[rancid] Alteon switch "esecret" problem again

Discussion:

[rancid] Alteon switch "esecret" problem again - rancid 2.3.6

Krzysztof Zygmunt

2011-04-14 14:21:42 UTC

Hi,

I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff.

like this:
- esecret
"8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d"
- esecret2
"b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6"
+ esecret
"f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc"
+ esecret2
"f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb"

I've found two solutions on the internet but they don't work for me.

neither this:
http://www.gossamer-threads.com/lists/rancid/users/4690
nor that:
http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon

I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6
(keep sending esecret diff msgs), but I'm not skilled enough to repair this.

diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6)
3c3
< ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $
---

## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $

5,6c5,10
< ## rancid 2.3.6
< ## Copyright (c) 1997-2008 by Terrapin Communications, Inc.
---

## rancid 2.3.2a6
## Hacked version of rancid for Alteon WebOS switches
## tested with: ad3 v8.1.18
##
## Copyright (C) 1997-2006 by Terrapin Communications, Inc.

9,11c13,21
< ## This code is derived from software contributed to and maintained by
< ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew Partan,
< ## Pete Whiting, Austin Schutz, and Andrew Fort.
---

## This software may be freely copied, modified and redistributed
## without fee for non-commerical purposes provided that this license
## remains intact and unmodified with any RANCID distribution.
##
## There is no warranty or other guarantee of fitness of this software.
## It is provided solely "as is". The author(s) disclaim(s) all
## responsibility and liability with respect to this software's usage
## or its effect upon hardware, computer systems, other software, or
## anything else.

13,29c23,24
< ## Redistribution and use in source and binary forms, with or without
< ## modification, are permitted provided that the following conditions
< ## are met:
< ## 1. Redistributions of source code must retain the above copyright
< ## notice, this list of conditions and the following disclaimer.
< ## 2. Redistributions in binary form must reproduce the above copyright
< ## notice, this list of conditions and the following disclaimer in the
< ## documentation and/or other materials provided with the distribution.
< ## 3. All advertising materials mentioning features or use of this software
< ## must display the following acknowledgement:
< ## This product includes software developed by Terrapin Communications,
< ## Inc. and its contributors for RANCID.
< ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its
< ## contributors may be used to endorse or promote products derived from
< ## this software without specific prior written permission.
< ## 5. It is requested that non-binding fixes and modifications be contributed
< ## back to Terrapin Communications, Inc.
---

## Except where noted otherwise, rancid was written by and is maintained by
## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin Schutz.

31,41d25
< ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND CONTRIBUTORS
< ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
< ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
< ## PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS
< ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
< ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
< ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
< ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
< ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
< ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
< ## POSSIBILITY OF SUCH DAMAGE.
52c36
< print "rancid 2.3.6\n";
---

print "rancid 2.3.2a6\n";

65,67c49
< my($aclsort) = ("ipsort"); # ACL sorting mode
< my($filter_commstr); # SNMP community string filtering
< my($filter_pwds); # password filtering mode
---

my(%filter_pwds); # password filtering mode

73c55
< && scalar(%history)) {
---

&& defined %history) {

181,182c163
< ProcessHistory("COMMENTS","keysort","B1",
< "\/\*Image: Software: $1 ($2)\n") && next;
---

ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1 ($2)\n") && next;

184,185c165
< ProcessHistory("COMMENTS","keysort","A2",
< "\/\*Hardware part no: $1\n") && next;
---

ProcessHistory("COMMENTS","keysort","A2", "\/\*Hardware part no: $1\n") && next;

187,188c167
< ProcessHistory("COMMENTS","keysort","C1",
< "\/\*Base MAC address: $1\n") && next;
---

ProcessHistory("COMMENTS","keysort","C1", "\/\*Base MAC address: $1\n") && next;

205c184,185
< if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) {
---

if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ &&
defined($ENV{'NOCOMMSTR'})) {

208c188
< /^(\s+(.{1,3}pw|pswd) )\S+/ &&
---

/^(\s+.{2,3}pw )\S+/ &&

209a190,191

next if (/esecret/);

213,217c195,199
< if (/^\/?script end/) {
< $found_end = 1;
< ProcessHistory("","","","$_\n");
< return(1);
< }
---

if (/^\/?script end/) {
$found_end = 1;
ProcessHistory("","","","$_\n");
return(1);
}

237,238c219,220
< $cisco_cmds = join(";",@commands);
< $cmds_regexp = join("|", map quotemeta($_), @commands);
---
269,287d250
< # determine ACL sorting mode
< if ($ENV{"ACLSORT"} =~ /no/i) {
< $aclsort = "";
< }
< # determine community string filtering mode
< if (defined($ENV{"NOCOMMSTR"}) &&
< ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) {
< $filter_commstr = 1;
< } else {
< $filter_commstr = 0;
< }
< # determine password filtering mode
< if ($ENV{"FILTER_PWDS"} =~ /no/i) {
< $filter_pwds = 0;
< } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) {
< $filter_pwds = 2;
< } else {
< $filter_pwds = 1;
< }
294c257
< $clean_run = 1;
---

$clean_run=1;

I appreciate any help.

Kind Regards,
Krzysztof Zygmunt

Lee

2011-04-14 17:11:21 UTC

Permalink

probably this:

209a190,191

next if (/esecret/);

is ignoring any lines that have the string "esecret". I'd try adding
that line to the 2.3.6 source code.

Regards,
Lee

Hi,
I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff.
- esecret
"8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d"
- esecret2
"b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6"
+ esecret
"f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc"
+ esecret2
"f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb"
I've found two solutions on the internet but they don't work for me.
http://www.gossamer-threads.com/lists/rancid/users/4690
http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon
I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6
(keep sending esecret diff msgs), but I'm not skilled enough to repair this.
diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6)
3c3
< ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $
---

## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $

5,6c5,10
< ## rancid 2.3.6
< ## Copyright (c) 1997-2008 by Terrapin Communications, Inc.
---

## rancid 2.3.2a6
## Hacked version of rancid for Alteon WebOS switches
## tested with: ad3 v8.1.18
##
## Copyright (C) 1997-2006 by Terrapin Communications, Inc.

13,29c23,24
< ## Redistribution and use in source and binary forms, with or without
< ## modification, are permitted provided that the following conditions
< ## 1. Redistributions of source code must retain the above copyright
< ## notice, this list of conditions and the following disclaimer.
< ## 2. Redistributions in binary form must reproduce the above copyright
< ## notice, this list of conditions and the following disclaimer in the
< ## documentation and/or other materials provided with the distribution.
< ## 3. All advertising materials mentioning features or use of this software
< ## This product includes software developed by Terrapin
Communications,
< ## Inc. and its contributors for RANCID.
< ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its
< ## contributors may be used to endorse or promote products derived from
< ## this software without specific prior written permission.
< ## 5. It is requested that non-binding fixes and modifications be contributed
< ## back to Terrapin Communications, Inc.
---

## Except where noted otherwise, rancid was written by and is maintained by
## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin Schutz.

print "rancid 2.3.2a6\n";

65,67c49
< my($aclsort) = ("ipsort"); # ACL sorting mode
< my($filter_commstr); # SNMP community string filtering
< my($filter_pwds); # password filtering mode
---

my(%filter_pwds); # password filtering mode

73c55
< && scalar(%history)) {
---

&& defined %history) {

181,182c163
< ProcessHistory("COMMENTS","keysort","B1",
< "\/\*Image: Software: $1 ($2)\n") && next;
---

ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1
($2)\n") && next;

184,185c165
< ProcessHistory("COMMENTS","keysort","A2",
< "\/\*Hardware part no: $1\n") && next;
---

$1\n") && next;

187,188c167
< ProcessHistory("COMMENTS","keysort","C1",
< "\/\*Base MAC address: $1\n") && next;
---

$1\n") && next;

205c184,185
< if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) {
---

if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ &&
defined($ENV{'NOCOMMSTR'})) {

208c188
< /^(\s+(.{1,3}pw|pswd) )\S+/ &&
---

/^(\s+.{2,3}pw )\S+/ &&

209a190,191

next if (/esecret/);

213,217c195,199
< if (/^\/?script end/) {
< $found_end = 1;
< ProcessHistory("","","","$_\n");
< return(1);
< }
---

if (/^\/?script end/) {
$found_end = 1;
ProcessHistory("","","","$_\n");
return(1);
}

237,238c219,220
---
269,287d250
< # determine ACL sorting mode
< if ($ENV{"ACLSORT"} =~ /no/i) {
< $aclsort = "";
< }
< # determine community string filtering mode
< if (defined($ENV{"NOCOMMSTR"}) &&
< ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) {
< $filter_commstr = 1;
< } else {
< $filter_commstr = 0;
< }
< # determine password filtering mode
< if ($ENV{"FILTER_PWDS"} =~ /no/i) {
< $filter_pwds = 0;
< } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) {
< $filter_pwds = 2;
< } else {
< $filter_pwds = 1;
< }
294c257
< $clean_run = 1;
---

$clean_run=1;

I appreciate any help.
Kind Regards,
Krzysztof Zygmunt
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Krzysztof Zygmunt

2011-04-19 09:36:42 UTC

Permalink

[ info from another guy having the same problem ]

This one seems to work:
bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original
212c212
< next if (/^.*?esecret.*/);
---
Can we do sth. to make this change applied in source code of 2.3.6
version to make sure
it still works fine after we upgrade to another version ?

Post by Krzysztof Zygmunt
209a190,191

next if (/esecret/);

is ignoring any lines that have the string "esecret". I'd try adding
that line to the 2.3.6 source code.
Regards,
Lee

Hi,
I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff.
- esecret
"8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d"
- esecret2
"b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6"
+ esecret
"f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc"
+ esecret2
"f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb"
I've found two solutions on the internet but they don't work for me.
http://www.gossamer-threads.com/lists/rancid/users/4690
http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon
I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6
(keep sending esecret diff msgs), but I'm not skilled enough to repair
this.
diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6)
3c3
< ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $
---

## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $

5,6c5,10
< ## rancid 2.3.6
< ## Copyright (c) 1997-2008 by Terrapin Communications, Inc.
---

## rancid 2.3.2a6
## Hacked version of rancid for Alteon WebOS switches
## tested with: ad3 v8.1.18
##
## Copyright (C) 1997-2006 by Terrapin Communications, Inc.

13,29c23,24
< ## Redistribution and use in source and binary forms, with or without
< ## modification, are permitted provided that the following conditions
< ## 1. Redistributions of source code must retain the above copyright
< ## notice, this list of conditions and the following disclaimer.
< ## 2. Redistributions in binary form must reproduce the above copyright
< ## notice, this list of conditions and the following disclaimer in the
< ## documentation and/or other materials provided with the distribution.
< ## 3. All advertising materials mentioning features or use of this software
< ## This product includes software developed by Terrapin Communications,
< ## Inc. and its contributors for RANCID.
< ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its
< ## contributors may be used to endorse or promote products derived from
< ## this software without specific prior written permission.
< ## 5. It is requested that non-binding fixes and modifications be contributed
< ## back to Terrapin Communications, Inc.
---

## Except where noted otherwise, rancid was written by and is maintained by
## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin Schutz.

print "rancid 2.3.2a6\n";

65,67c49
< my($aclsort) = ("ipsort"); # ACL sorting mode
< my($filter_commstr); # SNMP community string filtering
< my($filter_pwds); # password filtering mode
---

my(%filter_pwds); # password filtering mode

73c55
< && scalar(%history)) {
---

&& defined %history) {

181,182c163
< ProcessHistory("COMMENTS","keysort","B1",
< "\/\*Image: Software: $1 ($2)\n") && next;
---

ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1
($2)\n") && next;

184,185c165
< ProcessHistory("COMMENTS","keysort","A2",
< "\/\*Hardware part no: $1\n") && next;
---

$1\n") && next;

187,188c167
< ProcessHistory("COMMENTS","keysort","C1",
< "\/\*Base MAC address: $1\n") && next;
---

$1\n") && next;

205c184,185
< if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) {
---

if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ &&
defined($ENV{'NOCOMMSTR'})) {

208c188
< /^(\s+(.{1,3}pw|pswd) )\S+/ &&
---

/^(\s+.{2,3}pw )\S+/ &&

209a190,191

next if (/esecret/);

213,217c195,199
< if (/^\/?script end/) {
< $found_end = 1;
< ProcessHistory("","","","$_\n");
< return(1);
< }
---

if (/^\/?script end/) {
$found_end = 1;
ProcessHistory("","","","$_\n");
return(1);
}

$clean_run=1;

I appreciate any help.
Kind Regards,
Krzysztof Zygmunt
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Paul Gear

2011-04-19 22:47:00 UTC

Permalink

Post by Krzysztof Zygmunt
[ info from another guy having the same problem ]
bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original
212c212
< next if (/^.*?esecret.*/);
---
Can we do sth. to make this change applied in source code of 2.3.6
version to make sure
it still works fine after we upgrade to another version ?

Post by Krzysztof Zygmunt
209a190,191

next if (/esecret/);

is ignoring any lines that have the string "esecret". I'd try adding
that line to the 2.3.6 source code.

Krzysztof Zygmunt

2011-04-20 10:30:30 UTC

Permalink

Post by Paul Gear

Post by Krzysztof Zygmunt
209a190,191

next if (/esecret/);

is ignoring any lines that have the string "esecret". I'd try adding
that line to the 2.3.6 source code.

If i'm not mistaken (it *is* before my first coffee is finished this
morning, so it's entirely possible), the line you've suggested is
a) not valid regexp, and
b) functionally equivalent to the line that Lee suggested.
Why not just use the simpler version?
Paul
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Indeed the simpler one work as well. I've just given it a try again.

What can we do to make sure this line will also be there in next
rancid release ?

Thank you very much for your help.
Cheers
Krzysztof Zygmunt

john heasley

2011-04-20 16:31:21 UTC

Permalink

Post by Krzysztof Zygmunt
What can we do to make sure this line will also be there in next
rancid release ?

yes, its already been committed.

Krzysztof Zygmunt

2011-04-18 14:06:42 UTC

Permalink

[ Sorry for delay in response ]

Hello,

I've done this modificatin:
bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original
212c212
< next if (/^ *esecret /);
---
No success. We're still getting esecret diff msgs.

Post by Krzysztof Zygmunt
Hi,
I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff.
- ? ? ? esecret
"8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d"
- ? ? ? esecret2
"b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6"
+ ? ? ? esecret
"f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc"
+ ? ? ? esecret2
"f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb"
I've found two solutions on the internet but they don't work for me.
http://www.gossamer-threads.com/lists/rancid/users/4690
http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon

this should do it
Index: bin/arancid.in
===================================================================
--- bin/arancid.in (revision 2291)
+++ bin/arancid.in (working copy)
@@ -210,6 +210,7 @@
next if (/^\/\* Configuration dump taken/i);
next if (/^\/\* Version.*Base MAC.*/i);
+ next if (/^ *esecret /);
if (/^\/?script end/) {
$found_end = 1;