^( ?snmp-agent community (read|write) )(\S+)/ &&
-       $filter_commstr == 0) {
-        ProcessHistory("","","","!$1<removed>$'");
+    if (/^( ?snmp-agent community (read|write) )(\S+)/ && $filter_commstr) {
+        ProcessHistory("","","","#$1<removed>$'");
+        next;
+    }
+    if (/^( ?password (?:simple|cipher) )(.*)$/ && $filter_pwds >= 1) {
+        ProcessHistory("","","","#$1<removed>$'");
+        next;
+    }
+    if (/^( ?key (?:authentication|accounting) )(.*)$/ && $filter_pwds >= 1) {
+        ProcessHistory("","","","#$1<removed>$'");
         next;
     }

This diff hides the SNMP community string if requested, hides the user 
passwords (both types!), and also hides RADIUS keys.  On the HP A5120 switch, 
the pound symbol represents a comment line.  Not sure if the other models 
covered by this script have that same behavior.

Jethro, if you need someone to test future changes, feel free to contact me.

Cheers,
-Kevin

On 2013.02.04 23:23, Jethro R Binks wrote:
> > On Mon, 4 Feb 2013, ignasr at vault13.lt wrote:
> >
> >> I know H3C is not officially supported in rancid, but maybe someone took
> >> the time and already wrote password filtering routines for h3crancid?
> >>
> >> If not, can I get some pointers on where in h3crancid that filtering
> >> should happen? I would use other scripts as examples and write
> >> something.
> >
> > I have a bunch of updates to make to h3crancid at some point.  If you can
> > give me samples of the lines where you want the passwords removing and the
> > context, I can take a look at incorporating them.
> >
> > Jethro.

From daniel.schmidt at wyo.gov  Thu Mar  7 21:07:49 2013
From: daniel.schmidt at wyo.gov (Daniel Schmidt)
Date: Thu, 7 Mar 2013 14:07:49 -0700
Subject: [rancid] NX-OS sap:
In-Reply-To: <20130228215729.GS80425@shrubbery.net>
References: <d9e60ab9b9cceb448d1931e84d6b9653@mail.gmail.com>
	<20130228215729.GS80425@shrubbery.net>
Message-ID: <2f523c66e7e53a406862b585e161bf0a@mail.gmail.com>

Thanks, I may open a tac case out of curiosity.

-----Original Message-----
From: heasley [mailto:heas at shrubbery.net]
Sent: Thursday, February 28, 2013 2:57 PM
To: Daniel Schmidt
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] NX-OS sap:

Tue, Feb 26, 2013 at 08:48:21AM -0700, Daniel Schmidt:
> Anybody else getting this spurious diff?
>
>
>
> + !DEBUG: Could not retrieve info from application sap:28 : Timer
> + expired
>
>
>
> Might have been discussed before ? apologies if I missed it.

i've not noticed anyone mention that before.  you'd want something like
this...and a TAC ticket.

Index: bin/nxrancid.in
===================================================================
--- bin/nxrancid.in     (revision 2663)
+++ bin/nxrancid.in     (working copy)
@@ -589,6 +589,7 @@
        return(1) if /(Invalid input detected|Type help or )/;
        return(-1) if (/\% Invalid command at /);
        return(-1) if (/command authorization failed/i);
+       return(-1) if (/could not retrieve info/i);
        # XXX return(-1) if (/\% Permission denied/);
        # NX 5000 bug? "show debug" generates
        # "Permission denied" when using command authorization. -Per-Olof
Olsson

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.


From kbonner at gmail.com  Thu Mar  7 22:15:33 2013
From: kbonner at gmail.com (Kevin Bonner)
Date: Thu, 07 Mar 2013 17:15:33 -0500
Subject: [rancid] Force10 inventory for pluggable media
Message-ID: <3406216.zLGn2Miez5@casilla>

I have several different Force10 switch models and they allow me to view pluggable media using the 'show inventory media' command.  That command was introduced in FTOS firmware 7.5.1.0 (released August 2007).

I've added the following line to my f10rancid script after the 'show inventory' command:
       {'show inventory media'         => 'ShowInventory'},

Sample output from this addition on a Force10 S50 switch stack:
+ !Inventory: Slot   Port     Type        Media               Serial Number        F10Qualified
+ !Inventory:    0     49              Media not present or accessible
+ !Inventory:    0     50     XFP         10GBASE-LR          ABCDEFG                  Yes
+ !Inventory:    0     45              Media not present or accessible
+ !Inventory:    0     46              Media not present or accessible
+ !Inventory:    0     47              Media not present or accessible
+ !Inventory:    0     48     SFP         1000BASE-LX         HIJKLMN                  Yes
+ !Inventory:    1     49     XFP         10GBASE-LR          OPQRSTU                  Yes
+ !Inventory:    1     50              Media not present or accessible
+ !Inventory:    1     45              Media not present or accessible
+ !Inventory:    1     46              Media not present or accessible
+ !Inventory:    1     47              Media not present or accessible
+ !Inventory:    1     48              Media not present or accessible

Hope this helps anyone curious about what optics have been inserted / removed in their devices.

-Kevin

From Douglas.Hughes at DEShawResearch.com  Thu Mar  7 22:42:02 2013
From: Douglas.Hughes at DEShawResearch.com (Hughes, Doug)
Date: Thu, 7 Mar 2013 22:42:02 +0000
Subject: [rancid] Force10 inventory for pluggable media
In-Reply-To: <3406216.zLGn2Miez5@casilla>
References: <3406216.zLGn2Miez5@casilla>
Message-ID: <FE83190899DE5B41BD7B5C3FD84CDF8F35CBB195@mailnycmb5a.winmail.deshaw.com>

Nice one, thanks!

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Kevin Bonner
Sent: Thursday, March 07, 2013 5:16 PM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Force10 inventory for pluggable media

I have several different Force10 switch models and they allow me to view pluggable media using the 'show inventory media' command.  That command was introduced in FTOS firmware 7.5.1.0 (released August 2007).

I've added the following line to my f10rancid script after the 'show inventory' command:
       {'show inventory media'         => 'ShowInventory'},

Sample output from this addition on a Force10 S50 switch stack:
+ !Inventory: Slot   Port     Type        Media               Serial Number        F10Qualified
+ !Inventory:    0     49              Media not present or accessible
+ !Inventory:    0     50     XFP         10GBASE-LR          ABCDEFG                  Yes
+ !Inventory:    0     45              Media not present or accessible
+ !Inventory:    0     46              Media not present or accessible
+ !Inventory:    0     47              Media not present or accessible
+ !Inventory:    0     48     SFP         1000BASE-LX         HIJKLMN                  Yes
+ !Inventory:    1     49     XFP         10GBASE-LR          OPQRSTU                  Yes
+ !Inventory:    1     50              Media not present or accessible
+ !Inventory:    1     45              Media not present or accessible
+ !Inventory:    1     46              Media not present or accessible
+ !Inventory:    1     47              Media not present or accessible
+ !Inventory:    1     48              Media not present or accessible

Hope this helps anyone curious about what optics have been inserted / removed in their devices.

-Kevin
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From kbonner at gmail.com  Thu Mar  7 23:36:37 2013
From: kbonner at gmail.com (Kevin Bonner)
Date: Thu, 07 Mar 2013 18:36:37 -0500
Subject: [rancid] Updated module for APC network management cards
Message-ID: <1457752.2i7VtVzyVR@casilla>

Hi Terry,

I've been using the rancid-apc tarball from rancid FTP contrib to monitor over 
90 APC devices successfully for about a month and just wanted to give a 
success report for this module.  The only thing I needed to change was to use 
passive ftp, but that was easy to get around.  If you'd like the diff, just to 
throw into apcrancid and disabled in the command table by default, just let me 
know.

-Kevin

>   7+ years ago, I released a first cut of a RANCID module for pulling
> configs from APC network management cards. As part of migrating my
> monitoring systems from RANCID 2.3.1 (heavily modified) to 2.3.8, I've
> 
> completely re-done the APC modules. Some of the changes are:
>   o Based on 2.3.8 clogin / rancid code base - easier to see what I
>     changed if you want to audit the code
>   
>   o Now reports the exact APC model number in the "Chassis Type" com-
>     ment line
>   
>   o Supports 2nd-generation APC management cards such as the AP9630/
>     AP9631
>   
>   o Supports a wider variety of FTP clients (different prompts)
>   o Better handling of configuration errors (such as specifying a non-
>     standard port number)
>   
>   o Better handling of errors from the FTP client - errors are now de-
>   
>     tected and reported rather than relying on the timeout mechanism
>   
>   o RANCID-CONTENT-TYPE header changed to "apc" from "apc-netmgmt"
>   o Greatly expanded the amount of info in the 0-README file
> 
>   You can download this version from:
> http://www.tmk.com/transient/rancid-apc.tar.gz
> 
>   If you want the 2005 version for some reason, it is available as:
> http://www.tmk.com/transient/rancid-apc-old.tar.gz
> 
>         Terry Kennedy             http://www.tmk.com
>         terry at tmk.com             New York, NY USA

From jethro.binks at strath.ac.uk  Fri Mar  8 14:04:34 2013
From: jethro.binks at strath.ac.uk (Jethro R Binks)
Date: Fri, 8 Mar 2013 14:04:34 +0000 (GMT)
Subject: [rancid] h3crancid doesn't filter passwords
In-Reply-To: <2229835.5gRsn0jDSs@casilla>
References: <2229835.5gRsn0jDSs@casilla>
Message-ID: <alpine.BSF.2.02.1303081403590.11393@qrswnz.pp.fgengu.np.hx>

Noted, I've been extremely lacking in time to do work in h3crancid (or 
many other things) this year so far :(

J.


On Thu, 7 Mar 2013, Kevin Bonner wrote:

> *newly subscribed... sorry for the missing message IDs*
> 
> I've recently setup rancid to monitor several HP A5120 switches and ran into 
> this same issue.
> 
> My diff for h3crancid is:
> --- /home/keb/tmp/h3crancid     2013-03-07 14:57:09.574706088 -0500
> +++ ./h3crancid 2013-02-28 11:40:31.725587845 -0500
> @@ -361,9 +361,16 @@
>  #        s/\s*---- More ----\s*//;
>  
>      # Filter out some sensitive data:
> -    if (/^( ?snmp-agent community (read|write) )(\S+)/ &&
> -       $filter_commstr == 0) {
> -        ProcessHistory("","","","!$1<removed>$'");
> +    if (/^( ?snmp-agent community (read|write) )(\S+)/ && $filter_commstr) {
> +        ProcessHistory("","","","#$1<removed>$'");
> +        next;
> +    }
> +    if (/^( ?password (?:simple|cipher) )(.*)$/ && $filter_pwds >= 1) {
> +        ProcessHistory("","","","#$1<removed>$'");
> +        next;
> +    }
> +    if (/^( ?key (?:authentication|accounting) )(.*)$/ && $filter_pwds >= 1) {
> +        ProcessHistory("","","","#$1<removed>$'");
>          next;
>      }
> 
> This diff hides the SNMP community string if requested, hides the user 
> passwords (both types!), and also hides RADIUS keys.  On the HP A5120 switch, 
> the pound symbol represents a comment line.  Not sure if the other models 
> covered by this script have that same behavior.
> 
> Jethro, if you need someone to test future changes, feel free to contact me.
> 
> Cheers,
> -Kevin
> 
> On 2013.02.04 23:23, Jethro R Binks wrote:
> > > On Mon, 4 Feb 2013, ignasr at vault13.lt wrote:
> > >
> > >> I know H3C is not officially supported in rancid, but maybe someone took
> > >> the time and already wrote password filtering routines for h3crancid?
> > >>
> > >> If not, can I get some pointers on where in h3crancid that filtering
> > >> should happen? I would use other scripts as examples and write
> > >> something.
> > >
> > > I have a bunch of updates to make to h3crancid at some point.  If you can
> > > give me samples of the lines where you want the passwords removing and the
> > > context, I can take a look at incorporating them.
> > >
> > > Jethro.
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> 

.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK

The University of Strathclyde is a charitable body, registered in
Scotland, number SC015263.

From stephane.mahier at prolival.fr  Mon Mar 11 16:31:03 2013
From: stephane.mahier at prolival.fr (Stephane Mahier)
Date: Mon, 11 Mar 2013 17:31:03 +0100 (CET)
Subject: [rancid] Trouble with rancid-run execution for HP Blades m6220 and
	m6348
Message-ID: <e6eaf226.000016ac.00000115@PRCP-WRKPC046.prolival.fr>

Hi everyone,



I?m working on implementing Rancid in my company but I encounter some
issues with HP Blades m6220/m6348, while it works perfectly for others
devices (mainly Cisco one).



First, I didn?t install Dell package because these devices seems to work
like cisco one (the script works perfectly for some Dell PC8024), and the
m6220/m6348 seems very similar to me.



When, as user rancid, I run ?rancid-run <group_name>? (where <group_name?s
router.db contains blades devices), it get stuck, the process never end


A device?s name configuration file is created (v1.1) but remain empty.

If I stop it with a break (ctrl+C), the process end and my configurations
files are saved (in v1.2).





Log file:



starting: Mon Mar 11 17:26:04 CET 2013



/usr/libexec/rancid/control_rancid: line 276: sendmail: command not found

cvs add: scheduling file `prsm-bln001-m6220-a1' for addition

cvs add: use 'cvs commit' to add this file permanently

RCS file: /var/rancid/CVS/VDR/configs/prsm-bln001-m6220-a1,v

done

Checking in prsm-bln001-m6220-a1;

/var/rancid/CVS/VDR/configs/prsm-bln001-m6220-a1,v  <--
prsm-bln001-m6220-a1

initial revision: 1.1

done

Added prsm-bln001-m6220-a1







Trying to get all of the configs.

Received signal - ending run (1).

All routers sucessfully completed.



cvs diff: Diffing .

cvs diff: Diffing configs

cvs commit: Examining .

cvs commit: Examining configs

Checking in router.db;

/var/rancid/CVS/VDR/router.db,v  <--  router.db

new revision: 1.30; previous revision: 1.29

done

Checking in configs/prsm-bln001-m6220-a1;

/var/rancid/CVS/VDR/configs/prsm-bln001-m6220-a1,v  <--
prsm-bln001-m6220-a1

new revision: 1.2; previous revision: 1.1

done

/usr/libexec/rancid/control_rancid: line 481: sendmail: command not found




That means I currently have no solution how to make rancid run through
crontab with these devices, as I need to manually kill the process
 Quite
embarrassing.



Thank you if you can help me with this issue.





Best regards,



St?phane MAHIER

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130311/75be39ac/attachment.html>

From scrivnerlarry at gmail.com  Mon Mar 11 19:43:42 2013
From: scrivnerlarry at gmail.com (Larry Scrivner)
Date: Mon, 11 Mar 2013 14:43:42 -0500
Subject: [rancid] rancid mailing list
Message-ID: <CAJmvOQdZuk5mm9PTm8EOMhPHbpAJ8-4L-xdErJyvTAFEb0DZPA@mail.gmail.com>

scrivnerlarry at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130311/e8125111/attachment.html>

From chris at node-nine.com  Tue Mar 12 18:38:30 2013
From: chris at node-nine.com (Chris Moody)
Date: Tue, 12 Mar 2013 14:38:30 -0400
Subject: [rancid] new RANCID code for Vyatta
Message-ID: <513F7626.4060600@node-nine.com>

Apologies if it's bad form on this list to reply to old threads, but I 
found this in the discuss archives from just a couple months back and am 
hoping to get in touch with the original sender.

If anyone has anything relating to this module, please let me know as 
I'm starting work on the same topic and would love to just help improve 
upon something already in existence.

Cheers,
-Chris

Original Message:
-----------------

Anyone out there using Vyatta boxes and wants to put them into RANCID?

Currently, the only people I've seen doing this are using the wrapper
rancid and ssh'ing the config file in themselves.

I'm putting together a more RANCID-like solution that runs Vyatta CLI
commands via non-interactive ssh (requires public key authentication),
and it fetches the running config so you will be able to track unsaved
changes.  So far it does this:

   show version
   show hardware dmi
   show hardware pci
   show hardware cpu
   show configuration commands

If you have a Vyatta and would like to try this out, please email
me off-list.  I'll post the code to the list when it stabilizes.

	-- Ed


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130312/b786e279/attachment.html>

From adam.korab at gmail.com  Tue Mar 12 18:52:21 2013
From: adam.korab at gmail.com (Adam Korab)
Date: Tue, 12 Mar 2013 13:52:21 -0500
Subject: [rancid] new RANCID code for Vyatta
In-Reply-To: <513F7626.4060600@node-nine.com>
References: <513F7626.4060600@node-nine.com>
Message-ID: <-7179998029599781265@unknownmsgid>

I must have missed the original post, but I'm interested as well.

