From tdtemccna at gmail.com Fri Aug 12 04:16:28 2022 From: tdtemccna at gmail.com (Turritopsis Dohrnii Teo En Ming) Date: Fri, 12 Aug 2022 12:16:28 +0800 Subject: [rancid] Using RANCID Message-ID: Subject: Using RANCID Good day from Singapore, I have 2 Cisco 1941 routers, numerous other Cisco routers, and a Cisco Catalyst WS-C3560CX-8PT-S layer 3 network switch. How do I install and use RANCID to monitor the configuration of my prized Cisco routers and network switch devices? Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore 12 Aug 2022 Friday Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com From jof at thejof.com Fri Aug 12 08:32:05 2022 From: jof at thejof.com (Jonathan Lassoff) Date: Fri, 12 Aug 2022 08:32:05 +0000 Subject: [rancid] Using RANCID In-Reply-To: References: Message-ID: The documentation has a getting started section: https://shrubbery.net/rancid/#started And links to some example installation guides: https://nsrc.org/activities/agendas/en/nmm-5-days/netmgmt/en/rancid/exercises-rancid.html What have you tried so far? --j On Fri, 12 Aug 2022 at 04:16, Turritopsis Dohrnii Teo En Ming < tdtemccna at gmail.com> wrote: > Subject: Using RANCID > > Good day from Singapore, > > I have 2 Cisco 1941 routers, numerous other Cisco routers, and a Cisco > Catalyst WS-C3560CX-8PT-S layer 3 network switch. > > How do I install and use RANCID to monitor the configuration of my > prized Cisco routers and network switch devices? > > Thank you. > > Regards, > > Mr. Turritopsis Dohrnii Teo En Ming > Targeted Individual in Singapore > 12 Aug 2022 Friday > Blogs: > https://tdtemcerts.blogspot.com > https://tdtemcerts.wordpress.com > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at www.shrubbery.net > https://www.shrubbery.net/mailman/listinfo/rancid-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tdtemccna at gmail.com Fri Aug 12 08:59:41 2022 From: tdtemccna at gmail.com (Turritopsis Dohrnii Teo En Ming) Date: Fri, 12 Aug 2022 16:59:41 +0800 Subject: [rancid] Using RANCID In-Reply-To: References: Message-ID: On Fri, 12 Aug 2022 at 16:32, Jonathan Lassoff wrote: > > The documentation has a getting started section: https://shrubbery.net/rancid/#started > And links to some example installation guides: https://nsrc.org/activities/agendas/en/nmm-5-days/netmgmt/en/rancid/exercises-rancid.html > > What have you tried so far? Thank you for the links. I haven't try anything yet. > > --j > > On Fri, 12 Aug 2022 at 04:16, Turritopsis Dohrnii Teo En Ming wrote: >> >> Subject: Using RANCID >> >> Good day from Singapore, >> >> I have 2 Cisco 1941 routers, numerous other Cisco routers, and a Cisco >> Catalyst WS-C3560CX-8PT-S layer 3 network switch. >> >> How do I install and use RANCID to monitor the configuration of my >> prized Cisco routers and network switch devices? >> >> Thank you. >> >> Regards, >> >> Mr. Turritopsis Dohrnii Teo En Ming >> Targeted Individual in Singapore >> 12 Aug 2022 Friday >> Blogs: >> https://tdtemcerts.blogspot.com >> https://tdtemcerts.wordpress.com >> >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at www.shrubbery.net >> https://www.shrubbery.net/mailman/listinfo/rancid-discuss From weylin at bu.edu Wed Aug 17 15:55:36 2022 From: weylin at bu.edu (Piegorsch, Weylin William) Date: Wed, 17 Aug 2022 15:55:36 +0000 Subject: [rancid] Removal of a Device Group Message-ID: I have three groups that I want to remove from RANCiD (version 3.4) w/ CVS. I've seen previous posts about *completely* removing groups, but I'd like to keep the attic. - one group is depopulated (that is, nothing in router.db) - two groups still have devices that are still on my network but are no longer backup-able (Cisco autonomous AP converted to Ubiquity NanoBeam M5's and BridgeWave BW64's) Is there an appropriate way to moving things into Attic so that the web GUI still sees the devices? I'm ambivalent about keeping devices in their original group. I don't have an "archived / retired / don't update" group. I know I can remove CRON jobs and remove from LIST_OF_GROUPS, I'm wondering if updating those is enough or if I should do more. [signature_1593189312] Weylin Piegorsch | Manager, Network Engineering Boston University Information Services & Technology weylin at bu.edu | 617.353.8128 | bu.edu/tech Listen. Learn. Lead. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.jpg Type: image/jpeg Size: 1595 bytes Desc: image001.jpg URL: From heas at shrubbery.net Wed Aug 17 16:19:28 2022 From: heas at shrubbery.net (heasley) Date: Wed, 17 Aug 2022 16:19:28 +0000 Subject: [rancid] Removal of a Device Group In-Reply-To: References: Message-ID: Wed, Aug 17, 2022 at 03:55:36PM +0000, Piegorsch, Weylin William: > I have three groups that I want to remove from RANCiD (version 3.4) w/ CVS. I've seen previous posts about *completely* removing groups, but I'd like to keep the attic. > - one group is depopulated (that is, nothing in router.db) > - two groups still have devices that are still on my network but are no longer backup-able (Cisco autonomous AP converted to Ubiquity NanoBeam M5's and BridgeWave BW64's) > > Is there an appropriate way to moving things into Attic so that the web GUI still sees the devices? I'm ambivalent about keeping devices in their original group. I don't have an "archived / retired / don't update" group. > > I know I can remove CRON jobs and remove from LIST_OF_GROUPS, I'm wondering if updating those is enough or if I should do more. hey, if you remove the devices from the router.db, rancid will remove them from cvs; that cvs operation will migrate to the attic. Then, the group directory can be removed; the web interface should point to the CVS repo, so it should continue to see all the current and historical data. fwiw, I backup a ubnt USG (device type edgerouter). I have not tried this for ubnt APs, but this might work for your ubnt products. prost From weylin at bu.edu Thu Aug 25 04:42:24 2022 From: weylin at bu.edu (Piegorsch, Weylin William) Date: Thu, 25 Aug 2022 04:42:24 +0000 Subject: [rancid] Removal of a Device Group In-Reply-To: References: Message-ID: Thank you; it worked perfectly to: a) update router.db to have no entries b) do-diff the group either manually or allow the cron job to fire c) remove the cron job and remove the group from LIST_OF_GROUPS, remove the directory from ~rancid/var, and clear the email alias from /etc/aliases >From the CLI perspective it's all gone and my email gets no new items, but the Web GUI still shows everything (albeit with all "(dead)" devices) still having the change history, which basically works perfectly for what I need. ? Weylin Piegorsch?|??Manager, Network Engineering Boston University Information Services & Technology weylin at bu.edu?