[rancid] Issue with HP Procurve 2910-48G al

[TAN Lists]

Hey All,

I'm fairly new to Rancid and inherited a setup with mainly HP switches. All
of them work fine but 2 new switches i just added which are HP Procurve
2910-48G al (J9147A) running version W.14.49

When i add them to RANCID i get timeout errors in the logs, but clogin
works fine to log me in.

A similar issue is described here
http://www.gossamer-threads.com/lists/rancid/users/5203 (but its not
exactly the same)

In debug mode, i get a login prompt, then nothing

Switches use TACACS on the same server as RANCID - all switches use SSH

Troubleshooting:
/usr/local/rancid/bin/clogin clswitch1
This works - logs me straight in as the RANCID user and i have full
privileges and can run commands

----------------------------------------------------

/usr/local/rancid/bin/clogin -c "sh run" clswitch1
clswitch1# terminal length 0
Invalid input: 0
clswitch1# logout
Error: TIMEOUT reached

Then drops me back to a shell (I think this is where the whole issue lies)

----------------------------------------------------

When i add the switch to the main config of RANCID
clswitch1:hp:up

When i run /usr/local/rancid/bin/rancid-run i get

<OMITTED>
Trying to get all of the configs.
clswitch1 clogin error: Error: TIMEOUT reached
clswitch1: missed cmd(s): show tech transceivers,show module,show config
status,show system-inform
Trying to get all of the configs.
clswitch1 clogin error: Error: TIMEOUT reached
ation,show system information,show stack,show version,show flash,write
term,show config files
clswitch1: End of run not found
;
=====================================
<OMITTED>
Rinse repeat for all 4 rounds

I looked into using hlogin and when specifying the password, it still hung
at the enter password prompt

I really could use some help on this, I've been researching all done and
can't get anywhere

I'm also finding that if i play with this too much, eventually the switch
locks me out (SSH connection returns identification failure). If i reload
it - its fine - if i dont initiate connections from RANCID its fine for
over 72 hours, but the second i start doing logins through RANCID, the
lockouts start - which is really weird

I read some things about stacking being an issue, so i have changed the
config to "no stack" (we dont need it anyway)

Thoughts much appreciated guys, i look forward to your thoughts to get to
the bottom of this one

Thanks

[Daniel Schmidt]

Off the top of my head - Perhaps you have your autoenable set wrong in cloginrc?

2012/4/17 TAN Lists <***@theatticnetwork.net>:
> Hey All,
>
> I'm fairly new to Rancid and inherited a setup with mainly HP switches. All
> of them work fine but 2 new switches i just added which are HP Procurve
> 2910-48G al (J9147A) running version W.14.49
>
> When i add them to RANCID i get timeout errors in the logs, but clogin works
> fine to log me in.
>
> A similar issue is described here
> http://www.gossamer-threads.com/lists/rancid/users/5203 (but its not exactly
> the same)
>
> In debug mode, i get a login prompt, then nothing
>
> Switches use TACACS on the same server as RANCID - all switches use SSH
>
> Troubleshooting:
> /usr/local/rancid/bin/clogin clswitch1
> This works - logs me straight in as the RANCID user and i have full
> privileges and can run commands
>
> ----------------------------------------------------
>
> /usr/local/rancid/bin/clogin -c "sh run" clswitch1
> clswitch1# terminal length 0
> Invalid input: 0
> clswitch1# logout
> Error: TIMEOUT reached
>
> Then drops me back to a shell (I think this is where the whole issue lies)
>
> ----------------------------------------------------
>
> When i add the switch to the main config of RANCID
> clswitch1:hp:up
>
> When i run /usr/local/rancid/bin/rancid-run i get
>
> <OMITTED>
> Trying to get all of the configs.
> clswitch1 clogin error: Error: TIMEOUT reached
> clswitch1: missed cmd(s): show tech transceivers,show module,show config
> status,show system-inform
> Trying to get all of the configs.
> clswitch1 clogin error: Error: TIMEOUT reached
> ation,show system information,show stack,show version,show flash,write
> term,show config files
> clswitch1: End of run not found
> ;
> =====================================
> <OMITTED>
> Rinse repeat for all 4 rounds
>
> I looked into using hlogin and when specifying the password, it still hung
> at the enter password prompt
>
> I really could use some help on this, I've been researching all done and
> can't get anywhere
>
> I'm also finding that if i play with this too much, eventually the switch
> locks me out (SSH connection returns identification failure). If i reload it
> - its fine - if i dont initiate connections from RANCID its fine for over 72
> hours, but the second i start doing logins through RANCID, the lockouts
> start - which is really weird
>
> I read some things about stacking being an issue, so i have changed the
> config to "no stack" (we dont need it anyway)
>
> Thoughts much appreciated guys, i look forward to your thoughts to get to
> the bottom of this one
>
> Thanks
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

[TAN Lists]

Thanks for the ideas guys

As mentioned i tried hlogin in my first post but couldn't get it to work it
halted at the enter password

clogin works for all our other HP gear

Our .cloginrc file looks like:
add user *.switchdomain.net rancid
add password *.switchdomain.net <OMITTED>
add autoenable *.switchdomain.net 1

Thoughts?

Thanks guys

[Marito ...]

Hi,
Have you tried to login manually with the user/pass configured at .cloginrc ? Could you post the hlogin output when it gets halted ?
In your previous post, you pasted the output of the logs: was it when you set up your device as "hp" ? It is supposed you should use hlogin instead of clogin when you setup the device as hp (hrancid). So it is OK that it fails, as the commands may not be the same (I've never seen an HP procurve)
As for the autoenable, check whether you have full privileges or not when you log in (maybe you don't need it).

Regards,

Date: Wed, 18 Apr 2012 08:50:31 +1000
From: ***@theatticnetwork.net
To: rancid-***@shrubbery.net
Subject: Re: [rancid] Issue with HP Procurve 2910-48G al

Thanks for the ideas guys

As mentioned i tried hlogin in my first post but couldn't get it to work it halted at the enter password

clogin works for all our other HP gear

Our .cloginrc file looks like:

add user *.switchdomain.net rancid
add password *.switchdomain.net <OMITTED>
add autoenable *.switchdomain.net 1


Thoughts?

Thanks guys

[TAN Lists]

Hey guys,

Thanks for the ideas

I might try the patch to the hlogin and see what happens

Yes i have tried logging into the device using the command in the cloginrc
file and it works fine through a manual login or through clogin (as i
mentioned) and i have full access to run the commands its trying to - only
becomes and issue when i use hlogin or try to pass commands through clogin

[TAN Lists]

Hey Guys,

This is the output from
/usr/local/rancid/bin/hlogin -f /usr/local/rancid/.cloginrc clswitch1

clswitch1
spawn hpuifilter -- telnet clswitch1
Trying 172.16.1.54...
telnet: connect to address 172.16.1.54: Connection refused
telnet: Unable to connect to remote host: Connection refused
spawn hpuifilter -- ssh -c 3des -x -l rancid clswitch1
We'd like to keep you up to date about:
* Software feature updates
* New product announcements
* Special events

Please register your products now at: www.ProCurve.com

***@clswitch1's password:

Error: TIMEOUT reached
[***@tacacs bin]$

Never moves beyond that

I don't really want to recompile RANCID as it may mess with what is running
now, would like to know it will 100% fix it before i change the code and
recompile

Any thoughts on whats causing this?

[TAN Lists]

Hey guys,

I recompiled the hpufilter on a test box - same issue exactly the same

One thing i did find, its trying to run the command "terminal length 0"
when i use clogin with a command, which is not supported on these HP's -
minimum value is 2 not 0

hlogin just hangs at the password prompt

Im really running out of ideas - is there any mroe debugging info i can get
with these to get some more help?

Please?

[Daniel Schmidt]

Works for me. Just for kicks, add an autoenable in there.

bin/hlogin -autoenable -c "show cpu" yor_device


2012/4/18 TAN Lists <***@theatticnetwork.net>
>
> Hey guys,
>
> I recompiled the hpufilter on a test box - same issue exactly the same
>
> One thing i did find, its trying to run the command "terminal length 0" when i use clogin with a command, which is not supported on these HP's - minimum value is 2 not 0
>
> hlogin just hangs at the password prompt
>
> Im really running out of ideas - is there any mroe debugging info i can get with these to get some more help?
>
> Please?
>
> ______________________________ _________________
> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

[TAN Lists]

Thanks for the ideas guys.

I have run them and put the output into a pastbin dump due to the lenght

http://pastebin.com/g5eq4kaA

I think i'm starting to see the banner is at fault - would someone mind
confirming and if that is the case, how would i go about fixing it?

On 19 April 2012 08:37, Daniel Schmidt <***@wyo.gov> wrote:

> Works for me. Just for kicks, add an autoenable in there.
>
> bin/hlogin -autoenable -c "show cpu" yor_device
>
>
> 2012/4/18 TAN Lists <***@theatticnetwork.net>
> >
> > Hey guys,
> >
> > I recompiled the hpufilter on a test box - same issue exactly the same
> >
> > One thing i did find, its trying to run the command "terminal length 0"
> when i use clogin with a command, which is not supported on these HP's -
> minimum value is 2 not 0
> >
> > hlogin just hangs at the password prompt
> >
> > Im really running out of ideas - is there any mroe debugging info i can
> get with these to get some more help?
> >
> > Please?
> >
> > ______________________________ _________________
> > Rancid-discuss mailing list
> > Rancid-***@shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> E-Mail to and from me, in connection with the transaction
> of public business, is subject to the Wyoming Public Records
> Act and may be disclosed to third parties.
>
>

[Daniel Schmidt]

Enters password, but where’s the “Press any key to continue”? Seems to be
missing that



*From:* rancid-discuss-***@shrubbery.net [mailto:
rancid-discuss-***@shrubbery.net] *On Behalf Of *TAN Lists
*Sent:* Wednesday, April 18, 2012 8:44 PM
*To:* rancid-***@shrubbery.net
*Subject:* Re: [rancid] Issue with HP Procurve 2910-48G al



Thanks for the ideas guys.

I have run them and put the output into a pastbin dump due to the lenght

http://pastebin.com/g5eq4kaA

I think i'm starting to see the banner is at fault - would someone mind
confirming and if that is the case, how would i go about fixing it?

On 19 April 2012 08:37, Daniel Schmidt <***@wyo.gov> wrote:

Works for me. Just for kicks, add an autoenable in there.

bin/hlogin -autoenable -c "show cpu" yor_device



2012/4/18 TAN Lists <***@theatticnetwork.net>
>
> Hey guys,
>
> I recompiled the hpufilter on a test box - same issue exactly the same
>
> One thing i did find, its trying to run the command "terminal length 0"
when i use clogin with a command, which is not supported on these HP's -
minimum value is 2 not 0
>
> hlogin just hangs at the password prompt
>
> Im really running out of ideas - is there any mroe debugging info i can
get with these to get some more help?
>
> Please?
>

> ______________________________ _________________

> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

[Marito ...]

You can try -t option to make timeout longer, maybe this is preventing from validating and accessing the shell.
Another idea could be to add a \r\n when expect a result when sending the password to the device, and see what happens.

Regards




From: ***@wyo.gov
Date: Thu, 19 Apr 2012 09:37:57 -0600
To: ***@theatticnetwork.net; rancid-***@shrubbery.net
Subject: Re: [rancid] Issue with HP Procurve 2910-48G al





Enters password, but where’s the “Press any key to continue”? Seems to be missing that


From: rancid-discuss-***@shrubbery.net [mailto:rancid-discuss-***@shrubbery.net] On Behalf Of TAN Lists
Sent: Wednesday, April 18, 2012 8:44 PM
To: rancid-***@shrubbery.net
Subject: Re: [rancid] Issue with HP Procurve 2910-48G al

Thanks for the ideas guys.

I have run them and put the output into a pastbin dump due to the lenght

http://pastebin.com/g5eq4kaA

I think i'm starting to see the banner is at fault - would someone mind confirming and if that is the case, how would i go about fixing it?

On 19 April 2012 08:37, Daniel Schmidt <***@wyo.gov> wrote:
Works for me. Just for kicks, add an autoenable in there.

bin/hlogin -autoenable -c "show cpu" yor_device




2012/4/18 TAN Lists <***@theatticnetwork.net>
>
> Hey guys,
>
> I recompiled the hpufilter on a test box - same issue exactly the same
>
> One thing i did find, its trying to run the command "terminal length 0" when i use clogin with a command, which is not supported on these HP's - minimum value is 2 not 0
>
> hlogin just hangs at the password prompt
>
> Im really running out of ideas - is there any mroe debugging info i can get with these to get some more help?
>
> Please?
>
> ______________________________ _________________

> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.
E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

[james machado]

from the pastbin:
=====================
Trying 172.16.1.54...
telnet: connect to address 172.16.1.54: Connection refused
telnet: Unable to connect to remote host: Connection refused
=====================

check your ACL's and/or communications protocols, were you expecting
to use telnet or ssh?

once you've done that you may also need to look at
http://www.gossamer-threads.com/lists/rancid/users/6342 with your
login/password prompts.

james

2012/4/19 Marito ... <***@hotmail.com>:
> You can try -t option to make timeout longer, maybe this is preventing
> from validating and accessing the shell.
> Another idea could be to add a \r\n when expect a result when sending
> the password to the device, and see what happens.
>
> Regards
>
> ________________________________
> From: ***@wyo.gov
> Date: Thu, 19 Apr 2012 09:37:57 -0600
> To: ***@theatticnetwork.net; rancid-***@shrubbery.net
>
> Subject: Re: [rancid] Issue with HP Procurve 2910-48G al
>
> Enters password, but where’s the “Press any key to continue”?   Seems to be
> missing that
>
>
>
> From: rancid-discuss-***@shrubbery.net
> [mailto:rancid-discuss-***@shrubbery.net] On Behalf Of TAN Lists
> Sent: Wednesday, April 18, 2012 8:44 PM
> To: rancid-***@shrubbery.net
> Subject: Re: [rancid] Issue with HP Procurve 2910-48G al
>
>
>
> Thanks for the ideas guys.
>
> I have run them and put the output into a pastbin dump due to the lenght
>
> http://pastebin.com/g5eq4kaA
>
> I think i'm starting to see the banner is at fault - would someone mind
> confirming and if that is the case, how would i go about fixing it?
>
> On 19 April 2012 08:37, Daniel Schmidt <***@wyo.gov> wrote:
>
> Works for me.  Just for kicks, add an autoenable in there.
>
> bin/hlogin -autoenable -c "show cpu" yor_device
>
>
>
> 2012/4/18 TAN Lists <***@theatticnetwork.net>
>>
>> Hey guys,
>>
>> I recompiled the hpufilter on a test box - same issue exactly the same
>>
>> One thing i did find, its trying to run the command "terminal length 0"
>> when i use clogin with a command, which is not supported on these HP's -
>> minimum value is 2 not 0
>>
>> hlogin just hangs at the password prompt
>>
>> Im really running out of ideas - is there any mroe debugging info i can
>> get with these to get some more help?
>>
>> Please?
>>
>
>> ______________________________ _________________
>
>> Rancid-discuss mailing list
>> Rancid-***@shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
> E-Mail to and from me, in connection with the transaction
> of public business, is subject to the Wyoming Public Records
> Act and may be disclosed to third parties.
>
>
>
> E-Mail to and from me, in connection with the transaction
> of public business, is subject to the Wyoming Public Records
> Act and may be disclosed to third parties.
>
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-***@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss