# General

**URL:** https://dmap-community.ductus.global/c/11-category/11.md?page=1

[Latest](https://dmap-community.ductus.global/latest.md) · [Categories](https://dmap-community.ductus.global/categories.md)

**Page:** 2

---

## [ConfD 8.0.6 Crash & Closed Sockets – How to Decode Error Logs? ](https://dmap-community.ductus.global/t/confd-8-0-6-crash-closed-sockets-how-to-decode-error-logs/4900)

<div class="topic-metadata">

**Author:** [@fabio.goliveira](https://dmap-community.ductus.global/u/fabio.goliveira)\
**Replies:** 5\
**Last updated:** [March 21, 2025, 2:44pm UTC](https://dmap-community.ductus.global/t/confd-8-0-6-crash-closed-sockets-how-to-decode-error-logs/4900 "2025-03-21T14:44:56Z")

</div>

Hello DMAP community, we recently updated our ConfD from version 7.2.6 to 8.0.6, and since then, we have been experiencing some failures in our equipment due to ConfD crashing or its sockets closing. We have not yet bee…

---

## [Confd crashes when configuring snmp engine-id](https://dmap-community.ductus.global/t/confd-crashes-when-configuring-snmp-engine-id/4887)

<div class="topic-metadata">

**Author:** [@tmmachado](https://dmap-community.ductus.global/u/tmmachado)\
**Replies:** 4\
**Last updated:** [March 13, 2025, 8:03pm UTC](https://dmap-community.ductus.global/t/confd-crashes-when-configuring-snmp-engine-id/4887 "2025-03-13T20:03:28Z")

</div>

We did a Confd upgrade from version 7.2.6 to 8.0.6. After this, an error started to occur when the snmp engine-id and aaa authentication-order are configured on same commit. The yang related to engine-id: augment /snmp…

---

## [Int32 but enter it in hex](https://dmap-community.ductus.global/t/int32-but-enter-it-in-hex/4881)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 1\
**Last updated:** [February 10, 2025, 8:43pm UTC](https://dmap-community.ductus.global/t/int32-but-enter-it-in-hex/4881 "2025-02-10T20:43:15Z")

</div>

We have a number of values in our internal mib that are int32 and would like to represent them the confd cli as typed int32 but accepting either a decimal or hexidecimal value and storing it into an int32. I have seen t…

---

## [Receiving a Validation Timeout Before Reaching Configured Timeout Time](https://dmap-community.ductus.global/t/receiving-a-validation-timeout-before-reaching-configured-timeout-time/4876)

<div class="topic-metadata">

**Author:** [@rrnicolay](https://dmap-community.ductus.global/u/rrnicolay)\
**Replies:** 3\
**Last updated:** [February 8, 2025, 9:22pm UTC](https://dmap-community.ductus.global/t/receiving-a-validation-timeout-before-reaching-configured-timeout-time/4876 "2025-02-08T21:22:10Z")

</div>

Hello! We’re having a problem in a YANG validation, where a timeout is thrown before reaching the time configured for the timeout. The YANG snippet which calls the validation looks like this: augment /router-mpls:…

---

## [Empty String representations in Yang](https://dmap-community.ductus.global/t/empty-string-representations-in-yang/4877)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 1\
**Last updated:** [February 4, 2025, 8:09am UTC](https://dmap-community.ductus.global/t/empty-string-representations-in-yang/4877 "2025-02-04T08:09:04Z")

</div>

In our existing code, we have mac-address lists where an entry can be an empty string “” which indicates that it matches any mac address. We also have IP lists. So you can have an IP + MAC to match against, or IP + any…

---

## [What is the source of crypto for encrypted strings](https://dmap-community.ductus.global/t/what-is-the-source-of-crypto-for-encrypted-strings/4869)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 2\
**Last updated:** [January 29, 2025, 6:56pm UTC](https://dmap-community.ductus.global/t/what-is-the-source-of-crypto-for-encrypted-strings/4869 "2025-01-29T18:56:15Z")

</div>

Where does confd get its crypto algorithms? Do they come from openssl? i.e. if we have openssl on board in FIPS mode, is it using those algorithms or are they hand rolled or from some other source?

