[rancid] Cisco ASA 5585 mufti context

[Michael T. Voity]

Hello,

Up until recently my rancid 3.0 has been working fine and reporting the
correct changes with changes from the correct context.

I have 3 of my 7 contexts that are barking about these changes every
couple hours, even thought the changes haven't been made -

2200 e-mail :

Index: configs/active-dir-asa
===================================================================
retrieving revision 1.219
diff -U 4 -r1.219 active-dir-asa
@@ -829,7 +829,6 @@
privilege cmd level 2 mode exec command show
privilege show level 2 mode exec command nameif
privilege show level 2 mode exec command object-group
privilege show level 2 mode exec command access-list
- privilege show level 2 mode configure command access-list
privilege cmd level 2 mode configure command enable
: end


2300 email:

Index: configs/active-dir-asa
===================================================================
retrieving revision 1.220
diff -U 4 -r1.220 active-dir-asa
@@ -829,6 +829,7 @@
privilege cmd level 2 mode exec command show
privilege show level 2 mode exec command nameif
privilege show level 2 mode exec command object-group
privilege show level 2 mode exec command access-list
+ privilege show level 2 mode configure command access-list
privilege cmd level 2 mode configure command enable
: end



Ideas?

-Mike

[heasley]

Post by Michael T. Voity
I have 3 of my 7 contexts that are barking about these changes every
couple hours, even thought the changes haven't been made -
Index: configs/active-dir-asa
===================================================================
retrieving revision 1.220
diff -U 4 -r1.220 active-dir-asa
@@ -829,6 +829,7 @@
privilege cmd level 2 mode exec command show
privilege show level 2 mode exec command nameif
privilege show level 2 mode exec command object-group
privilege show level 2 mode exec command access-list
+ privilege show level 2 mode configure command access-list
privilege cmd level 2 mode configure command enable
: end

is it always the same line? always just one line in the entire config?

[Michael T. Voity]

It's always the same line.

I have other firewalls too that don't do this. Just these 3...

Mike

Post by heasley

Post by Michael T. Voity
I have 3 of my 7 contexts that are barking about these changes every
couple hours, even thought the changes haven't been made -
Index: configs/active-dir-asa
===================================================================
retrieving revision 1.220
diff -U 4 -r1.220 active-dir-asa
@@ -829,6 +829,7 @@
privilege cmd level 2 mode exec command show
privilege show level 2 mode exec command nameif
privilege show level 2 mode exec command object-group
privilege show level 2 mode exec command access-list
+ privilege show level 2 mode configure command access-list
privilege cmd level 2 mode configure command enable
: end

is it always the same line? always just one line in the entire config?