Hi Guys, I don't know if this is the right discussion. But i have rancid installed and working. but i am a little concerned about the .clogin.rc file as it stores all the password and usernames for the devices, wouldn't this be a security problem. is there any way to enter the encrypted passwords or lock file itself from opening for others or any security option to avoid this.

i am new in discussions. i wud appreciate some help.

You can set the file permissions to only be read by the rancid user. Also if you are using tacacs for logins you can limit that user to only have access to run certian commands, login only x number of devices at a time, and only during specific hours, and also limit the logins from certian IP addresses. How to do all that would depend on what specific tacacs server you are using, and should be easily found out on the support page for the server.

-Otanx

Thank You Otanx for that. so i believe there is no way to keep the passwords hidden in the .cloginrc file itself.

Thanks again for Helping