mirror of
https://github.com/shouptech/rancidscripts.git
synced 2026-02-03 13:19:43 +00:00
Added scripts
This commit is contained in:
Mike Shoup
parent
a1b6626bdb
commit
3ed87c1ed7
3 changed files with 918 additions and 2 deletions
24
README.md
24
README.md
|
|
@ -1,2 +1,22 @@
|
|||
# uerancid
|
||||
A set of scripts to use Rancid with an Ubiquiti EdgeRouter
|
||||
RANCID Scripts for Ubiquiti/UBNT EdgeRouters
|
||||
======
|
||||
|
||||
Ubiquiti/UBNT Edgerouter scripts for Rancid. Forked from
|
||||
https://bitbucket.org/aquerubin/rancid-vyatta
|
||||
|
||||
Includes:
|
||||
|
||||
* uelogin - basic login script
|
||||
* vrancid - the Rancid wrapper
|
||||
|
||||
To integrate into your RANCID install:
|
||||
|
||||
* Copy uelogin and uerancid to your 'bin' directory
|
||||
* Modify 'rancid.types.conf', and add uerancid.. IE:
|
||||
|
||||
```
|
||||
ubnt-er;script;uerancid
|
||||
```
|
||||
* Add a new device to your 'router.db', with the vendor of 'ubnt-er'
|
||||
* Use it :)
|
||||
|
||||
|
|
|
|||
522
uelogin
Executable file
522
uelogin
Executable file
|
|
@ -0,0 +1,522 @@
|
|||
#! /usr/bin/expect --
|
||||
##
|
||||
##
|
||||
## rancid 2.3.6
|
||||
## Copyright (c) 1997-2009 by Terrapin Communications, Inc.
|
||||
## All rights reserved.
|
||||
##
|
||||
|
||||
# Usage line
|
||||
set usage "Usage: $argv0 \[-dSV\] \[-c command\] \[-Evar=x\] \
|
||||
\[-f cloginrc-file\] \[-p user-password\] \[-r passphrase\] \[-s script-file\] \
|
||||
\[-u username\] \[-t timeout\] \[-x command-file\] \[-y ssh_cypher_type\] \
|
||||
router \[router...\]\n"
|
||||
|
||||
# env(CLOGIN) may contain the following chars:
|
||||
# x == do not set xterm banner or name
|
||||
|
||||
# Password file
|
||||
set password_file $env(HOME)/.cloginrc
|
||||
# Default is to login to the router
|
||||
set do_command 0
|
||||
set do_script 0
|
||||
# The default is to automatically enable
|
||||
set avenable 1
|
||||
# The default is to look in the password file to find the passwords. This
|
||||
# tracks if we receive them on the command line.
|
||||
set do_passwd 1
|
||||
# Save config, if prompted
|
||||
set do_saveconfig 1
|
||||
# Sometimes routers take awhile to answer (the default is 10 sec)
|
||||
set timeoutdflt 120
|
||||
|
||||
# Find the user in the ENV, or use the unix userid.
|
||||
if {[ info exists env(CISCO_USER) ]} {
|
||||
set default_user $env(CISCO_USER)
|
||||
} elseif {[ info exists env(USER) ]} {
|
||||
set default_user $env(USER)
|
||||
} elseif {[ info exists env(LOGNAME) ]} {
|
||||
set default_user $env(LOGNAME)
|
||||
} else {
|
||||
# This uses "id" which I think is portable. At least it has existed
|
||||
# (without options) on all machines/OSes I've been on recently -
|
||||
# unlike whoami or id -nu.
|
||||
if [ catch {exec id} reason ] {
|
||||
send_error "\nError: could not exec id: $reason\n"
|
||||
exit 1
|
||||
}
|
||||
regexp {\(([^)]*)} "$reason" junk default_user
|
||||
}
|
||||
if {[ info exists env(CLOGINRC) ]} {
|
||||
set password_file $env(CLOGINRC)
|
||||
}
|
||||
|
||||
# Process the command line
|
||||
for {set i 0} {$i < $argc} {incr i} {
|
||||
set arg [lindex $argv $i]
|
||||
|
||||
switch -glob -- $arg {
|
||||
# Command to run.
|
||||
-c* -
|
||||
-C* {
|
||||
if {! [ regexp .\[cC\](.+) $arg ignore command]} {
|
||||
incr i
|
||||
set command [ lindex $argv $i ]
|
||||
}
|
||||
set do_command 1
|
||||
# Expect debug mode
|
||||
} -d* {
|
||||
exp_internal 1
|
||||
# Environment variable to pass to -s scripts
|
||||
} -E* {
|
||||
if {[ regexp .\[E\](.+)=(.+) $arg ignore varname varvalue]} {
|
||||
set E$varname $varvalue
|
||||
} else {
|
||||
send_user "\nError: invalid format for -E in $arg\n"
|
||||
exit 1
|
||||
}
|
||||
# alternate cloginrc file
|
||||
} -f* {
|
||||
if {! [ regexp .\[fF\](.+) $arg ignore password_file]} {
|
||||
incr i
|
||||
set password_file [ lindex $argv $i ]
|
||||
}
|
||||
# user Password
|
||||
} -p* {
|
||||
if {! [ regexp .\[pP\](.+) $arg ignore userpasswd]} {
|
||||
incr i
|
||||
set userpasswd [ lindex $argv $i ]
|
||||
}
|
||||
set do_passwd 0
|
||||
# ssh passphrase
|
||||
} -r* {
|
||||
if {! [ regexp .\[rR\](.+) $arg ignore passphrase]} {
|
||||
incr i
|
||||
set avpassphrase [ lindex $argv $i ]
|
||||
}
|
||||
# VTY Password
|
||||
} -v* {
|
||||
# ignore -v
|
||||
# Version string
|
||||
} -V* {
|
||||
send_user "rancid 2.3.6\n"
|
||||
exit 0
|
||||
# Expect script to run.
|
||||
} -s* {
|
||||
if {! [ regexp .\[sS\](.+) $arg ignore sfile]} {
|
||||
incr i
|
||||
set sfile [ lindex $argv $i ]
|
||||
}
|
||||
if { ! [ file readable $sfile ] } {
|
||||
send_user "\nError: Can't read $sfile\n"
|
||||
exit 1
|
||||
}
|
||||
set do_script 1
|
||||
# save config on exit
|
||||
} -S* {
|
||||
set do_saveconfig 1
|
||||
# Timeout
|
||||
} -t* {
|
||||
if {! [ regexp .\[tT\](.+) $arg ignore timeout]} {
|
||||
incr i
|
||||
set timeoutdflt [ lindex $argv $i ]
|
||||
}
|
||||
# Username
|
||||
} -u* {
|
||||
if {! [ regexp .\[uU\](.+) $arg ignore user]} {
|
||||
incr i
|
||||
set username [ lindex $argv $i ]
|
||||
}
|
||||
# command file
|
||||
} -x* {
|
||||
if {! [ regexp .\[xX\](.+) $arg ignore cmd_file]} {
|
||||
incr i
|
||||
set cmd_file [ lindex $argv $i ]
|
||||
}
|
||||
if [ catch {set cmd_fd [open $cmd_file r]} reason ] {
|
||||
send_user "\nError: $reason\n"
|
||||
exit 1
|
||||
}
|
||||
set cmd_text [read $cmd_fd]
|
||||
close $cmd_fd
|
||||
set command [join [split $cmd_text \n] \;]
|
||||
set do_command 1
|
||||
# 'ssh -c' cypher type
|
||||
} -y* {
|
||||
if {! [ regexp .\[yY\](.+) $arg ignore cypher]} {
|
||||
incr i
|
||||
set cypher [ lindex $argv $i ]
|
||||
}
|
||||
} -* {
|
||||
send_user "\nError: Unknown argument! $arg\n"
|
||||
send_user $usage
|
||||
exit 1
|
||||
} default {
|
||||
break
|
||||
}
|
||||
}
|
||||
}
|
||||
# Process routers...no routers listed is an error.
|
||||
if { $i == $argc } {
|
||||
send_user "\nError: $usage"
|
||||
}
|
||||
|
||||
# Only be quiet if we are running a script (it can log its output
|
||||
# on its own)
|
||||
if { $do_script } {
|
||||
log_user 1
|
||||
} else {
|
||||
log_user 1
|
||||
}
|
||||
|
||||
#
|
||||
# Done configuration/variable setting. Now run with it...
|
||||
#
|
||||
|
||||
# Sets Xterm title if interactive...if its an xterm and the user cares
|
||||
proc label { host } {
|
||||
global env
|
||||
# if CLOGIN has an 'x' in it, don't set the xterm name/banner
|
||||
if [info exists env(CLOGIN)] {
|
||||
if {[string first "x" $env(CLOGIN)] != -1} { return }
|
||||
}
|
||||
# take host from ENV(TERM)
|
||||
if [info exists env(TERM)] {
|
||||
if [regexp \^(xterm|vs) $env(TERM) ignore ] {
|
||||
send_user "\033]1;[lindex [split $host "."] 0]\a"
|
||||
send_user "\033]2;$host\a"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# This is a helper function to make the password file easier to
|
||||
# maintain. Using this the password file has the form:
|
||||
# add password sl* pete cow
|
||||
# add password at* steve
|
||||
# add password * hanky-pie
|
||||
proc add {var args} { global int_$var ; lappend int_$var $args}
|
||||
proc include {args} {
|
||||
global env
|
||||
regsub -all "(^{|}$)" $args {} args
|
||||
if { [ regexp "^/" $args ignore ] == 0 } {
|
||||
set args $env(HOME)/$args
|
||||
}
|
||||
source_password_file $args
|
||||
}
|
||||
|
||||
proc find {var router} {
|
||||
upvar int_$var list
|
||||
if { [info exists list] } {
|
||||
foreach line $list {
|
||||
if { [string match [lindex $line 0] $router ] } {
|
||||
return [lrange $line 1 end]
|
||||
}
|
||||
}
|
||||
}
|
||||
return {}
|
||||
}
|
||||
|
||||
# Loads the password file. Note that as this file is tcl, and that
|
||||
# it is sourced, the user better know what to put in there, as it
|
||||
# could install more than just password info... I will assume however,
|
||||
# that a "bad guy" could just as easy put such code in the clogin
|
||||
# script, so I will leave .cloginrc as just an extention of that script
|
||||
proc source_password_file { password_file } {
|
||||
global env
|
||||
if { ! [file exists $password_file] } {
|
||||
send_user "\nError: password file ($password_file) does not exist\n"
|
||||
exit 1
|
||||
}
|
||||
file stat $password_file fileinfo
|
||||
if { [expr ($fileinfo(mode) & 007)] != 0000 } {
|
||||
send_user "\nError: $password_file must not be world readable/writable\n"
|
||||
exit 1
|
||||
}
|
||||
if [ catch {source $password_file} reason ] {
|
||||
send_user "\nError: $reason\n"
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
# Log into the router.
|
||||
# returns: 0 on success, 1 on failure
|
||||
proc login { router user passwd cmethod cyphertype identfile} {
|
||||
global spawn_id in_proc do_command do_script passphrase prompt
|
||||
global sshcmd
|
||||
set in_proc 1
|
||||
|
||||
# try each of the connection methods in $cmethod until one is successful
|
||||
set progs [llength $cmethod]
|
||||
foreach prog [lrange $cmethod 0 end] {
|
||||
incr progs -1
|
||||
if [string match "telnet*" $prog] {
|
||||
regexp {telnet(:([^[:space:]]+))*} $prog command suffix port
|
||||
if {"$port" == ""} {
|
||||
set retval [ catch {spawn telnet $router} reason ]
|
||||
} else {
|
||||
set retval [ catch {spawn telnet $router $port} reason ]
|
||||
}
|
||||
if { $retval } {
|
||||
send_user "\nError: telnet failed: $reason\n"
|
||||
return 1
|
||||
}
|
||||
} elseif ![string compare $prog "ssh"] {
|
||||
# ssh to the router & try to login with or without an identfile.
|
||||
# We use two calls to spawn since spawn does not seem to parse
|
||||
# spaces correctly.
|
||||
regexp {ssh(:([^[:space:]]+))*} $prog methcmd suffix port
|
||||
set cmd [join [lindex $sshcmd 0] " "]
|
||||
if {"$port" != ""} {
|
||||
set cmd "$cmd -p $port"
|
||||
}
|
||||
if {"$identfile" != ""} {
|
||||
set cmd "$cmd -i $identfile"
|
||||
}
|
||||
set retval [ catch {eval spawn [split "$cmd -c $cyphertype -x -l $user $router" { }]} reason ]
|
||||
if { $retval } {
|
||||
send_user "\nError: $sshcmd failed: $reason\n"
|
||||
return 1
|
||||
}
|
||||
} elseif ![string compare $prog "rsh"] {
|
||||
send_error "\nError: unsupported method: rsh\n"
|
||||
if { $progs == 0 } {
|
||||
return 1
|
||||
}
|
||||
continue
|
||||
} else {
|
||||
send_user "\nError: unknown connection method: $prog\n"
|
||||
return 1
|
||||
}
|
||||
sleep 0.3
|
||||
|
||||
# This helps cleanup each expect clause.
|
||||
expect_after {
|
||||
timeout {
|
||||
send_user "\nError: TIMEOUT reached\n"
|
||||
catch {close}; catch {wait};
|
||||
if { $in_proc} {
|
||||
return 1
|
||||
} else {
|
||||
continue
|
||||
}
|
||||
} eof {
|
||||
send_user "\nError: EOF received\n"
|
||||
catch {close}; catch {wait};
|
||||
if { $in_proc} {
|
||||
return 1
|
||||
} else {
|
||||
continue
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Here we get a little tricky. There are several possibilities:
|
||||
# the router can ask for a username and passwd and then
|
||||
# talk to the TACACS server to authenticate you, or if the
|
||||
# TACACS server is not working, then it will use the enable
|
||||
# passwd. Or, the router might not have TACACS turned on,
|
||||
# then it will just send the passwd.
|
||||
expect {
|
||||
-re "(Connection refused|Secure connection \[^\n\r]+ refused|Connection closed by)" {
|
||||
catch {close}; catch {wait};
|
||||
if !$progs {
|
||||
send_user "\nError: Connection Refused ($prog)\n"; return 1
|
||||
}
|
||||
}
|
||||
eof { send_user "\nError: Couldn't login\n"; wait; return 1
|
||||
} -nocase "unknown host\r\n" {
|
||||
catch {close}; catch {wait};
|
||||
send_user "\nError: Unknown host\n"; wait; return 1
|
||||
} "Host is unreachable" {
|
||||
catch {close}; catch {wait};
|
||||
send_user "\nError: Host Unreachable!\n"; wait; return 1
|
||||
} "No address associated with name" {
|
||||
catch {close}; catch {wait};
|
||||
send_user "\nError: Unknown host\n"; wait; return 1
|
||||
}
|
||||
"Login incorrect" {
|
||||
send_user "\nError: Check your password for $router\n"
|
||||
catch {close}; catch {wait}; return 1
|
||||
}
|
||||
-re "Enter passphrase.*: " {
|
||||
# sleep briefly to allow time for stty -echo
|
||||
sleep 1
|
||||
send -- "$passphrase\r"
|
||||
exp_continue }
|
||||
-re "(Host key not found |The authenticity of host .* be established).*\(yes\/no\)\?" {
|
||||
send "yes\r"
|
||||
send_user "\nHost $router added to the list of known hosts.\n"
|
||||
exp_continue }
|
||||
-re "HOST IDENTIFICATION HAS CHANGED.* \(yes\/no\)\?" {
|
||||
send "no\r"
|
||||
send_user "\nError: The host key for $router has changed. Update the SSH known_hosts file accordingly.\n"
|
||||
return 1 }
|
||||
-re "Offending key for .* \(yes\/no\)\?" {
|
||||
send "no\r"
|
||||
send_user "\nError: host key mismatch for $router. Update the SSH known_hosts file accordingly.\n"
|
||||
return 1 }
|
||||
-re "(Username|\[\r\n]login):" {
|
||||
send -- "$user\r"
|
||||
exp_continue
|
||||
}
|
||||
"\[Pp]assword:" {
|
||||
sleep 1; send -- "$passwd\r"
|
||||
exp_continue
|
||||
}
|
||||
-re "$prompt" { break; }
|
||||
denied { send_user "\nError: Check your password for $router\n"
|
||||
catch {close}; catch {wait}; return 1
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# we are logged in, now figure out the full prompt
|
||||
send "\r"
|
||||
expect {
|
||||
-re "(\r\n|\n)" { exp_continue; }
|
||||
-re "^\[^ ]+$prompt" {
|
||||
set prompt $expect_out(0,string);
|
||||
regsub ">" $prompt "\[#>]" prompt;
|
||||
}
|
||||
}
|
||||
|
||||
set in_proc 0
|
||||
return 0
|
||||
}
|
||||
|
||||
# Run commands given on the command line.
|
||||
proc run_commands { prompt command } {
|
||||
global in_proc
|
||||
set in_proc 1
|
||||
|
||||
# For some reason the full VyOS prompt is prefixed with an escape
|
||||
# sequence \e]0; and the configure mode prompt does not contain the
|
||||
# current path found in the normal prompt. Strip these out to form
|
||||
# the config mode prompt.
|
||||
set prompt [regsub "^.*;" $prompt ""]
|
||||
# Remove the path starting with :
|
||||
set prompt_config [regsub {:.*} $prompt ""]
|
||||
|
||||
send "terminal length 0\r"
|
||||
|
||||
set commands [split $command \;]
|
||||
set num_commands [llength $commands]
|
||||
for {set i 0} {$i < $num_commands} { incr i} {
|
||||
send "[lindex $commands $i]\r"
|
||||
|
||||
expect {
|
||||
-re "^\[^\n\r *]*$prompt" {}
|
||||
-re "^\[^\n\r *]*$prompt_config" {}
|
||||
-re "^\[^\n\r]*$prompt $" { exp_continue }
|
||||
-re "(\r\n|\n)" { exp_continue }
|
||||
}
|
||||
}
|
||||
send "exit\r"
|
||||
expect {
|
||||
"\n" { exp_continue }
|
||||
timeout { catch {close}; catch {wait};
|
||||
return 0
|
||||
}
|
||||
eof { return 0 }
|
||||
}
|
||||
set in_proc 0
|
||||
}
|
||||
|
||||
#
|
||||
# For each router... (this is main loop)
|
||||
#
|
||||
source_password_file $password_file
|
||||
set in_proc 0
|
||||
set exitval 0
|
||||
foreach router [lrange $argv $i end] {
|
||||
set router [string tolower $router]
|
||||
send_user "$router\n"
|
||||
# device timeout
|
||||
set timeout [find timeout $router]
