I have many switches with different login credentials. I tried using authgroup setup inside netdb.conf but it does not work. It seems it still using the primary and secondary login configured in devuser and devuser2.
How do i configure it correctly?
Sun Oct 2 01:31:14 2016: netdbctl(24730): Running netdbscraper on devices
Sun Oct 2 01:31:15 2016: netdbctl(24730): netdbscraper.pl(24733): Parent spawning 20 processes with 0.5s delay
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24735): Connecting to device 10.51.0.14
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24738): Connecting to device 10.53.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24741): Connecting to device 10.43.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24744): Connecting to device 10.41.4.1
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24747): Connecting to device 10.41.4.2
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24750): Connecting to device 10.44.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24753): Connecting to device 10.45.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24756): Connecting to device 10.46.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24759): Connecting to device 10.47.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24762): Connecting to device 10.48.0.30
Sun Oct 2 01:31:20 2016: netdbctl(24730): iosscraper.pl(24765): Connecting to device 10.54.0.5
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.53.0.5: Failed to login to 10.53.0.5 with primary credentials
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.53.0.5
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.43.0.5: Failed to login to 10.43.0.5 with primary credentials
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.43.0.5
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.45.0.5: Failed to login to 10.45.0.5 with primary credentials
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.45.0.5
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.44.0.5: Failed to login to 10.44.0.5 with primary credentials
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.44.0.5
Regards,
Julius.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Have you configured the authgroup=GROUP-NAME in your devlist.csv file for each device you want alternative credentials on? If so and it’s not working, I can run a quick test to verify on my end.
I have many switches with different login credentials. I tried using authgroup setup inside netdb.conf but it does not work. It seems it still using the primary and secondary login configured in devuser and devuser2.
How do i configure it correctly?
Sun Oct 2 01:31:14 2016: netdbctl(24730): Running netdbscraper on devices
Sun Oct 2 01:31:15 2016: netdbctl(24730): netdbscraper.pl(24733): Parent spawning 20 processes with 0.5s delay
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24735): Connecting to device 10.51.0.14
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24738): Connecting to device 10.53.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24741): Connecting to device 10.43.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24744): Connecting to device 10.41.4.1
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24747): Connecting to device 10.41.4.2
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24750): Connecting to device 10.44.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24753): Connecting to device 10.45.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24756): Connecting to device 10.46.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24759): Connecting to device 10.47.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24762): Connecting to device 10.48.0.30
Sun Oct 2 01:31:20 2016: netdbctl(24730): iosscraper.pl(24765): Connecting to device 10.54.0.5
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.53.0.5: Failed to login to 10.53.0.5 with primary credentials
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.53.0.5
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.43.0.5: Failed to login to 10.43.0.5 with primary credentials
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.43.0.5
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.45.0.5: Failed to login to 10.45.0.5 with primary credentials
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.45.0.5
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.44.0.5: Failed to login to 10.44.0.5 with primary credentials
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.44.0.5
I did not put in the devlist.csv but in the netdb.conf following the comment there. So i need to put inside devlist.csv? Could you share with me how the format is?
Regards,
Julius.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I have many switches with different login credentials. I tried using authgroup setup inside netdb.conf but it does not work. It seems it still using the primary and secondary login configured in devuser and devuser2.
How do i configure it correctly?
Sun Oct 2 01:31:14 2016: netdbctl(24730): Running netdbscraper on devices
Sun Oct 2 01:31:15 2016: netdbctl(24730): netdbscraper.pl(24733): Parent spawning 20 processes with 0.5s delay
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24735): Connecting to device 10.51.0.14
Sun Oct 2 01:31:15 2016: netdbctl(24730): iosscraper.pl(24738): Connecting to device 10.53.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24741): Connecting to device 10.43.0.5
Sun Oct 2 01:31:16 2016: netdbctl(24730): iosscraper.pl(24744): Connecting to device 10.41.4.1
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24747): Connecting to device 10.41.4.2
Sun Oct 2 01:31:17 2016: netdbctl(24730): iosscraper.pl(24750): Connecting to device 10.44.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24753): Connecting to device 10.45.0.5
Sun Oct 2 01:31:18 2016: netdbctl(24730): iosscraper.pl(24756): Connecting to device 10.46.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24759): Connecting to device 10.47.0.5
Sun Oct 2 01:31:19 2016: netdbctl(24730): iosscraper.pl(24762): Connecting to device 10.48.0.30
Sun Oct 2 01:31:20 2016: netdbctl(24730): iosscraper.pl(24765): Connecting to device 10.54.0.5
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.53.0.5: Failed to login to 10.53.0.5 with primary credentials
Sun Oct 2 01:31:40 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.53.0.5
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.43.0.5: Failed to login to 10.43.0.5 with primary credentials
Sun Oct 2 01:31:41 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.43.0.5
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.45.0.5: Failed to login to 10.45.0.5 with primary credentials
Sun Oct 2 01:31:42 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.45.0.5
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Primary Login Failed to 10.44.0.5: Failed to login to 10.44.0.5 with primary credentials
Sun Oct 2 01:31:43 2016: netdbctl(24730): |SSH|: Attempting Secondary Login Credentials to 10.44.0.5
Regards,
Julius.
Julius,
Have you configured the authgroup=GROUP-NAME in your devlist.csv file for each device you want alternative credentials on? If so and it’s not working, I can run a quick test to verify on my end.
Hi Jonathan,
I did not put in the devlist.csv but in the netdb.conf following the comment there. So i need to put inside devlist.csv? Could you share with me how the format is?
Regards,
Julius.
thanks, managed to get it works now.
Hey, great. Sorry I didn't get back sooner, it's been chaos around work this week.
Is there any way to have the device credentials section of netdb.conf reference an external AAA server (using RADIUS, TACACS or LDAP)?
Due to the insecurity of having passwords in plain in netdb.conf, I agree with you Christian and ask the same question?