Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-12-08 | Force root account to have disabled password | Stephen Hemminger | |
This makes sure there is no working password for user root in ISO. | |||
2009-12-08 | Allow root account to not exist | Stephen Hemminger | |
If root account is deleted, disable it rather than removing it from passwd file and confusing everything. | |||
2009-12-08 | Keep udev from borking wireless device names | Stephen Hemminger | |
If second wlan device is created (for multiple ssid), then udev rules don't know how to handle it. For now, just accept what kernel gives us. | |||
2009-12-07 | Fix configure of user | Stephen Hemminger | |
Previous change broke setup of root account because 'uid = 0' looks like false so useradd called when usermod was intended. | |||
2009-12-07 | Merge branch 'kenwood' of suva.vyatta.com:/git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-07 | don't block passwd with pam | Stephen Hemminger | |
Breaks setup of account during install. Useradd calls passwd. | |||
2009-12-04 | 0.15.121debian/0.15.121 | Stephen Hemminger | |
2009-12-04 | Fix code that generates authorized keys | Stephen Hemminger | |
This now works. loadkey vyatta scp://user@host/~/.ssh/id_rsa.pub | |||
2009-12-04 | Add back public-key templates | Stephen Hemminger | |
Move them under user/node.tag/authorization | |||
2009-12-04 | Fix load user key script | Stephen Hemminger | |
Enhanced usage of curl to handle scp://user@host/filename | |||
2009-12-04 | 0.15.120debian/0.15.120 | Stephen Hemminger | |
2009-12-04 | Block user from changing name or password | Stephen Hemminger | |
Bug 4927 This blocks user from changing fields in password file. Note: adding removing users is not allowed unless user is root, but then all bets are off anyway. | |||
2009-12-04 | Rearrange the public-key configuration schema | Stephen Hemminger | |
New syntax: system login user vyatta authentication public-key user@remote type ssh-rsa | |||
2009-12-04 | Oops forgot to update installed version | Stephen Hemminger | |
2009-12-04 | 0.15.119debian/0.15.119 | Stephen Hemminger | |
2009-12-04 | Change telnet allow-root to existance (instead of boolean) | Stephen Hemminger | |
Also change config version for migration. | |||
2009-12-03 | 0.15.118debian/0.15.118 | Stephen Hemminger | |
2009-12-03 | Merge branch 'kenwood' of 192.168.100.1:git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-03 | Add dependency on adduser | Stephen Hemminger | |
Gets rid of debian build warning. | |||
2009-12-03 | Merge branch 'kenwood' of 192.168.100.1:git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-03 | Fix some file headers that cause build warnings | Stephen Hemminger | |
Debian build warnings on these files. | |||
2009-12-03 | 0.15.117debian/0.15.117 | Stephen Hemminger | |
2009-12-03 | Merge branch 'kenwood' of 192.168.100.1:git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-03 | Preserve ssh host keys in install-image | Stephen Hemminger | |
Similar to previous change to install-system | |||
2009-12-03 | Add script for loading public key | Stephen Hemminger | |
Variation on existing config file loader that is useful for loading public key. | |||
2009-12-03 | Merge branch 'kenwood' of 192.168.100.1:git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-03 | Add script for loading public key | Stephen Hemminger | |
Variation on existing config file loader that is useful for loading public key. | |||
2009-12-03 | Set modes of created authorization key (and directory) | Stephen Hemminger | |
sshd is picky about modes (and it should be), so make sure and chmod the file. | |||
2009-12-03 | Merge branch 'kenwood' of 192.168.100.1:git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-03 | Update .ssh/authorized_keys as part of the login update | Stephen Hemminger | |
2009-12-03 | Require key-type to be set. | Stephen Hemminger | |
2009-12-03 | SSH enhancements | Stephen Hemminger | |
Add public key support Convert allow-root and password-authentication from boolean nodes to regular nodes. | |||
2009-12-02 | 0.15.116debian/0.15.116 | Stephen Hemminger | |
2009-12-02 | Merge branch 'kenwood' of suva.vyatta.com:/git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-02 | Use ext3 all the time | Stephen Hemminger | |
It avoids issues with corrupt filesystems on VM. | |||
2009-12-02 | 0.15.115debian/0.15.115 | Bob Gilligan | |
2009-12-02 | Changes related to co-ordination between kernel parameters and radvd. | Bob Gilligan | |
First, we need to set the global IPv6 parameter under "all" when "disable-forwarding" is deleted because this is the parameter that actually controls whether the stack will forward IPv6 packets. Second, if router advertisements were configured while global IPv6 forwarding was disabled, we need to re-start the daemon when global IPv6 forwarding is re-enabled. | |||
2009-12-02 | Simply Radius server update | Stephen Hemminger | |
Rather than complex sed editing, just regenerate whole file. | |||
2009-12-02 | Don't lose user customization to pam-auth | Stephen Hemminger | |
Don't pass --force flag to pam-auth-update, so if user has customized file, then radius config will stay. | |||
2009-12-02 | Pass more info to login scripts | Stephen Hemminger | |
Pass status to login update() which might be useful to handle case when node is deleted. | |||
2009-12-02 | 0.15.114debian/0.15.114 | Bob Gilligan | |
2009-12-02 | Co-ordinate global and per-interface IPv6 forwarding control. | Bob Gilligan | |
Now a flag file indicates that IPv6 forwarding is disabled on a specific interface. | |||
2009-12-02 | Add ability to disable password authentication | Stephen Hemminger | |
Part of Bug 3255 | |||
2009-12-01 | 0.15.113debian/0.15.113 | Stephen Hemminger | |
2009-12-01 | Save SSH keys on re-install | Stephen Hemminger | |
Bug 5045 This adds option to save original SSH host keys when doing a re-install. Also mount original partition read-only to avoid updating it. | |||
2009-12-01 | Merge branch 'kenwood' of suva.vyatta.com:/git/vyatta-cfg-system into kenwood | Stephen Hemminger | |
2009-12-01 | Get rid of warning on package update | Stephen Hemminger | |
Warning: cp '/opt/vyatta/etc/level' and '/opt/vyatta/etc/level' are the same file | |||
2009-12-01 | Avoid updating files on boot | Stephen Hemminger | |
If file is already correct, no need to write it. | |||
2009-12-01 | 0.15.112debian/0.15.112 | Stephen Hemminger | |
2009-12-01 | Add sync after config save | Stephen Hemminger | |
Calling sync ensure buffer cache is flushed, so that config is actually on disk. May resolve some of the regression test I/O errors. |