|
||||
if { [llength $timeout] == 0 } {
|
||||
set timeout $timeoutdflt
|
||||
}
|
||||
|
||||
set prompt ":"
|
||||
|
||||
# Figure out username
|
||||
if {[info exists username]} {
|
||||
# command line username
|
||||
set loginname $username
|
||||
} else {
|
||||
set loginname [join [find user $router] ""]
|
||||
if { "$loginname" == "" } { set loginname $default_user }
|
||||
}
|
||||
|
||||
# Figure out loginname's password (if different from the vty password)
|
||||
if {[info exists userpasswd]} {
|
||||
# command line passwd
|
||||
set passwd $userpasswd
|
||||
} else {
|
||||
set passwd [join [lindex [find userpassword $router] 0] ""]
|
||||
if { "$passwd" == "" } {
|
||||
set passwd [join [lindex [find password $router] 0] ""]
|
||||
if { "$passwd" == "" } {
|
||||
send_user "\nError: no password for $router in $password_file.\n"
|
||||
continue
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Figure out identity file to use
|
||||
set identfile [join [lindex [find identity $router] 0] ""]
|
||||
|
||||
# Figure out passphrase to use
|
||||
if {[info exists avpassphrase]} {
|
||||
set passphrase $avpassphrase
|
||||
} else {
|
||||
set passphrase [join [lindex [find passphrase $router] 0] ""]
|
||||
}
|
||||
if { ! [string length "$passphrase"]} {
|
||||
set passphrase $passwd
|
||||
}
|
||||
|
||||
# Figure out ssh cypher type
|
||||
if {[info exists cypher]} {
|
||||
# command line ssh cypher type
|
||||
set cyphertype $cypher
|
||||
} else {
|
||||
set cyphertype [find cyphertype $router]
|
||||
if { "$cyphertype" == "" } { set cyphertype "3des" }
|
||||
}
|
||||
|
||||
# Figure out connection method
|
||||
set cmethod [find method $router]
|
||||
if { "$cmethod" == "" } { set cmethod {{telnet} {ssh}} }
|
||||
|
||||
# Figure out the SSH executable name
|
||||
set sshcmd [find sshcmd $router]
|
||||
if { "$sshcmd" == "" } { set sshcmd {ssh} }
|
||||
|
||||
# Login to the router
|
||||
if {[login $router $loginname $passwd $cmethod $cyphertype $identfile]} {
|
||||
incr exitval
|
||||
continue
|
||||
}
|
||||
|
||||
if { $do_command } {
|
||||
if {[run_commands $prompt $command]} {
|
||||
incr exitval
|
||||
continue
|
||||
}
|
||||
} elseif { $do_script } {
|
||||
send "set terminal length 0\r"
|
||||
expect -re $prompt {}
|
||||
source $sfile
|
||||
catch {close};
|
||||
} else {
|
||||
label $router
|
||||
log_user 1
|
||||
interact
|
||||
}
|
||||
|
||||
# End of for each router
|
||||
catch {wait};
|
||||
sleep 0.3
|
||||
}
|
||||
exit $exitval
|
||||
374
uerancid
Executable file
374
uerancid
Executable file
|
|
@ -0,0 +1,374 @@
|
|||
#! /usr/bin/perl
|
||||
# By Damian Fantini
|
||||
# usage: vrancid [-dV] [-l] [-f filename | hostname]
|
||||
#
|
||||
use Getopt::Std;
|
||||
getopts('dflV');
|
||||
if ($opt_V) {
|
||||
print "vrancid 3.0\n";
|
||||
exit(0);
|
||||
}
|
||||
$debug = $opt_d;
|
||||
$log = $opt_l;
|
||||
$file = $opt_f;
|
||||
$host = $ARGV[0];
|
||||
|
||||
$clean_run = 0;
|
||||
$found_end = 0;
|
||||
$timeo = 120; # clogin timeout in seconds
|
||||
|
||||
my(@commandtable, %commands, @commands);# command lists
|
||||
my($aclsort) = ("ipsort"); # ACL sorting mode
|
||||
my($filter_commstr); # SNMP community string filtering
|
||||
my($filter_pwds); # password filtering mode
|
||||
#my($ShowChassisSCB); # Only run ShowChassisSCB() once
|
||||
|
||||
# This routine is used to print out the router configuration
|
||||
sub ProcessHistory {
|
||||
my($new_hist_tag,$new_command,$command_string,@string) = (@_);
|
||||
if ((($new_hist_tag ne $hist_tag) || ($new_command ne $command))
|
||||
&& scalar(%history)) {
|
||||
print eval "$command \%history";
|
||||
undef %history;
|
||||
}
|
||||
if (($new_hist_tag) && ($new_command) && ($command_string)) {
|
||||
if ($history{$command_string}) {
|
||||
$history{$command_string} = "$history{$command_string}@string";
|
||||
} else {
|
||||
$history{$command_string} = "@string";
|
||||
}
|
||||
} elsif (($new_hist_tag) && ($new_command)) {
|
||||
$history{++$#history} = "@string";
|
||||
} else {
|
||||
print "@string";
|
||||
}
|
||||
$hist_tag = $new_hist_tag;
|
||||
$command = $new_command;
|
||||
1;
|
||||
}
|
||||
|
||||
sub numerically { $a <=> $b; }
|
||||
|
||||
# This is a sort routine that will sort numerically on the
|
||||
# keys of a hash as if it were a normal array.
|
||||
sub keynsort {
|
||||
local(%lines) = @_;
|
||||
local($i) = 0;
|
||||
local(@sorted_lines);
|
||||
foreach $key (sort numerically keys(%lines)) {
|
||||
$sorted_lines[$i] = $lines{$key};
|
||||
$i++;
|
||||
}
|
||||
@sorted_lines;
|
||||
}
|
||||
|
||||
# This is a sort routine that will sort on the
|
||||
# keys of a hash as if it were a normal array.
|
||||
sub keysort {
|
||||
local(%lines) = @_;
|
||||
local($i) = 0;
|
||||
local(@sorted_lines);
|
||||
foreach $key (sort keys(%lines)) {
|
||||
$sorted_lines[$i] = $lines{$key};
|
||||
$i++;
|
||||
}
|
||||
@sorted_lines;
|
||||
}
|
||||
|
||||
# This is a sort routine that will sort on the
|
||||
# values of a hash as if it were a normal array.
|
||||
sub valsort{
|
||||
local(%lines) = @_;
|
||||
local($i) = 0;
|
||||
local(@sorted_lines);
|
||||
foreach $key (sort values %lines) {
|
||||
$sorted_lines[$i] = $key;
|
||||
$i++;
|
||||
}
|
||||
@sorted_lines;
|
||||
}
|
||||
|
||||
# This is a numerical sort routine (ascending).
|
||||
sub numsort {
|
||||
local(%lines) = @_;
|
||||
local($i) = 0;
|
||||
local(@sorted_lines);
|
||||
foreach $num (sort {$a <=> $b} keys %lines) {
|
||||
$sorted_lines[$i] = $lines{$num};
|
||||
$i++;
|
||||
}
|
||||
@sorted_lines;
|
||||
}
|
||||
|
||||
# This is a sort routine that will sort on the
|
||||
# ip address when the ip address is anywhere in
|
||||
# the strings.
|
||||
sub ipsort {
|
||||
local(%lines) = @_;
|
||||
local($i) = 0;
|
||||
local(@sorted_lines);
|
||||
foreach $addr (sort sortbyipaddr keys %lines) {
|
||||
$sorted_lines[$i] = $lines{$addr};
|
||||
$i++;
|
||||
}
|
||||
@sorted_lines;
|
||||
}
|
||||
|
||||
# These two routines will sort based upon IP addresses
|
||||
sub ipaddrval {
|
||||
my(@a) = ($_[0] =~ m#^(\d+)\.(\d+)\.(\d+)\.(\d+)$#);
|
||||
$a[3] + 256 * ($a[2] + 256 * ($a[1] +256 * $a[0]));
|
||||
}
|
||||
sub sortbyipaddr {
|
||||
&ipaddrval($a) <=> &ipaddrval($b);
|
||||
}
|
||||
|
||||
###
|
||||
### Start of real work
|
||||
###
|
||||
|
||||
|
||||
|
||||
# This routine parses "show configuration"
|
||||
sub ShowConfiguration {
|
||||
my($lines) = 0;
|
||||
my($snmp) = 0;
|
||||
print STDERR " In ShowConfiguration: $_" if ($debug);
|
||||
|
||||
ProcessHistory("","","","# $_");
|
||||
while (<INPUT>) {
|
||||
tr/\015//d;
|
||||
next if (/^\s*$/);
|
||||
# end of config - hopefully. VyOS does not have a reliable
|
||||
# end-of-config tag. appears to end with "\nPROMPT>", but not sure.
|
||||
if (/$prompt/) {
|
||||
$found_end++;
|
||||
last;
|
||||
}
|
||||
next if (/^system (shutdown message from|going down )/i);
|
||||
next if (/^\{(master|backup)(:\d+)?\}/);
|
||||
|
||||
# Remove Uptime
|
||||
next if (/^uptime/i);
|
||||
# Sometimes the 'show' commands are echoed back
|
||||
next if (/^show/);
|
||||
next if (/^exit/);
|
||||
|
||||
$lines++;
|
||||
|
||||
/^database header mismatch: / && return(-1);
|
||||
/^version .*;\d+$/ && return(-1);
|
||||
|
||||
s/ # SECRET-DATA$//;
|
||||
s/ ## SECRET-DATA$//;
|
||||
# filter snmp community, when in snmp { stanza }
|
||||
/^\s*snmp/ && $snmp++;
|
||||
/^}/ && ($snmp = 0);
|
||||
if ($snmp && /^(\s*)(community|trap-group) [^ ;]+(\s?[;{])$/) {
|
||||
if ($filter_commstr) {
|
||||
$_ = "$1$2 \"<removed>\"$3\n";
|
||||
}
|
||||
}
|
||||
|
||||
if (/^(.* snmp community) [^ ;]+(\s?.*)$/) {
|
||||
if ($filter_commstr) {
|
||||
$_ = "$1 \"<removed>\"$2\n";
|
||||
}
|
||||
}
|
||||
if (/^(.* snmp .*-key) [^ ;]+(\s?.*)$/) {
|
||||
if ($filter_commstr) {
|
||||
$_ = "$1 \"<removed>\"$2\n";
|
||||
}
|
||||
}
|
||||
if (/(\s*authentication-key )[^ ;]+/ && $filter_pwds >= 1) {
|
||||
ProcessHistory("","","","#$1<removed>$'");
|
||||
next;
|
||||
}
|
||||
if (/(\s*md5 \d+ key )[^ ;]+/ && $filter_pwds >= 1) {
|
||||
ProcessHistory("","","","#$1<removed>$'");
|
||||
next;
|
||||
}
|
||||
if (/(\s*hello-authentication-key )[^ ;]+/ && $filter_pwds >= 1) {
|
||||
ProcessHistory("","","","#$1<removed>$'");
|
||||
next;
|
||||
}
|
||||
# don't filter this one - there is no secret here.
|
||||
if (/^\s*permissions .* secret /) {
|
||||
ProcessHistory("","","","$_");
|
||||
next;
|
||||
}
|
||||
if (/^(.*\ssecret )[^ ;]+/ && $filter_pwds >= 1) {
|
||||
ProcessHistory("","","","#$1<removed>$'");
|
||||
next;
|
||||
}
|
||||
if (/(.* encrypted-password )[^ ;]+/ && $filter_pwds >= 2) {
|
||||
ProcessHistory("","","","#$1<removed>\n");
|
||||
next;
|
||||
}
|
||||
if (/(\s+ssh-(rsa|dsa) )\"/ && $filter_pwds >= 2) {
|
||||
ProcessHistory("","","","#$1<removed>;\n");
|
||||
next;
|
||||
}
|
||||
if (/^(\s+(pre-shared-|)key (ascii-text|hexadecimal) )[^ ;]+/ && $filter_pwds >= 1) {
|
||||
ProcessHistory("","","","#$1<removed>$'");
|
||||
next;
|
||||
}
|
||||
ProcessHistory("","","","$_");
|
||||
}
|
||||
|
||||
if ($lines < 1) {
|
||||
printf(STDERR "ERROR: $host configuration appears truncated.\n");
|
||||
$found_end = 0;
|
||||
return(-1);
|
||||
}
|
||||
|
||||
return(0);
|
||||
}
|
||||
|
||||
###
|
||||
### End of real work
|
||||
###
|
||||
|
||||
# dummy function
|
||||
sub DoNothing {print STDOUT;}
|
||||
|
||||
# Main
|
||||
@commandtable = (
|
||||
{'show version' => 'ShowConfiguration'},
|
||||
{'show system image' => 'ShowConfiguration'},
|
||||
{'show hardware cpu' => 'ShowConfiguration'},
|
||||
{'show configuration' => 'ShowConfiguration'},
|
||||
{'show system routing-daemons' => 'ShowConfiguration'},
|
||||
);
