[rancid] ASA IOS 9.8(2) support?

[Gauthier, Chris]

Chris GauthierSenior Network Engineer | comScore, Inc.
o +1 503-331-2704cgauthier at comscore.com
317 SW Alder St, Suite 500 | Portland | OR97204
............................................................................................................................................................................................................................

From: Rancid-discuss <rancid-discuss-bounces at shrubbery.net> on behalf of Wayne Eisenberg <Wayne.Eisenberg at CarolinasIT.com>
Date: Sunday, September 10, 2017 at 10:48 PM
To: "'rancid-discuss at shrubbery.net'" <rancid-discuss at shrubbery.net>
Subject: [rancid] ASA IOS 9.8(2) support?

Hi,

I have an ASA firewall running version 9.8(2), and the clogin script is missing something in the sequence such that I don’t get to the enable mode properly.

[rancid3]$ bin/clogin asa
spawn ssh -c aes256-cbc -x -l <username> asa
<username>@asa's password:
User logged in to ASA
Logins over the last 4 days: 28.  Last login: 22:33:20 UTC Sep 10 2017 from x.y.z.a
Failed logins since the last login: 0.  Last failed login: 06:03:53 UTC Sep 8 2017 from x.y.z.a
Type help or '?' for a list of available commands.
ASA> <username>
            ^
ERROR: % Invalid input detected at '^' marker.

Error: Unrecognized command, check your enable command
ASA> <username>
            ^
ERROR: % Invalid input detected at '^' marker.
ASA> enable
Password:
Password:

And that is where it stops (never tries to type in the enable password). If I manually input the enable password that I have in .clogin, it lets me into enable mode. Other ASA’s with older versions work fine, the .clogin file is properly written for this device. Could upgrading to the current version of rancid solve this (currently on v3.1)?

This sounds like it could be related to the .clogrinrc file.  What does it look like (obviously obfuscating credentials)?

Thanks,
Wayne

--Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20170911/14a7326d/attachment.html>