[rancid] Permissions and files

Thu Sep 12 16:44:28 UTC 2013

Hi Ryan,

You should have permissions set to 600 on .cloginrc.

Regards,
Scotty

From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ryan Milton
Sent: Thursday, September 12, 2013 10:52 AM
To: Tom Simpson; rancid-discuss at shrubbery.net
Subject: Re: [rancid] Permissions and files

Well, I was attempting to run as rancid. I don't know how it would run "normally".

Here is what I show:

-rwxr-x---  1 rancid rancid 1946 Sep  6 15:57 .cloginrc

I think that is chmod 750 .cloginrc (now). Would I make it something different?

Regards,
Ryan Milton
MVS Network Manager
o: 201-447-1505 x124
c: 862-249-5230
www.mvsusa.com<http://www.mvsusa.com/>
[MVS final logo GOOD very small]

From: Tom Simpson [mailto:tosimpson at forchtgroup.com]
Sent: Thursday, September 12, 2013 11:39 AM
To: Ryan Milton; rancid-discuss at shrubbery.net
Subject: Re: [rancid] Permissions and files

The .cloginrc doesn't have the proper permissions set for the rancid user. Or are you running it as someone else?

Mine is

-rw-rw----. 2 apache rancid 4429 Aug 27 10:12 .cloginrc

I tend to login as the rancid user,  sudo su - rancid   for testing purposes, since I disallow ssh login to the server for any user except normal users...

--
Thanks,

Tom Simpson
LAN/WAN Engineer
Forcht Group of Kentucky
859.259.9700 x538

"We all knew there was just one way to improve our odds for survival:
train, train, train. Sometimes, if your training is properly intense it
will kill you. More often -- much, much more often -- it will save your
life."  - Richard Marcinko, former US Navy SEAL Team Commander

From: Ryan Milton <rmilton at mvsusa.com<mailto:rmilton at mvsusa.com>>
Date: Thursday, September 12, 2013 10:59 AM
To: "rancid-discuss at shrubbery.net<mailto:rancid-discuss at shrubbery.net>" <rancid-discuss at shrubbery.net<mailto:rancid-discuss at shrubbery.net>>
Subject: [rancid] Permissions and files

[cid:image002.gif at 01CEAFAD.701BB4B0]
I don't know where to go on this. I can't tell if my Rancid configuration is even working. I'm at the point of testing rancid-run manually to see what happens. I am getting a combination of "Permission Denied" errors on the .cloginrc file, "End of Run Not found" errors, and some others that I excerpted below. That said, I have an example of the file in /var/log/rancid from today and from Friday:

sudo -i su -c /var/lib/rancid/bin/rancid-run -s /bin/bash -l rancid

gets me:

starting: Thu Sep 12 10:53:28 EDT 2013

ending: Thu Sep 12 10:53:28 EDT 2013

VS:

starting: Fri Sep 6 15:57:50 EDT 2013

/usr/lib/rancid/bin/control_rancid: 206: /usr/lib/rancid/bin/control_rancid: cannot create routers.db: Permission denied
comm: file 2 is not in sorted order
comm: file 2 is not in sorted order
comm: file 2 is not in sorted order
cvs add: scheduling file `94.229.11.1' for addition
cvs add: use `cvs commit' to add this file permanently
/var/lib/rancid/CVS/MVSNetwork/configs/94.229.11.1,v  <--  94.229.11.1
initial revision: 1.1
Added 94.229.11.1
cvs add: scheduling file `94.229.11.2' for addition
cvs add: use `cvs commit' to add this file permanently
/var/lib/rancid/CVS/MVSNetwork/configs/94.229.11.2,v  <--  94.229.11.2
initial revision: 1.1
Added 94.229.11.2
cvs add: scheduling file `94.229.11.3' for addition
cvs add: use `cvs commit' to add this file permanently
/var/lib/rancid/CVS/MVSNetwork/configs/94.229.11.3,v  <--  94.229.11.3
initial revision: 1.1
Added 94.229.11.3

***TRUNCATED***

94.229.11.2 jlogin error: Error: couldn't read file "/home/rancid/.cloginrc": permission denied
94.229.11.2: missed cmd(s): show chassis alarms,show chassis hardware detail,show system license,show chassis scb,show chassis feb,show chassis routing-engine,show chassis firmware,show version detail,show chassis feb detail,show configuration,show system boot-messages,show chassis cfeb,show chassis clocks,show chassis sfm detail,show chassis ssb,show chassis fpc detail,show chassis environment,show system core-dumps
94.229.11.2: End of run not found
94.229.11.3 jlogin error: Error: couldn't read file "/home/rancid/.cloginrc": permission denied
94.229.11.3: missed cmd(s): show chassis alarms,show chassis hardware detail,show system license,show chassis scb,show chassis feb,show chassis routing-engine,show chassis firmware,show version detail,show chassis feb detail,show configuration,show system boot-messages,show chassis cfeb,show chassis clocks,show chassis sfm detail,show chassis ssb,show chassis fpc detail,show chassis environment,show system core-dumps
94.229.11.3: End of run not found
94.229.11.1 jlogin error: Error: couldn't read file "/home/rancid/.cloginrc": permission denied

***TRUNCATED***

94.229.14.250: missed cmd(s): show stack,show module,show flash,show version,show system-information,write term,show system information
94.229.14.250: End of run not found
;
unknown router manufacturer for 94.229.11.218: junper
94.229.11.92 clogin error: Error: couldn't read file "/home/rancid/.cloginrc": permission denied

***TRUNCATED***

94.229.11.210: missed cmd(s): show chassis alarms,show chassis hardware detail,show system license,show chassis scb,show chassis feb,show chassis routing-engine,show chassis firmware,show version detail,show chassis feb detail,show configuration,show system boot-messages,show chassis cfeb,show chassis clocks,show chassis sfm detail,show chassis ssb,show chassis fpc detail,show chassis environment,show system core-dumps
94.229.11.210: End of run not found

Regards,
Ryan Milton
MVS Network Manager
o: 201-447-1505 x124
c: 862-249-5230
www.mvsusa.com<http://www.mvsusa.com/>
[MVS final logo GOOD very small]

________________________________

CONFIDENTIALITY NOTICE:
This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.

Forcht Group IT, 2400 South Main Street, Corbin, Ky.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130912/6aaf82c5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2724 bytes
Desc: image001.jpg
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130912/6aaf82c5/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 569 bytes
Desc: image002.gif
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130912/6aaf82c5/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 2723 bytes
Desc: image003.jpg
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20130912/6aaf82c5/attachment-0001.jpg>