シスコサポートコミュニティ
キャンセル
次の結果を表示 
次の代わりに検索 
もしかして: 

AsyncOS 8.x カスタムユーザでサポートトンネルを利用できない

AsyncOS 8.x 上で「管理者(Administrator)」権限をもつ "admin" とは異なるカスタムユーザアカウントでサポートトンネルを利用しようとすると通信可能な状況なのにシスコへの接続に失敗することがあります。

CLI で "techsupport" - "tunnel" を利用すると traceback が生じます。


======

(CLI "techsupport" 実行例)

> techsupport

Service Access currently disabled.
Serial Number: XXXXXXXXXXXX-XXXXXXX

Choose the operation you want to perform:
- SSHACCESS - Allow a Cisco IronPort Customer Support representative to
remotely access your system, without establishing a tunnel.
- TUNNEL - Allow a Cisco IronPort Customer Support representative to remotely
access your system, and establish a secure tunnel for communication.
- STATUS - Display the current techsupport status.
[]> tunnel

Enter a temporary password for customer support to use. This password will not
be able to be used to directly access your system.
- the password must be between 6 and 128 characters long;
- it cannot be blank or consist only of spaces;
- it must be different from your password.
[]> AB1234cd

Enter the port number for tunnel connection:
[25]> 25

Are you sure you want to enable service access? [N]> y

Traceback (most recent call last):
  File "/usr/build/iproot/ap/ipoe/ipoe/bootstrap.py", line 55, in <module>
  File "/data/lib/python2.6_8_amd64_nothr/runpy.py", line 128, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/data/lib/python2.6_8_amd64_nothr/runpy.py", line 34, in _run_code
    exec code in run_globals
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 41720, in <module>
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 30315, in main
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 860, in command_loop
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 38285, in do_command
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 38536, in main_input_run
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 38298, in run_func
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 35971, in techsupport
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/cli.py", line 35824, in techsupport_create_access
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/shared/RemoteAccess.py", line 227, in enableRemoteAccess
  File "build/bdist.freebsd-8.2-RELEASE-amd64/egg/shared/RemoteAccess.py", line 266, in enableTunnel
NameError: global name 'err' is not defined


======

これは AsyncOS 8.x で報告されている Bug で組み込みアカウントである "admin" 以外のユーザで "techsupport" - "tunnel" を実行すると生じてしまう不具合です。
(ESA: CSCun31137, SMA: CSCun31149, WSA: CSCur32788)

 

回避策としてはサポートトンネルの操作を行う際に "admin" アカウントでログインしてサポートトンネルの操作を行ってください。

 

62
閲覧回数
0
いいね!
0
コメント