|
||||
# Use an array to preserve the order of the commands and a hash for mapping
|
||||
# commands to the subroutine and track commands that have been completed.
|
||||
@commands = map(keys(%$_), @commandtable);
|
||||
%commands = map(%$_, @commandtable);
|
||||
|
||||
$jnx_commands=join(";",@commands);
|
||||
$cmds_regexp = join("|", map quotemeta($_), @commands);
|
||||
|
||||
if (length($host) == 0) {
|
||||
if ($file) {
|
||||
print(STDERR "Too few arguments: file name required\n");
|
||||
exit(1);
|
||||
} else {
|
||||
print(STDERR "Too few arguments: host name required\n");
|
||||
exit(1);
|
||||
}
|
||||
}
|
||||
open(OUTPUT,">$host.new") || die "Can't open $host.new for writing: $!\n";
|
||||
select(OUTPUT);
|
||||
# make OUTPUT unbuffered
|
||||
if ($debug) { $| = 1; }
|
||||
|
||||
if ($file) {
|
||||
print STDERR "opening file $host\n" if ($debug);
|
||||
print STDOUT "opening file $host\n" if ($log);
|
||||
open(INPUT,"< $host") || die "open failed for $host: $!\n";
|
||||
} else {
|
||||
print(STDERR "executing echo uelogin -t $timeo -c\"$jnx_commands\" $host\n") if ($debug);
|
||||
|
||||
if (defined($ENV{NOPIPE})) {
|
||||
system "uelogin -t $timeo -c \"$jnx_commands\" $host </dev/null > $host.raw" || die "uelogin failed for $host: $!\n";
|
||||
open(INPUT, "< $host.raw") || die "uelogin failed for $host: $!\n";
|
||||
} else {
|
||||
open(INPUT,"uelogin -t $timeo -c \"$jnx_commands\" $host </dev/null |") || die "uelogin failed for $host: $!\n";
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
# determine ACL sorting mode
|
||||
if ($ENV{"ACLSORT"} =~ /no/i) {
|
||||
$aclsort = "";
|
||||
}
|
||||
# determine community string filtering mode
|
||||
if (defined($ENV{"NOCOMMSTR"}) &&
|
||||
($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) {
|
||||
$filter_commstr = 1;
|
||||
} else {
|
||||
$filter_commstr = 0;
|
||||
}
|
||||
# determine password filtering mode
|
||||
if ($ENV{"FILTER_PWDS"} =~ /no/i) {
|
||||
$filter_pwds = 0;
|
||||
} elsif ($ENV{"FILTER_PWDS"} =~ /all/i) {
|
||||
$filter_pwds = 2;
|
||||
} else {
|
||||
$filter_pwds = 1;
|
||||
}
|
||||
|
||||
ProcessHistory("","","","# RANCID-CONTENT-TYPE: ubnt-er\n#\n");
|
||||
TOP: while (<INPUT>) {
|
||||
tr/\015//d;
|
||||
if (/^Error:/) {
|
||||
print STDOUT ("$host uelogin error: $_");
|
||||
print STDERR ("$host uelogin error: $_") if ($debug);
|
||||
$clean_run=0;
|
||||
last;
|
||||
}
|
||||
if (/System shutdown message/) {
|
||||
print STDOUT ("$host shutdown msg: $_");
|
||||
print STDERR ("$host shutdown msg: $_") if ($debug);
|
||||
$clean_run = 0;
|
||||
last;
|
||||
}
|
||||
if (/error: cli version does not match Managment Daemon/i) {
|
||||
print STDOUT ("$host mgd version mismatch: $_");
|
||||
print STDERR ("$host mgd version mismatch: $_") if ($debug);
|
||||
$clean_run = 0;
|
||||
last;
|
||||
}
|
||||
while (/\s*($cmds_regexp)\s*$/) {
|
||||
$cmd = $1;
|
||||
$prompt = ":~";
|
||||
|
||||
if (!defined($prompt)) {
|
||||
$prompt = ($_ =~ /^([^>]+$)/)[0];
|
||||
$prompt =~ s/([][}{)(\\])/\\$1/g;
|
||||
print STDERR ("PROMPT MATCH: $prompt\n") if ($debug);
|
||||
|
||||
}
|
||||
print STDERR ("HIT COMMAND:$_") if ($debug);
|
||||
if (! defined($commands{$cmd})) {
|
||||
print STDERR "$host: found unexpected command - \"$cmd\"\n";
|
||||
$clean_run = 0;
|
||||
last TOP;
|
||||
}
|
||||
$rval = &{$commands{$cmd}};
|
||||
delete($commands{$cmd});
|
||||
if ($rval == -1) {
|
||||
$clean_run = 0;
|
||||
last TOP;
|
||||
}
|
||||
}
|
||||
if (/\s*exit/) {
|
||||
$clean_run=1;
|
||||
last;
|
||||
}
|
||||
}
|
||||
print STDOUT "Done uelogin: $_\n" if ($log);
|
||||
# Flush History
|
||||
ProcessHistory("","","","");
|
||||
# Cleanup
|
||||
close(INPUT);
|
||||
close(OUTPUT);
|
||||
|
||||
if (defined($ENV{NOPIPE})) {
|
||||
unlink("$host.raw") if (! $debug);
|
||||
}
|
||||
|
||||
# check for completeness
|
||||
$commands = join(", ", keys(%commands));
|
||||
if (scalar(%commands) || !$clean_run || !$found_end) {
|
||||
if (scalar(%commands)) {
|
||||
printf(STDOUT "$host: missed cmd(s): %s\n", join(',', keys(%commands)));
|
||||
printf(STDERR "$host: missed cmd(s): %s\n", join(',', keys(%commands))) if ($debug);
|
||||
}
|
||||
if (!$clean_run || !$found_end) {
|
||||
print STDOUT "$host: End of run not found\n";
|
||||
print STDERR "$host: End of run not found\n" if ($debug);
|
||||
system("/usr/bin/tail -1 $host.new");
|
||||
}
|
||||
unlink "$host.new" if (! $debug);
|
||||
}
|
||||
Loading…
Add table
Reference in a new issue