Daniel,
I think if you're trying to strip passwords from the config, rancid does that.
per rancid.conf
# FILTER_PWDS determines which passwords are filtered from configs by the
# value set (NO | YES | ALL). see rancid.conf(5).
#FILTER_PWDS=YES; export FILTER_PWDS
FILTER_PWDS=NO; export FILTER_PWDS
On Wed, Jan 29, 2014 at 5:58 PM, Daniel Rolfe daniel.rolfe.au@gmail.comwrote:
Hi,
Thanks for getting back to me,
In my situation, as a network implementer I'm always getting asked for configs from engineering, who put change control together but don't have access to any devices.
Engineering are trusted with the configs but I'd rather not give them access to stuff up our snmp monitoring as they only need read access.
Where some of our apps guys only have access to see if their portchannels are up to the LB or Blade Chassis (perfect normal user)
we also have two copies of rancid configs, one for implementers will full config, another with snmp /device passwords stripped for eng access
I was just going to script the stripped configs in the observium watch dir etc.
global read to me should mean global read ha ha, not global read except rancid configs :-) Just a thought but, my situation may be unique
Regards, Daniel
On Thu, Jan 30, 2014 at 12:01 PM, Adam Armstrong adama@memetic.orgwrote:
Configs have passwords in them, thus giving "global write" access on your network to anyone who can view them, this we don't allow this :)
adam.
On 2014-01-29 18:02, Daniel Rolfe wrote:
Anyone have any ideas on this one ?
Regards, Daniel
On Fri, Jan 24, 2014 at 1:15 PM, Daniel Rolfe daniel.rolfe.au@gmail.com wrote:
Is there any way to give config access to global read accounts ?
I'm on the CE version at work but...
Regards, Daniel
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium