Found the issue. I'm using a TACACS server with command authorization. The enable and show commands were failing with "Command authorization failed.", however, this error was not being logged. On the TACACS server, you will see:
TACACS: TACACS+ authorization request missing both User and Remote-Address attributes
The following commands failed to run, however, they were logged on the TACACS server:
if [catch {cli_exec $cli1(fd) "enable"} result] {
error $result $errorInfo
if [catch {cli_exec $cli1(fd) "show Cellular 0/1/0 gps | inc stamp" } result ] {
error $result $errorInfo
So, $result now contained "Command authorization failed."
When running:
regexp {:\s+[a-zA-Z]+\s+([a-zA-Z]+)\s+(\d+)\s+(\d+:\d+:\d+)\s+(\d+)} $result match mon day tod year
There was no match and so $mon $day $tod and $year were not being created. This is where the first error is logged:
Feb 17 23:15:01.753: %HA_EM-6-LOG: gps_time.tcl: can't read "mon": no such variable
Feb 17 23:15:01.753: %HA_EM-6-LOG: gps_time.tcl: while executing
Feb 17 23:15:01.753: %HA_EM-6-LOG: gps_time.tcl: "puts "regx = $mon $day $tod $year""
Feb 17 23:15:01.753: %HA_EM-6-LOG: gps_time.tcl: invoked from within
To resolve this, I did the following:
1) create a username on the router with priv 15 and password
2) add - "event manager session cli username "<username>" privilege 15"
3) make sure in Tacacs, there is a username and password pair that matches the one entered on the router. This is what is passed to Tacacs to authenticate.
4) Make sure the enable, show cellular, and clock set commands are authorized for this user.
