Help: rancid+radius+cisco getting error
Hi, I'm using rancid-2.3.3 and freeradius-1.1.3-1.6.el5. Both installed at different machines. My problem is whenever I test rancid it gave error below.. [rancid@mycompany bin]$ clogin clientA ClientA spawn telnet clientA Trying x.x.x.34... telnet: connect to address x.x.x.34: Connection refused telnet: Unable to connect to remote host: Connection refused spawn ssh -c 3des -x -l rancid clientA rancid@ clientA 's password: Permission denied, please try again. Error: Check your passwd for clientA I've checked in my radius that the password is correct.in fact if I try ssh to clientA from my rancid machine everything is ok.. [rancid@mycompany bin]$ ssh rancid@ clientA rancid@ clientA 's password: clientA -PE01> Here are some rancid files for your reference. Router.db clientA:cisco:up clientB:cisco:up .cloginrc # clientA # these routers ask for a username and password. we automatically get # enable access after successful authentication. add user clientA rancid add password clientA mypassword #add autoenable clientA 1 # clientB # these routers ask for a username and password. we automatically get # enable access after successful authentication. add user clientB rancid add password clientB mypassword #add autoenable clientB 1 Log Trying to get all of the configs. clientA clogin error: Error: Check your passwd for clientA clientA: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all disk2:,dir /all sec-bootflash:,show spe version,dir /all slaveslot2:,dir /all disk0:,show install active,show bootvar,dir /all slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenvram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all sec-disk0:,dir /all harddiskb:,show variables boot,show boot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin show env all,show controllers,admin show version,show diagbus,more system:running-config,dir /all slavedisk0:,show debug,show idprom backplane,dir /all bootflash:,dir /all sec-slot0:,dir /all sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-microcode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all slaveslot1:,dir /all nvram:,show version,show vlan-switch,admin show variables boot,show redundancy secondary,show running-config,show c7200,dir /all slot1: clientA: End of run not found Some radius file for your checking.. rancid Auth-Type := System Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" client x.x.x.x { secret = secret_pass shortname = clientA-PE01 nastype = cisco What could possibly cause the problem here?can anyone help me on this? Thank you and with regards Zulfadli Syazwan Bin Razali MYREN Application Engineer Malaysian Research & Education Network (MYREN) HP : 013 - 921 1482 Fax : 03 - 8318 5034 Ym! : bighorn5971@yahoo.com Skype: zulfadlisyazwan http://www.myren.net.my
zulfadli wrote:
Hi,
I'm using rancid-2.3.3 and freeradius-1.1.3-1.6.el5. Both installed at different machines. My problem is whenever I test rancid it gave error below..
rancid isn't written by us. Go ask the rancid authors how it works.
What could possibly cause the problem here?can anyone help me on this?
Well... running the server in debugging mode wouldn't hurt. It's documented pretty much everywhere, and there is NO EXCUSE for not using debugging mode. Alan DeKok.
Hi, if I'm using an expression like if (control:VSA1=~/something/ || control:VSA2 =~/something_else/) {...} I do get the information "(Attribute control:VSA1 was not found)" in case the VSA is not in the control context. As the condition is '||', I would expect, that FR tries the next option, but it does not. It sets the hole Expression to FALSE. If I exchange the Options, it works for me, because VSA2 is always available. if (control:VSA2=~/something/ || control:VSA1 =~/something_else/) {...} If I preset VSA1, it works too, but will add slightly more load. Is there a solution for the missing Attribute to be ignored in '||' conditions i.e. setting it discrete to FALSE, so tht FR is able to evaluate the rest of the || expression? Would this be advisable? Thank you. Stefan
participants (3)
-
Alan DeKok -
Stefan A. -
zulfadli