[j-nsp] Strange Behavior
Nalkhande Tarique Abbas
ntarique at juniper.net
Mon Dec 7 05:14:50 EST 2009
Adnan,
What version? Have a look at PR/229851
Thanks & Regards,
Tarique A. Nalkhande
-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Adnan Mohsin
Sent: Monday, December 07, 2009 3:31 PM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Strange Behavior
Hi,
I
observed strange behavior today with one of my Juniper router. When ever i do show
| compare rollback on juniper router, I receive some unexpected output
of commands on my TACACS# server and also on messages file on juniper router.
The output I receive on TACACS server and messages file is related to
authenticaton i.e OSPF authentication , root-authentication and users
authentication. I observed this behavior first time. Can any body tell me why i
am getting these strange output in my logs? did any body else observed the
same behavior before?
Following
is a output from TACACS# server.
Mon
Dec 7 07:31:18 2009
cmd=show | compare rollback 0 <cr>
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=223
service=shell process*mgd[8696] cmd=set: [system
root-authentication encrypted-password]
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0 stop
task_id=224 service=shell
process*mgd[8696] cmd=deactivate: [system root-authentication
encrypted-password] ""
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=225
service=shell process*mgd[8696] cmd=set: [system
tacplus-server xx.xx.xx.xx secret]
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=226
service=shell process*mgd[8696] cmd=deactivate: [system
tacplus-server xx.xx.xx.xx secret] ""
Mon Dec 7 07:31:19 2009 xxx.xxx.xxx.xxx
ttyp0 stop
task_id=227 service=shell
process*mgd[8696] cmd=set: [system accounting destination tacplus
server xx.xx.xx.xx secret]
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=228 service=shell
process*mgd[8696] cmd=deactivate: [system accounting destination
tacplus server xx.xx.xx.xx secret] ""
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=233
service=shell process*mgd[8696] cmd=set: [system login
user xxxxx authentication encrypted-password]
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=234
service=shell process*mgd[8696] cmd=deactivate: [system
login user xxxxx authentication encrypted-password] ""
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0
stop task_id=235
service=shell process*mgd[8696] cmd=set: [protocols
ospf area xx.xx.xx.xx interface e1-0/0/2.0 authentication md5 100 key]
Mon Dec 7 07:31:19 2009
xxx.xxx.xxx.xxx ttyp0 stop
task_id=236 service=shell
process*mgd[8696] cmd=deactivate: [protocols ospf area xx.xx.xx.xx
interface e1-0/0/2.0 authentication md5 100 key] ""
Router
messages file output
Dec
7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET: User
'xxxxx' set: [system root-authentication encrypted-password]
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system root-authentication encrypted-password]
""
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system tacplus-server xx.xx.xx.xx secret]
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system tacplus-server xx.xx.xx.xx secret] ""
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system accounting destination tacplus server xx.xx.xx.xx
secret]
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system accounting destination tacplus server xx.xx.xx.xx
secret] ""
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system login user xxxxx authentication encrypted-password]
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system login user xxxxx authentication
encrypted-password] ""
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [protocols ospf area xx.xx.xx.xx interface e1-0/0/2.0
authentication md5 100 key]
Dec 7 14:44:09 mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [protocols ospf area xx.xx.xx.xx interface e1-0/0/2.0
authentication md5 100 key] ""
Any
help would be really appreciated.
thanks.Adnan.
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
More information about the juniper-nsp
mailing list