summaryrefslogtreecommitdiff
path: root/src/conf_mode
AgeCommit message (Collapse)Author
2020-02-10service https: T1585: add missing check in verify()John Estabrook
2020-02-09snmp: T1931: instead of searching a pseudo marker find real marker in configChristian Poessinger
As we need to operate with usmUser, we can search for it directly if its present or not. There is always one usmUser entry for the system user.
2020-02-09snmp: T1931: change calling order when setting marker flagChristian Poessinger
2020-02-09snmp: T1931: delete obsolete reading of oldEngineIDChristian Poessinger
2020-02-09snmp: T1931: harden logic when re-reading config fpr encrypted keysChristian Poessinger
2020-02-09snmp: T1931: shorten file read timeout to 10msChristian Poessinger
2020-02-09service lldp: T2019: modify handling of interface 'all'agh
Modify lldpd config template in './src/conf_mode/lldp.py'. conf_mode uses 'all' to specify all interfaces. lldpd config file uses '*' to specify all interfaces. Both use an exclamation mark ('!') as prefix to disable lldp on an interface, eg. '!eth1' or '!all'. Add jinja2 template filters to create and merge following sub-lists a) take list of conf_mode lldp interfaces, remove every interface except 'all', replace 'all' with '*' -> support interface all b) take list of conf_mode lldp interfaces, remove every interface except '!all', replace '!all' with '!*' -> support interface all disabled c) take list of conf_mode lldp interfaces, remove every interface named 'all' or '!all' -> support any other interface
2020-02-05radius: T1990: fix sed command when removing radius serviceChristian Poessinger
2020-02-05radius: T1990: raise ConfigError in os exception handlerChristian Poessinger
2020-02-05user: T1990: encrypted password must be supplied in ''Christian Poessinger
2020-02-05user: T1948: logout user when he is deletedChristian Poessinger
2020-02-05user: T1948: raise ConfigError in os exception handlerChristian Poessinger
2020-02-05user: T1948: one can not delete his own user accountChristian Poessinger
2020-02-05Merge branch 't1948-system-login' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 't1948-system-login' of github.com:c-po/vyos-1x: radius: T1948: add libnss-mapname support radius: T1948: rename server dictionary radius: T1948: supply PAM configuration template user: T1948: fix system user creation ogin: user: radius: T1948: use discrete configuration for each system login: T1948: remove obsolete config nodes "group" and "level" login: T1948: SSH keys can only be added after user has been created login: T1948: initial support for RADIUS configuration login: T1948: support for SSH keys login: T1948: add/remove local users login: T1948: initial rewrite in XML/Python options: T1919: remove broken comment
2020-02-05radius: T1948: add libnss-mapname supportChristian Poessinger
2020-02-05radius: T1948: rename server dictionaryChristian Poessinger
2020-02-05user: T1948: fix system user creationChristian Poessinger
2020-02-05ogin: user: radius: T1948: use discrete configuration for each systemChristian Poessinger
Split combined XML/Python code to individual code for local user accounts and RADIUS authenticated accounts.
2020-02-05service https: T1585: add support for letsencrypt certificatesJohn Estabrook
2020-02-04http api T2013: remove default key if user api_keys are setJohn Estabrook
2020-02-02login: T1948: SSH keys can only be added after user has been createdChristian Poessinger
2020-02-02login: T1948: initial support for RADIUS configurationChristian Poessinger
2020-02-02login: T1948: support for SSH keysChristian Poessinger
2020-02-02login: T1948: add/remove local usersChristian Poessinger
2020-02-02login: T1948: initial rewrite in XML/PythonChristian Poessinger
2020-01-31bond: T1992: only tear down interface if it's really requiredChristian Poessinger
Without this change the bond interface is always torn down prior changing it's parameters. This will also reset BGP sessions on other VLAN interfaces which is more then bad. This change will only tear down the interface when it is really required, indicated by bond['shutdown_required'], which is required by certain operations as e.g. changing the operating mode.
2020-01-30vpn-pptp: pep8 formattedhagbard
2020-01-30vpn-pptp: adjusting name schemeshagbard
2020-01-30vpn-pptp: T1768 vyos.config rewritehagbard
2020-01-30lldp: T1896: bugfix SyntaxError: invalid syntaxChristian Poessinger
Commit 66f8be0 ("lldp: T1896: remove MED civic based location information") removed MED civic location support, but there was an error in an if/elif statement. This has been fixes. File "/usr/libexec/vyos/conf_mode/lldp.py", line 191 elif len(location['coordinate_based']) > 0: ^ SyntaxError: invalid syntax
2020-01-30Merge branch 't1896-remove-lldp-civic' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 't1896-remove-lldp-civic' of github.com:c-po/vyos-1x: lldp: T1896: remove MED civic based location information
2020-01-29lldp: T1994: fix jinja template to listen on specified interfacesbbs2web
Signed-off-by: bbs2web <bbs2web@hotmail.com>
2020-01-26service-ipoe: rename scripts and schemeshagbard
2020-01-26IPoE: T1767: vyos.config rewritehagbard
2020-01-26wireguard: T1765: vyos.config functions rewritehagbard
2020-01-26lldp: T1896: remove MED civic based location informationChristian Poessinger
Civic based location information was not working for quiet some time and as an unused feature we should drop it to keep the codebase more simple and maintainable.
2020-01-26snmpd: T1937: fix all startup warningsChristian Poessinger
This is actually an "upstream" bug, see [1] but it can be fixed via our own scripts. [1]: https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1384122
2020-01-26Revert "snmp: T1937: fix "unknown token" warnings"Christian Poessinger
This reverts commit 6945b2e3561cd76d193d41dd6ab5249661230460.
2020-01-24pppoe-server: T1985: Enable ipv6 modules if ipv6 not deniedDmitriyEshenko
2020-01-23openvpn: T1975: ta devices need to be explicitly brought upChristian Poessinger
2020-01-23service-pppoe: autopep formattedhagbard
2020-01-23service-pppoe: T1956: support PADO-delayhagbard
2020-01-23service-pppoe: T1766: service-pppoe - vyos.config rewritehagbard
2020-01-21keepalived: vrrp: T1900: always enable SNMP monitoringChristian Poessinger
2020-01-21Remove 2 interface requirement from dhcp-relayDaniel Foster
More detail in Phabricator T1978. There is no requirement for dhcp-relay to have multiple interfaces configured.
2020-01-20Merge pull request #199 from bmhughes/fix-ipv6-bfd-verificationChristian Poessinger
bfd: T1949: fix verification logic for IPv6 BFD peers
2020-01-14vrrp: T1884: Keep transition-script native behaviour and implement ↵DmitriyEshenko
transaction-script 'stop'
2020-01-14ipsec: T1959: Check file existence before changesDmitriyEshenko
2020-01-13vxlan: T1961: bugfix for copy and paste errorChristian Poessinger
2020-01-09bfd: T1949: fix verification logic for IPv6 BFD peersBenjamin M. Hughes
IPv6 BFD peers only require a source address unless link-local addresses are used.