Mailing List Archive

Sonicwall: clogin sends password after first login?
Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

Thanks again,

Kevin


My .cloginrc file looks like this:

add noenable sonic {1}
add method sonic ssh
add cyphertype sonic aes128-ctr
add user sonic ReadOnlyAdmin
add password sonic {mypassword}

And the output looks like this:
root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc -noenable sonic

ReadOnlyAdmin@sonic's password:

Copyright (c) 2016 Dell | SonicWALL, Inc.
Using username 'ReadOnlyAdmin'.
Password:
ReadOnlyAdmin@MY NSA4600_Primary> mypassword
% Error encountered at '^' marker:
mypassword
^
% Error: No matching command found.
ReadOnlyAdmin@MY NSA4600_Primary>
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.


Sent from my android device.

-----Original Message-----
From: Kevin Geil <KGeil@orda.org>
To: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
Sent: Thu, 01 Mar 2018 16:06
Subject: [rancid] Sonicwall: clogin sends password after first login?

Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

Thanks again,

Kevin


My .cloginrc file looks like this:

add noenable sonic {1}
add method sonic ssh
add cyphertype sonic aes128-ctr
add user sonic ReadOnlyAdmin
add password sonic {mypassword}

And the output looks like this:
root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc -noenable sonic

ReadOnlyAdmin@sonic's password:

Copyright (c) 2016 Dell | SonicWALL, Inc.
Using username 'ReadOnlyAdmin'.
Password:
ReadOnlyAdmin@MY NSA4600_Primary> mypassword
% Error encountered at '^' marker:
mypassword
^
% Error: No matching command found.
ReadOnlyAdmin@MY NSA4600_Primary>
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
Thu, Mar 01, 2018 at 05:23:20PM -0500, doug.hughes@keystonenap.com:
> most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
>
>
> Sent from my android device.
>
> -----Original Message-----
> From: Kevin Geil <KGeil@orda.org>
> To: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
> Sent: Thu, 01 Mar 2018 16:06
> Subject: [rancid] Sonicwall: clogin sends password after first login?
>
> Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

There is no support for Sonic. So, I do not know if clogin would work with
it. you will need to add support yourself.

> Thanks again,
>
> Kevin
>
>
> My .cloginrc file looks like this:
>
> add noenable sonic {1}
> add method sonic ssh
> add cyphertype sonic aes128-ctr
> add user sonic ReadOnlyAdmin
> add password sonic {mypassword}
>
> And the output looks like this:
> root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc -noenable sonic
>
> ReadOnlyAdmin@sonic's password:
>
> Copyright (c) 2016 Dell | SonicWALL, Inc.
> Using username 'ReadOnlyAdmin'.
> Password:
> ReadOnlyAdmin@MY NSA4600_Primary> mypassword
> % Error encountered at '^' marker:
> mypassword
> ^
> % Error: No matching command found.
> ReadOnlyAdmin@MY NSA4600_Primary>
>
>

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
Thanks, I figured it was something like that. Is it recommended to use a custom version of clogin, or do I just discard the error text when I write the script that retrieves the configuration?

Thanks again,

Kevin
-----Original Message-----
From: heasley [mailto:heas@shrubbery.net]
Sent: Thursday, March 1, 2018 6:38 PM
To: doug.hughes@keystonenap.com
Cc: rancid-discuss@shrubbery.net; Kevin Geil <KGeil@orda.org>
Subject: Re: [rancid] Sonicwall: clogin sends password after first login?

Thu, Mar 01, 2018 at 05:23:20PM -0500, doug.hughes@keystonenap.com:
> most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
>
>
> Sent from my android device.
>
> -----Original Message-----
> From: Kevin Geil <KGeil@orda.org>
> To: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
> Sent: Thu, 01 Mar 2018 16:06
> Subject: [rancid] Sonicwall: clogin sends password after first login?
>
> Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

There is no support for Sonic. So, I do not know if clogin would work with it. you will need to add support yourself.

> Thanks again,
>
> Kevin
>
>
> My .cloginrc file looks like this:
>
> add noenable sonic {1}
> add method sonic ssh
> add cyphertype sonic aes128-ctr
> add user sonic ReadOnlyAdmin
> add password sonic {mypassword}
>
> And the output looks like this:
> root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc
> -noenable sonic
>
> ReadOnlyAdmin@sonic's password:
>
> Copyright (c) 2016 Dell | SonicWALL, Inc.
> Using username 'ReadOnlyAdmin'.
> Password:
> ReadOnlyAdmin@MY NSA4600_Primary> mypassword % Error encountered at
> '^' marker:
> mypassword
> ^
> % Error: No matching command found.
> ReadOnlyAdmin@MY NSA4600_Primary>
>
>

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
you'll probably have to (or want to) for clogin into something like soniclogin so that it can do what is necessary to get the login prompt determination right. (see also the paloalto login script)
And you'll want a forked rancid from one of the other examples like urancid that sends the right sets of commands. Urancid for ubiquiti devices is a pretty simple and good one to copy, or the fortinet one.


