Daniel,

I think if you're trying to strip passwords from the config, rancid does that.

per rancid.conf

# FILTER_PWDS determines which passwords are filtered from configs by the

# value set (NO | YES | ALL).  see rancid.conf(5).

#FILTER_PWDS=YES; export FILTER_PWDS

FILTER_PWDS=NO; export FILTER_PWDS



On Wed, Jan 29, 2014 at 5:58 PM, Daniel Rolfe <daniel.rolfe.au@gmail.com> wrote:
Hi,

Thanks for getting back to me, 

In my situation, as a network implementer I'm always getting asked for configs from engineering, who put change control together but don't have access to any devices. 

Engineering are trusted with the configs but I'd rather not give them access to stuff up our snmp monitoring as they only need read access. 

Where some of our apps guys only have access to see if their portchannels are up to the LB or Blade Chassis (perfect normal user) 

we also have two copies of rancid configs, one for implementers will full config, another with snmp /device passwords stripped for eng access

I was just going to script the stripped configs in the observium watch dir etc.

global read to me should mean global read ha ha, not global read except rancid configs :-) Just a thought but, my situation may be unique

Regards, Daniel



On Thu, Jan 30, 2014 at 12:01 PM, Adam Armstrong <adama@memetic.org> wrote:

Configs have passwords in them, thus giving "global write" access on your network to anyone who can view them, this we don't allow this :)

adam.


On 2014-01-29 18:02, Daniel Rolfe wrote:
Anyone have any ideas on this one ?

Regards, Daniel

On Fri, Jan 24, 2014 at 1:15 PM, Daniel Rolfe <daniel.rolfe.au@gmail.com> wrote:

Is there any way to give config access to global read accounts ?

I'm on the CE version at work but...

Regards, Daniel


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium