VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) https://git.amelek.net/marekm72/vyos-1x.git/atom?h=equuleus 2024-03-26T15:48:07+00:00 2024-03-26T15:48:07+00:00 aapostoliuk a.apostoliuk@vyos.io 2024-03-22T14:10:59+00:00 urn:sha1:9d34c488251c0d5111b4a3c880f2291548645db3 Fixed setting a static IP address by Radius in IPoE Allowing using named pools by default Allowed adding 'gateway-address' without named pool. 2024-02-16T13:13:06+00:00 aapostoliuk a.apostoliuk@vyos.io 2024-02-16T13:04:13+00:00 urn:sha1:5c05027f42a470dd02b3f605e29d0b90795774a7 Added the possibility of creating subnet in PPPoE client's IP pools started from any IP. 2024-01-09T09:52:07+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-01-09T09:52:07+00:00 urn:sha1:56141ca2165f58dcfd7ef47afcdb1b227827d416 2023-11-20T17:07:11+00:00 zsdc taras@vyos.io 2023-09-26T08:27:07+00:00 urn:sha1:d7457268fcaa5626e512eb00a9aab36f4a617f28 - Added system `radius` group - Added `mandatory` and `optional` modes for RADIUS - Improved PAM config for RADIUS New modes: - `mandatory` - if RADIUS answered with `Access-Reject`, authentication must be stopped and access denied immediately. - `optional` (default) - if RADIUS answers with `Access-Reject`, authentication continues using the next module. In `mandatory` mode authentication will be stopped only if RADIUS clearly answered that access should be denied (no user in RADIUS database, wrong password, etc.). If RADIUS is not available or other errors happen, it will be skipped and authentication will continue with the next module, like in `optional` mode. 2023-11-06T20:23:20+00:00 Christian Breunig christian@breunig.cc 2023-11-06T20:23:20+00:00 urn:sha1:8f59318c38667cc55846598b2f062f250b5d36eb scripts: T4269: node.def generator should automatically add default values (backport) 2023-10-08T08:27:27+00:00 Christian Breunig christian@breunig.cc 2023-10-08T08:27:27+00:00 urn:sha1:b6917f386e5f6af570973d42e63baeb4a98d6261 Since introducing the XML <defaultValue> node it was common, but redundant, practice to also add a help string indicating which value would be used as default if the node is unset. This makes no sense b/c it's duplicated code/value/characters and prone to error. The node.def scripts should be extended to automatically render the appropriate default value into the CLI help string. For e.g. SSH the current PoC renders: $ cat templates-cfg/service/ssh/port/node.def multi: type: txt help: Port for SSH service (default: 22) val_help: u32:1-65535; Numeric IP port ... Not all subsystems are already migrated to get_config_dict() and make use of the defaults() call - those subsystems need to be migrated, first before the new default is added to the CLI help. (cherry picked from commit a68c9238111c6caee78bb28f8054b8f0cfa0e374) 2023-10-03T13:47:30+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-10-03T13:47:30+00:00 urn:sha1:32dc990e1eed669803279b2b36e1bcacafac959f Add accounting-interim-interval option for PPPoE-server set service pppoe-server authentication radius accounting-interim-interval '60' 2023-08-28T19:21:14+00:00 Christian Breunig christian@breunig.cc 2023-08-28T19:21:14+00:00 urn:sha1:47d9c8067135b97bc1fbc5450dc5fa9b8e65e345 2023-04-01T14:13:34+00:00 Christian Breunig christian@breunig.cc 2023-04-01T13:43:11+00:00 urn:sha1:df58e083979a40df8c1a1391b82b2e4d856225dd Container registry CLI node changed from leafNode to tagNode with the same defaults. In addition we can now configure an authentication option per registry. (cherry picked from commit fe82d86d3e87cb8d92ebc9d0652c08e3dd79a12c) 2023-03-01T07:28:41+00:00 Christian Breunig christian@breunig.cc 2023-02-28T21:24:38+00:00 urn:sha1:3fbe35c8ab0e5dc5fd7af1a5fc8b39e848655d36 (cherry picked from commit d14a6814acb173cdc6df13212620f7da330434ed)