Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: test_authorization_tacacs_only fails on chassis supervisor due to unsupported commands #14506

Closed
veronica-arista opened this issue Sep 10, 2024 · 3 comments
Assignees

Comments

@veronica-arista
Copy link
Contributor

Issue Description

test_authorization_tacacs_only checks a list of commands to ensure proper permissions through tacas auth. Some of these commands fail when executed on the supervisor of our chassis (they work correctly on linecards):

show ip bgp neighbor
show ip bgp summary
show ipv6 bgp neighbor
show ipv6 bgp summary
show muxcable firmware

A recent change enabled show ip bgp neighbor and show ip bgp summary to run on the supervisor, but now they trigger the command execution on each of the linecards, prompting for password. If running the command manually, the results are as expected, but executed by test_authorization_tacacs_only, the test gets stuck on the prompt.

root@nfc405:~# show ip bgp neighbor
Since the current device is a chassis supervisor, this command will be executed remotely on all linecards
Password for username 'root':

show ipv6 bgp neighbor, show ipv6 bgp summary, and show muxcable firmware currently fail when executed on the supervisor:

root@nfc405:~# show ipv6 bgp neighbor
Error response from daemon: Container c6742f35ae99361ef1639178eb38024a5d1f2c4e074563c53f9d73d7049d0321 is not running

root@nfc405:~# show ipv6 bgp summary

IPv6 Unicast Summary:
Usage: show ipv6 bgp summary [OPTIONS]
Try "show ipv6 bgp summary -h" for help.

Error: router_info missing in the bgp_summary
root@nfc405:~# show muxcable firmware
Failed to get port config

Will these commands also be updated to work like show ip bgp neighbor and get the info from the linecards? Would it make sense to skip these commands when test_authorization_tacacs_only runs on the supervisor?

Results you see

see description

Results you expected to see

test_authorization_tacacs_only should pass on supervisor and linecards

Is it platform specific

generic

Relevant log output

No response

Output of show version

No response

Attach files (if any)

No response

@rlhui
Copy link

rlhui commented Sep 18, 2024

@veronica-arista please rerun with latest 202405 to get latest result, also @BYGX-wcr please help here as well. We'd like to see this test case including these bgp commands that are newly added to sup and can pass for chassis.

@BYGX-wcr BYGX-wcr self-assigned this Sep 18, 2024
@BYGX-wcr
Copy link
Contributor

@veronica-arista , currently we haven't added the support for direct execution of show ipv6 bgp neighbor, show ipv6 bgp summary, and show muxcable firmware. We will add the support later. Now you can skip those commands or use rexec command to execute those commands on chassis supervisor. Besides, to make the all rexec commands work, the test cases need to be enhanced to be able to input passwords of linecards

@BYGX-wcr
Copy link
Contributor

BYGX-wcr commented Oct 2, 2024

Since the fix PR is already merged, I closed this Issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

No branches or pull requests

3 participants