dotwaffle/rancid-git

DEPRECATED -- Strongly consider using the upstream, the version here is very out of date and a poor place to start from!

rancid-git's Issues

debian lenny need automake as dependency

for debian/lenny rancid needs automake to build

diff --git a/debian/control b/debian/control
index bf5d377..61348b6 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: rancid
Section: net
Priority: optional
Maintainer: Roland Rosenfeld [email protected]
-Build-Depends: debhelper (>= 5.0.0), expect, perl, openssh-client, cvs,
+Build-Depends: debhelper (>= 5.0.0), automake, expect, perl, openssh-client, cvs,
iputils-ping | ping, po-debconf, dpatch, exim4 | mail-transport-agent,
telnet
Standards-Version: 3.8.1

Fortigate Backup doesn't works

Hello friends!

I have a issue with the Rancid backups of my Fortigate firewall. When i want to import the configuration from my backup to the firewall, the firewall return to me an error. I contact the Fortinet support and told me that the error comes from the backup files. And i made the test and its true. If we check the header from rancid:

RANCID-CONTENT-TYPE: fortigate

Version: FortiGate-1500D v5.2.5,build0701,151203 (GA)

Extreme DB: 1.00000(2012-10-17 15:47)

IPS-ETDB: 6.00781(2016-01-29 02:53)

Serial-Number: FG1K5D3I14804149

Botnet DB: 2.00765(2016-01-31 10:00)

BIOS version: 04000006

System Part-Number: P12917-05

Log hard disk: Available

Hostname: FW

Operation Mode: NAT

Current virtual domain: root

Max number of virtual domains: 100

Virtual domains status: 25 in NAT mode, 0 in TP mode

Virtual domain configuration: enable

FIPS-CC mode: disable

Current HA mode: a-p, backup

Branch point: 701

Release Version Information: GA

FortiOS x86-64: Yes

and the configuration start with

config system global

If we see the original backup from Fortigate the header look like this:

config-version=FG1K5D-5.02-FW-build701-151203:opmode=0:vdom=1:user=admin

conf_file_ver=7858069675405107643

buildno=0701

global_vdom=1

and the configuration start with

config vdom
<----set all the vdoms here--->
config global
config system global

---

Look like rancid is jumping some configuration parameter.

I wanna know if a patch is available or some work around.

Thanks and all the best.

Alejandro B.

removal of cleartext passwords from clogin.rc file of RANCID

We are trying to avoid the usage of cleartext passwords in .cloginrc file of RANCID by using CyberArk API which provide passwords ondemand . API is capable to made available passwords of accounts been used by RANCID. IS there a way to get rid of cloginrc plaintext file by replacing it with API calls?

Git commit when SSH key has password

Hopefully I'm not blind, but is there a way for git-rancid to use an SSH key password when performing a commit to github.com?

Where is the configure ?

I'm sorry but this does not have a configure only a configure.in as opposed to the regular rancid.
How do you guys proceed with configure ?

zterancid

Hello! Trying to use your zterancid script but no luck. Running on zrx10 devices such as ZTE Ethernet Switch ZXR10 2928-SI. Promt is #. I think that happenes because in zte config no "end" word.

Getting such log:

172.16.32.30 clogin error: Error: TIMEOUT reached
172.16.32.30: missed cmd(s): more system:running-config,show debug,show vlan-switch,show running-config
172.16.32.30: End of run not found
!

Error ztelogin

command - "terminal width 132" is not working getting following error message -

% Invalid input detected at '^' marker.

Integrate support for Palo Alto firewalls

There's currently a branch I'm working on to integrate a Palo Alto patch-set from the mailing list.

However, there's a number of annoying things, like it continually puts in version numbers for the url-filter download, which means almost every update has the number present. I'd like to skip that, unless someone feels strongly to the contrary.

installing debs

Setting up rancid-git (2.3.8) ...
dpkg: dependency problems prevent configuration of rancid-util:
rancid-util depends on rancid; however:
Package rancid is not installed.

debs build:

rancid-cgi_2.3.8_all.deb rancid-core_2.3.8_all.deb rancid-git_2.3.8_amd64.deb rancid-util_2.3.8_all.deb

Octothorpe in login banner or config causes router not to be gathered

If there's an octothorpe (# symbol) in a router's config, or in the login banner the router doesn't get its configuration pulled.

rancid_par is missing?

Getting missed routers: round 3.
/usr/lib/rancid/bin/control_rancid: line 488: rancid_par: command not found
=====================================
Getting missed routers: round 4.
/usr/lib/rancid/bin/control_rancid: line 488: rancid_par: command not found

# On branch master
nothing to commit (working directory clean)

ending: Tue Oct 19 16:28:20 BST 2010

Building Debian package fails on fresh checkout

I provisioned a fresh copy of Debian Wheezy on EC2 (ami-4e099a74, ap-southeast-2), and ran the following to attempt to build the package:

$ sudo apt-get update
$ sudo apt-get -y install devscripts git
$ git clone git://github.com/dotwaffle/rancid-git
$ cd rancid-git
$ debuild -S
$ cd ..
$ mk-build-deps rancid-git_2.3.8.dsc
$ sudo dpkg -i rancid-git-build-deps_2.3.8_all.deb
$ sudo apt-get -f install
$ cd rancid-git
$ debuild

I ended up with the following error:

configure: creating ./config.status
config.status: error: cannot find input file: `Makefile.in'
make: *** [build-stamp] Error 1
dpkg-buildpackage: error: debian/rules build gave error exit status 2
debuild: fatal error at line 1357:
dpkg-buildpackage -rfakeroot -D -us -uc failed

After a bit of experimentation, I noticed that the 'manual' (non-Debian) instructions on the site at http://dotwaffle.github.io/rancid-git/ suggested running autoreconf. So I edited debian/rules and changed these lines:

 build-stamp: patch-stamp
    dh_testdir
    aclocal
    autoconf

To these:

 build-stamp: patch-stamp
    dh_testdir
    autoreconf

It then builds successfully with debuild. Is that a bug?

Error: invalid command name "aadd"

Hey, I've been running rancid for quite some years now, makes me happy!

I now want to replace my old centos6 vm with a new centos7 one, and at the same start using our central git server (company gitlab server). (The new vm is also managed by puppet, so I'll write my own puppet module). I installed rancid from the epel7 repo, now running rancid-3.2-2.el7.x86_64.

I see the following error when I run clogin:

[rancid@nmo-ran-02 rancid]$ /usr/libexec/rancid/clogin foo
Error: invalid command name "aadd"

Any idea why that could be? Am I missing some dependency? (yum whatprovides shows no aadd executables).

Virtual-Access interfaces should be skipped

Inside /usr/lib/rancid/bin/rancid, I have commented out the following parameters to @commandtable, because they were very noisy:

#{'show snmp mib ifmib ifindex'  => 'ShowIfIndex'},
#{'show interface'      => 'ShowInterface'},

(I also commented out the show shun line too due to noise, but that is beyond the scope of this report.)

In my circumstance, the routers with the noise operate as LNS'es — i.e. terminating PPPoE or L2TP sessions, with dozens of Virtual-Access interfaces appearing and/or disappearing every hour.

However, I can see why it is useful to have the output. To reach a compromise, it may be useful to test for and skip Virtual-Access interfaces, which only last for the lifetime of the PPP session.

For example, in sub ShowInterface, the following line appears in two places:

ProcessHistory("INT","keysort",$interface->{'name'},"!Interface: " . PrintInterface($interface) . "\n") if (defined $interface);

Perhaps it would be possible to skip Virtual-Access interfaces (please excuse me, this is literally the first line of Perl I have ever written, which may not actually work):

ProcessHistory("INT","keysort",$interface->{'name'},"!Interface: " . PrintInterface($interface) . "\n") if (defined $interface && !($interface->{'name'} =~ /^Virtual-Access/));

With something similar in sub ShowIfIndex to skip Virtual-Access indexes.

Thoughts?

RPM spec file references old SHA

The %{commit} variable in rancid-git.spec references SHA 788157a, which is from May 2013. I'm not sure if this is intentional, e.g., this is the latest "stable" release. If not, it would be nice if this variable could be updated to a newer commit.

I was able to successfully build an RPM from the latest commit (as of this writing) by changing this variable to 6b843b4f74fac89296b9fb325efa5eac1971b284 and exporting an archive.

git archive -o rancid-git-2.3.8-6b843b4.tar.gz --prefix=rancid-git-6b843b4f74fac89296b9fb325efa5eac1971b284 6b843b4

Force10: FTOS 9 keeps triggering alerts due to flash mod time changing

We use rancid 3.4.1. On every runcid-run whe have a update on our Force10 S4820T switches, because:

• flash: timestamp is still changing every runcid-run
• fan speed: has no sense and is changing very often

Is there any solution about this?

Thanks in advance

Jochen

Undocumented build-dep

rancid@rancid:/srv/rancid-git$ dpkg-buildpackage -uc -rfakeroot
dpkg-buildpackage: source package rancid-git
dpkg-buildpackage: source version 2.3.9-0
dpkg-buildpackage: source changed by Vincent Bernat <[email protected]>
dpkg-buildpackage: host architecture amd64
 dpkg-source --before-build rancid-git
dpkg-checkbuilddeps: Unmet build dependencies: exim4 | mail-transport-agent
dpkg-buildpackage: warning: build dependencies/conflicts unsatisfied; aborting
dpkg-buildpackage: warning: (Use -d flag to override.)

This is probably incorrect as a build-dep, and the build process completes successfully if I remove this dependency.

a10 Network Load Balancers

I am having trouble getting a10 devices added as a device class

I copied our a10 scripts from the old rancid server however I can't seem to get it to work on the new server.
I have a script for a10login and a10rancid and placed them in /usr/lib/rancid/bin/ (same place as rancid-fe)
I edited the rancid-fe file and added:
'a10' => 'a10rancid'

However if I try to run rancid-fe {device}:a10 i get the message
exec failed router manufacturer a10: No such file or directory

if i run a10login I get logged in just fine
if i run a10rancid I get:

sh: 1: fnlogin: not found
{device}: missed cmd(s): get system status,show full-configuration
0: found end
{device}: End of run not found

a previous engineer wrote the scripts for the a10's from the fnrancid/fnlogin scripts it looks like.
He isn't around anymore to ask and he loved to write random custom crap to make it unnecessarily complicated.

I don't really know where to go from here...
Any help would be GREATLY appreciated.

error: no proper invocation of AM_INIT_AUTOMAKE was found.

$ automake --add-missing
configure.ac: error: no proper invocation of AM_INIT_AUTOMAKE was found.
configure.ac: You should verify that configure.ac invokes AM_INIT_AUTOMAKE,
configure.ac: that aclocal.m4 is present in the top-level directory,
configure.ac: and that aclocal.m4 was recently regenerated (using aclocal)
Makefile.am:41: error: MK_LCLSTATEDIR does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am: error: am__fastdepCC does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am: The usual way to define 'am__fastdepCC' is to add 'AC_PROG_CC'
/usr/share/automake-1.14/am/depend2.am: to 'configure.ac' and run 'aclocal' and 'autoconf' again
/usr/share/automake-1.14/am/depend2.am: error: AMDEP does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am: The usual way to define 'AMDEP' is to add one of the compiler tests
/usr/share/automake-1.14/am/depend2.am: AC_PROG_CC, AC_PROG_CXX, AC_PROG_OBJC, AC_PROG_OBJCXX,
/usr/share/automake-1.14/am/depend2.am: AM_PROG_AS, AM_PROG_GCJ, AM_PROG_UPC
/usr/share/automake-1.14/am/depend2.am: to 'configure.ac' and run 'aclocal' and 'autoconf' again
etc/Makefile.am:56: error: CONF_INSTALL does not appear in AM_CONDITIONAL

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.10
Release: 14.10
Codename: utopic

Add .gitignore to prevent errors in logs

Should provide a .gitignore file to prevent errors in the logs

Example error:

 On branch master
# Untracked files:
#   (use "git add <file>..." to include in what will be committed)
#
#       ../../.bash_history
#       ../../.bash_logout
#       ../../.bash_profile
#       ../../.bashrc
#       ../../.cloginrc
#       ../../.gitconfig
#       ../../.ssh/
#       ervice-object tcp destination eq https
nothing added to commit but untracked files present (use "git add" to track)
Deleted ervice-object
fatal: pathspec 'networking/configs/tcp' did not match any files

seeing uninitialized value errors in drancid file

This is showing in my rancid logs. I copied dlogin and drancid (renamed to just dlogin and drancid) into my current rancid install is rancid 2.3.8

Possible unintended interpolation of @PACKAGE in string at /usr/lib/rancid/bin/drancid line 34.
Possible unintended interpolation of @VERSION in string at /usr/lib/rancid/bin/drancid line 34.
Name "main::opt_l" used only once: possible typo at /usr/lib/rancid/bin/drancid line 37.
Name "main::found_env" used only once: possible typo at /usr/lib/rancid/bin/drancid line 43.
Name "main::found_diag" used only once: possible typo at /usr/lib/rancid/bin/drancid line 44.
Name "main::opt_f" used only once: possible typo at /usr/lib/rancid/bin/drancid line 39.
Name "main::PACKAGE" used only once: possible typo at /usr/lib/rancid/bin/drancid line 34.
Name "main::opt_d" used only once: possible typo at /usr/lib/rancid/bin/drancid line 38.
Name "main::opt_V" used only once: possible typo at /usr/lib/rancid/bin/drancid line 33.
Name "main::logincmd" used only once: possible typo at /usr/lib/rancid/bin/drancid line 378.
Use of uninitialized value $ENV{"FILTER_PWDS"} in pattern match (m//) at /usr/lib/rancid/bin/drancid line 331.
Use of uninitialized value $ENV{"FILTER_PWDS"} in pattern match (m//) at /usr/lib/rancid/bin/drancid line 333.
Use of uninitialized value $hist_tag in string ne at /usr/lib/rancid/bin/drancid line 54.
Use of uninitialized value $command in string ne at /usr/lib/rancid/bin/drancid line 54.
Use of uninitialized value $4 in string ne at /usr/lib/rancid/bin/drancid line 243, <INPUT> line 289.
Use of uninitialized value $2 in concatenation (.) or string at /usr/lib/rancid/bin/drancid line 244, <INPUT> line 289.
Use of uninitialized value $4 in string ne at /usr/lib/rancid/bin/drancid line 243, <INPUT> line 290.
Use of uninitialized value $2 in concatenation (.) or string at /usr/lib/rancid/bin/drancid line 244, <INPUT> line 290.
Use of uninitialized value $4 in string ne at /usr/lib/rancid/bin/drancid line 243, <INPUT> line 291.
Use of uninitialized value $2 in concatenation (.) or string at /usr/lib/rancid/bin/drancid line 244, <INPUT> line 291.
Use of uninitialized value $4 in string ne at /usr/lib/rancid/bin/drancid line 243, <INPUT> line 292.
Use of uninitialized value $2 in concatenation (.) or string at /usr/lib/rancid/bin/drancid line 244, <INPUT> line 292.
Use of uninitialized value $4 in string ne at /usr/lib/rancid/bin/drancid line 243, <INPUT> line 293.
Use of uninitialized value $2 in concatenation (.) or string at /usr/lib/rancid/bin/drancid line 244, <INPUT> line 293.

rancid-git always sends HTML mail

I use rancid-git with an SVN repo. I tweaked svn to use colordiff as described here: http://cksum.org/blog/58-color-highlighted-svn-diff-output

As the $TMP.diff file is never empty, mails are always sent out even when there are no changes. The raw size of the HTML template is 17621, so compare to this size instead...?

CONF_INSTALL does not appear in AM_CONDITIONAL

Running through the 'INSTALL' file on a new Ubuntu 14.04 box:

root@rancid:~/code/rancid-git# automake --add-missing
configure.ac: error: no proper invocation of AM_INIT_AUTOMAKE was found.
configure.ac: You should verify that configure.ac invokes AM_INIT_AUTOMAKE,
configure.ac: that aclocal.m4 is present in the top-level directory,
configure.ac: and that aclocal.m4 was recently regenerated (using aclocal)
Makefile.am:41: error: MK_LCLSTATEDIR does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am: error: am__fastdepCC does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am:   The usual way to define 'am__fastdepCC' is to add 'AC_PROG_CC'
/usr/share/automake-1.14/am/depend2.am:   to 'configure.ac' and run 'aclocal' and 'autoconf' again
/usr/share/automake-1.14/am/depend2.am: error: AMDEP does not appear in AM_CONDITIONAL
/usr/share/automake-1.14/am/depend2.am:   The usual way to define 'AMDEP' is to add one of the compiler tests
/usr/share/automake-1.14/am/depend2.am:     AC_PROG_CC, AC_PROG_CXX, AC_PROG_OBJC, AC_PROG_OBJCXX,
/usr/share/automake-1.14/am/depend2.am:     AM_PROG_AS, AM_PROG_GCJ, AM_PROG_UPC
/usr/share/automake-1.14/am/depend2.am:   to 'configure.ac' and run 'aclocal' and 'autoconf' again
etc/Makefile.am:56: error: CONF_INSTALL does not appear in AM_CONDITIONAL
root@rancid:~/code/rancid-git#

Groups as autonomous repositories

I haven't seen any mention of it in any of the manpages I read. Is there an option to set each group as it's own separate repositiory?

This is desired is several use cases, especially when each group might be a separate administrative domain with different hooks desired and more. When using frontend git servers as well, would enable creating hooks to push individual groups to different projects representing within.

Would be helpful when used within an MSP.

rancid-cvs should test for potential `git init` failure

When initialising my repository, I got the following:

rancid@intranet:~$ /usr/lib/rancid/bin/rancid-cvs 
Initialized empty Git repository in /var/lib/rancid/.git/

*** Please tell me who you are.

Run

  git config --global user.email "[email protected]"
  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: empty ident name (for <[email protected]>) not allowed

*** Please tell me who you are.

Run

  git config --global user.email "[email protected]"
  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: empty ident name (for <[email protected]>) not allowed

*** Please tell me who you are.

Run

  git config --global user.email "[email protected]"
  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: empty ident name (for <[email protected]>) not allowed

The root cause may be problems within /etc/passwd — I notice the Debian package did not assign a 'full name' to the rancid user, meaning git could not successfully guess a name.

I suggest to either:

• refuse to proceed with git init and friends if user.name and user.email are not set, or perhaps even better:
• automatically set user.name to RANCID and user.email to rancid@$(hostname -f) (Side note: I'm not sure if hostname -f is reliable on all machines. Maybe it would be safer to use rancid@localhost instead?)

In addition to the above, it would be good to have the Debian package assign a full name to the rancid user.

Upstream pull request for f5rancid?

I must be dense, but I can't seem to find "upstream" (mentioned in #23). I would like to submit a pull request for them to pull in your ./bin/f5rancid.in at a minimum. It pains me that the OS provided package of 3.1 or 3.2 do not have this file from ~3 years ago. Apparently f5 + rancid is not very popular? We have a requirement to use OS packages at this specific customer, and have an F5 running an OS from this decade that uses tmsh :)

Thanks in advance,
Tommy

Merge upstream?

Hi!

Where the changeset to support git and HTML emails pushed upstream? I have extracted a patch for this purpose. Since it is based on the diff between the current version in Debian (which has additional patches) and your repository, this may not be applied as is on upstream version.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731744

No release available

Hi,

I wanted to use rancid-git, but couldn't find a released version: all tags in the repository point to tags of the upstream project, so without git compatibility.

Are the releases of rancid-git hosted on another platform?

Merge RANCID 3.2 (when released) including upstream git support

This will take some time, with tens of thousands of changes.

Most of the changes are simple, but there are a few places where some serious tinkering will need to be done.

I'm aiming to do at least some of this during a week off I have booked at the end of April, with an eventual preliminary release in May/June 2014. I'll try and do the work publicly, it will be on the "integration" branch.

At the end, I'm hoping to have a serious of patchsets to be applied that can be passed back upstream. Very happy for people to lend a hand -- especially for RANCID device types that I don't have access to.