[rancid] Rancid and SNMPv3

[Alan McKinnon]

On 09/09/2016 04:41, michael liu wrote:
> Or should I do this in f5rancid.in
> 
> 
>        if (/^\s*auth-password-encrypted/) {
> 
>             ProcessHistory("","","""# auth-password <removed>\n");
> 
>             next;
> 
>         }

yes that's the time-honoured way

> 
> 
> After I modified the file, Do I need to restart the rancid?

There's nothing to restart. Rancid is not a daemon not is it long lived.
It runs, it finishes, it exits. Next run it uses the file it finds



> 
> Thanks,
> 
> ------------------------------------------------------------------------
> *From:* michael liu <fwissue at hotmail.com>
> *Sent:* Friday, September 9, 2016 12:07 AM
> *To:* michael liu
> *Cc:* rancid-discuss at shrubbery.net
> *Subject:* Re: [rancid] Rancid and SNMPv3
>  
> 
> Based on the rancid script, it uses "tmsh show list" , that includes a
> lot of information, as well as snmpv3 user info.
> 
> 
> https://devcentral.f5.com/questions/converting-rancid-to-use-tmsh-commands-and-other-goodies
> 
> <https://devcentral.f5.com/questions/converting-rancid-to-use-tmsh-commands-and-other-goodies>
> 	
> Converting RANCID to use tmsh commands, and other goodies
> <https://devcentral.f5.com/questions/converting-rancid-to-use-tmsh-commands-and-other-goodies>
> devcentral.f5.com
> Answers Converting RANCID to use tmsh commands, and other goodies
> Updated 07-Dec-2011 • Originally posted on 07-Dec-2011 by Colin Stubbs ...
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------
> *From:* Rancid-discuss <rancid-discuss-bounces at shrubbery.net> on behalf
> of michael liu <fwissue at hotmail.com>
> *Sent:* Thursday, September 8, 2016 9:43 PM
> *To:* Alan McKinnon
> *Cc:* rancid-discuss at shrubbery.net
> *Subject:* Re: [rancid] Rancid and SNMPv3
>  
> Thanks Alan for response, I tried to grep encrypted for f5rancid and
> f5rancid.in
> 
> Did not get anything.
> 
> Sent from my iPhone
> 
>> On Sep 8, 2016, at 2:18 PM, Alan McKinnon <alan.mckinnon at gmail.com> wrote:
>> 
>> You edit the perl code and add a check to replace the encrypted string
>> with <removed>.
>> 
>> See the existing rancid code, searching for that string. There are
>> /many/ examples and it's quite obvious how it works with just a
>> smattering of perl knowledge
>> 
>> 
>>> On 08/09/2016 22:18, michael liu wrote:
>>> Hello:
>>> 
>>> 
>>> I just enabled SNMPv3 on LTM 11.5.1 with rancid 2.3.8
>>> 
>>> 
>>> I keep getting following in rancid, how could I disable it in F5rancid.in?
>>> 
>>> 
>>>      users {
>>> 
>>>          imon1team_1 {
>>> 
>>> -             auth-password-encrypted
>>> .F@>la[Da7Gb>m\\.-T\?+Gp\?bEsETiTW\\9HeHX`^N=fX<7Kd
>>> 
>>> +             auth-password-encrypted
>>> "RQiL+qJD1UjLci\?:]>T_BjcJcNOZrMYj9m;>@jdl9;8XYC^"
>>> 
>>>              auth-protocol md5
>>> 
>>>              oid-subset .1
>>> 
>>>              privacy-protocol none
>>> 
>>> 
>>> Thanks,
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> Rancid-discuss mailing list
>>> Rancid-discuss at shrubbery.net
>>> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> Rancid-discuss Info Page - Shrubbery Networks
> <http://www.shrubbery.net/mailman/listinfo/rancid-discuss>
> www.shrubbery.net
> To see the collection of prior postings to the list, visit the
> Rancid-discuss Archives. Using Rancid-discuss: To post a message to all
> the list ...
> 
> 
> 
>> 
>> 
>> -- 
>> Alan McKinnon
>> alan.mckinnon at gmail.com
>> 
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> 
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
> 


-- 
Alan McKinnon
alan.mckinnon at gmail.com