[rancid] extreme issues

andy andy at shady.org
Fri Apr 14 18:27:18 UTC 2006


Hi,

Ive been using rancid for quite some time now, and we decided to roll out tac_plus for auth on our extremes.
Basically, rancid then stopped working.

Ive been using tac_plus for junipers for a while quite successfully. All good.
So, basically, I have a user called "look" that i use for rancid.

This is the tac_plus conf for the look group:

group = tier1
{
  ## extreme tacacs configuration
  default service = deny
  cmd = show {
        permit configuration
        permit version
        permit memory
        permit switch
        permit slot
        permit diag
        deny .*
  }
  cmd = disable {
        permit clipaging
        deny .*
  }

  ## cli service for junipers
  service = junos-exec
  {
  priv_lvl = 15
    local-user-name = tier1
    allow-commands = ""
    allow-configuration = ""
    deny-commands = "monitor|request|file"
    deny-configuration = ""
  }
}

I was running the ports version of rancd when stuff broke but ive now downloaded the latest version.
It still appears fairly broken though with our new config. I know that the prompt changed when we moved from using an 
admin user to a non-admin user.

Is there a fix for the errors below.

cheers

this is the output when i try to run clogin

carp:~$ ./clogin -c "show version;show version" tallaght-switch.internal.nw
tallaght-switch.internal.nw
spawn ssh -c 3des -x -l look tallaght-switch.internal.nw
look at tallaght-switch.internal.nw's password:

ExtremeWare
Copyright (C) 1996-2003 Extreme Networks.  All rights reserved.
===============================================================

Press the <tab> key at any time for completions.
Tallaght Summit 48si::1 > can't read "expect_out(2,string)": no such element in array
    while executing
"set prompt ".? ?$junk\[0-9]+ $expect_out(2,string)""
    invoked from within
"expect -nobrace -re {[
]+} { exp_continue; } -re {^(.+:)1 >} { # stoopid extreme cmd-line numbers and
                                  # prompt based on state of config changes..."
    invoked from within
"expect {
        -re "\[\r\n]+"          { exp_continue; }
        -re "^(.+:)1 $prompt"   { # stoopid extreme cmd-line numbers and
                                  # prompt based on state of config ch..."
    ("foreach" body line 125)
    invoked from within
"foreach router [lrange $argv $i end] {
    set router [string tolower $router]
    send_user "$router\n"

    # Figure out the prompt.
    # autoenabl..."
    (file "./clogin" line 686)
carp:~$ ./clogin -autoenable -c "show version;show version" tallaght-switch.internal.nw
tallaght-switch.internal.nw
spawn ssh -c 3des -x -l andy tallaght-switch.internal.nw
andy at tallaght-switch.internal.nw's password:

ExtremeWare
Copyright (C) 1996-2003 Extreme Networks.  All rights reserved.
===============================================================

Press the <tab> key at any time for completions.
Tallaght Summit 48si::1 >
^C^C^Ccarp:~$ ./clogin -noenable -c "show version;show version" tallaght-switch.internal.nw
tallaght-switch.internal.nw
spawn ssh -c 3des -x -l look tallaght-switch.internal.nw
look at tallaght-switch.internal.nw's password:

ExtremeWare
Copyright (C) 1996-2003 Extreme Networks.  All rights reserved.
===============================================================

Press the <tab> key at any time for completions.
Tallaght Summit 48si::1 > can't read "expect_out(2,string)": no such element in array
    while executing
"set prompt ".? ?$junk\[0-9]+ $expect_out(2,string)""
    invoked from within
"expect -nobrace -re {[
]+} { exp_continue; } -re {^(.+:)1 >} { # stoopid extreme cmd-line numbers and
                                  # prompt based on state of config changes..."
    invoked from within
"expect {
        -re "\[\r\n]+"          { exp_continue; }
        -re "^(.+:)1 $prompt"   { # stoopid extreme cmd-line numbers and
                                  # prompt based on state of config ch..."
    ("foreach" body line 125)
    invoked from within
"foreach router [lrange $argv $i end] {
    set router [string tolower $router]
    send_user "$router\n"

    # Figure out the prompt.
    # autoenabl..."
    (file "./clogin" line 686)


-- 
andy    andy at shady.org
-----------------------------------------------
Never argue with an idiot. They drag you down 
to their level, then beat you with experience.
----------------------------------------------- 

----- End forwarded message -----

-- 
andy    andy at shady.org
-----------------------------------------------
Never argue with an idiot. They drag you down 
to their level, then beat you with experience.
----------------------------------------------- 



More information about the Rancid-discuss mailing list