[rancid] Fortinet Fortigate problem.

[Joshua Lebo]

One thing that bit me previously was:

config system global
         set strong-crypto enable
end

During one of those version jumps, the 'strong crypto' didn't play well
with my older fortigate scripts using 3DES for ssh.  Might be worth a look.

On Mon, Mar 30, 2015 at 4:19 PM, Joshua Lebo <sclebo05 at gmail.com> wrote:

> One thing that bit me previously was:
>
> config system global
>          set strong-crypto enable
> end
>
> During one of those version jumps, the 'strong crypto' didn't play well
> with my older fortigate scripts using 3DES for ssh.  Might be worth a look.
>
>
> On Mon, Mar 30, 2015 at 1:03 PM, Chris Davis <Chris.Davis at prin.edu> wrote:
>
>>  I’ve been using Rancid 2.3.8 for some time now without any problems.
>> (once I got all the patches installed for it)
>>
>>
>>
>> This past week, we upgraded a unit from 5.0.7 firmware to 5.0.9.  This
>> had the negative effect of making it impossible for Rancid to log into the
>> unit.  I have checked all the normal things.  I deleted and recreated the
>> ssh Known_hosts entry.  I’ve even manually logged in from the Rancid server
>> using my own credentials and the rancid credentials and not had any
>> problems.
>>
>>
>>
>> I checked the log and it states that it couldn’t log in.  Any ideas what
>> might be happening?   The prompts still look the same.  I’m currently
>> stumped.
>>
>>
>>
>> Latest log.
>>
>> 10.X.Y.Z: End of run not found
>>
>>
>>
>> =====================================
>>
>> Getting missed routers: round 3.
>>
>> 10.X.Y.Z fnlogin error: Error: Couldn't login: 10.X.Y.Z
>>
>> 10.X.Y.Z: missed cmd(s): show full-configuration,get system status
>>
>> 0: found end
>>
>> 10.X.Y.Z: End of run not found
>>
>>
>>
>> =====================================
>>
>> Getting missed routers: round 4.
>>
>> 10.X.Y.Z fnlogin error: Error: Couldn't login: 10.X.Y.Z
>>
>> 10.X.Y.Z: missed cmd(s): show full-configuration,get system status
>>
>> 0: found end
>>
>> 10.X.Y.Z: End of run not found
>>
>>
>>
>>
>>
>> cvs diff: Diffing .
>>
>> cvs diff: Diffing configs
>>
>> cvs commit: Examining .
>>
>> cvs commit: Examining configs
>>
>>
>>
>> ending: Mon Mar 30 2015
>>
>>
>>
>> Chris
>>
>>
>>
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20150330/b1437815/attachment.html>