| 617.353.8128 |?bu.edu/tech Listen. Learn. Lead. -----Original Message----- From: heasley Sent: Wednesday, August 17, 2022 12:19 PM To: Piegorsch, Weylin William Cc: rancid-discuss at www.shrubbery.net Subject: Re: [rancid] Removal of a Device Group Wed, Aug 17, 2022 at 03:55:36PM +0000, Piegorsch, Weylin William: > I have three groups that I want to remove from RANCiD (version 3.4) w/ CVS. I've seen previous posts about *completely* removing groups, but I'd like to keep the attic. > - one group is depopulated (that is, nothing in router.db) > - two groups still have devices that are still on my network but are > no longer backup-able (Cisco autonomous AP converted to Ubiquity > NanoBeam M5's and BridgeWave BW64's) > > Is there an appropriate way to moving things into Attic so that the web GUI still sees the devices? I'm ambivalent about keeping devices in their original group. I don't have an "archived / retired / don't update" group. > > I know I can remove CRON jobs and remove from LIST_OF_GROUPS, I'm wondering if updating those is enough or if I should do more. hey, if you remove the devices from the router.db, rancid will remove them from cvs; that cvs operation will migrate to the attic. Then, the group directory can be removed; the web interface should point to the CVS repo, so it should continue to see all the current and historical data. fwiw, I backup a ubnt USG (device type edgerouter). I have not tried this for ubnt APs, but this might work for your ubnt products. prost From randy at psg.com Sun Aug 28 00:32:51 2022 From: randy at psg.com (Randy Bush) Date: Sat, 27 Aug 2022 17:32:51 -0700 Subject: [rancid] rancid.types.conf Message-ID: is it sufficient to just rename the alias's target, i.e. in `/etc/rancid.types.conf` juniper;alias;junosx <<<--- junosx;script;rancid -t junos junosx;login;jlogin junosx;timeout;120 junosx;module;junos ... randy From randy at psg.com Sun Aug 28 00:48:27 2022 From: randy at psg.com (Randy Bush) Date: Sat, 27 Aug 2022 17:48:27 -0700 Subject: [rancid] rancid.types.conf In-Reply-To: References: Message-ID: > is it sufficient to just rename the alias's target, i.e. > > in `/etc/rancid.types.conf` > > juniper;alias;junosx <<<--- > junosx;script;rancid -t junos > junosx;login;jlogin > junosx;timeout;120 > junosx;module;junos > ... experiment sez no. i had to change all, and make up a new name for `router.db` randy From heas at shrubbery.net Sun Aug 28 01:15:08 2022 From: heas at shrubbery.net (heasley) Date: Sun, 28 Aug 2022 01:15:08 +0000 Subject: [rancid] rancid.types.conf In-Reply-To: References: Message-ID: Sat, Aug 27, 2022 at 05:48:27PM -0700, Randy Bush: > > is it sufficient to just rename the alias's target, i.e. > > > > in `/etc/rancid.types.conf` > > > > juniper;alias;junosx <<<--- > > junosx;script;rancid -t junos > > junosx;login;jlogin > > junosx;timeout;120 > > junosx;module;junos > > ... > > experiment sez no. i had to change all, and make up a new name for > `router.db` no, rancid.types.base is evaluated first and takes precedence. From randy at psg.com Sun Aug 28 01:17:33 2022 From: randy at psg.com (Randy Bush) Date: Sat, 27 Aug 2022 18:17:33 -0700 Subject: [rancid] rancid.types.conf In-Reply-To: References: Message-ID: >>> is it sufficient to just rename the alias's target, i.e. >>> >>> in `/etc/rancid.types.conf` >>> >>> juniper;alias;junosx <<<--- >>> junosx;script;rancid -t junos >>> junosx;login;jlogin >>> junosx;timeout;120 >>> junosx;module;junos >>> ... >> >> experiment sez no. i had to change all, and make up a new name for >> `router.db` > > no, rancid.types.base is evaluated first and takes precedence. and i am not supposed to touch `rancid.types.base` randy From randy at psg.com Sun Aug 28 17:16:17 2022 From: randy at psg.com (Randy Bush) Date: Sun, 28 Aug 2022 10:16:17 -0700 Subject: [rancid] arcos repeated diffs of ssh keying Message-ID: i am getting repeated diffs of the running config because the ssh config, which has not changed (nothing has) is fooling rancid that something has changed. this began when i added an ssh key ``` diff --git a/configs/r2.sea.rg.net b/configs/r2.sea.rg.net index 1d36774..e5e3afd 100644 - -- a/configs/r2.sea.rg.net @@ -110,7 +110,7 @@ system ntp server 147.28.0.35 ! system aaa authentication authentication-method [ TACACS_ALL LOCAL ] system aaa authentication admin-user admin-password $6$A/scXvcPazy1rzJN$/KHYfV8YgrMGEdrP5mxuzxf7Zsz2llqDVy3dcqmbYU4sRVWmpJZptk2VjkCLDVjp9OQqACBVVAIb.2NqIs.E90 - system aaa authentication admin-user ssh-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID9DzOVboz/9daQwQRPkxD/D4PZ4ZVNgMLqd+zc79Gl+ randy at ryuu.psg.com\nssh-rsa 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 randy at ryuu.psg.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkrrpUCqIibbYB7v4Kr/B07yTGXJgMjAsFf+YHIC9WpcLvpe5v4+O8t4Q/WSMVETlk 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 sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHHI0FRwQphzM4uLJmeN9Zeb8cwKmRB3dTR6VDultXiHNGcb5eJrD9Z4rLn70hD0OXDatlhPCbnxsCHd6gxHpjqQVwzNuEzDJCbt1y8xQfweNSfLsbqqscVal6yMMuAlBtmIw/Hv21URMZGPSdBymO6vBKAs2eep9NnoWK3G1bboNL4S1EDArCevlOq+5V5mnVXcX9csagSBudi/ 5Zeqh6Zj1QwSIu1KOjUBphvt/jSKQA92n8g9Y5pZnzQ6DGuv3YsUQWwPWDnTHkMePeWzbp1q+XzfiOwzwIK+w8VOm0/aYgI/ss/5MOm7uZO0g1/lJoSFZwYCQ+/IQPgDF0ugddtw1bn+xGTxThWmALYYSjgj+2QRDTXrD6WREQHqLsR/W6bi74hRU6/Fd7HuelkZbw0+f+9rGgCRynOEb5Y4Ge+hP1hCIZw64nL8Gmg/oEjoFJKAyrJzeEac0uthdNg1dGqXB6zZUpgpcOwd0VIjE6G8Vz+/m8Mf8vMlstZSQJA4VRCLuIG/Io3jtYgxy6hmi5y2aQY/c1n6fdjLxd/PXuTrkABCwcan5apcE8Qym8RLQr3KzNf6RZKpmLp5XvHt1WkgOd4xHRgV2qUHUrp+Y1XziZHHwc0oStdTnna0K9Ulf5cr+9zxkh7nUi/mcyBFZMDNrm+eshwjcq6i2WL7d5Hw== sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEZLm4usH3MkknD1m+ckEDbEqyyz78FQXVaGKrHbcPujOlnaXsoI0Pp/e54w/yCrHOUQ9wb7+gNb7ePz8xUNwrRDLBUcwlXxk1qRz3L9kbwWDmX8yvoNxi4et5xpWfpuWbXSXGpYz9gavFSB1zGNgC8m0gAXjR3+zgGbl3kJeV/emxCoB1rYAfiqlKanB3l96cmnaf/gTkNgr1RrXzds5b+8hECBu8ktHc2vkU5wg/HGskeFZcufV73imNST6DU2LoDMHvQzzrwVLE8y5LVUEZiDphnkXssV3+SFdNpTQK28PQZmRV8PbdmJF4OQtsaf8fh5HrI3RLYEf0xDzkDRCswBPjoaaR9jbpCa8zBuWPDoXnyq70HMcDXTfoOR8gp61CIGYYWntKIxGeXNFlF0yBUhOu4sbPh7z/Tja/2exMxH+Q1EmzqQ66TshLo0Z0xhde/dTvGn QI4jsEcBglUrBkY/k2N02JdzSDVot7WkFhtihMlehjNLqmpGOudFkdmngOHyGdVkvARf6UaeQ3aOCcFd721fHDku9TxNKXGV6U8kRSeVjiqytd/UZf99mrYmcxxSzWjtnRp1ZxMM21KxJDBDGiUKM/+04bKmMV+f3rux4rFG8dXIhUoaQ26T7uMaJnrwYgEzs2QoCOh8ZMThK6+DxQNBN55Dz99k2eg2LXIw== mayur at arrcus.com\nssh-rsa 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 sethuramanramanathan at SETHURAMANs-MacBook-Pro.locan\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGlQA6Ci5iVhdJKcEke9XKgBhm6C8/8nqSdQ+NjGTP/NqVa8XewKeMR2txRZHsBemO0ukYzea24+fl1Q4DFwX8FfGAWhsEoLn5R2ifHcK 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 niklesh at arrcus.com" + Pf6tcvoSNLbJoIF+XQ7oRhOYNPiR2gBziQ3paEMLsl57ewGOAvwT+O26wys1tmwcPr0FQHUnIzv+ecDY3oCw9fRw== sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa 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 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAA 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 mayur at arrcus.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0dDYrcexgj0Wq6MzoaUjbHCTyRE86l9Ku1BK8GecShNYzXfo/CeVrdGMkvPYOwEUWhrzXcyCZx8y3nGnuQftUXNmtPBbt0G0QpBA+IU01PvuZzt1ADb9dpbIdZtTUt2/WitN5hiiBC9CmDyvXAOeWlTy3xA6plvw2cUP2zY/WD2e2K92d8RqFS7sCTv6GNpQi4vmSbxvh8u3C/tuJFi3mBp6L3FhVQzdEpXjOa9S2cm+x3gOv 7Si8COAsdeG+bYYI54gtuSlJlP2H/15Ch7lndpz0OFG1DSzzWBdrWGbFGtduE8huCHFypANvufoKMObxUlZv61QqoH5AVRhQwCYnOdt8gwT+EZ/emd5mC0h8xvXMr63rRf20jFAYI73ULkhwCXnwSM3DLO46x7siIyMnDae5NspCNKkmSlsh4OOxWHC7DiNbSjXEqoKbO278uT94UPX2OlnMJlO8xc6Accw9Wm8pmPT9t9Lmc3rv7hHAMU9QbHTH84ERmKjix464njE= sethuramanramanathan at SETHURAMANs-MacBook-Pro.locan\nssh-rsa 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 LXJcKKfExw09q2zhcQldjOnw3us/3b/qIAhJ6yDPfGIYlrNAMw== niklesh at arrcus.com" system aaa server-group tacacs server 147.28.0.35 ! tacacs secret-key ``` and an hour later ``` diff --git a/configs/r2.sea.rg.net b/configs/r2.sea.rg.net index e5e3afd..1d36774 100644 - -- a/configs/r2.sea.rg.net @@ -110,7 +110,7 @@ system ntp server 147.28.0.35 ! system aaa authentication authentication-method [ TACACS_ALL LOCAL ] system aaa authentication admin-user admin-password $6$A/scXvcPazy1rzJN$/KHYfV8YgrMGEdrP5mxuzxf7Zsz2llqDVy3dcqmbYU4sRVWmpJZptk2VjkCLDVjp9OQqACBVVAIb.2NqIs.E90 - Pf6tcvoSNLbJoIF+XQ7oRhOYNPiR2gBziQ3paEMLsl57ewGOAvwT+O26wys1tmwcPr0FQHUnIzv+ecDY3oCw9fRw== sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa 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 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAA 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 mayur at arrcus.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0dDYrcexgj0Wq6MzoaUjbHCTyRE86l9Ku1BK8GecShNYzXfo/CeVrdGMkvPYOwEUWhrzXcyCZx8y3nGnuQftUXNmtPBbt0G0QpBA+IU01PvuZzt1ADb9dpbIdZtTUt2/WitN5hiiBC9CmDyvXAOeWlTy3xA6plvw2cUP2zY/WD2e2K92d8RqFS7sCTv6GNpQi4vmSbxvh8u3C/tuJFi3mBp6L3FhVQzdEpXjOa9S2cm+x3gOv 7Si8COAsdeG+bYYI54gtuSlJlP2H/15Ch7lndpz0OFG1DSzzWBdrWGbFGtduE8huCHFypANvufoKMObxUlZv61QqoH5AVRhQwCYnOdt8gwT+EZ/emd5mC0h8xvXMr63rRf20jFAYI73ULkhwCXnwSM3DLO46x7siIyMnDae5NspCNKkmSlsh4OOxWHC7DiNbSjXEqoKbO278uT94UPX2OlnMJlO8xc6Accw9Wm8pmPT9t9Lmc3rv7hHAMU9QbHTH84ERmKjix464njE= sethuramanramanathan at SETHURAMANs-MacBook-Pro.locan\nssh-rsa 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 LXJcKKfExw09q2zhcQldjOnw3us/3b/qIAhJ6yDPfGIYlrNAMw== niklesh at arrcus.com" + system aaa authentication admin-user ssh-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID9DzOVboz/9daQwQRPkxD/D4PZ4ZVNgMLqd+zc79Gl+ randy at ryuu.psg.com\nssh-rsa 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 randy at ryuu.psg.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkrrpUCqIibbYB7v4Kr/B07yTGXJgMjAsFf+YHIC9WpcLvpe5v4+O8t4Q/WSMVETlk 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 sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHHI0FRwQphzM4uLJmeN9Zeb8cwKmRB3dTR6VDultXiHNGcb5eJrD9Z4rLn70hD0OXDatlhPCbnxsCHd6gxHpjqQVwzNuEzDJCbt1y8xQfweNSfLsbqqscVal6yMMuAlBtmIw/Hv21URMZGPSdBymO6vBKAs2eep9NnoWK3G1bboNL4S1EDArCevlOq+5V5mnVXcX9csagSBudi/ 5Zeqh6Zj1QwSIu1KOjUBphvt/jSKQA92n8g9Y5pZnzQ6DGuv3YsUQWwPWDnTHkMePeWzbp1q+XzfiOwzwIK+w8VOm0/aYgI/ss/5MOm7uZO0g1/lJoSFZwYCQ+/IQPgDF0ugddtw1bn+xGTxThWmALYYSjgj+2QRDTXrD6WREQHqLsR/W6bi74hRU6/Fd7HuelkZbw0+f+9rGgCRynOEb5Y4Ge+hP1hCIZw64nL8Gmg/oEjoFJKAyrJzeEac0uthdNg1dGqXB6zZUpgpcOwd0VIjE6G8Vz+/m8Mf8vMlstZSQJA4VRCLuIG/Io3jtYgxy6hmi5y2aQY/c1n6fdjLxd/PXuTrkABCwcan5apcE8Qym8RLQr3KzNf6RZKpmLp5XvHt1WkgOd4xHRgV2qUHUrp+Y1XziZHHwc0oStdTnna0K9Ulf5cr+9zxkh7nUi/mcyBFZMDNrm+eshwjcq6i2WL7d5Hw== sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEZLm4usH3MkknD1m+ckEDbEqyyz78FQXVaGKrHbcPujOlnaXsoI0Pp/e54w/yCrHOUQ9wb7+gNb7ePz8xUNwrRDLBUcwlXxk1qRz3L9kbwWDmX8yvoNxi4et5xpWfpuWbXSXGpYz9gavFSB1zGNgC8m0gAXjR3+zgGbl3kJeV/emxCoB1rYAfiqlKanB3l96cmnaf/gTkNgr1RrXzds5b+8hECBu8ktHc2vkU5wg/HGskeFZcufV73imNST6DU2LoDMHvQzzrwVLE8y5LVUEZiDphnkXssV3+SFdNpTQK28PQZmRV8PbdmJF4OQtsaf8fh5HrI3RLYEf0xDzkDRCswBPjoaaR9jbpCa8zBuWPDoXnyq70HMcDXTfoOR8gp61CIGYYWntKIxGeXNFlF0yBUhOu4sbPh7z/Tja/2exMxH+Q1EmzqQ66TshLo0Z0xhde/dTvGn QI4jsEcBglUrBkY/k2N02JdzSDVot7WkFhtihMlehjNLqmpGOudFkdmngOHyGdVkvARf6UaeQ3aOCcFd721fHDku9TxNKXGV6U8kRSeVjiqytd/UZf99mrYmcxxSzWjtnRp1ZxMM21KxJDBDGiUKM/+04bKmMV+f3rux4rFG8dXIhUoaQ26T7uMaJnrwYgEzs2QoCOh8ZMThK6+DxQNBN55Dz99k2eg2LXIw== mayur at arrcus.com\nssh-rsa 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 sethuramanramanathan at SETHURAMANs-MacBook-Pro.locan\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGlQA6Ci5iVhdJKcEke9XKgBhm6C8/8nqSdQ+NjGTP/NqVa8XewKeMR2txRZHsBemO0ukYzea24+fl1Q4DFwX8FfGAWhsEoLn5R2ifHcK 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 niklesh at arrcus.com" system aaa server-group tacacs server 147.28.0.35 ! tacacs secret-key ``` i would suspect arcos adding newlines, except that a `show run` at the cli yields ``` system aaa authentication authentication-method [ TACACS_ALL LOCAL ] system aaa authentication admin-user admin-password $6$A/scXvcPazy1rzJN$/KHYfV8YgrMGEdrP5mxuzxf7Zsz2llqDVy3dcqmbYU4sRVWmpJZptk2VjkCLDVjp9OQqACBVVAIb.2NqIs.E90 system aaa authentication admin-user ssh-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID9DzOVboz/9daQwQRPkxD/D4PZ4ZVNgMLqd+zc79Gl+ randy at ryuu.psg.com\nssh-rsa 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 randy at ryuu.psg.com\nssh-rsa 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 sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa 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 sra at angband.hactrn.net\nssh-rsa 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 mayur at arrcus.com\nssh-rsa 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 sethuramanramanathan at SETHURAMANs-MacBook-Pro.locan\nssh-rsa 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 niklesh at arrcus.com" system aaa server-group tacacs server 147.28.0.35 tacacs secret-key blort ! server 198.180.150.1 tacacs secret-key blort ! ``` From randy at psg.com Sun Aug 28 17:30:54 2022 From: randy at psg.com (Randy Bush) Date: Sun, 28 Aug 2022 10:30:54 -0700 Subject: [rancid] arcos repeated diffs of ssh keying In-Reply-To: References: Message-ID: oh great gnu. some mail system turned the "\n" into eol en route the message as composed and sent may be found at https://archive.psg.com/msg.txt randy From heas at shrubbery.net Mon Aug 29 14:54:48 2022 From: heas at shrubbery.net (heasley) Date: Mon, 29 Aug 2022 14:54:48 +0000 Subject: [rancid] rancid.types.conf In-Reply-To: References: Message-ID: Sat, Aug 27, 2022 at 06:17:33PM -0700, Randy Bush: > >>> is it sufficient to just rename the alias's target, i.e. > >>> > >>> in `/etc/rancid.types.conf` > >>> > >>> juniper;alias;junosx <<<--- > >>> junosx;script;rancid -t junos > >>> junosx;login;jlogin > >>> junosx;timeout;120 > >>> junosx;module;junos > >>> ... > >> > >> experiment sez no. i had to change all, and make up a new name for > >> `router.db` > > > > no, rancid.types.base is evaluated first and takes precedence. > > and i am not supposed to touch `rancid.types.base` I ask that you do not; it is easier for me if, when folks ask for help, I immediately know if you are using a custom device definition. Future upgrades will over-write base file, but not the other one. you can use a different name or use 'junosx'. From randy at psg.com Mon Aug 29 14:56:36 2022 From: randy at psg.com (Randy Bush) Date: Mon, 29 Aug 2022 07:56:36 -0700 Subject: [rancid] rancid.types.conf In-Reply-To: References: Message-ID: >>>>> is it sufficient to just rename the alias's target, i.e. >>>>> >>>>> in `/etc/rancid.types.conf` >>>>> >>>>> juniper;alias;junosx <<<--- >>>>> junosx;script;rancid -t junos >>>>> junosx;login;jlogin >>>>> junosx;timeout;120 >>>>> junosx;module;junos >>>>> ... >>>> >>>> experiment sez no. i had to change all, and make up a new name for >>>> `router.db` >>> >>> no, rancid.types.base is evaluated first and takes precedence. >> >> and i am not supposed to touch `rancid.types.base` > > I ask that you do not; it is easier for me if, when folks ask for > help, I immediately know if you are using a custom device definition. > Future upgrades will over-write base file, but not the other one. understood. thanks. randy From heas at shrubbery.net Mon Aug 29 15:59:11 2022 From: heas at shrubbery.net (heasley) Date: Mon, 29 Aug 2022 15:59:11 +0000 Subject: [rancid] arcos repeated diffs of ssh keying In-Reply-To: References: Message-ID: Sun, Aug 28, 2022 at 10:16:17AM -0700, Randy Bush: > i am getting repeated diffs of the running config because the ssh > config, which has not changed (nothing has) is fooling rancid that > something has changed. > > this began when i added an ssh key > > > ``` > diff --git a/configs/r2.sea.rg.net b/configs/r2.sea.rg.net > index 1d36774..e5e3afd 100644 > - -- a/configs/r2.sea.rg.net > @@ -110,7 +110,7 @@ system ntp server 147.28.0.35 > ! > system aaa authentication authentication-method [ TACACS_ALL LOCAL ] > system aaa authentication admin-user admin-password $6$A/scXvcPazy1rzJN$/KHYfV8YgrMGEdrP5mxuzxf7Zsz2llqDVy3dcqmbYU4sRVWmpJZptk2VjkCLDVjp9OQqACBVVAIb.2NqIs.E90 > - system aaa authentication admin-user ssh-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID9DzOVboz/9daQwQRPkxD/D4PZ4ZVNgMLqd+zc79Gl+ randy at ryuu.psg.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8yvE/UBwHdLVDk708/U81ZQdtDLF9Y7grMkVBfUoclF4BGFCcH1bIv6y0p1I/2PATSRnK/B5ndvWP/SrQ6y0DqnQugHKoFMR3idkzVagjjXOhcZkpitcp5hRCdjn/y/88QEiIKItEM66q48nW0OtCgcq7ENXQuYUVt0e6kh6UKRDfrPP3i2D7m8o3/W+xYt8QkYZ0iFanCfhxHAP7w3SOezmThu+p7V6yxVcy+G0WTvPHrs2JlgSaI+4SoJ2btPgqIrmKu1ILfyoAr9/RjSVHr74LijsdUKec7OXnKnV2v1VfMRglBXFgXVaWyX/adA2tMuh9nMk3Y3a3+xDqPIz6RnzQAupqUmPZ/1qbFIrVSNmhygWTC9jgemaNNC/B1nFG7em6m+fmxKjauuWoIdpybaofWiJElUDBBT4bHU+L8NF7zbNROt1GtaDnbL4W9/asqzPu+aJy7L6uJQHtkc/eoXsheajztFC9I5qxW/29ja+FcQsVoDJpe96XmBtJ7elOGXaq3YtDRURwrdu9fGUBDWqwP1IFECVkeVh/NrXbQRHtgp4v533D+0MubA+hDhVTsUk6G93WLyX3usUprU1cJjyhrVzZ9U23eCPOj8J18Ixw4sJFuNeUhSCaN6j+rmOyGor3PYYysKTp1VfLNAYdcc/AYC0jDy9mYjjfCDwKfQ== randy at ryuu.psg.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkrrpUCqIibbYB7v4Kr/B07yTGXJgMjAsFf+YHIC9WpcLvpe5v4+O8t4Q/WSMVETlk > + Pf6tcvoSNLbJoIF+XQ7oRhOYNPiR2gBziQ3paEMLsl57ewGOAvwT+O26wys1tmwcPr0FQHUnIzv+ecDY3oCw9fRw== sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa 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 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAA > ``` > > and an hour later > > ``` > diff --git a/configs/r2.sea.rg.net b/configs/r2.sea.rg.net > index e5e3afd..1d36774 100644 > - -- a/configs/r2.sea.rg.net > @@ -110,7 +110,7 @@ system ntp server 147.28.0.35 > ! > system aaa authentication authentication-method [ TACACS_ALL LOCAL ] > system aaa authentication admin-user admin-password $6$A/scXvcPazy1rzJN$/KHYfV8YgrMGEdrP5mxuzxf7Zsz2llqDVy3dcqmbYU4sRVWmpJZptk2VjkCLDVjp9OQqACBVVAIb.2NqIs.E90 > - Pf6tcvoSNLbJoIF+XQ7oRhOYNPiR2gBziQ3paEMLsl57ewGOAvwT+O26wys1tmwcPr0FQHUnIzv+ecDY3oCw9fRw== sra at thrintun.hactrn.net\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3W5wyTzS0LNFb8r5CQJ20kBXSNPEpAeBp6be/UX855 sra at angband.hactrn.net\nssh-rsa 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 sra at angband.hactrn.net\nssh-rsa AAAAB3NzaC1yc2EAAA > + system aaa authentication admin-user ssh-key "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID9DzOVboz/9daQwQRPkxD/D4PZ4ZVNgMLqd+zc79Gl+ randy at ryuu.psg.com\nssh-rsa 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 randy at ryuu.psg.com\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkrrpUCqIibbYB7v4Kr/B07yTGXJgMjAsFf+YHIC9WpcLvpe5v4+O8t4Q/WSMVETlk > ``` Since I monitor this device as well, I too saw this. It appears to have not displayed the first line of output, then did, repeat once, then settled. It does not appear that you reverted the config to stop the changes. I suspect that the router was actually doing this itself, since rancid does not alter these lines. Of course, there could some tclexpect bug with the long line; it is a single line. From randy at psg.com Mon Aug 29 16:05:20 2022 From: randy at psg.com (Randy Bush) Date: Mon, 29 Aug 2022 09:05:20 -0700 Subject: [rancid] arcos repeated diffs of ssh keying In-Reply-To: References: Message-ID: > Since I monitor this device as well, I too saw this. It appears to > have not displayed the first line of output, then did, repeat once, > then settled. so an oddity in arcos display? if so, given a clean example, i can chase with arrcus. > It does not appear that you reverted the config to stop the changes. > I suspect that the router was actually doing this itself, since rancid > does not alter these lines. Of course, there could some tclexpect bug > with the long line; it is a single line. the line from hell. i deleted a few keys to work around the issue. randy, who needs more coffee From heas at shrubbery.net Mon Aug 29 16:23:32 2022 From: heas at shrubbery.net (heasley) Date: Mon, 29 Aug 2022 16:23:32 +0000 Subject: [rancid] arcos repeated diffs of ssh keying In-Reply-To: References: Message-ID: Mon, Aug 29, 2022 at 09:05:20AM -0700, Randy Bush: > > Since I monitor this device as well, I too saw this. It appears to > > have not displayed the first line of output, then did, repeat once, > > then settled. > > so an oddity in arcos display? if so, given a clean example, i can > chase with arrcus. I suspect, yes. Add more keys to see if it is triggered again. If it is, additional debugging data can be collected with some simple rancid hacks. > > It does not appear that you reverted the config to stop the changes. > > I suspect that the router was actually doing this itself, since rancid > > does not alter these lines. Of course, there could some tclexpect bug > > with the long line; it is a single line. > > the line from hell. i deleted a few keys to work around the issue. I know this is probably related to openconfig, I have not researched, but this is a terrible way to configure keys. I might have opened an ER for this already, but I would urge Arrcus to diverge here; JunOS handles this so much cleaner.