--Adam
--
Adam Korab

On Mar 12, 2013, at 1:39 PM, Chris Moody <chris at node-nine.com> wrote:

 Apologies if it's bad form on this list to reply to old threads, but I
found this in the discuss archives from just a couple months back and am
hoping to get in touch with the original sender.

If anyone has anything relating to this module, please let me know as I'm
starting work on the same topic and would love to just help improve upon
something already in existence.

Cheers,
-Chris

Original Message:
-----------------

Anyone out there using Vyatta boxes and wants to put them into RANCID?

Currently, the only people I've seen doing this are using the wrapper
rancid and ssh'ing the config file in themselves.

I'm putting together a more RANCID-like solution that runs Vyatta CLI
commands via non-interactive ssh (requires public key authentication),
and it fetches the running config so you will be able to track unsaved
changes.  So far it does this:

  show version
  show hardware dmi
  show hardware pci
  show hardware cpu
  show configuration commands

If you have a Vyatta and would like to try this out, please email
me off-list.  I'll post the code to the list when it stabilizes.

	-- Ed


 _______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130312/850b6a3e/attachment.html>

From eravin at panix.com  Wed Mar 13 03:23:29 2013
From: eravin at panix.com (Ed Ravin)
Date: Tue, 12 Mar 2013 23:23:29 -0400
Subject: [rancid] new RANCID code for Vyatta
In-Reply-To: <513F7626.4060600@node-nine.com>
References: <513F7626.4060600@node-nine.com>
Message-ID: <20130313032329.GB21613@panix.com>

On Tue, Mar 12, 2013 at 02:38:30PM -0400, Chris Moody wrote:
>    Apologies if it's bad form on this list to reply to old threads, but I
>    found this in the discuss archives from just a couple months back and
>    am hoping to get in touch with the original sender.

That would be me.

The code is available to anyone who wants to try it out.  I'm not working
with RANCID stuff anymore, so it's not likely to get any further
development unless someone else picks up the work.

	-- Ed

From willie at qis.net  Tue Mar 19 12:43:14 2013
From: willie at qis.net (Willie Bollinger)
Date: Tue, 19 Mar 2013 08:43:14 -0400
Subject: [rancid] Cisco clock warnings
Message-ID: <51485D62.30602@qis.net>

We recently installed some adsl cards in some cisco routers that we use 
for out of band management. Ever since we did this we get the following 
errors from rancid every time it runs.

   !
   !Interface: FastEthernet0/0, AMD Am79c971
   !	DTE Unknown (13) TX and RX clocks detected.
- !	DTE Unknown (13) TX clock detected.
+ !	DTE Unknown (13) TX and RX clocks detected.
   !
   !Slot 0: fru C2620
   !Slot 0: type C2620 1FE Mainboard, 4 ports
   !Slot 0: hvers 6.0 rev B0

Is there a way to make rancid ignore these errors or has anybody come 
across a similar problem?


-- 
--------------------------------------------------------------------------
   Willie Bollinger     | Quantum Internet and Telecommunications
     410-239-6920       | 2975B Manchester Rd., Manchester, MD  21102
--------------------------------------------------------------------------

From kbonner at gmail.com  Wed Mar 20 05:04:04 2013
From: kbonner at gmail.com (Kevin Bonner)
Date: Wed, 20 Mar 2013 01:04:04 -0400
Subject: [rancid] Cisco clock warnings
In-Reply-To: <51485D62.30602@qis.net>
References: <51485D62.30602@qis.net>
Message-ID: <2668597.dyrV6c1RB8@casilla>

Hi Willie,

If you're getting the same email on every rancid run, I would suspect that 
your revision control system is having problems checking in that change.  Do 
the logs for that host / run indicate that rancid had trouble checking in the 
change to SVN (or CVS)?

-Kevin

On Tuesday, March 19, 2013 08:43:14 Willie Bollinger wrote:
> We recently installed some adsl cards in some cisco routers that we use
> for out of band management. Ever since we did this we get the following
> errors from rancid every time it runs.
> 
>    !
>    !Interface: FastEthernet0/0, AMD Am79c971
>    !	DTE Unknown (13) TX and RX clocks detected.
> - !	DTE Unknown (13) TX clock detected.
> + !	DTE Unknown (13) TX and RX clocks detected.
>    !
>    !Slot 0: fru C2620
>    !Slot 0: type C2620 1FE Mainboard, 4 ports
>    !Slot 0: hvers 6.0 rev B0
> 
> Is there a way to make rancid ignore these errors or has anybody come
> across a similar problem?

From peo at chalmers.se  Thu Mar 21 12:03:42 2013
From: peo at chalmers.se (Per-Olof Olsson)
Date: Thu, 21 Mar 2013 13:03:42 +0100
Subject: [rancid] HP procurve Menu logon
In-Reply-To: <5134C525.7020506@chalmers.se>
References: <1156DBA5-8167-4772-B42B-620AA8D3ED2F@univ-lr.fr>
	<20130219051133.GC93736@shrubbery.net>
	<0FD58A9A-E69C-40E8-AC7E-109AB0EF65FF@univ-lr.fr>
	<20130219183726.GK12440@shrubbery.net>
	<8E1B0503-040E-4ABF-992E-AA6A16300A9E@univ-lr.fr>
	<20130220174317.GG58636@shrubbery.net>
	<51253DEB.9000301@ale.cx> <5125CF67.7000006@chalmers.se>
	<20130301231945.GU27275@shrubbery.net>
	<5134C525.7020506@chalmers.se>
Message-ID: <514AF71E.7020506@chalmers.se>


Not just a small fix make menu login to work.
Found some more that I think needs to be fixed.

Now tested on some HP's
HP2524, H41xx, HP2510, HP2610, HP2620, HP2824, HP2910 och HP2920.
Telnet and ssh login to operator and manager level.
Ssh key login to manager level.

Also tested just hlogin on some Cisco's.

Look like have this to work.

How will this new hlogin work for agmrancid and srancid that make
use of hlogin?

Files from rancid 2.8.3.

hrancid:
- Fix to prevent hrancid from find/parse "Logout"-text from menu.
  Looks like code is move to WriteTerm and not used any more.

- Also include ShowReloadAt just to get a proper diff output.

===================================================================
diff -c hrancid.in_ORG hrancid.in_NEW
*** hrancid.in_ORG      2012-08-29 13:39:33.060145292 +0200
--- hrancid.in_NEW      2013-03-18 20:18:31.535617594 +0100
***************
*** 168,173 ****
--- 168,192 ----
      &ipaddrval($a) <=> &ipaddrval($b);
  }

+ # This routine parses "show reload at"
+ sub ShowReloadAt {
+     print STDERR "    In ShowReloadAt: $_" if ($debug);
+
+     while (<INPUT>) {
+       tr/\015//d;
+       last if (/^$prompt/);
+       next if (/^(\s*|\s*$cmd\s*)$/);
+       return(-1) if (/command authorization failed/i);
+       return(1) if /^(Invalid|Ambiguous) input:/i;
+
+       next if (/ \(in /);
+       next if (/ reload is not scheduled/);
+
+       ProcessHistory("COMMENTS","keysort","I0",";$_");
+     }
+     return(0);
+ }
+
  # This routine parses "show config files"
  sub ShowConfigFiles {
      print STDERR "    In ShowConfigFiles: $_" if ($debug);
***************
*** 533,538 ****
--- 552,558 ----
        {'show module'                  => 'ShowModule'},
        {'show stack'                   => 'ShowStack'},
        {'show tech transceivers'       => 'ShowTechTransceivers'},
+       {'show reload at'               => 'ShowReloadAt'},
        {'show config files'            => 'ShowConfigFiles'},
        {'show config status'           => 'ShowConfigStatus'},
        {'write term'                   => 'WriteTerm'}
***************
*** 602,614 ****
  ProcessHistory("COMMENTS","keysort","F0",";\n");      # showstack
  ProcessHistory("COMMENTS","keysort","G0",";\n");      # showtechtransceivers
  ProcessHistory("COMMENTS","keysort","H0",";\n");      # showconfigfiles
! ProcessHistory("COMMENTS","keysort","I0",";\n");
  TOP: while(<INPUT>) {
      tr/\015//d;
!     if (/$prompt\s*(exit|logout)\s*$/i) {
!       $clean_run=1;
!       last;
!     }
      if (/^Error:/) {
        print STDOUT ("$host clogin error: $_");
        print STDERR ("$host clogin error: $_") if ($debug);
--- 622,641 ----
  ProcessHistory("COMMENTS","keysort","F0",";\n");      # showstack
  ProcessHistory("COMMENTS","keysort","G0",";\n");      # showtechtransceivers
  ProcessHistory("COMMENTS","keysort","H0",";\n");      # showconfigfiles
! ProcessHistory("COMMENTS","keysort","I0",";\n");      # showreloadat
! ProcessHistory("COMMENTS","keysort","J0",";\n");
!
  TOP: while(<INPUT>) {
      tr/\015//d;
!
! # Moved to WriteTerm and not removed from here!!!
! ## "Logout" text in menu! Don't look for exit or logout before prompt is defined
! ##    if (/$prompt\s*(exit|logout)\s*$/i) {
! #    if (defined($prompt) && /$prompt\s*(exit|logout)\s*$/i) {
! #     print STDERR ("EXIT:$_") if ($debug);
! #     $clean_run=1;
! #     last;
! #    }
      if (/^Error:/) {
        print STDOUT ("$host clogin error: $_");
        print STDERR ("$host clogin error: $_") if ($debug);

=============================================



hlogin:

- Select "Exit to cli" if menu is default for login.
  Include answer to "save config" prompter before menu is started.

- Handle some more error text to speed up exit on error.

- Remove/replace code for two inner expect loops to
  just have a single expect loop for login.
  Don't like to duplicate expect code into inner loops.

- Include fix for "prompt" characters in banner text.
  Will handle banner text except if it the match "/#\s*($cmds_regexp)\s*$/" in hrancid

- Speed up logout.  Don't need to use human wait/type speed.

=============================================
diff -c hlogin.in_20130318 hlogin.in_NEW
*** hlogin.in_20130318  2013-02-27 07:56:51.332898135 +0100
--- hlogin.in_NEW       2013-03-18 20:16:02.286363285 +0100
***************
*** 412,417 ****
--- 412,427 ----
            send "\r"
            exp_continue
        }
+       "Do you want to save current configuration" {
+           send "n"
+           exp_continue
+       }
+       # Menu output "<Enter>" grab all in menu to not match prompter!
+       -re "(\[0-9])\\. Command Line \\(CLI\\).*" {
+           set menu_exit "$expect_out(1,string)"
+           send "$menu_exit"
+           exp_continue
+       }
        -re "(Connection refused|Secure connection \[^\n\r]+ refused|Connection closed by)" {
            catch {close}; catch {wait};
            if !$progs {
***************
*** 444,450 ****
            send_user "\nError: host key mismatch for $router.  Update the SSH known_hosts
file accordingly.\n"
            return 1
        }
!       eof { send_user "\nError: Couldn't login\n"; wait; return 1 }
        -nocase "unknown host\r" {
            catch {close}; catch {wait};
            send_user "\nError: Unknown host\n"; wait; return 1
--- 454,483 ----
            send_user "\nError: host key mismatch for $router.  Update the SSH known_hosts
file accordingly.\n"
            return 1
        }
!       "Could not resolve hostname" {
!           send_user "\nError:  Could not resolve hostname $router\n";
!           catch {close}; catch {wait};
!           return 1
!       }
!       eof {
!           send_user "\nError: Couldn't login\n";
!           wait; return 1
!       }
!       "Permission denied" {
!           send_user "\nError: Permission denied. Check your access to $router\n";
!           catch {close}; catch {wait};
!           return 1
!       }
!       "Invalid password" {
!           send_user "\nError: Invalid password. Check your passwd for $router\n";
!           catch {close}; catch {wait};
!           return 1
!       }
!       "Login invalid" {
!           send_user "\nError: Invalid login\n";
!           catch {close}; catch {wait};
!           return 1
!       }
        -nocase "unknown host\r" {
            catch {close}; catch {wait};
            send_user "\nError: Unknown host\n"; wait; return 1
***************
*** 455,473 ****
            send -- "$passphrase\r"
            exp_continue
        }
!       -re "$u_prompt" { send -- "$user\r"
!           expect {
!               eof                     { send_user "\nError: Couldn't login\n"; wait;
return 1 }
!               "Login invalid"         { send_user "\nError: Invalid login\n";
!                                         catch {close}; catch {wait};
!                                         return 1 }
!               -re "$p_prompt"         { send -- "$userpswd\r" }
!               "$prompt"               { set in_proc 0; return 0 }
!               "Press any key to continue" {
!                                         send " "
!                                         exp_continue
!                                       }
!           }
            exp_continue
        }
        -re "$p_prompt" {
--- 488,498 ----
            send -- "$passphrase\r"
            exp_continue
        }
!       -re "\[#>]+.*\[\n\r]+" {
!           exp_continue
!       }
!       -re "$u_prompt" {
!           send -- "$user\r"
            exp_continue
        }
        -re "$p_prompt" {
***************
*** 476,502 ****
            } else {
                send -- "$passwd\r"
            }
-           expect {
-               eof             { send_user "\nError: Couldn't login\n";
-                                 wait;
-                                 return 1
-                               }
-               "Press any key to continue" {
-                                 send " ";
-                                 exp_continue
-                               }
-               -re "$e_prompt" { send -- "$enapasswd\r" }
-               "$prompt"       { set in_proc 0;
-                                 return 0
-                               }
-           }
            exp_continue
        }
!       "$prompt"       { break; }
!       denied          { send_user "\nError: Check your passwd for $router\n"
!                         catch {close}; catch {wait}; return 1
!                       }
!       "% Bad passwords" {send_user "\nError: Check your passwd for $router\n"; return 1 }
       }
      }

--- 501,519 ----
            } else {
                send -- "$passwd\r"
            }
            exp_continue
        }
!       "$prompt" {
!           break
!       }
!       denied {
!           send_user "\nError: Check your passwd for $router\n"
!           catch {close}; catch {wait}; return 1
!       }
!       "% Bad passwords" {
!           send_user "\nError: Check your passwd for $router\n"
!           return 1
!       }
       }
      }

***************
*** 583,589 ****
        }
      }
      log_user 1
!     send -h "logout\r"
      expect {
        "Do you want to save current configuration"     {
                                                  if {$do_saveconfig} {
--- 600,606 ----
        }
      }
      log_user 1
!     send "logout\r"
      expect {
        "Do you want to save current configuration"     {
                                                  if {$do_saveconfig} {

=============================================




On 03/04/2013 05:00 PM, Per-Olof Olsson wrote:
> On 03/02/2013 12:19 AM, heasley wrote:
>> Thu, Feb 21, 2013 at 08:40:23AM +0100, Per-Olof Olsson:
>>> Alex DEKKER skrev 02/20/2013 10:19 PM:
>>>> On 20/02/13 17:43, heasley wrote:
>>>>> btw, is this menu a standard thing with procurves?  I've never seen it,
>>>>> but the one that i have is a lower-end model.
>>>> It's not the default on current Procurves, you can access it with 'menu'. From what Marc
>>>> is saying, it sounds like there is a way to make it go straight into the menu on login for
>>>> a given username.
>>>>
>>>> alexd
>>>> _______________________________________________
>>>> Rancid-discuss mailing list
>>>> Rancid-discuss at shrubbery.net
>>>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>>>
>>> Only setting I found for this is in "8. Run Setup" menu
>>> where you select "Logon Default" to "CLI" or "Menu"
>>
>> Would you propose a patch for this, since you can test it?
> 
> Yes but it will take some time to have it to work and is fully tested.
> 
> telnet/ssh login to manager and/or operator level
> ssh key-login
> and some switch types.
> 
> "5" only works if you do direct login to manager level.
> Login to operator level needs "3" for "CLI exit".
> 
> And one more thing.
> When you start menu mode and not saved config
>   "Do you want to save current configuration"-prompt
> shows up before menu is started, even at login.
> 
> ...
> 
> Have part of it working but not all.
> 
>>
>>> /Peo
>>> ----------------------------------------------------------
>>> Per-Olof Olsson               Email: peo at chalmers.se
>>> Chalmers tekniska h?gskola    IT-service
>>> H?rsalsv?gen 5                412 96 G?teborg
>>> Tel: 031/772 6738  Fax: 031/772 8660
>>> ----------------------------------------------------------
>>> _______________________________________________
>>> Rancid-discuss mailing list
>>> Rancid-discuss at shrubbery.net
>>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> 
> 
> /Peo
> 
> 
> 
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> 



From daniel.schmidt at wyo.gov  Wed Mar 27 16:59:12 2013
From: daniel.schmidt at wyo.gov (Daniel Schmidt)
Date: Wed, 27 Mar 2013 10:59:12 -0600
Subject: [rancid] FW:  NX-OS sap:
Message-ID: <db84392c911dad4891f779e0aab26a53@mail.gmail.com>

Sorry, I did try to open a tac case, but without a way to accurately
recreate it, it was too time consuming/infuriating to resolve.  They did
figure it was likely related to the #$(@* half a dozen snmp servers all
querying my device.  But, for the record: I did try to make Cisco fix it.
Anybody else experiencing this and motivated enough to look into it,
please contact me.

-----Original Message-----
From: Daniel Schmidt [mailto:daniel.schmidt at wyo.gov]
Sent: Thursday, March 07, 2013 2:08 PM
To: 'heasley'
Cc: 'rancid-discuss at shrubbery.net'
Subject: RE: [rancid] NX-OS sap:

Thanks, I may open a tac case out of curiosity.

-----Original Message-----
From: heasley [mailto:heas at shrubbery.net]
Sent: Thursday, February 28, 2013 2:57 PM
To: Daniel Schmidt
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] NX-OS sap:

Tue, Feb 26, 2013 at 08:48:21AM -0700, Daniel Schmidt:
> Anybody else getting this spurious diff?
>
>
>
> + !DEBUG: Could not retrieve info from application sap:28 : Timer
> + expired
>
>
>
> Might have been discussed before ? apologies if I missed it.

i've not noticed anyone mention that before.  you'd want something like
this...and a TAC ticket.

Index: bin/nxrancid.in
===================================================================
--- bin/nxrancid.in     (revision 2663)
+++ bin/nxrancid.in     (working copy)
@@ -589,6 +589,7 @@
        return(1) if /(Invalid input detected|Type help or )/;
        return(-1) if (/\% Invalid command at /);
        return(-1) if (/command authorization failed/i);
+       return(-1) if (/could not retrieve info/i);
        # XXX return(-1) if (/\% Permission denied/);
        # NX 5000 bug? "show debug" generates
        # "Permission denied" when using command authorization. -Per-Olof
Olsson

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.


From gfleming at srk.com  Wed Mar 27 17:07:29 2013
From: gfleming at srk.com (Fleming, Graham)
Date: Wed, 27 Mar 2013 17:07:29 +0000
Subject: [rancid] Dell Switches with "K" in the host name fail
Message-ID: <EA139E5ED663E645B53D37A70C6BC0F91DC1877D@NAV-MX0.NAV.NA.SRK.AD>

Hello everyone,

I'm using the drancid and dlogin scripts from here: http://web.rickyninja.net:81/rancid/

Everything works OK except any Powerconnect switches that have the letter "K" in their hostname will fail. 

In debugging I notice the script deletes any instance of the K from the prompt so it never matches the prompt and never knows when commands are finished.

Therefore, at the end of the script it errors out with:

": missed cmd(s): show version,show running-config,show vlan
found_end = 0, clean_run = 0
: End of run not found"

Any ideas would be great thanks.

From hpatil at securview.com  Thu Mar 28 06:05:27 2013
From: hpatil at securview.com (Harshal Patil)
Date: Thu, 28 Mar 2013 02:05:27 -0400
Subject: [rancid] Rancid GUI
Message-ID: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>

Hi,

  I have installed Rancid software linux base software which takes backup of devices automatically on one my Server but i need to access these devices configuration by GUI. Someone suggested that it would be possible through FreeBSD .
     So i need your help regarding this situation that where i can get full information that how to install FreeBSD on Rancid.
 I am looking forward your response soon

Regards
Harshal

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/0b101707/attachment.html>

From peo at chalmers.se  Thu Mar 28 09:03:08 2013
From: peo at chalmers.se (Per-Olof Olsson)
Date: Thu, 28 Mar 2013 10:03:08 +0100
Subject: [rancid] More ESC-codes used in HP2920 switches.
Message-ID: <5154074C.6030104@chalmers.se>

Hello


New HP2920-switches also use <ESC>[6n (Ansi u7, user7 code).
To prevent from use and echo esc codes add it to hpuifilter.c filter list.




[rancid at stats2 bin]$ diff -c hpuifilter.c_ORG hpuifilter.c
*** hpuifilter.c_ORG    2010-08-10 03:24:40.000000000 +0200
--- hpuifilter.c        2013-03-25 08:36:34.396596378 +0100
***************
*** 534,540 ****
  filter(char *buf, int len)
  {
      static regmatch_t pmatch[1];
! #define       N_REG           15              /* number of regexes in reg[][] */
  #define       N_CRs           2               /* number of CR replacements */
      static regex_t    preg[N_REG];
      static char               reg[N_REG][50] = {      /* vt100/220 escape codes */
--- 539,545 ----
  filter(char *buf, int len)
  {
      static regmatch_t pmatch[1];
! #define       N_REG           16              /* number of regexes in reg[][] */
  #define       N_CRs           2               /* number of CR replacements */
      static regex_t    preg[N_REG];
      static char               reg[N_REG][50] = {      /* vt100/220 escape codes */
***************
*** 553,558 ****
--- 558,564 ----
                                "\x1B\\[\\?25l",                /* vi */
                                "\x1B\\[K",                     /* ce */
                                "\x1B\\[7m",                    /* mr - ansi */
+                               "\x1B\\[6n",                    /* u7 - ansi */
                                "\x07",                         /* bell */

                                /* replace these with CR */



/Peo
----------------------------------------------------------
Per-Olof Olsson               Email: peo at chalmers.se
Chalmers tekniska h?gskola    IT-service
H?rsalsv?gen 5                412 96 G?teborg
Tel: 031/772 6738  Fax: 031/772 8660
----------------------------------------------------------

From shouldbeq931 at gmail.com  Thu Mar 28 11:05:00 2013
From: shouldbeq931 at gmail.com (shouldbeq931)
Date: Thu, 28 Mar 2013 11:05:00 +0000
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
Message-ID: <962CA261-019E-47EF-9E28-D00D94D82D8A@gmail.com>

I use viewvc


Cheers

Arne

Sent on the move

On 28 Mar 2013, at 06:05, Harshal Patil <hpatil at securview.com> wrote:

> Hi,
>  
>   I have installed Rancid software linux base software which takes backup of devices automatically on one my Server but i need to access these devices configuration by GUI. Someone suggested that it would be possible through FreeBSD .
>      So i need your help regarding this situation that where i can get full information that how to install FreeBSD on Rancid.
>  I am looking forward your response soon
>  
> Regards
> Harshal
> 
> Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/f201e8fa/attachment.html>

From howie at thingy.com  Thu Mar 28 11:13:57 2013
From: howie at thingy.com (Howard Jones)
Date: Thu, 28 Mar 2013 11:13:57 +0000
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
Message-ID: <515425F5.6060709@thingy.com>

On 28/03/2013 06:05, Harshal Patil wrote:
> Hi,
>   I have installed Rancid software linux base software which 
> takes backup of devices automatically on one my Server but i need to 
> access these devices configuration by GUI. Someone suggested that it 
> would be possible through FreeBSD .
>      So i need your help regarding this situation that where i can get 
> full information that how to install FreeBSD on Rancid.
>
You don't need FreeBSD - all you need is a web-based viewer for CVS (or 
Subversion if you enabled that option in RANCID).
   http://www.viewvc.org/
supports CVS and Subversion.

There isn't a GUI for *configuring* RANCID though.

From mwlucas at blackhelicopters.org  Thu Mar 28 11:40:39 2013
From: mwlucas at blackhelicopters.org (Michael W. Lucas)
Date: Thu, 28 Mar 2013 07:40:39 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
Message-ID: <20130328114038.GA2248@bewilderbeast.blackhelicopters.org>


Hello,

rancid only backs up devices that can be configured via command line.

If you're looking for a GUI interface to the data on your rancid
server, look at cvsweb.

==ml

On Thu, Mar 28, 2013 at 02:05:27AM -0400, Harshal Patil wrote:
>    Hi,
> 
>      I have installed Rancid software linux base software which takes backup
>    of devices automatically on one my Server but i need to access these
>    devices configuration by GUI. Someone suggested that it would be possible
>    through FreeBSD .
>         So i need your help regarding this situation that where i can get
>    full information that how to install FreeBSD on Rancid.
>     I am looking forward your response soon
> 
>    Regards
>    Harshal
> 
>    --------------------------------------------------------------------------
> 
>    Confidentiality: This e-mail and any attachments may be confidential and
>    may also be privileged. If you are not an intended named recipient, please
>    notify the sender immediately and do not disclose the contents to another
>    person use it for any purpose, or store or copy the information in any
>    medium.

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


-- 
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.

From smadel at solutionary.com  Thu Mar 28 13:25:14 2013
From: smadel at solutionary.com (Steve Madel)
Date: Thu, 28 Mar 2013 08:25:14 -0500
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
Message-ID: <515444BA.1050003@solutionary.com>

You could use viewvc for this to view the diffs through a web gui.  
Information is here.

http://www.gossamer-threads.com/lists/rancid/users/2841


On 03/28/2013 01:05 AM, Harshal Patil wrote:
> Hi,
>   I have installed Rancid software linux base software which 
> takes backup of devices automatically on one my Server but i need to 
> access these devices configuration by GUI. Someone suggested that it 
> would be possible through FreeBSD .
>      So i need your help regarding this situation that where i can get 
> full information that how to install FreeBSD on Rancid.
>  I am looking forward your response soon
> Regards
> Harshal
>
> ------------------------------------------------------------------------
> Confidentiality: This e-mail and any attachments may be confidential 
> and may also be privileged. If you are not an intended named 
> recipient, please notify the sender immediately and do not disclose 
> the contents to another person use it for any purpose, or store or 
> copy the information in any medium.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/f9f3dc20/attachment.html>

From mwlucas at blackhelicopters.org  Thu Mar 28 14:03:56 2013
From: mwlucas at blackhelicopters.org (Michael W. Lucas)
Date: Thu, 28 Mar 2013 10:03:56 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CE@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
	<20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
	<0B58A828ECF5874E8AF69053B9DB65A9357153F8CE@USNJ01EXC001>
Message-ID: <20130328140355.GA2730@bewilderbeast.blackhelicopters.org>


Web server error. Check the error logs. 

Debugging a web server varies widely depending on which web server,
which OS, which version of Perl, etc etc etc. I'd ask on a support
forum specializing in your platform.

On Thu, Mar 28, 2013 at 09:29:48AM -0400, Harshal Patil wrote:
>    Hi,
> 
>        I have already installed 'cvsweb' packeage and also modified "CVS
>    repository" in cvsweb.
>        however currently i m receiving error that "The requested URL
>    /cgi-bin/cvsweb was not found on this server" .
>        Could you please help in regarding where issue exactly lies.
> 
>    Thanks
> 
>    Harshal
> 
>    ________________________________________
>    From: Michael W. Lucas [mwlucas at blackhelicopters.org]
>    Sent: Thursday, March 28, 2013 7:40 AM
>    To: Harshal Patil
>    Cc: rancid-discuss at shrubbery.net
>    Subject: Re: [rancid] Rancid GUI
> 
>    Hello,
> 
>    rancid only backs up devices that can be configured via command line.
> 
>    If you're looking for a GUI interface to the data on your rancid
>    server, look at cvsweb.
> 
>    ==ml
> 
>    On Thu, Mar 28, 2013 at 02:05:27AM -0400, Harshal Patil wrote:
>    >    Hi,
>    >
>    >      I have installed Rancid software linux base software which takes
>    backup
>    >    of devices automatically on one my Server but i need to access these
>    >    devices configuration by GUI. Someone suggested that it would be
>    possible
>    >    through FreeBSD .
>    >         So i need your help regarding this situation that where i can
>    get
>    >    full information that how to install FreeBSD on Rancid.
>    >     I am looking forward your response soon
>    >
>    >    Regards
>    >    Harshal
>    >
>    >
>    --------------------------------------------------------------------------
>    >
>    >    Confidentiality: This e-mail and any attachments may be confidential
>    and
>    >    may also be privileged. If you are not an intended named recipient,
>    please
>    >    notify the sender immediately and do not disclose the contents to
>    another
>    >    person use it for any purpose, or store or copy the information in
>    any
>    >    medium.
> 
>    > _______________________________________________
>    > Rancid-discuss mailing list
>    > Rancid-discuss at shrubbery.net
>    > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> 
>    --
>    Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor
>    http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
>    Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
>    coupon code "ILUVMICHAEL" gets you 30% off & helps me.
> 
>    --------------------------------------------------------------------------
> 
>    Confidentiality: This e-mail and any attachments may be confidential and
>    may also be privileged. If you are not an intended named recipient, please
>    notify the sender immediately and do not disclose the contents to another
>    person use it for any purpose, or store or copy the information in any
>    medium.

-- 
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.

From willie.s.hinote at nasa.gov  Thu Mar 28 14:09:50 2013
From: willie.s.hinote at nasa.gov (Hinote, Scotty (MSFC-IS40)[NICS])
Date: Thu, 28 Mar 2013 09:09:50 -0500
Subject: [rancid] Rancid GUI
In-Reply-To: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
Message-ID: <8420D9D639CBE744B778A8916DFFC90FF8261B8C8F@NDMSSCC08.ndc.nasa.gov>

Hi Harshal,

FreeBSD RANCID install. The article below should list all of the steps needed to install RANCID from ports which is the basic setup.
http://uberbruco.wordpress.com/2009/07/09/rancid-on-freebsd/

OpenGrok GUI. I run this on my RHEL servers. It is Java and needs Tomcat to host the webapp but it has a lot of nice features like search which some other GUIs do not. You simply untar it and move it to where you want it reside on the server. It has a deploy option which sets up the app for Tomcat and an index option which you have to run for indexing RANCID's files once they are checked out using subversion. This is a lot more complicated than some other options but you do get extra features. If you are interested in more details I can help you with setup and hooking it into RANCID's subversion.
http://opengrok.github.com/OpenGrok/

WebSVN GUI. I used this at first because it is incredibly easy to setup and it works with your subversion directory automatically. It does not require checking out its own subversion copy from RANCID but it has no search capability. You should be able to start with number 8 in the article since the repository is already created by RANCID.
http://tgrove.com/2010/10/26/installing-subversion-on-freebsd-from-ports/

If you want something quick and easy to support I would install WebSVN. If you need searching capabilities you will have to use OpenGrok. Other options are desktop clients like TortoiseSVN and NetBeans that users can install themselves. You would only need to setup webdav for Apache and hook it into subversion which is really simple. I hope this helps. If you have questions let me know and I will try to help as much as I can.

Regards,
Scotty


From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Harshal Patil
Sent: Thursday, March 28, 2013 1:05 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Rancid GUI

Hi,

  I have installed Rancid software linux base software which takes backup of devices automatically on one my Server but i need to access these devices configuration by GUI. Someone suggested that it would be possible through FreeBSD .
     So i need your help regarding this situation that where i can get full information that how to install FreeBSD on Rancid.
 I am looking forward your response soon

Regards
Harshal

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/ee48dc4a/attachment.html>

From daniel.schmidt at wyo.gov  Thu Mar 28 16:13:06 2013
From: daniel.schmidt at wyo.gov (Daniel Schmidt)
Date: Thu, 28 Mar 2013 10:13:06 -0600
Subject: [rancid] Rancid GUI
In-Reply-To: <20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
	<20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
Message-ID: <b06e03759bf35726d695a38c6e974d06@mail.gmail.com>

I second ol' fashion cvsweb.  Easier to setup than viewvc, and just as
useful.

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net
[mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael W.
Lucas
Sent: Thursday, March 28, 2013 5:41 AM
To: Harshal Patil
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] Rancid GUI


Hello,

rancid only backs up devices that can be configured via command line.

If you're looking for a GUI interface to the data on your rancid server,
look at cvsweb.

==ml

On Thu, Mar 28, 2013 at 02:05:27AM -0400, Harshal Patil wrote:
>    Hi,
>
>      I have installed Rancid software linux base software which takes
backup
>    of devices automatically on one my Server but i need to access these
>    devices configuration by GUI. Someone suggested that it would be
possible
>    through FreeBSD .
>         So i need your help regarding this situation that where i can
get
>    full information that how to install FreeBSD on Rancid.
>     I am looking forward your response soon
>
>    Regards
>    Harshal
>
>
> ----------------------------------------------------------------------
> ----
>
>    Confidentiality: This e-mail and any attachments may be confidential
and
>    may also be privileged. If you are not an intended named recipient,
please
>    notify the sender immediately and do not disclose the contents to
another
>    person use it for any purpose, or store or copy the information in
any
>    medium.

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


--
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest
book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code
"ILUVMICHAEL" gets you 30% off & helps me.
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.


From tosimpson at forchtgroup.com  Thu Mar 28 16:15:19 2013
From: tosimpson at forchtgroup.com (Tom Simpson)
Date: Thu, 28 Mar 2013 12:15:19 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <b06e03759bf35726d695a38c6e974d06@mail.gmail.com>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
	<20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
	<b06e03759bf35726d695a38c6e974d06@mail.gmail.com>
Message-ID: <FB41347B-0BF6-4845-931C-31D31D22FB58@forchtgroup.com>

TortoiseSVN works as well from a windows client....

Thanks,
Tom Simpson

Sent from my iPhone

On Mar 28, 2013, at 12:13 PM, "Daniel Schmidt" <daniel.schmidt at wyo.gov> wrote:

> I second ol' fashion cvsweb.  Easier to setup than viewvc, and just as
> useful.
>
> -----Original Message-----
> From: rancid-discuss-bounces at shrubbery.net
> [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael W.
> Lucas
> Sent: Thursday, March 28, 2013 5:41 AM
> To: Harshal Patil
> Cc: rancid-discuss at shrubbery.net
> Subject: Re: [rancid] Rancid GUI
>
>
> Hello,
>
> rancid only backs up devices that can be configured via command line.
>
> If you're looking for a GUI interface to the data on your rancid server,
> look at cvsweb.
>
> ==ml
>
> On Thu, Mar 28, 2013 at 02:05:27AM -0400, Harshal Patil wrote:
>>   Hi,
>>
>>     I have installed Rancid software linux base software which takes
> backup
>>   of devices automatically on one my Server but i need to access these
>>   devices configuration by GUI. Someone suggested that it would be
> possible
>>   through FreeBSD .
>>        So i need your help regarding this situation that where i can
> get
>>   full information that how to install FreeBSD on Rancid.
>>    I am looking forward your response soon
>>
>>   Regards
>>   Harshal
>>
>>
>> ----------------------------------------------------------------------
>> ----
>>
>>   Confidentiality: This e-mail and any attachments may be confidential
> and
>>   may also be privileged. If you are not an intended named recipient,
> please
>>   notify the sender immediately and do not disclose the contents to
> another
>>   person use it for any purpose, or store or copy the information in
> any
>>   medium.
>
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>
> --
> Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor
> http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest
> book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code
> "ILUVMICHAEL" gets you 30% off & helps me.
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
> E-Mail to and from me, in connection with the transaction
> of public business, is subject to the Wyoming Public Records
> Act and may be disclosed to third parties.
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

CONFIDENTIALITY NOTICE:
This message contains confidential information and is intended only for the individual named.  If you are not the named addressee you should not disseminate, distribute or copy this e-mail.  Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.

Forcht Group IT, 2400 South Main Street, Corbin, Ky.

From rwest at zyedge.com  Thu Mar 28 16:20:12 2013
From: rwest at zyedge.com (Ryan West)
Date: Thu, 28 Mar 2013 16:20:12 +0000
Subject: [rancid] Rancid GUI
In-Reply-To: <FB41347B-0BF6-4845-931C-31D31D22FB58@forchtgroup.com>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>
	<20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
	<b06e03759bf35726d695a38c6e974d06@mail.gmail.com>
	<FB41347B-0BF6-4845-931C-31D31D22FB58@forchtgroup.com>
Message-ID: <8903D0A8F70EA74FBE57CA9B846B42C0565F3C16@ZY-MBX1.zyedge.local>

On Thu, Mar 28, 2013 at 12:15:19, Tom Simpson wrote:
> Cc: Harshal Patil; rancid-discuss at shrubbery.net
> Subject: Re: [rancid] Rancid GUI
> 
> TortoiseSVN works as well from a windows client....
> 
> Thanks,
> Tom Simpson
> 
> Sent from my iPhone
> 
> On Mar 28, 2013, at 12:13 PM, "Daniel Schmidt" 
> <daniel.schmidt at wyo.gov>
> wrote:
> 
> > I second ol' fashion cvsweb.  Easier to setup than viewvc, and just 
> > as useful.
> >

Websvn here.  

From tehpopa at gmail.com  Fri Mar 29 17:06:16 2013
From: tehpopa at gmail.com (Justin Popa)
Date: Fri, 29 Mar 2013 10:06:16 -0700
Subject: [rancid] Cisco ASA in Rancid
Message-ID: <CABrzZGDp=K6iBTBxjQbzYPonKj7kbVuh4sicebZzOT=G1M48FQ@mail.gmail.com>

I've set up a handful of Cisco switches and routers inside Rancid without
issue. Unfortunately I cannot get rancid talking to my ASA 5520 no matter
what I do.

1) I've checked to make sure that the ASA has the IP of the rancid server
allowed to SSH.
2) I tested sshing to the ASA from the rancid server, which worked as
expected.
3) I verified the login settings in my cloginrc file, and confirmed the dns
name was correct in routers.db.
4) I did a "./clogin -u rancidusername -p r3gularp4ss -e en4blep4ss -c "sh
ver" thisismyasa.domain.com" which properly returned a "sh ver" from the
ASA.

However, despite everything looking normal, when I run "rancid-run" I do
not receive alerts about rancid being able to connect to the ASA, nor does
the config file in /rancidpath/var/corp/configs/ populate with the ASA's
configuration file. It does create a file for the ASA in that directory,
but it's 0k.

Anyone have any thoughts?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130329/a161a38a/attachment.html>

From mwlucas at blackhelicopters.org  Fri Mar 29 20:00:29 2013
From: mwlucas at blackhelicopters.org (Michael W. Lucas)
Date: Fri, 29 Mar 2013 16:00:29 -0400
Subject: [rancid] Cisco ASA in Rancid
In-Reply-To: <CABrzZGDp=K6iBTBxjQbzYPonKj7kbVuh4sicebZzOT=G1M48FQ@mail.gmail.com>
References: <CABrzZGDp=K6iBTBxjQbzYPonKj7kbVuh4sicebZzOT=G1M48FQ@mail.gmail.com>
Message-ID: <20130329200029.GA8528@bewilderbeast.blackhelicopters.org>


Check your log files. Timeouts?

You can also do rancid-run -r routername to run rancid on just the one
host, to separate out debugging in the log.

On Fri, Mar 29, 2013 at 10:06:16AM -0700, Justin Popa wrote:
>    I've set up a handful of Cisco switches and routers inside Rancid without
>    issue. Unfortunately I cannot get rancid talking to my ASA 5520 no matter
>    what I do.
>    1) I've checked to make sure that the ASA has the IP of the rancid server
>    allowed to SSH.
>    2) I tested sshing to the ASA from the rancid server, which worked as
>    expected.
>    3) I verified the login settings in my cloginrc file, and confirmed the
>    dns name was correct in routers.db.
>    4) I did a "./clogin -u rancidusername -p r3gularp4ss -e en4blep4ss -c "sh
>    ver" [1]thisismyasa.domain.com" which properly returned a "sh ver" from
>    the ASA.
>    However, despite everything looking normal, when I run "rancid-run" I do
>    not receive alerts about rancid being able to connect to the ASA, nor does
>    the config file in /rancidpath/var/corp/configs/ populate with the ASA's
>    configuration file. It does create a file for the ASA in that directory,
>    but it's 0k.
>    Anyone have any thoughts?
> 
> References
> 
>    Visible links
>    1. http://thisismyasa.domain.com/

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


-- 
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.

From rwest at zyedge.com  Fri Mar 29 22:01:40 2013
From: rwest at zyedge.com (Ryan West)
Date: Fri, 29 Mar 2013 22:01:40 +0000
Subject: [rancid] Cisco ASA in Rancid
In-Reply-To: <20130329200029.GA8528@bewilderbeast.blackhelicopters.org>
References: <CABrzZGDp=K6iBTBxjQbzYPonKj7kbVuh4sicebZzOT=G1M48FQ@mail.gmail.com>
	<20130329200029.GA8528@bewilderbeast.blackhelicopters.org>
Message-ID: <8903D0A8F70EA74FBE57CA9B846B42C0565F9470@ZY-MBX1.zyedge.local>

On Fri, Mar 29, 2013 at 16:00:29, Michael W. Lucas wrote:
> Cc: rancid-discuss at shrubbery.net
> Subject: Re: [rancid] Cisco ASA in Rancid
> 
> 
> Check your log files. Timeouts?
> 
.com" which properly returned a "sh ver" from
> >    the ASA.
> >    However, despite everything looking normal, when I run "rancid-run" I do
> >    not receive alerts about rancid being able to connect to the ASA, nor does
> >    the config file in /rancidpath/var/corp/configs/ populate with the ASA's
> >    configuration file. It does create a file for the ASA in that directory,
> >    but it's 0k.
> >    Anyone have any thoughts?

Can you post your .cloginrc, sanitized of course.

-ryan

From tosimpson at forchtgroup.com  Fri Mar 29 22:03:26 2013
From: tosimpson at forchtgroup.com (Tom Simpson)
Date: Fri, 29 Mar 2013 22:03:26 +0000
Subject: [rancid] Cisco ASA in Rancid
In-Reply-To: <8903D0A8F70EA74FBE57CA9B846B42C0565F9470@ZY-MBX1.zyedge.local>
References: <CABrzZGDp=K6iBTBxjQbzYPonKj7kbVuh4sicebZzOT=G1M48FQ@mail.gmail.com>
	<20130329200029.GA8528@bewilderbeast.blackhelicopters.org>,
	<8903D0A8F70EA74FBE57CA9B846B42C0565F9470@ZY-MBX1.zyedge.local>
Message-ID: <28E3BE4F-97BF-4490-B19C-E40AEACD5C0D@forchtgroup.com>

Are you switching to enable mode when you login? Or more to the point so you enable it in .cloginrc?

Thanks,
Tom Simpson

Sent from my iPhone

On Mar 29, 2013, at 6:02 PM, "Ryan West" <rwest at zyedge.com> wrote:

> On Fri, Mar 29, 2013 at 16:00:29, Michael W. Lucas wrote:
>> Cc: rancid-discuss at shrubbery.net
>> Subject: Re: [rancid] Cisco ASA in Rancid
>>
>>
>> Check your log files. Timeouts?
> .com" which properly returned a "sh ver" from
>>>   the ASA.
>>>   However, despite everything looking normal, when I run "rancid-run" I do
>>>   not receive alerts about rancid being able to connect to the ASA, nor does
>>>   the config file in /rancidpath/var/corp/configs/ populate with the ASA's
>>>   configuration file. It does create a file for the ASA in that directory,
>>>   but it's 0k.
>>>   Anyone have any thoughts?
>
> Can you post your .cloginrc, sanitized of course.
>
> -ryan
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

________________________________

CONFIDENTIALITY NOTICE:
This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.

Forcht Group IT, 2400 South Main Street, Corbin, Ky.

From hpatil at securview.com  Thu Mar 28 11:35:09 2013
From: hpatil at securview.com (Harshal Patil)
Date: Thu, 28 Mar 2013 07:35:09 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <962CA261-019E-47EF-9E28-D00D94D82D8A@gmail.com>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>,
	<962CA261-019E-47EF-9E28-D00D94D82D8A@gmail.com>
Message-ID: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CC@USNJ01EXC001>

Hi Ame,

  Thanks for the information. i will check Viewvc software whether it will work or not.
   Could you please share if you have any document or any web link that guide how to install Viewvc software on rancid.

Thanks
Harshal

________________________________
From: shouldbeq931 [shouldbeq931 at gmail.com]
Sent: Thursday, March 28, 2013 7:05 AM
To: rancid-discuss at shrubbery.net
Cc: Harshal Patil
Subject: Re: [rancid] Rancid GUI

I use viewvc


Cheers

Arne

Sent on the move

On 28 Mar 2013, at 06:05, Harshal Patil <hpatil at securview.com<mailto:hpatil at securview.com>> wrote:

Hi,

  I have installed Rancid software linux base software which takes backup of devices automatically on one my Server but i need to access these devices configuration by GUI. Someone suggested that it would be possible through FreeBSD .
     So i need your help regarding this situation that where i can get full information that how to install FreeBSD on Rancid.
 I am looking forward your response soon

Regards
Harshal

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net<mailto:Rancid-discuss at shrubbery.net>
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/f763fc6d/attachment-0001.html>

From hpatil at securview.com  Thu Mar 28 13:29:48 2013
From: hpatil at securview.com (Harshal Patil)
Date: Thu, 28 Mar 2013 09:29:48 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>,
	<20130328114038.GA2248@bewilderbeast.blackhelicopters.org>
Message-ID: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CE@USNJ01EXC001>

Hi,

    I have already installed 'cvsweb' packeage and also modified "CVS repository" in cvsweb.
    however currently i m receiving error that "The requested URL /cgi-bin/cvsweb was not found on this server" .
    Could you please help in regarding where issue exactly lies.

Thanks

Harshal

________________________________________
From: Michael W. Lucas [mwlucas at blackhelicopters.org]
Sent: Thursday, March 28, 2013 7:40 AM
To: Harshal Patil
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] Rancid GUI

Hello,

rancid only backs up devices that can be configured via command line.

If you're looking for a GUI interface to the data on your rancid
server, look at cvsweb.

==ml

On Thu, Mar 28, 2013 at 02:05:27AM -0400, Harshal Patil wrote:
>    Hi,
>
>      I have installed Rancid software linux base software which takes backup
>    of devices automatically on one my Server but i need to access these
>    devices configuration by GUI. Someone suggested that it would be possible
>    through FreeBSD .
>         So i need your help regarding this situation that where i can get
>    full information that how to install FreeBSD on Rancid.
>     I am looking forward your response soon
>
>    Regards
>    Harshal
>
>    --------------------------------------------------------------------------
>
>    Confidentiality: This e-mail and any attachments may be confidential and
>    may also be privileged. If you are not an intended named recipient, please
>    notify the sender immediately and do not disclose the contents to another
>    person use it for any purpose, or store or copy the information in any
>    medium.

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


--
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130328/7c47eed0/attachment-0001.html>

From hpatil at securview.com  Fri Mar 29 11:48:47 2013
From: hpatil at securview.com (Harshal Patil)
Date: Fri, 29 Mar 2013 07:48:47 -0400
Subject: [rancid] Rancid GUI
In-Reply-To: <8420D9D639CBE744B778A8916DFFC90FF8261B8C8F@NDMSSCC08.ndc.nasa.gov>
References: <0B58A828ECF5874E8AF69053B9DB65A9357153F8CB@USNJ01EXC001>,
	<8420D9D639CBE744B778A8916DFFC90FF8261B8C8F@NDMSSCC08.ndc.nasa.gov>
Message-ID: <0B58A828ECF5874E8AF69053B9DB65A9357153F8D1@USNJ01EXC001>

Thanks Scotty. I really appreciated for help.

________________________________
From: Hinote, Scotty (MSFC-IS40)[NICS] [willie.s.hinote at nasa.gov]
Sent: Thursday, March 28, 2013 10:09 AM
To: Harshal Patil; rancid-discuss at shrubbery.net
Subject: RE: Rancid GUI

Hi Harshal,

FreeBSD RANCID install. The article below should list all of the steps needed to install RANCID from ports which is the basic setup.
http://uberbruco.wordpress.com/2009/07/09/rancid-on-freebsd/

OpenGrok GUI. I run this on my RHEL servers. It is Java and needs Tomcat to host the webapp but it has a lot of nice features like search which some other GUIs do not. You simply untar it and move it to where you want it reside on the server. It has a deploy option which sets up the app for Tomcat and an index option which you have to run for indexing RANCID?s files once they are checked out using subversion. This is a lot more complicated than some other options but you do get extra features. If you are interested in more details I can help you with setup and hooking it into RANCID?s subversion.
http://opengrok.github.com/OpenGrok/

WebSVN GUI. I used this at first because it is incredibly easy to setup and it works with your subversion directory automatically. It does not require checking out its own subversion copy from RANCID but it has no search capability. You should be able to start with number 8 in the article since the repository is already created by RANCID.
http://tgrove.com/2010/10/26/installing-subversion-on-freebsd-from-ports/

If you want something quick and easy to support I would install WebSVN. If you need searching capabilities you will have to use OpenGrok. Other options are desktop clients like TortoiseSVN and NetBeans that users can install themselves. You would only need to setup webdav for Apache and hook it into subversion which is really simple. I hope this helps. If you have questions let me know and I will try to help as much as I can.

Regards,
Scotty


From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Harshal Patil
Sent: Thursday, March 28, 2013 1:05 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Rancid GUI

Hi,

  I have installed Rancid software linux base software which takes backup of devices automatically on one my Server but i need to access these devices configuration by GUI. Someone suggested that it would be possible through FreeBSD .
     So i need your help regarding this situation that where i can get full information that how to install FreeBSD on Rancid.
 I am looking forward your response soon

Regards
Harshal

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.

________________________________
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130329/2026a750/attachment-0001.html>