[rancid] [p at tristero.se: Re: 3.2 rancid-run not working with PAN devices]

[Matt Almgren]

I’m sorry, I totally misunderstood that the first time you said it.  I thought you were talking about the directory listing.

I wished that fixed the issue, but that didn’t help.  But I did find the problem.

By looking at the process list and running the command manually:

/usr/bin/expect -- /home/rancid/bin/panlogin -t 90 -c "set cli scripting-mode on;set cli pager off;show system info;show config running" sjc-fw01-sec.endor.lan

The “set cli xxx” command was failing.  Seems the rancid user in the PAN was set to “Admin read-only” and the “set” commands were failing, causing the config dump to wait for page break. Once I changed the account type to Device Admin, it works great now!!   Now I think I need to tweak TAC+ to limit what that rancid user can do in the CLI.

I’m sure having the other fixes in there helped as well, but the above was probably the biggest reason why the config wasn’t getting saved.

Thanks for all your help!!   Adding the list back in here in case others have similar issues.

 — Matt





From: Pavel Korovin <p at tristero.se<mailto:p at tristero.se>>
Date: Thursday, July 30, 2015 at 9:23 AM
To: Matt Almgren <matta at surveymonkey.com<mailto:matta at surveymonkey.com>>
Subject: Re: [p at tristero.se<mailto:p at tristero.se>: Re: [rancid] 3.2 rancid-run not working with PAN devices]

Matt, please replace the string "package ios;" with "package panos;" and it will be fixed.

On July 30, 2015 7:00:58 PM GMT+03:00, Matt Almgren <matta at surveymonkey.com<mailto:matta at surveymonkey.com>> wrote:
rancid at sjc-nettools02:~/lib/rancid$ head -n 20 panos.pm
package ios;
##
## $Id: panos.pm.in 3019 2015-01-11 05:54:59Z heas $
##
## rancid 3.2
## Copyright (c) 1997-2015 by Terrapin Communications, Inc.
## All rights reserved.
##
## This code is derived from software contributed to and maintained by
## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew Partan,
## Pete Whiting, Austin Schutz, and Andrew Fort.
##
## Redistribution and use in source and binary forms, with or without
## modification, are permitted provided that the following conditions
## are met:
## 1. Redistributions of source code must retain the above copyright
##    notice, this list of conditions and the following disclaimer.
## 2. Redistributions in binary form must reproduce the above copyright
##    notice, this list of conditions and the following disclaimer in the
##    documentation and/or other materials provided with the distribution.
rancid at sjc-nettools02:~/lib/rancid$




From: Pavel Korovin <p at tristero.se<mailto:p at tristero.se>>
Date: Thursday, July 30, 2015 at 8:59 AM
To: Matt Almgren <matta at surveymonkey.com<mailto:matta at surveymonkey.com>>
Subject: Re: [p at tristero.se<mailto:p at tristero.se>: Re: [rancid] 3.2 rancid-run not working with PAN devices]

head -n 20 panos.pm<http://panos.pm>

--
With best regards,
Pavel Korovin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20150730/bba02ac2/attachment.html>