Sent from my android device.

-----Original Message-----
From: Kevin Geil <KGeil@orda.org>
To: heasley <heas@shrubbery.net>, "doug.hughes@keystonenap.com" <doug.hughes@keystonenap.com>
Cc: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
Sent: Fri, 02 Mar 2018 9:11
Subject: RE: [rancid] Sonicwall: clogin sends password after first login?

Thanks, I figured it was something like that. Is it recommended to use a custom version of clogin, or do I just discard the error text when I write the script that retrieves the configuration?

Thanks again,

Kevin
-----Original Message-----
From: heasley [mailto:heas@shrubbery.net]
Sent: Thursday, March 1, 2018 6:38 PM
To: doug.hughes@keystonenap.com
Cc: rancid-discuss@shrubbery.net; Kevin Geil <KGeil@orda.org>
Subject: Re: [rancid] Sonicwall: clogin sends password after first login?

Thu, Mar 01, 2018 at 05:23:20PM -0500, doug.hughes@keystonenap.com:
> most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
>
>
> Sent from my android device.
>
> -----Original Message-----
> From: Kevin Geil <KGeil@orda.org>
> To: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
> Sent: Thu, 01 Mar 2018 16:06
> Subject: [rancid] Sonicwall: clogin sends password after first login?
>
> Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

There is no support for Sonic. So, I do not know if clogin would work with it. you will need to add support yourself.

> Thanks again,
>
> Kevin
>
>
> My .cloginrc file looks like this:
>
> add noenable sonic {1}
> add method sonic ssh
> add cyphertype sonic aes128-ctr
> add user sonic ReadOnlyAdmin
> add password sonic {mypassword}
>
> And the output looks like this:
> root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc
> -noenable sonic
>
> ReadOnlyAdmin@sonic's password:
>
> Copyright (c) 2016 Dell | SonicWALL, Inc.
> Using username 'ReadOnlyAdmin'.
> Password:
> ReadOnlyAdmin@MY NSA4600_Primary> mypassword % Error encountered at
> '^' marker:
> mypassword
> ^
> % Error: No matching command found.
> ReadOnlyAdmin@MY NSA4600_Primary>
>
>

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss@shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
Thanks so much. Hopefully I have some success to share in the next couple of months.

Kevin

From: doug.hughes@keystonenap.com [mailto:doug.hughes@keystonenap.com]
Sent: Friday, March 2, 2018 9:26 AM
To: heasley <heas@shrubbery.net>; Kevin Geil <KGeil@orda.org>
Cc: rancid-discuss@shrubbery.net
Subject: RE: [rancid] Sonicwall: clogin sends password after first login?

you'll probably have to (or want to) for clogin into something like soniclogin so that it can do what is necessary to get the login prompt determination right. (see also the paloalto login script)
And you'll want a forked rancid from one of the other examples like urancid that sends the right sets of commands. Urancid for ubiquiti devices is a pretty simple and good one to copy, or the fortinet one.


Sent from my android device.

-----Original Message-----
From: Kevin Geil <KGeil@orda.org<mailto:KGeil@orda.org>>
To: heasley <heas@shrubbery.net<mailto:heas@shrubbery.net>>, "doug.hughes@keystonenap.com<mailto:doug.hughes@keystonenap.com>" <doug.hughes@keystonenap.com<mailto:doug.hughes@keystonenap.com>>
Cc: "rancid-discuss@shrubbery.net<mailto:rancid-discuss@shrubbery.net>" <rancid-discuss@shrubbery.net<mailto:rancid-discuss@shrubbery.net>>
Sent: Fri, 02 Mar 2018 9:11
Subject: RE: [rancid] Sonicwall: clogin sends password after first login?
Thanks, I figured it was something like that. Is it recommended to use a custom version of clogin, or do I just discard the error text when I write the script that retrieves the configuration?

Thanks again,

Kevin
-----Original Message-----
From: heasley [mailto:heas@shrubbery.net<mailto:heas@shrubbery.net>]
Sent: Thursday, March 1, 2018 6:38 PM
To: doug.hughes@keystonenap.com<mailto:doug.hughes@keystonenap.com>
Cc: rancid-discuss@shrubbery.net<mailto:rancid-discuss@shrubbery.net>; Kevin Geil <KGeil@orda.org<mailto:KGeil@orda.org>>
Subject: Re: [rancid] Sonicwall: clogin sends password after first login?

Thu, Mar 01, 2018 at 05:23:20PM -0500, doug.hughes@keystonenap.com<mailto:doug.hughes@keystonenap.com>:
> most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
>
>
> Sent from my android device.
>
> -----Original Message-----
> From: Kevin Geil <KGeil@orda.org<mailto:KGeil@orda.org>>
> To: "rancid-discuss@shrubbery.net<mailto:rancid-discuss@shrubbery.net>" <rancid-discuss@shrubbery.net<mailto:rancid-discuss@shrubbery.net>>
> Sent: Thu, 01 Mar 2018 16:06
> Subject: [rancid] Sonicwall: clogin sends password after first login?
>
> Hi, I hope someone can point me in<geo:0,0?q=one+can+point+me+in> the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.

There is no support for Sonic. So, I do not know if clogin would work with it. you will need to add support yourself.

> Thanks again,
>
> Kevin
>
>
> My .cloginrc file looks like this:
>
> add noenable sonic {1}
> add method sonic ssh
> add cyphertype sonic aes128-ctr
> add user sonic ReadOnlyAdmin
> add password sonic {mypassword}
>
> And the output looks like this:
> root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc
> -noenable sonic
>
> ReadOnlyAdmin@sonic's password:
>
> Copyright (c) 2016 Dell | SonicWALL, Inc.
> Using username 'ReadOnlyAdmin'.
> Password:
> ReadOnlyAdmin@MY NSA4600_Primary> mypassword % Error encountered at
> '^' marker:
> mypassword
> ^
> % Error: No matching command found.
> ReadOnlyAdmin@MY NSA4600_Primary>
>
>

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss@shrubbery.net<mailto:Rancid-discuss@shrubbery.net>
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
Re: Sonicwall: clogin sends password after first login? [ In reply to ]
Fri, Mar 02, 2018 at 09:25:33AM -0500, doug.hughes@keystonenap.com:
> you'll probably have to (or want to) for clogin into something like soniclogin so that it can do what is necessary to get the login prompt determination right. (see also the paloalto login script)
> And you'll want a forked rancid from one of the other examples like urancid that sends the right sets of commands. Urancid for ubiquiti devices is a pretty simple and good one to copy, or the fortinet one.

there is a rancid FAQ entry on extending rancid. please read that too.

the ubiquity stuff is native now, btw. I think it might need a tweak or
two for some devices that I did not have access to.

> Sent from my android device.
>
> -----Original Message-----
> From: Kevin Geil <KGeil@orda.org>
> To: heasley <heas@shrubbery.net>, "doug.hughes@keystonenap.com" <doug.hughes@keystonenap.com>
> Cc: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
> Sent: Fri, 02 Mar 2018 9:11
> Subject: RE: [rancid] Sonicwall: clogin sends password after first login?
>
> Thanks, I figured it was something like that. Is it recommended to use a custom version of clogin, or do I just discard the error text when I write the script that retrieves the configuration?
>
> Thanks again,
>
> Kevin
> -----Original Message-----
> From: heasley [mailto:heas@shrubbery.net]
> Sent: Thursday, March 1, 2018 6:38 PM
> To: doug.hughes@keystonenap.com
> Cc: rancid-discuss@shrubbery.net; Kevin Geil <KGeil@orda.org>
> Subject: Re: [rancid] Sonicwall: clogin sends password after first login?
>
> Thu, Mar 01, 2018 at 05:23:20PM -0500, doug.hughes@keystonenap.com:
> > most likely it's having a problem recognizing your prompt. That's a pretty complex one and embedded spaces are bound to complicate things.
> >
> >
> > Sent from my android device.
> >
> > -----Original Message-----
> > From: Kevin Geil <KGeil@orda.org>
> > To: "rancid-discuss@shrubbery.net" <rancid-discuss@shrubbery.net>
> > Sent: Thu, 01 Mar 2018 16:06
> > Subject: [rancid] Sonicwall: clogin sends password after first login?
> >
> > Hi, I hope someone can point me in the right direction here: I'm trying to monitor a sonicwall device with Rancid, and am having a hiccup at the first step. I can get clogin to authenticate to the device, but it immediately sends the password a second time after login, so the sonicwall sees it as a command, and returns an error. I'm guessing it's my lack of understanding of Clogin, but after reading documentation, I still can't figure it out. Thanks in advance to anyone who can help. I have tried adding a timeout value, and playing with the -noenable option, but to no avail.
>
> There is no support for Sonic. So, I do not know if clogin would work with it. you will need to add support yourself.
>
> > Thanks again,
> >
> > Kevin
> >
> >
> > My .cloginrc file looks like this:
> >
> > add noenable sonic {1}
> > add method sonic ssh
> > add cyphertype sonic aes128-ctr
> > add user sonic ReadOnlyAdmin
> > add password sonic {mypassword}
> >
> > And the output looks like this:
> > root@ubuntu:/var/lib/rancid/bin# ./clogin -f /var/lib/rancid/.cloginrc
> > -noenable sonic
> >
> > ReadOnlyAdmin@sonic's password:
> >
> > Copyright (c) 2016 Dell | SonicWALL, Inc.
> > Using username 'ReadOnlyAdmin'.
> > Password:
> > ReadOnlyAdmin@MY NSA4600_Primary> mypassword % Error encountered at
> > '^' marker:
> > mypassword
> > ^
> > % Error: No matching command found.
> > ReadOnlyAdmin@MY NSA4600_Primary>
> >
> >
>
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss@shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo/rancid-discuss
>

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss@shrubbery.net
http://www.shrubbery.net/mailman/listinfo/rancid-discuss