libnss-mapuser.git - Package for mapping radius users to local users (mirror of https://github.com/vyos/libnss-mapuser.git)

Age	Commit message (Collapse)	Author
2018-04-03	bumped version number to 1.1.0 given significant new features	Dave Olson

2018-04-02	Add VSA shell:priv-lvl support for privileged radius user logins	Dave Olson
	Ticket: CM-19457 Reviewed By: roopa Testing Done: lots of variations of login, su, sudo, automated radius tests Now we always read the map files. If session is set, we try that file first, so that a user always sees their name, same as tacplus. If that's the wrong file, read through all of the map files, look for the correct match based on either name+session or auid+session, depending on getpwnam or getpwuid entry point Ignore same set of users as tacacs, including new radius_priv_user account for the privileged RADIUS user. create and delete the mapuser files from libpam-radius-auth now; we need to have the mapping file written early enough for the pam interfaces to get the correct info. Using the pam_script is too limiting, and since we are creating the database in libpam-radius-auth now, we'll delete it there as well to keep things symmetric, so delete the script and the references to the scripts A significant part of this effort was adding getgrent, getgrgid, and getgrnam support, so that the radius users are put into the netshow (unprivileged) and netedit and sudo (privileged) groups at login. A lot of restructuring went in as part of that, and cleaned up some longstanding bugs, including return values for the getpw* routines. Also cleaned up some whitespace issues. Also renamed some globals (debug, min_uid, init_common()) that might collide with other programs, so that when I build unstripped and normal visibility shared libs, they won't collide with programs calling the functions (saw this with "debug" and bgpd, for example).
2018-02-26	Fixed exclude_users to work, added more users, alway skip tacacs[0-9]*	Dave Olson
	Ticket: CM-19886 Reviewed By: nobody Testing Done: Somehow exclude_users wasn't implemented (or got deleted somewhere along the line). Make list match tacplus_client, except exclude our own mapped users by matching config items, and also skip any user starting with tacacs[0-9] inline instead of listing all 16 in exclude_users field in config file. Implemened for mapped_priv_user too, since that work is ongoing. Listed change in debian/changelog If debug is set to 2 or higher, print that the name lookup was skipped due to exclusion.
2018-01-17	Added daemon and nobody to exclude_users list	Dave Olson
	Ticket: CM-19469 Reviewed By: nobody Testing Done: ran with change. Similar to the change for tacacs, but this already had snmp. Added quagga as well, for users that haven't completed the transition from quagga to frr. Bumped changelog and documented
2017-07-18	updated changelog to RELEASED so I can merge to stable	Dave Olson

2017-06-23	Fixed remove to clean up plugin entries in nsswitch.conf	Dave Olson
	Ticket: CM-16909 Reviewed By: nobody Testing Done: installed, upgraded, removed We weren't removing the mapuser plugins in nsswitch.conf on package remove, now we do. Also cleaned up a bit and use \s instead of [ \t] for whitespace.
2017-06-22	Fixed naming of nss_mapuser.5 and conf file; naming in manpages	Dave Olson

2017-06-21	Random small fixes with everything now working	Dave Olson
	Fixed trailing whitespace Also fixed man page formatting issue Added misc to debian/control changelog modified to cumulus cl3u1
2017-06-21	Add man pages for the plugins and the configuration file	Dave Olson

2017-06-15	Initial version of libnss-mapuser package	Dave Olson
	See README for details