summaryrefslogtreecommitdiff
path: root/templates/system/login
AgeCommit message (Collapse)Author
2010-08-20Add checking of port rangeStephen Hemminger
Bug 6058 Put consitent checking port range on snmp, ssh, and telnet
2010-08-17update help text to use val_helpAn-Cheng Huang
2010-07-21Add completion for text fields with limited valuesStephen Hemminger
For all nodes that do 'syntax:expression: $VAR(@) in' add allowed tag to show possible values
2010-07-19fix typo, val_help, etc.An-Cheng Huang
2010-07-19Use val_help: features to format betterStephen Hemminger
Previous change did not format val-help tag correctly
2010-07-19Convert public-keys help to new formatStephen Hemminger
2010-07-19Fix language in help text for loadkeyStephen Hemminger
2010-07-16Remove verbs from all help messagesStephen Hemminger
Per current policy remove verb from all help messages in th is package
2010-07-06Allow incorrect user to be deletedStephen Hemminger
Avoid password checks on delete. Bug 5418
2010-07-06Change user name validationStephen Hemminger
Do username validation in perl script. This allows for checking for what is allowed, versus what is recommended. For compatiablity we allow things like upper case user names which but this is not recommended so these names produce a warning.
2010-02-17Add support for options in keyfileStephen Hemminger
The sshd file format has optional options; copy them to a placeholder node and generate to authorized_keys Better error message when wrong number of arguments.
2010-02-17Handle DSA keysStephen Hemminger
Bug 5350 Need some changes to support DSA keys (Protocol V2). Also add support for options in key file.
2010-02-02Run login update as rootStephen Hemminger
Need ability to open file of new user (to load authorized key). So move sudo to template.
2010-01-26Add additional check that new user doesn't exist in NSSStephen Hemminger
If user exists in NSS (LDAP, TACACS+) but not on local machine, then it can not be changed with CLI. useradd will fail (user exists), and usermod will fail (can't find user in passwd file). Bug 5249
2010-01-26Don't allow vyatta configured accounts to overlap internal accountsStephen Hemminger
Bug 5269 This prevents user from doing something harmful like making a user named quagga or cron and putting vbash on that account.
2010-01-19Restrict radius-server timeout valueStephen Hemminger
Values > 30 are likely to cause login timeout, so don't allow them.
2009-12-04Add back public-key templatesStephen Hemminger
Move them under user/node.tag/authorization
2009-12-04Rearrange the public-key configuration schemaStephen Hemminger
New syntax: system login user vyatta authentication public-key user@remote type ssh-rsa
2009-12-03Require key-type to be set.Stephen Hemminger
2009-12-03SSH enhancementsStephen Hemminger
Add public key support Convert allow-root and password-authentication from boolean nodes to regular nodes.
2009-11-30added required keyword to help text.Michael Larson
2009-10-15partial fix for bug 4903.slioch
2009-09-11User group fixesStephen Hemminger
Some changes to group interface: * don't allow vyattaop the new group used for operators * check for allowed syntax * add missing continuation on syntax check
2009-09-04Enforce syntax checking on passwordStephen Hemminger
Enforce syntax checks on encrypted password field to prevent user errors. But can't check salt field because it is optional and default config.boot doesn't use one! Bug: 4077
2009-09-04Revert "Validate encrypted password field"Stephen Hemminger
This reverts commit a0fe319ce069e15646077a635bc970b961124540.
2009-09-03Validate encrypted password fieldStephen Hemminger
Enforce syntax checks on encrypted password field to prevent user errors. Bug: 4077
2009-06-01Change how system login update worksStephen Hemminger
Use a wrapper script in vyatta_update_login.pl and per login method objects for the update.
2009-05-05Split up system login scriptsStephen Hemminger
1. User and Radius separate scripts 2. Tacacs (incomplete) moved to separate package
2009-04-26Add configurable login banners.Stig Thormodsrud
2009-04-24New tacacs+ configuration templatesStephen Hemminger
Template change only. TACACS+ support is still not complete but this shows the syntax for configuration.
2009-03-26Revert "Split login authentication configuration into three scripts"Stephen Hemminger
This reverts commit fd605ab5d4ce4aa4015089042afd90f6e5c6ba59.
2009-03-23Split login authentication configuration into three scriptsStephen Hemminger
Getting cumbersome with one big script.
2009-02-08fix spelling mistakeMohit Mehta
2008-11-12add basic tacacs+ supportRobert Bays
2008-06-05Remove shell template (not ready yet).Stephen Hemminger
The template will go back in when vyatta_login_user.pl needs it.
2008-06-05Turn off TCP SACKStephen Hemminger
This is a workaround for bug 3313. The problem is that MD5 uses up what little space there for TCP options in header.
2008-05-29Rework how user accounts are managedStephen Hemminger
Rewrite the scripts that manage user accounts to: 1) use Posix standard useradd, userdel scripts rather than modifying passwd/group files directly. 2) add home-directory field to account management 3) support adding accounts to additional groups Note: this code should now also work with NIS since it has no direct access to /etc/passwd.
2008-04-10Fix Bug 3069 Help strings should be standardizedMohit Mehta
-help strings standardized in vyatta-cfg-system
2008-03-10fix for bug 2083: add radius authentication support.An-Cheng Huang
2008-02-21fix for bug 2764: rename user levelAn-Cheng Huang
2008-02-11allow empty full-nameAn-Cheng Huang
2008-02-11prevent ':' in full name (separator in passwd)An-Cheng Huang
2008-02-04revise the password checkAn-Cheng Huang
2008-02-04add commit check for user passwordAn-Cheng Huang
2008-01-31convert templates to new syntaxAn-Cheng Huang
2008-01-30clean up temp file in delete fail caseAn-Cheng Huang
2007-12-04* change "user group" to "user level".An-Cheng Huang
* "admin" => "users", "quaggavty", "vyattacfg", "sudo". * "users" => "users", "quaggavty" * use "sudo" group for sudo permissions. * don't add "root" to /etc/group.
2007-11-01add support for user groups: currently a user can be in either "admin" orAn-Cheng Huang
"users" group.
2007-10-24add 'sudo' for 'system' and 'service/ssh' configuration commands.An-Cheng Huang
2007-10-19replace "rl_passwd" with the standard "mkpasswd".An-Cheng Huang