Re: [rancid] how cisco nx-os switch work with rancid with read-only account

Fri, Nov 30, 2018 at 04:40:31PM +0800, yuan song:
> i have a read access account "RO" in nexus 3048, and i add it to
> .cloginrc file like that:
> add method 10.36.0.71 {ssh}
> add cyphertype * aes128-ctr,aes128-cbc,3des-cbc
> add user 10.36.0.71 ro
> add password 10.36.0.71 XXX
> add noenable 10.36.0.71 1
> 
> however, rancid log give me:
> 10.36.0.71: End of run not found
> Error: TIMEOUT reached
> 
> But, if i give my account full read&write permission, It works just fine.
> Hope someone could help me here, thx a lot
> 
> PS:nexus config
> role name rancid
> rule 1 permit read
> rule 2 permit command show *
> username ro password XXX role rancid

rancid must be able to alter some terminal settings; I do not know if the
role above allows this.  It must also be able to run dir.  see the full
command list in rancid.types.base.

also see the rancid FAQ; Section 3, Question 2.

_______________________________________________
Rancid-discuss mailing list
[email protected]
http://www.shrubbery.net/mailman/listinfo/rancid-discuss