netscaler / adc-scripts Goto Github PK

Resolved issues with the script by CHMOD 744 on all relevant script files. This step should be included in the README

Good afternoon:

I am working to update our citrix ADC to version 14.1, we are on version 13.0 and I know we are out of support and I am wanting to get us to 13.1 ASAP. I have git pulled all the files in the repo and moved them over to the ADC but I am getting an error no matter how I run it. I am just simply running: check_invalid_config /nsconfig/ns.conf -buildVersion 13.1 and I get:

usage: configCheck [-h] -f <path to ns config file> [-v] [-V]
configCheck: error: unrecognized arguments: -B 13.1
Error in checking config file: 512root@DalNetScalerLB#

Not matter what I do it will not work. I really want to run the pre-check before the upgrade and the nspepi tool is working so I am unsure what the issue is here. Any help would be apprecitated.

The Readme file has a typo in the section "NSPEPI and check_invalid_config tools can be run on the CentOS and Ubuntu systems" - "If python3 is installed, then please create a symbolic link for python like "ln -s /usr/bin/pytho3 /usr/bin/python".

The correct command should be "ln -s /usr/bin/python3 /usr/bin/python"

When check_invalid_config is copied to /netscaler the default rights are not sufficient to run it. I used WinSCP to copy the files

Example:
root@NS01# check_invalid_config /nsconfig/ns.conf
-bash: /netscaler/check_invalid_config: Permission denied

After setting rights to 550:
root@NS01# check_invalid_config /nsconfig/ns.conf

No issue detected with the configuration.

Hello,

while this syntax works fine:
./nspepi -e 'REQ.IP.DESTIP == 10.10.10.0 -netmask 255.255.255.0'
"CLIENT.IP.DST.IN_SUBNET(10.10.10.0/24)"

the processing of the config file does NOT convert authorization policies:

$ cat test.conf
add authorization policy LAN_10 "REQ.IP.DESTIP == 10.10.10.0 -netmask 255.255.255.0" ALLOW
$ ./nspepi -f test.conf -v
INFO - add authorization policy LAN_10 "REQ.IP.DESTIP == 10.10.10.0 -netmask 255.255.255.0" ALLOW

Converted config will be available in a new file new_test.conf.
Check warn_test.conf file for any warnings or errors that might have been generated.
$ cat new_test.conf
add authorization policy LAN_10 "REQ.IP.DESTIP == 10.10.10.0 -netmask 255.255.255.0" ALLOW
$ wc -l warn_test.conf
0 warn_test.conf

Please advise. Thank you!
BR
Hermann M.