[rancid] Rancid and Custom Privilege levels

[Shapery, Steve]

Greetings all.



I am in a situation where I have read-only access to a variety of vendor-managed Cisco routers.



My access-level allows a $B!F(Bshow running-config$B!G(B and a $B!F(Bwrite term$B!G(B but for some reason, Rancid is not too happy with accessing these devices.



A clogin test is successful.



The prompt has a #, and for all intents and purposes, it$B!G(Bs enabled.





Here$B!G(Bs the output from the logs:



Trying to get all of the configs.

write(spawn_id=1): broken pipe

while executing

"send_user -- "$expect_out(buffer)""

invoked from within

"expect -nobrace -re+ { exp_continue } -re {^[^

*]*Router11R([^#>(J\(Br(J\(Bn]+)?[#>]((J\(B([^)(J\(Br(J\(Bn]+(J\(B))?} { send_user -- "$expect_out

(buffer)"

} -r..."

invoked from within

"expect {

-re "(J\(Bb+" { exp_continue }

-re "^(J\(B[^(J\(Bn(J\(Br *]*$reprompt" { send_user -- "$expect_out(buff

er)"

}

-re "^(J\(B[^(J\(Bn(J\(Br]*$reprompt." { send..."

invoked from within

"if [ string match "*(J\(B;*" "$command" ] {

set commands [split $command (J\(B;]

set num_commands [llength $commands]

# the pager can not be turned off on ..."

(procedure "run_commands" line 34)

invoked from within

"run_commands $prompt $command"

("foreach" body line 144)

invoked from within

"foreach router [lrange $argv $i end] {

set router [string tolower $router]

send_user "$router(J\(Bn"



# Figure out prompt.

# Since autoena..."

(file "/home/rancid/bin/clogin" line 616)

uscdhlsanca11: missed cmd(s): dir /all slavedisk2:,dir /all sec-slot2:,show diag

,dir /all disk1:,dir /all sec-nvram:,dir /all disk2:,dir /all sec-bootflash:,sho

w spe version,dir /all slaveslot2:,dir /all disk0:,dir /all slaveslot0:,dir /all

sec-slot1:,dir /all harddiska:,dir /all slavenvram:,dir /all sec-disk2:,dir /al

l slavesup-bootflash:,dir /all sec-disk0:,dir /all harddiskb:,dir /all slavedisk

1:,show module,show controllers,show diagbus,dir /all slavedisk0:,dir /all bootf

lash:,dir /all sec-slot0:,dir /all sec-disk1:,write term,show vtp status,dir /al

l sup-bootflash:,dir /all slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup

-microcode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all sl

aveslot1:,show running-config,show c7200,dir /all slot1:

Router11: End of run not found

!

=====================================



Any guidance would be appreciated.



Thanks.











Steve Shapery

Senior Network Engineer

EIT-TS Network Engineering - Cardinal Health

858-617-2621 (rolls to cell)

***@cardinal.com

SD HQ B2 150

YIM: steve_cardinal

$B6L:U(B




_________________________________________________

This message is for the designated recipient only and may contain privileged, proprietary
or otherwise private information. If you have received it in error, please notify the sender
immediately and delete the original. Any other use of the email by you is prohibited.

Dansk - Deutsch - Espanol - Francais - Italiano - Japanese - Nederlands - Norsk - Portuguese
Svenska: www.cardinalhealth.com/legal/email

[Lance Vermilion]

Steve,

All you need to do is specify a new option in your .cloginrc

add noenable uscdhlsanca11

That should get you working.

-lance

Post by Shapery, Steve
Greetings all.
I am in a situation where I have read-only access to a variety of
vendor-managed Cisco routers.
My access-level allows a 'show running-config' and a 'write term' but for
some reason, Rancid is not too happy with accessing these devices.
A clogin test is successful.
The prompt has a #, and for all intents and purposes, it's enabled.
Trying to get all of the configs.
write(spawn_id=1): broken pipe
while executing
"send_user -- "$expect_out(buffer)""
invoked from within
"expect -nobrace -re+ { exp_continue } -re {^[^
*]*Router11R([^#>(J\(Br(J\(Bn]+)?[#>]((J\(B([^)(J\(Br(J\(Bn]+(J\(B))?} { send_user
-- "$expect_out
(buffer)"
} -r..."
invoked from within
"expect {
-re "(J\(Bb+" { exp_continue }
-re "^(J\(B[^(J\(Bn(J\(Br *]*$reprompt" { send_user --
"$expect_out(buff
er)"
}
-re "^(J\(B[^(J\(Bn(J\(Br]*$reprompt." { send..."
invoked from within
"if [ string match "*(J\(B;*" "$command" ] {
set commands [split $command (J\(B;]
set num_commands [llength $commands]
# the pager can not be turned off on ..."
(procedure "run_commands" line 34)
invoked from within
"run_commands $prompt $command"
("foreach" body line 144)
invoked from within
"foreach router [lrange $argv $i end] {
set router [string tolower $router]
send_user "$router(J\(Bn"
# Figure out prompt.
# Since autoena..."
(file "/home/rancid/bin/clogin" line 616)
uscdhlsanca11: missed cmd(s): dir /all slavedisk2:,dir /all sec-slot2:,show diag
,dir /all disk1:,dir /all sec-nvram:,dir /all disk2:,dir /all
sec-bootflash:,sho
w spe version,dir /all slaveslot2:,dir /all disk0:,dir /all slaveslot0:,dir /all
sec-slot1:,dir /all harddiska:,dir /all slavenvram:,dir /all sec-disk2:,dir /al
l slavesup-bootflash:,dir /all sec-disk0:,dir /all harddiskb:,dir /all slavedisk
1:,show module,show controllers,show diagbus,dir /all slavedisk0:,dir /all bootf
lash:,dir /all sec-slot0:,dir /all sec-disk1:,write term,show vtp status,dir /al
l sup-bootflash:,dir /all slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup
-microcode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all sl
Router11: End of run not found
!
=====================================
Any guidance would be appreciated.
Thanks.
Steve Shapery
Senior Network Engineer
EIT-TS Network Engineering - Cardinal Health
858-617-2621 (rolls to cell)
SD HQ B2 150
YIM: steve_cardinal
$B6L:U(B
_________________________________________________

This

Post by Shapery, Steve
message is for the designated recipient only and may contain privileged,
proprietary

or otherwise private information. If you have received it in

Post by Shapery, Steve
error, please notify the sender

immediately and delete the original. Any

Post by Shapery, Steve
other use of the email by you is prohibited.

Dansk - Deutsch - Espanol -

Post by Shapery, Steve
Francais - Italiano - Japanese - Nederlands - Norsk - Portuguese
www.cardinalhealth.com/legal/email
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss