David LaPorte | 1 Nov 2005 19:09
Picon
Favicon

RANCID ACL sorting?

I've noticed an issue (I think) with the way that RANCID determines
whether a configuration has changed.  I've written some code around
RANCID's CVS repository to check the "live" ACLs against those on our
TFTP server to ensure consistency.

What I've noticed is that if the order of entries in an ACL changes,
RANCID does not check the new config into CVS.  I believe this is due to
sorting the ACLs before comparing, although I haven't dug through the
code deeply enough to be certain.

Does anyone know if this is the case?  If so, would it be considered a
bug or is it operating as designed?

thanks!
Dave

Michael Stefaniuc | 2 Nov 2005 12:34
Picon
Favicon

Re: License question

On Mon, Oct 31, 2005 at 01:16:05PM -0500, Hank Kilmer wrote:
> The intent of the license to to maintain recognition but still allow 
> free use.
Full ACK here.

> We have discussed updating the license to make it more 
> "standard" and clear - more later on that.
Please do so. I know license discussions drift easily into big flame wars
that can go on for months but a known license can ease the adoption of
a software. There is already a license jungle in the OSS world.

> You are free to use it as described.
Thanks, will do.

> -Hank
Just to crosscheck it: Hank Kilmer and Henry Kilmer (the name in the
COPYING file) are the same person. Google seems to confirm this e.g.
http://pgp.mit.edu:11371/pks/lookup?search=hank%40rem.com&op=index

bye
	michael

> Michael Stefaniuc wrote:
> >while trying to improve the rancid spec file i got from Dan Pfleger so i 
> >can start testing rancid i run into a non technical problem: the 
> >license. I have read the COPYING file and there is the "non-commerical 
> >purposes" limitation for copying, modifying and redistribution. But 
> >there is no mention of "use" of the software in there.
> >I googled around and what i found is that FreshMeat shows as license 
> >"Other/Proprietary License" 
(Continue reading)

Hank Kilmer | 2 Nov 2005 16:35

Re: License question

Michael Stefaniuc wrote:

> Just to crosscheck it: Hank Kilmer and Henry Kilmer (the name in the
> COPYING file) are the same person. Google seems to confirm this e.g.
> http://pgp.mit.edu:11371/pks/lookup?search=hank%40rem.com&op=index

Most certainly.  There are other nick names I respond too as well but 
aren't for public consumption ;-)

-Hank

Steve Carter | 3 Nov 2005 22:59
Picon
Favicon

tftp config problems

I have a config file on a TFTP server that I want to upload into the 
running config on a Cisco Cat5 running IOS:

switch#sh ver
Cisco Internetwork Operating System Software IOS (tm) C3750 Software 
(C3750-I9-M), Version 12.1(19)EA1c, RELEASE SOFTWARE (fc2)

but when I run the following command:

$ /usr/local/libexec/rancid/clogin -c 'conf n;host;199.199.199.199;switch-confg;;wr' switch
switch
spawn telnet switch
Trying 199.199.199.198...
Connected to switch
Escape character is '^]'.

Username: scarter
Password:

switch#
switch#term length 0
switch#conf n

Error: TIMEOUT reached
$

obviously, I can paste the commands in my config file and I can manually 
run the 'conf n' commands at the switch prompt.  I want to do this so I 
can update a large number of devices by embedding these commands into a 
shell script.
(Continue reading)

David LaPorte | 3 Nov 2005 23:52
Picon
Favicon

Re: tftp config problems

try using "\n", eg:

$ /usr/local/libexec/rancid/clogin -c "conf
n\nhost\n199.199.199.199\nswitch-confg\n;wr" switch

Steve Carter wrote:
> I have a config file on a TFTP server that I want to upload into the 
> running config on a Cisco Cat5 running IOS:
> 
> switch#sh ver
> Cisco Internetwork Operating System Software IOS (tm) C3750 Software 
> (C3750-I9-M), Version 12.1(19)EA1c, RELEASE SOFTWARE (fc2)
> 
> but when I run the following command:
> 
> $ /usr/local/libexec/rancid/clogin -c 'conf n;host;199.199.199.199;switch-confg;;wr' switch
> switch
> spawn telnet switch
> Trying 199.199.199.198...
> Connected to switch
> Escape character is '^]'.
> 
> Username: scarter
> Password:
> 
> switch#
> switch#term length 0
> switch#conf n
> 
> 
(Continue reading)

Steve Carter | 4 Nov 2005 02:10
Picon
Favicon

Re: tftp config problems

Awesome, works perfectly, thank you ... I'm so behind the times ... pretty 
sure ';' used to work ... :)

* David LaPorte said:
> try using "\n", eg:
> 
> $ /usr/local/libexec/rancid/clogin -c "conf
> n\nhost\n199.199.199.199\nswitch-confg\n;wr" switch
> 
> Steve Carter wrote:
> > I have a config file on a TFTP server that I want to upload into the 
> > running config on a Cisco Cat5 running IOS:
> > 
> > switch#sh ver
> > Cisco Internetwork Operating System Software IOS (tm) C3750 Software 
> > (C3750-I9-M), Version 12.1(19)EA1c, RELEASE SOFTWARE (fc2)
> > 
> > but when I run the following command:
> > 
> > $ /usr/local/libexec/rancid/clogin -c 'conf n;host;199.199.199.199;switch-confg;;wr' switch
> > switch
> > spawn telnet switch
> > Trying 199.199.199.198...
> > Connected to switch
> > Escape character is '^]'.
> > 
> > Username: scarter
> > Password:
> > 
> > switch#
(Continue reading)

William Yardley | 8 Nov 2005 21:11
Favicon

existing CVS repo?

Is it possible (without heavily modifying the source) to use RANCID with
an existing CVS repository / module (just putting it in a subdir like
repo:module/rancid/), or, if not, is it possible to use a new module in
an existing repository?

w

john heasley | 8 Nov 2005 21:48

Re: existing CVS repo?

Tue, Nov 08, 2005 at 12:11:03PM -0800, William Yardley:
> Is it possible (without heavily modifying the source) to use RANCID with
> an existing CVS repository / module (just putting it in a subdir like
> repo:module/rancid/), or, if not, is it possible to use a new module in
> an existing repository?
> 
> w

modules, no, it is not.  rancid-cvs specifically creates new modules, and
i've come to the conclusion that this is easier in terms of supporting folks
when they have cvs issues.

as for sharing a repository, possibly.  i've never tried, but you can.  try
setting CVSROOT in rancid.conf and/or symlinking ~rancidusr/CVS to the
other respository.

Soren Hansen | 14 Nov 2005 16:40
Picon

CSS problem

Hi,
I'm trying to figure out what goes wrong when adding  two cisco content 
switches.
I have added them to router.db with type css.
I can clogin to them using:
add user css?office.intra.telia.dk root
add autoenable css?office.intra.telia.dk 1
add password css?office.intra.telia.dk myrealpassword dummypw

When I do a rancid-run, the configs are not retireved.

Running cssrancid goes like this:
rancid <at> lanwan-mon$ cssrancid -d css1office.intra.telia.dk
executing clogin -t 90 -c"term length 65535;copy profile 
user-profile;show version;show boot;show run" css1office.intra.telia.dk
HIT COMMAND:css1office#  term length 65535
HIT COMMAND:css1office#  term length 65535
css1office.intra.telia.dk: found unexpected command - "term length 65535"
HIT COMMAND:css1office# copy profile user-profile
HIT COMMAND:css1office# copy profile user-profile
css1office.intra.telia.dk: found unexpected command - "copy profile 
user-profile"
HIT COMMAND:css1office# show version
    In ShowVersion: css1office# show version
HIT COMMAND:css1office# show boot
    In ShowBoot: css1office# show boot
HIT COMMAND:css1office# show run
    In ShowRun: css1office# show run
css1office.intra.telia.dk: End of run not found
css1office.intra.telia.dk: End of run not found
(Continue reading)

Stafford A. Rau | 15 Nov 2005 18:27

Missing "Image: Software:" for some platforms

I'd like to be able to extract the running IOS version for all of our
Cisco platforms from the rancid configs, but we're missing the '!Image:
Software:' lines from some of them.

Specifically, I don't see it for our 7609s, 6509s (running native IOS),
and less importantly, our PIXes.

I'd be quite happy to supply any command output from those devices to
facilitate this feature request.

We're running rancid version 2.3.1.

Thanks,
--Stafford


Gmane