[rancid] cisco privilege user

[Alex Malberty]

Hi Everyone,

Does everyone use privilege enable 15 (enable) to get the running-config
of Cisco devices with IOS. Any non privilege 15 user will get a blank
configuration.

Thanks,

------------------------------------------------------------------------
--
Alejandro A. Malberty
Systems Administrator
Engineering
BabyCenter, LLC

***@babycenter.com
p: 415.344.7626

<http://www.babycenter.com>


http://www.babycenter.com




This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. If you are the intended recipient, please be advised that the content of this message is subject to access, review and disclosure by the sender's Email System Administrator.

[Sam Munzani]

That's normal. If you have configure priv 1 with show commands then they
can run "show config" to retrieve the config file. You can't run show run.

Sam

Post by Alex Malberty
Hi Everyone,
Does everyone use privilege enable 15 (enable) to get the
running-config of Cisco devices with IOS. Any non privilege 15 user
will get a blank configuration.
Thanks,
--------------------------------------------------------------------------
*Alejandro A. Malberty*
Systems Administrator
Engineering
BabyCenter, LLC
p: 415.344.7626
<http://www.babycenter.com>
_http://www.babycenter.com_
/
This email message is for the sole use of the intended recipient(s)
and may contain confidential and privileged information. Any
unauthorized review, use, disclosure or distribution is prohibited. If
you are not the intended recipient, please contact the sender by reply
email and destroy all copies of the original message. If you are the
intended recipient, please be advised that the content of this message
is subject to access, review and disclosure by the sender's Email
System Administrator.
/
------------------------------------------------------------------------
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

[Alex Malberty]

The problem is that show conf is not the configuration that is running
on the system. I wonder if anybody has implemented a solution for this.



------------------------------------------------------------------------
--

Alejandro A. Malberty

Systems Administrator

Engineering

BabyCenter, LLC

***@babycenter.com

p: 415.344.7626

<http://www.babycenter.com>



http://www.babycenter.com <http://www.babycenter.com>

________________________________

From: Sam Munzani [mailto:***@comcast.net]
Sent: Monday, April 21, 2008 2:24 PM
To: Alex Malberty
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco privilege user



That's normal. If you have configure priv 1 with show commands then they
can run "show config" to retrieve the config file. You can't run show
run.

Sam



Hi Everyone,

Does everyone use privilege enable 15 (enable) to get the running-config
of Cisco devices with IOS. Any non privilege 15 user will get a blank
configuration.

Thanks,

------------------------------------------------------------------------
--

Alejandro A. Malberty

Systems Administrator

Engineering

BabyCenter, LLC

***@babycenter.com

p: 415.344.7626

<http://www.babycenter.com>



http://www.babycenter.com <http://www.babycenter.com>



This email message is for the sole use of the intended recipient(s) and
may contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not
the intended recipient, please contact the sender by reply email and
destroy all copies of the original message. If you are the intended
recipient, please be advised that the content of this message is subject
to access, review and disclosure by the sender's Email System
Administrator.





________________________________

[John Payne]

Post by Alex Malberty
The problem is that show conf is not the configuration that is
running on the system. I wonder if anybody has implemented a
solution for this.

TACACS+ command authorization.