---

## [Decrypt des3-cbc-encrypted-string using confd\_cmd or maapi](https://dmap-community.ductus.global/t/decrypt-des3-cbc-encrypted-string-using-confd-cmd-or-maapi/4867)

<div class="topic-metadata">

**Author:** [@Confduser](https://dmap-community.ductus.global/u/Confduser)\
**Replies:** 1\
**Last updated:** [January 21, 2025, 9:41am UTC](https://dmap-community.ductus.global/t/decrypt-des3-cbc-encrypted-string-using-confd-cmd-or-maapi/4867 "2025-01-21T09:41:54Z")

</div>

Hi, I am using des3-cbc-encrypted-string to store the passwords. I understand that this can be decrypted using maapi\_install\_crypto\_keys() and confd\_decrypt() but is there a equivalent of this in confd\_cmd or maapi wh…

---

## [Logging to files but not syslog](https://dmap-community.ductus.global/t/logging-to-files-but-not-syslog/4868)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 1\
**Last updated:** [January 21, 2025, 9:35am UTC](https://dmap-community.ductus.global/t/logging-to-files-but-not-syslog/4868 "2025-01-21T09:35:58Z")

</div>

syslog log config is false and in theory this causes syslog to be sent local (good as local syslog-ng will redirect to all the collectors). daemon false 172.28.152.67 1514 true true /usr/bob/log/…

---

## [How to use filters in confd cli](https://dmap-community.ductus.global/t/how-to-use-filters-in-confd-cli/4864)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 2\
**Last updated:** [January 13, 2025, 4:05pm UTC](https://dmap-community.ductus.global/t/how-to-use-filters-in-confd-cli/4864 "2025-01-13T16:05:01Z")

</div>

I am trying to figure out how to use the matching function to filter just to entries that have admin-state set to enabled. I have tried to follow the examples in the manuals but they are not exactly the same format as t…

---

## [Error - The namespace http://tail-f.com/ns/rollback (referenced by http://tail-f.com/ns/tailf-restconf) could not be found in the loadPath](https://dmap-community.ductus.global/t/error-the-namespace-http-tail-f-com-ns-rollback-referenced-by-http-tail-f-com-ns-tailf-restconf-could-not-be-found-in-the-loadpath/4861)

<div class="topic-metadata">

**Author:** [@Saranya](https://dmap-community.ductus.global/u/Saranya)\
**Replies:** 2\
**Last updated:** [January 9, 2025, 2:24pm UTC](https://dmap-community.ductus.global/t/error-the-namespace-http-tail-f-com-ns-rollback-referenced-by-http-tail-f-com-ns-tailf-restconf-could-not-be-found-in-the-loadpath/4861 "2025-01-09T14:24:08Z")

</div>

Hi, I have initially installed with confd-8.0.14 and uninstalled then installed with confd-8.0. I am seeing the below error, any idea? “2025-01-07T09:30:13.551543+00:00 pod-cfgmgr-fed-smf-rsaranya-tk5-k8-node-1-k4mtjz-…

---

## [Snmpwalk fails for list inside a list config true](https://dmap-community.ductus.global/t/snmpwalk-fails-for-list-inside-a-list-config-true/4856)

<div class="topic-metadata">

**Author:** [@yogevc](https://dmap-community.ductus.global/u/yogevc)\
**Replies:** 2\
**Last updated:** [January 5, 2025, 8:44pm UTC](https://dmap-community.ductus.global/t/snmpwalk-fails-for-list-inside-a-list-config-true/4856 "2025-01-05T20:44:22Z")

</div>

Hi, I have this schema: container system { container works { config false; list works\_l1 { tailf:secondary-index snmp { tailf:index-leafs name; tailf:sort-order snmp; } key n…

---

## [Welcome to the DMAP Community!](https://dmap-community.ductus.global/t/welcome-to-the-dmap-community/4855)

<div class="topic-metadata">

**Author:** [@sbarvick](https://dmap-community.ductus.global/u/sbarvick)\
**Replies:** 0\
**Last updated:** [December 20, 2024, 6:32pm UTC](https://dmap-community.ductus.global/t/welcome-to-the-dmap-community/4855 "2024-12-20T18:32:03Z")

</div>

I would like to welcome everyone to the DMAP Community and its forum for questions, answers, and discussion! In this forum, we will continue to build upon the participation of the overall community for this critical com…

---

## [Kill another users session](https://dmap-community.ductus.global/t/kill-another-users-session/4852)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 2\
**Last updated:** [December 20, 2024, 3:24pm UTC](https://dmap-community.ductus.global/t/kill-another-users-session/4852 "2024-12-20T15:24:05Z")

</div>

We have a requirement for an Admin user to be able to kill another user’s session. Is there a way in confd cli to do this?

---

## [Output-file command](https://dmap-community.ductus.global/t/output-file-command/4851)

<div class="topic-metadata">

**Author:** [@murrayl](https://dmap-community.ductus.global/u/murrayl)\
**Replies:** 1\
**Last updated:** [December 20, 2024, 2:25pm UTC](https://dmap-community.ductus.global/t/output-file-command/4851 "2024-12-20T14:25:26Z")

</div>

Are there ways to hide specific confd built in commands from the user? As an example if I don’t want users to be able to use the output-file command, or the cd command, can I hide those?

---

## [The ConfD User Forum is Moving!](https://dmap-community.ductus.global/t/the-confd-user-forum-is-moving/4847)

<div class="topic-metadata">

**Author:** [@jlawitzke](https://dmap-community.ductus.global/u/jlawitzke)\
**Replies:** 0\
**Last updated:** [December 18, 2024, 2:50pm UTC](https://dmap-community.ductus.global/t/the-confd-user-forum-is-moving/4847 "2024-12-18T14:50:00Z")

</div>

The ConfD User Forum is Moving! The ConfD User Forum is in the process of moving to a new server. During this process, the current User Forum has been set to read-only mode. Once the new server is ready, you will be r…

---

## [SSH ciphers not updated at run time](https://dmap-community.ductus.global/t/ssh-ciphers-not-updated-at-run-time/4829)

<div class="topic-metadata">

**Author:** [@yhevrony](https://dmap-community.ductus.global/u/yhevrony)\
**Replies:** 2\
**Last updated:** [December 9, 2024, 3:20pm UTC](https://dmap-community.ductus.global/t/ssh-ciphers-not-updated-at-run-time/4829 "2024-12-09T15:20:18Z")

</div>

Hi, We are using confd 8.0.6, and when we try to set /confdConfig/ssh/algorithms/mac to \[hmac-sha2-512, hmac-sha2-256\], it still accepts hmac-sha1. Could it be that the --reload option is not working? If so, is there …

---

## [Add ip from which user is connecting to audit log](https://dmap-community.ductus.global/t/add-ip-from-which-user-is-connecting-to-audit-log/4820)

<div class="topic-metadata">

**Author:** [@ajarc](https://dmap-community.ductus.global/u/ajarc)\
**Replies:** 2\
**Last updated:** [November 26, 2024, 3:31am UTC](https://dmap-community.ductus.global/t/add-ip-from-which-user-is-connecting-to-audit-log/4820 "2024-11-26T03:31:02Z")

</div>

Hello, we would like to add the IP address from which the user is connecting to the audit log generated by ConfD. The current audit log that ConfD generates has the following pattern: audit user: \<username\>/\<session\_id\>…

---

## [Confd taking a lot of memory at startup](https://dmap-community.ductus.global/t/confd-taking-a-lot-of-memory-at-startup/4805)

<div class="topic-metadata">

**Author:** [@kabhijeet](https://dmap-community.ductus.global/u/kabhijeet)\
**Replies:** 6\
**Last updated:** [October 21, 2024, 8:37pm UTC](https://dmap-community.ductus.global/t/confd-taking-a-lot-of-memory-at-startup/4805 "2024-10-21T20:37:55Z")

</div>

Hi @cohult, Confd taking a lot of memory at startup causing container to get killed due to OOM. We run confd inside a container that has a memory limit of 4gb which is well within our average usage of 2.5gb. This issue …

---

## [Not able to cli login from rhel 9. ssh-rsa is deprecated](https://dmap-community.ductus.global/t/not-able-to-cli-login-from-rhel-9-ssh-rsa-is-deprecated/4804)

<div class="topic-metadata">

**Author:** [@ankitrathore](https://dmap-community.ductus.global/u/ankitrathore)\
**Replies:** 1\
**Last updated:** [October 17, 2024, 7:46am UTC](https://dmap-community.ductus.global/t/not-able-to-cli-login-from-rhel-9-ssh-rsa-is-deprecated/4804 "2024-10-17T07:46:50Z")

</div>

I am using confd 7.1. when i am trying to cli from rhel9 system i am getting below error. Unable to negotiate with 10.179.2.211 port 31276: no matching host key type found. Their offer: ssh-rsa. i believe only ssh-rsa …

---

## [Confd crash with scale](https://dmap-community.ductus.global/t/confd-crash-with-scale/4769)

<div class="topic-metadata">

**Author:** [@yhevrony](https://dmap-community.ductus.global/u/yhevrony)\
**Replies:** 1\
**Last updated:** [September 11, 2024, 2:21pm UTC](https://dmap-community.ductus.global/t/confd-crash-with-scale/4769 "2024-09-11T14:21:56Z")

</div>

HI, We are facing crashes of confd when increasing scale. We are using maapi\_set\_values() to configure the CDB from a northbound application. We see that when we pass a certain limit of entities, confd crashes. We ha…

---

## [How to get xpath to configure nacm to restrict the config](https://dmap-community.ductus.global/t/how-to-get-xpath-to-configure-nacm-to-restrict-the-config/4729)

<div class="topic-metadata">

**Author:** [@balajinp](https://dmap-community.ductus.global/u/balajinp)\
**Replies:** 6\
**Last updated:** [August 14, 2024, 6:40am UTC](https://dmap-community.ductus.global/t/how-to-get-xpath-to-configure-nacm-to-restrict-the-config/4729 "2024-08-14T06:40:38Z")

</div>

I want to deny the access to the below CLI however this show is augmented cli “/infra:show/infra:subscriber/infra:input/infra:subs-type” show subscriber wps Tried configuration nacm rule-list low-user rule deny-show…

---

## [Uncommited changes with MAAPI](https://dmap-community.ductus.global/t/uncommited-changes-with-maapi/4607)

<div class="topic-metadata">

**Author:** [@Donovan](https://dmap-community.ductus.global/u/Donovan)\
**Replies:** 3\
**Last updated:** [August 13, 2024, 6:08pm UTC](https://dmap-community.ductus.global/t/uncommited-changes-with-maapi/4607 "2024-08-13T18:08:35Z")

</div>

module example-module { yang-version 1.1; namespace "urn:example:module"; prefix example; container policies { list policy { key "policy-name"; leaf policy-name { type string; } …

---

## [CONFD\_CLI Hung Issue](https://dmap-community.ductus.global/t/confd-cli-hung-issue/4746)

<div class="topic-metadata">

**Author:** [@spratapthakur](https://dmap-community.ductus.global/u/spratapthakur)\
**Replies:** 0\
**Last updated:** [July 31, 2024, 12:02pm UTC](https://dmap-community.ductus.global/t/confd-cli-hung-issue/4746 "2024-07-31T12:02:04Z")

</div>

Confd Cli is getting hung and the sessions is not getting terminated Description: We recently shifted from VNF to CNF In VNF: process tree = sshd-\> bash-\>confd Scenario when this issue occurs: cli: set something …

---

## [Is it valid to send confd notification using an rpc](https://dmap-community.ductus.global/t/is-it-valid-to-send-confd-notification-using-an-rpc/4717)

<div class="topic-metadata">

**Author:** [@ThanaKal](https://dmap-community.ductus.global/u/ThanaKal)\
**Replies:** 1\
**Last updated:** [July 5, 2024, 3:31pm UTC](https://dmap-community.ductus.global/t/is-it-valid-to-send-confd-notification-using-an-rpc/4717 "2024-07-05T15:31:09Z")

</div>

hello, new to working with confd, i would like to create an rpc and create the corresponding executable/reigister actionpoint which will be sending confd notification, and a process will listen to them and process them. …

---

## [Announcement: The Future of ConfD](https://dmap-community.ductus.global/t/announcement-the-future-of-confd/4723)

<div class="topic-metadata">

**Author:** [@jlawitzke](https://dmap-community.ductus.global/u/jlawitzke)\
**Replies:** 1\
**Last updated:** [July 11, 2024, 3:59pm UTC](https://dmap-community.ductus.global/t/announcement-the-future-of-confd/4723 "2024-07-11T15:59:37Z")

</div>

We are excited to announce that Tail-f has entered into an agreement with Ductus under which Ductus is authorized to offer support and maintenance services to current ConfD users. Ductus is also offering its own element …

---

## [ConfD Premium no longer available? Future of ConfD?](https://dmap-community.ductus.global/t/confd-premium-no-longer-available-future-of-confd/4552)

<div class="topic-metadata">

**Author:** [@david.sun.iridium](https://dmap-community.ductus.global/u/david.sun.iridium)\
**Replies:** 7\
**Last updated:** [July 11, 2024, 3:42pm UTC](https://dmap-community.ductus.global/t/confd-premium-no-longer-available-future-of-confd/4552 "2024-07-11T15:42:49Z")

</div>

Hi guys, I spoke with one of the ConfD reps who said ConfD Premium was no longer being offered and that no paid support for the product was available. We were looking at ConfD as well as other alternatives for our NETC…

---

## [Callpoints and registration](https://dmap-community.ductus.global/t/callpoints-and-registration/4708)

<div class="topic-metadata">

**Author:** [@nchakrav](https://dmap-community.ductus.global/u/nchakrav)\
**Replies:** 2\
**Last updated:** [July 10, 2024, 4:08am UTC](https://dmap-community.ductus.global/t/callpoints-and-registration/4708 "2024-07-10T04:08:41Z")

</div>

Hi Team, Is there any memory impact if a certain transform callpoint is not part of the running system but there are daemon running in the same system which actually handles such unavailable callpoints. For example : i…

---

## [Iterator v/s cdb\_get() in process\_update() of subscription handler](https://dmap-community.ductus.global/t/iterator-v-s-cdb-get-in-process-update-of-subscription-handler/4695)

<div class="topic-metadata">

**Author:** [@evnavya](https://dmap-community.ductus.global/u/evnavya)\
**Replies:** 1\
**Last updated:** [May 24, 2024, 10:03am UTC](https://dmap-community.ductus.global/t/iterator-v-s-cdb-get-in-process-update-of-subscription-handler/4695 "2024-05-24T10:03:23Z")

</div>

When writing a subscription handler, in process\_update() is it mandatory to use iterator when the subscribed path is only to a single leaf with a default value? Is it a good practise to directly read the value of the le…

---

## [Special characters in AAA user gives conflicting information](https://dmap-community.ductus.global/t/special-characters-in-aaa-user-gives-conflicting-information/4693)

<div class="topic-metadata">

**Author:** [@etappau](https://dmap-community.ductus.global/u/etappau)\
**Replies:** 5\
**Last updated:** [May 16, 2024, 7:41am UTC](https://dmap-community.ductus.global/t/special-characters-in-aaa-user-gives-conflicting-information/4693 "2024-05-16T07:41:13Z")

</div>

Hi experts, Our application vDRA is using a rather primitive version of confd 6.3, I cannot be sure if that is EoL. However, our customer is reporting a very unique problem. If I were to setup a cli user with special …

---

## [Change from string to tailf:aes encryption for existing record](https://dmap-community.ductus.global/t/change-from-string-to-tailf-aes-encryption-for-existing-record/4688)

<div class="topic-metadata">

**Author:** [@navjot](https://dmap-community.ductus.global/u/navjot)\
**Replies:** 4\
**Last updated:** [May 14, 2024, 11:32am UTC](https://dmap-community.ductus.global/t/change-from-string-to-tailf-aes-encryption-for-existing-record/4688 "2024-05-14T11:32:03Z")

</div>

Changed a leaf in schema from string to tailf:aes-256-cfb-128-encrypted-string and performed confd upgrade. In 7.3.2 version, after upgrade the existing values in db still show in clear-text But, in 8.0 version, after …

[Previous page](https://dmap-community.ductus.global/c/11-category/11.md)

[Next page](https://dmap-community.ductus.global/c/11-category/11.md?page=2)
