plugin for download/upload routers switches configuration

Viggy · Post by **Viggy** » Fri Apr 14, 2006 3:36 pm

Well its working... But not quite right....

I noticed that in the config file it was stating the tftp path

/usr/local/tftp/data/20060414

and creating the 20060414 folder. I noticed the apache user was creating the folder so I assumed this was a rights issue.

I switched my tftp server user from tftpd to apache thinking if apache was creating directories this would give the tftp server rights to them.

It didn't work

I then tried chmod -R on the 20060414 directory

This didn't work

So then I got drastic. I opened up the configmanager_gatewaytoprogram.php file and remmed out the following lines:

Code: Select all

/*        $val=$path."/".date('Ymd');
	  if ($config["cacti_server_os"] == "win32") $val=str_replace("/","\\",$val);
	  $tftppath= ($val=="")? "#TftpPath=\n": "TftpPath=$val\n";
          fwrite($handle,$tftppath);
*/

Now it doesn't create the tftppath line in the config files or the "date" directory in your tftp path.

But it works and the files end up in your default tftp directory.

Not as nice as intended, but functional. I would be curious to know what I have messsed up so I can remove this work around if any one knows.

pepj · Post by **pepj** » Fri Apr 14, 2006 3:45 pm

hello

In pancho documentation "TftpPath" function only when tftproot is given and "TftpPath" deeper than or the same as "tftproot".

Have you set it ?

Viggy · Post by **Viggy** » Sat Apr 15, 2006 11:14 am

I think I have....

Here is the config file:

Listing of the config /usr/local/tftp/data/configmanagerid12.conf
[global]
TftpServer=192.168.11.158
TftpRoot=/usr/local/tftp
TftpPath=/usr/local/tftp/data/20060415
LogFile=/usr/local/tftp/data/configmanagerid12.conf.log
ForkLimit=10
StylePattern=::HOST::.::DATE::.cfg
StyleDate=%Y%m%d
SnmpVersion=2c
SnmpRetries=2
SnmpWait=5.2
SnmpMtu=1500
SnmpDebug=1
SnmpCommunity=sniffle
[192.168.11.2_3]
IpAddress=192.168.11.2
[192.168.11.5_5]
IpAddress=192.168.11.5

Here is the log:

Listing of the config /usr/local/tftp/data/configmanagerid12.conf.log
Apr 15 12:10:10 [EDT/-0400] pancho: (ERROR) 192.168.11.2_3 Source Configuration doesnt exist.
Apr 15 12:10:11 [EDT/-0400] pancho: (ERROR) 192.168.11.5_5 File Not Found

The folder gets created but the files don't
What else could I be doing wrong?

pepj · Post by **pepj** » Sat Apr 15, 2006 12:56 pm

Viggy wrote: Listing of the config /usr/local/tftp/data/configmanagerid12.conf.log
Apr 15 12:10:10 [EDT/-0400] pancho: (ERROR) 192.168.11.2_3 Source Configuration doesnt exist.
Apr 15 12:10:11 [EDT/-0400] pancho: (ERROR) 192.168.11.5_5 File Not Found

This log shows pancho encountered a problem with these devices ....

Are you sure that pancho can download the router/switch configuration when you startet it manually from the shell ? with /usr/bin/perl -I/usr/src/redhat/SOURCES/Pancho-9.3.7/bin /usr/local/bin/pancho.pl --download --post --config /usr/local/tftp/data/configmanagerid12.conf.conf
You can try aso without "--post"

Are these devices supported by pancho ?

Viggy · Post by **Viggy** » Sun Apr 16, 2006 7:38 pm

Everything works fine if I comment out that one one section in the configmanager_gatewaytoprogram.php file.

Well sort of.. the config files end up in the tftp root directory as opposed to the <tftp root>/data/<date> directory.

If I Manually edit the config file and lauch pancho from the command line it works but again files end up in the tftp root.

This may not be such a big issue for me because I would like to integrate this with Subversion and ViewVC.

Traditionally I organize my configs by location, What I am thinking of doing is checking out the directory (location) in Subversion using a pre command sent to Pancho. Then after the download, commit the change to subversion as a panch post command.

Then create a ViewVC Plugin page similar to the NTop page to see the directory of files.

Do you think that this will be too difficult of a modification? I would rather have version numbers through subversion than directories by date in the TFTP directory.

pepj · Post by **pepj** » Mon Apr 17, 2006 11:34 am

Viggy wrote:.. the config files end up in the tftp root directory as opposed to the <tftp root>/data/<date> directory.

As I said before. In pancho documentation "TftpPath" function only when tftproot is given and "TftpPath" deeper than or the same as "tftproot".

Viggy wrote: Traditionally I organize my configs by location,

In this new release you can give the format you want in
Pancho

Viggy wrote: What I am thinking of doing is checking out the directory (location) in Subversion using a pre command sent to Pancho. Then after the download, commit the change to subversion as a panch post command.

In this new release you can put for each configfile a pre and post command in pancho.

Viggy wrote: Then create a ViewVC Plugin page similar to the NTop page to see the directory of files.

This would be wonderful to have such a plugin.

Viggy wrote: Do you think that this will be too difficult of a modification? I would rather have version numbers through subversion than directories by date in the TFTP directory.

In this new release you can put "pre" and "post" command and give you own uploaded/downloaded file format for each configfile. When you want to pass the parameter from subversion to Pancho, this will be more dificult, but you can play with pre and post to solve it. But perhaps you don't need that with the new release because you can pass some parameters in the pre/post commands.

I hope I have solve all you problems
(don't forget you could mix the "TFTP" method and the "multi(SCP,SSH,...)" method. For example start the "subversion" with the "multi" method 5 minutes laters for the same hosts.
This second method is very powerful. I was surprised to use it for SSH, firewall, proxy, ...

PS: I cannot check a lot until the end of the next week because I am abroad. But this version should function well, because I only change the GUI and the Pancho file creation. Next week I will put it a official release.

PS: first do a "php ...plugins\configmanager\database_upgrade.php".

PS: In this release you can reset the "lastrun" direct from the first view in order to restart the config download/upload in 5 minutes.

Howie · Post by **Howie** » Thu Apr 20, 2006 2:10 am

pepj wrote:If someone has an idea how to solve this problem ..... (i.e: schedule later an another move)

Couldn't you do this the other way around? That is, move yesterdays config to the right place for archiving, just before requesting the new one.

We used to use Pancho, but gave up in the end, because they didn't really support much of our equipment (Nortel stuff). Now I use a series of custom scripts and something to automatically commit the files to Subversion to track changes more efficiently. You need to remove some comment lines from some config dumps, to stop changes being logged for the datestamp, but other than that, it's very handy! svn can run as a userland process in any folder too - no need for all that DAV stuff when it's all a local process.

pepj · Post by **pepj** » Tue May 09, 2006 4:42 pm

Couldn't you do this the other way around? That is, move yesterdays config to the right place for archiving, just before requesting the new one.

I think I have solved the problem. See FAQ 8 and FAQ 9.

We used to use Pancho, but gave up in the end, because they didn't really support much of our equipment (Nortel stuff). Now I use a series of custom scripts .... no need for all that DAV stuff when it's all a local process

I am lucky I never have a problem with pancho.
But I understand you ...
Therefore I created a second method "multi" in the configmanager plugin, where you can put your scripts. It is like a gateway between cacti and the own scripts. Here "no need for all that DAV stuff when it's all a local process"

(version 04bb removed because new version)
Now I have had some new template like
-telnet-cisco-unix --> download a config only with pure telnet (no cisco.pm or perl scripts). It was very tricky but functions very well. You can adapt it for your hardware
-telnet-and-SVN-cisco-unix the same but send it to subversion SVN
- ....

(I have only test these scripts on a linux but not coupled with cacti)
Try it and let me now if it is OK with cacti unix. I need feedback.

wfeng · Post by **wfeng** » Wed May 10, 2006 12:13 am

who can i help me to http://www.pancho.org down pancho.

JJX · Post by **JJX** » Wed May 10, 2006 12:38 am

wfeng wrote:who can i help me to http://www.pancho.org down pancho.

??
pacho downlaod page is here:
http://www.pancho.org/download.html

wfeng · Post by **wfeng** » Wed May 10, 2006 1:55 am

troublesome you software upload to bbs,thanks.

my can not to open website.

jherrinike · Post by **jherrinike** » Wed May 10, 2006 3:15 pm

This looks like a really great plugin and a lot of effort was put into it. Great job. I am just having some problems getting started.

I have tried installing this plugin version .4bb on one of my Cacti test boxes. It is running:

cacti-0.8.6h
mysql 5.0
apache 2.2
php 5.1.2
net-snmp 5.1.4
rrdtool 1.2.12
Plugin Architecture 0.9
Many plugins

Going along with the manual.txt file included and getting through the Installation section I can get the compare configs screen to come up minus the compare image used for the button.

When I click on the manage configs link I get a popup with "error no right" and a blank screen. It is sounding like a permission error but the files do not have any different rights than any of my other plugin files. I have not installed pancho since I think the new versions do not require it.

If anyone has any ideas please let me know.

Thanks

pepj · Post by **pepj** » Wed May 10, 2006 3:43 pm

jherrinike wrote:"error no right"

For configmanager
You have to create a file secure.cfg (example secure.cfg.example) and insert the workstations which have a rigth to access to this plugin, same idea as on the firewalls.
I did it because it could be very dangerous if someone upload configuration on your switches or routers.

For the diff function you can force than it could be only possible under a subroutine. For this you have to rename 'securecompare.cfg.example' to 'securecompare.cfg' and change the parameter rootallowed

jherrinike · Post by **jherrinike** » Wed May 10, 2006 4:55 pm

That worked. Thanks for the help. Can not wait to test it.

Thanks

slander · Post by **slander** » Fri May 12, 2006 1:38 pm

Pepj,

When you click the "show final configuration file", your script doesn't seem to correctly build the path to configmanagershow.php. For instance, my cacti plugin url is 'http://serverip/Cacti/plugins/configmanager/..." but, your script leaves out the "Cacti" portion. (IE "http://serverip/plugins"

I fixed this, for me, by changing line 336 of configmanager_edit.php from '."/plugins/configmanager...."' to '."/Cacti/plugins...."'. Not a very good fix, but works for my beta testing!

S

Reposted - Posted in the top layer by mistake!

Cacti

plugin for download/upload routers switches configuration

Linux and Config Maker

Linux and Config Maker

Re: Linux and Config Maker

ConfigManager and Linux

Re: ConfigManager and Linux

i no can to http://www.pancho.org

Re: i no can to http://www.pancho.org

Linux Issue

Re: Linux Issue

Who is online