Mailing List Archive: Support for NetScreens (n{login,rancid})

Support for NetScreens (n{login,rancid})

jeekay at gmail

Jun 8, 2005, 10:48 PM

Post #1 of 10 (1525 views)

The support files for NetScreens seem a little faulty, nrancid not
even parsing and nlogin depending on a concept that NetScreens dont
have (enable).

The two patches below clean them up enough for them to at least work -
please let me know if there's anything obviously wrong.

Thanks,
Ras

PS: Does gmail do annoying line breaks?
PPS: Diffs against:
nlogin:## $Id: nlogin.in,v 1.17 2004/05/21 19:28:49 heas Exp $
nrancid:## $Id: nrancid.in,v 1.13 2004/01/11 03:49:13 heas Exp $

--- nlogin.orig Thu Jun 9 01:37:17 2005
+++ nlogin Thu Jun 9 01:35:18 2005
@@ -485,14 +485,14 @@
if {[login $firewall $ruser $userpswd $passwd $enapasswd $prompt
$cmethod $cyphertype]} {
continue
}
- if { $enable } {
- if {[do_enable $enauser $enapasswd]} {
- if { $do_command || $do_script } {
- close; wait
- continue
- }
- }
- }
+# if { $enable } {
+# if {[do_enable $enauser $enapasswd]} {
+# if { $do_command || $do_script } {
+# close; wait
+# continue
+# }
+# }
+# }
# we are logged in, now figure out the full prompt
send "\r"
expect {

--- nrancid.orig Thu Jun 9 01:36:24 2005
+++ nrancid Thu Jun 9 01:42:12 2005
@@ -197,6 +197,7 @@
ProcessHistory("ADMIN","","",
"!set admin user $1 password <removed> privilege $3\n");
next;
+ }
ProcessHistory("","","","$_");
}
$found_end=1;

Support for NetScreens (n{login,rancid}) [ In reply to ]

heas at shrubbery

Jun 9, 2005, 5:04 PM

Post #2 of 10 (1515 views)

Thu, Jun 09, 2005 at 07:48:16AM +0100, Jee Kay:
> The support files for NetScreens seem a little faulty, nrancid not
> even parsing and nlogin depending on a concept that NetScreens dont
> have (enable).
>
> The two patches below clean them up enough for them to at least work -
> please let me know if there's anything obviously wrong.

Please try rancid 2.3.2a. There have been several changes since the versions
in your diffs, in which both of these bugs were squashed.

> Thanks,
> Ras
>
> PS: Does gmail do annoying line breaks?
> PPS: Diffs against:
> nlogin:## $Id: nlogin.in,v 1.17 2004/05/21 19:28:49 heas Exp $
> nrancid:## $Id: nrancid.in,v 1.13 2004/01/11 03:49:13 heas Exp $
>
> --- nlogin.orig Thu Jun 9 01:37:17 2005
> +++ nlogin Thu Jun 9 01:35:18 2005
> @@ -485,14 +485,14 @@
> if {[login $firewall $ruser $userpswd $passwd $enapasswd $prompt
> $cmethod $cyphertype]} {
> continue
> }
> - if { $enable } {
> - if {[do_enable $enauser $enapasswd]} {
> - if { $do_command || $do_script } {
> - close; wait
> - continue
> - }
> - }
> - }
> +# if { $enable } {
> +# if {[do_enable $enauser $enapasswd]} {
> +# if { $do_command || $do_script } {
> +# close; wait
> +# continue
> +# }
> +# }
> +# }
> # we are logged in, now figure out the full prompt
> send "\r"
> expect {
>
> --- nrancid.orig Thu Jun 9 01:36:24 2005
> +++ nrancid Thu Jun 9 01:42:12 2005
> @@ -197,6 +197,7 @@
> ProcessHistory("ADMIN","","",
> "!set admin user $1 password <removed> privilege $3\n");
> next;
> + }
> ProcessHistory("","","","$_");
> }
> $found_end=1;

Support for NetScreens (n{login,rancid}) [ In reply to ]

jeekay at gmail

Jun 10, 2005, 9:59 AM

Post #3 of 10 (1503 views)

On 6/10/05, john heasley <heas at shrubbery.net> wrote:
> Please try rancid 2.3.2a. There have been several changes since the versions
> in your diffs, in which both of these bugs were squashed.

Is 2.3.2a 'stable' ? (I realise that sounds like a fairly stupid
question about a release with an a in its name)

I'd rather not break a production system, so if it isn't I shall
shanghai another box to test this on.

Thanks,
Ras

Support for NetScreens (n{login,rancid}) [ In reply to ]

heas at shrubbery

Jun 10, 2005, 10:12 AM

Post #4 of 10 (1519 views)

Fri, Jun 10, 2005 at 07:59:50PM +0200, Jee Kay:
> On 6/10/05, john heasley <heas at shrubbery.net> wrote:
> > Please try rancid 2.3.2a. There have been several changes since the versions
> > in your diffs, in which both of these bugs were squashed.
>
> Is 2.3.2a 'stable' ? (I realise that sounds like a fairly stupid
> question about a release with an a in its name)
>
> I'd rather not break a production system, so if it isn't I shall
> shanghai another box to test this on.

It should be stable; if not, we'd like to hear about it. but, if you're
hesitant, you can just place nlogin.in & nrancid.in over your 2.3.1 source
and re-install. afaik, the netscreen support does work, but I do not have
one, so I can not test it.

Support for NetScreens (n{login,rancid}) [ In reply to ]

jeekay at gmail

Jun 14, 2005, 3:56 AM

Post #5 of 10 (1506 views)

On 6/10/05, john heasley <heas at shrubbery.net> wrote:
> It should be stable; if not, we'd like to hear about it. but, if you're
> hesitant, you can just place nlogin.in & nrancid.in over your 2.3.1 source
> and re-install. afaik, the netscreen support does work, but I do not have
> one, so I can not test it.

$ ./nlogin mspibf001e
invalid command name "@INCLUDE"
while executing
"@INCLUDE login.top@"
(file "./nlogin" line 34)

Looks like a macro isn't being expanded by autoconf?

## $Id: nlogin.in,v 1.20 2004/12/24 21:00:32 tex Exp $

Support for NetScreens (n{login,rancid}) [ In reply to ]

heas at shrubbery

Jun 14, 2005, 1:52 PM

Post #6 of 10 (1520 views)

Tue, Jun 14, 2005 at 12:56:38PM +0100, Jee Kay:
> On 6/10/05, john heasley <heas at shrubbery.net> wrote:
> > It should be stable; if not, we'd like to hear about it. but, if you're
> > hesitant, you can just place nlogin.in & nrancid.in over your 2.3.1 source
> > and re-install. afaik, the netscreen support does work, but I do not have
> > one, so I can not test it.
>
> $ ./nlogin mspibf001e
> invalid command name "@INCLUDE"
> while executing
> "@INCLUDE login.top@"
> (file "./nlogin" line 34)
>
> Looks like a macro isn't being expanded by autoconf?
>
> ## $Id: nlogin.in,v 1.20 2004/12/24 21:00:32 tex Exp $

Sorry, this was a branch commit error. Please grab
ftp://ftp.shrubbery.net/pub/rancid/rancid-2.3.2a.nlogin.in

Support for NetScreens (n{login,rancid}) [ In reply to ]

michael at halligan

Jun 14, 2005, 2:01 PM

Post #7 of 10 (1511 views)

Same problem with that nlogin version. If I use Joshua Sahala's patch,
it seems to work, but for some reason
rancid is trying to use nslogin instead of nlogin when it actually runs,
though my router.db says :netscreen

Michael

john heasley wrote:

>Tue, Jun 14, 2005 at 12:56:38PM +0100, Jee Kay:
>
>
>>On 6/10/05, john heasley <heas at shrubbery.net> wrote:
>>
>>
>>>It should be stable; if not, we'd like to hear about it. but, if you're
>>>hesitant, you can just place nlogin.in & nrancid.in over your 2.3.1 source
>>>and re-install. afaik, the netscreen support does work, but I do not have
>>>one, so I can not test it.
>>>
>>>
>>$ ./nlogin mspibf001e
>>invalid command name "@INCLUDE"
>> while executing
>>"@INCLUDE login.top@"
>> (file "./nlogin" line 34)
>>
>>Looks like a macro isn't being expanded by autoconf?
>>
>>## $Id: nlogin.in,v 1.20 2004/12/24 21:00:32 tex Exp $
>>
>>
>
>Sorry, this was a branch commit error. Please grab
> ftp://ftp.shrubbery.net/pub/rancid/rancid-2.3.2a.nlogin.in
>
>
>

--
-------------------
BitPusher, LLC
http://www.bitpusher.com/
1.888.9PUSHER
(415) 724.7998 - Mobile

Support for NetScreens (n{login,rancid}) [ In reply to ]

heas at shrubbery

Jun 14, 2005, 2:09 PM

Post #8 of 10 (1508 views)

Tue, Jun 14, 2005 at 03:01:34PM -0700, Michael T. Halligan:
> Same problem with that nlogin version. If I use Joshua Sahala's patch,
> it seems to work, but for some reason
> rancid is trying to use nslogin instead of nlogin when it actually runs,
> though my router.db says :netscreen

Have you altered rancid-fe or nrancid? rancid-fe should choose nrancid
and nrancid will execute nlogin.

Support for NetScreens (n{login,rancid}) [ In reply to ]

michael at halligan

Jun 14, 2005, 2:14 PM

Post #9 of 10 (1512 views)

John,

Nope. I've got a pretty vanilla install. According to my logs:
Trying to get all of the configs.
IP.ADDR nslogin error: Error: unknown connection method: telnet
IP.ADDR: missed cmd(s): cat /etc/ns.conf,get log setting
IP.ADDR: End of run not found

If I take the 2.3.1 version of nlogin, and apply Joshua's patch, I can
at least run nlogin hostname and it will login properly,
but then apparently rancid-fe is thinking that the netscreen is a netscaler

>Tue, Jun 14, 2005 at 03:01:34PM -0700, Michael T. Halligan:
>
>
>>Same problem with that nlogin version. If I use Joshua Sahala's patch,
>>it seems to work, but for some reason
>>rancid is trying to use nslogin instead of nlogin when it actually runs,
>>though my router.db says :netscreen
>>
>>
>
>Have you altered rancid-fe or nrancid? rancid-fe should choose nrancid
>and nrancid will execute nlogin.
>
>

--
-------------------
BitPusher, LLC
http://www.bitpusher.com/
1.888.9PUSHER
(415) 724.7998 - Mobile

Support for NetScreens (n{login,rancid}) [ In reply to ]

michael at halligan

Jun 14, 2005, 2:17 PM

Post #10 of 10 (1512 views)

Ignore this part of the problem, totally user error. I had typed
netscaler into the router.db file. Not enough caffeine today.

john heasley wrote:

>Tue, Jun 14, 2005 at 03:01:34PM -0700, Michael T. Halligan:
>
>
>>Same problem with that nlogin version. If I use Joshua Sahala's patch,
>>it seems to work, but for some reason
>>rancid is trying to use nslogin instead of nlogin when it actually runs,
>>though my router.db says :netscreen
>>
>>
>
>Have you altered rancid-fe or nrancid? rancid-fe should choose nrancid
>and nrancid will execute nlogin.
>
>

--
-------------------
BitPusher, LLC
http://www.bitpusher.com/
1.888.9PUSHER
(415) 724.7998 - Mobile