[j-nsp] Strange Behavior

[Adnan Mohsin]

Hi Tarique,
Thanks for your help!

Adnan.

--- On Mon, 12/7/09, Nalkhande Tarique Abbas <ntarique at juniper.net> wrote:

From: Nalkhande Tarique Abbas <ntarique at juniper.net>
Subject: RE: [j-nsp] Strange Behavior
To: "Adnan Mohsin" <adnanmohsin at yahoo.com>, juniper-nsp at puck.nether.net
Date: Monday, December 7, 2009, 3:14 PM


Adnan,

What version? Have a look at PR/229851 

 
Thanks & Regards,
Tarique A. Nalkhande

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Adnan Mohsin
Sent: Monday, December 07, 2009 3:31 PM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Strange Behavior





 

Hi,

 

I
observed strange behavior today with one of my Juniper router. When ever i do show
| compare rollback on juniper router, I receive some unexpected output
of commands on my TACACS# server and also on messages file on juniper router.
The output I receive on TACACS server and messages file is related to
authenticaton i.e OSPF authentication , root-authentication and users
authentication. I observed this behavior first time. Can any body tell me why i
am getting these strange output in my logs? did any body else observed the
same behavior before?

 

Following
is a output from TACACS# server.

 

Mon
Dec  7 07:31:18 2009         
cmd=show | compare rollback 0 <cr>

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=223    
service=shell   process*mgd[8696]   cmd=set: [system
root-authentication encrypted-password]

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx   ttyp0    stop   
task_id=224     service=shell  
process*mgd[8696]   cmd=deactivate: [system root-authentication
encrypted-password] ""

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=225    
service=shell   process*mgd[8696]   cmd=set: [system
tacplus-server xx.xx.xx.xx secret]

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=226    
service=shell   process*mgd[8696]   cmd=deactivate: [system
tacplus-server xx.xx.xx.xx secret] ""

Mon Dec  7 07:31:19 2009        xxx.xxx.xxx.xxx   
ttyp0    stop   
task_id=227     service=shell  
process*mgd[8696]   cmd=set: [system accounting destination tacplus
server xx.xx.xx.xx secret]

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=228     service=shell  
process*mgd[8696]   cmd=deactivate: [system accounting destination
tacplus server xx.xx.xx.xx secret] ""

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=233    
service=shell   process*mgd[8696]   cmd=set: [system login
user xxxxx authentication encrypted-password]

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=234    
service=shell   process*mgd[8696]   cmd=deactivate: [system
login user xxxxx authentication encrypted-password] ""

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx    ttyp0   
stop    task_id=235    
service=shell   process*mgd[8696]   cmd=set: [protocols
ospf area xx.xx.xx.xx interface e1-0/0/2.0 authentication md5 100 key]

Mon Dec  7 07:31:19 2009       
xxx.xxx.xxx.xxx   ttyp0    stop   
task_id=236     service=shell  
process*mgd[8696]   cmd=deactivate: [protocols ospf area xx.xx.xx.xx
interface e1-0/0/2.0 authentication md5 100 key] ""

 

Router
messages file output

 

Dec 
7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET: User
'xxxxx' set: [system root-authentication encrypted-password]

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system root-authentication encrypted-password]
""

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system tacplus-server xx.xx.xx.xx secret]

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system tacplus-server xx.xx.xx.xx secret] ""

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system accounting destination tacplus server xx.xx.xx.xx
secret]

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system accounting destination tacplus server xx.xx.xx.xx
secret] ""

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [system login user xxxxx authentication encrypted-password]

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [system login user xxxxx authentication
encrypted-password] ""

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_SET_SECRET:
User 'xxxxxx' set: [protocols ospf area xx.xx.xx.xx interface e1-0/0/2.0
authentication md5 100 key]

Dec  7 14:44:09   mgd[9362]: %CHANGE-6-UI_CFG_AUDIT_OTHER: User
'xxxxxx' deactivate: [protocols ospf area xx.xx.xx.xx interface e1-0/0/2.0
authentication md5 100 key] ""

 

Any
help would be really appreciated.
thanks.Adnan.





      
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp