[rancid] Ignore Extreme hivemanager account

heasley heas at shrubbery.net
Sat Jan 8 19:11:53 UTC 2022


Wed, Jan 05, 2022 at 09:05:51AM -0600, Karl:
> Good morning,
> 
> One of the sites where I run RANCID has Extreme switches and also has 
> the ExtremeCloud IQ web-based management.  The management platform adds 
> a user account called hivemanager, and it cycles (or at least 
> re-encrypts) the password every so often.  A few of them every just 
> about every day get a config revision from this with no other changes.  
> Is there something I can do to just leave the hivemanager line out of 
> the config entirely?  Here's what it looks like.
> 
> create account admin hivemanager encrypted 
> "$x$xxxxxx$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
> 
> I'm running RANCID version 3.13.

Hey, please confirm that the attached patch works.
-------------- next part --------------
diff --git a/lib/exos.pm.in b/lib/exos.pm.in
index 399ddb39..7c1a96e0 100644
--- a/lib/exos.pm.in
+++ b/lib/exos.pm.in
@@ -303,6 +303,11 @@ sub WriteTerm {
 	/# system name/i && next;
 	/# software version/i && next;
 
+	if (/((create|configure) account admin hivemanager) / && 
+	    ($filter_pwds >= 2 || $filter_osc > 1)) {
+	    ProcessHistory("COMMENTS","keysort","H0","# $1 <key removed>\n");
+	    next;
+	}
 	if (/((create|configure) account \S+ \S+) / && $filter_pwds >= 2) {
 	    ProcessHistory("COMMENTS","keysort","H0","# $1 <key removed>\n");
 	    next;


More information about the Rancid-discuss mailing list