Age | Commit message (Collapse) | Author |
|
|
|
Added the parameter "system ipv6 disable". If set, the module
parameter "disable_ipv6=1" will be passed to the IPv6 module. This
inhibits assignment of IPv6 addresses on any interfaces, effectively
preventing any IPv6 communication. But it leaves the IPv6 module
loaded so that applications that depend upon its existence will not
fail.
|
|
Some changes to group interface:
* don't allow vyattaop the new group used for operators
* check for allowed syntax
* add missing continuation on syntax check
|
|
Enforce syntax checks on encrypted password field to prevent user errors.
But can't check salt field because it is optional and default
config.boot doesn't use one!
Bug: 4077
|
|
This reverts commit a0fe319ce069e15646077a635bc970b961124540.
|
|
Enforce syntax checks on encrypted password field to prevent user
errors.
Bug: 4077
|
|
handled.
In order to correctly handle cases where parameters are changed after a repository
configuration has been set up, we need to do the work in an "end" field instead
of a "create" field. The "create" field is only executed when the node itself
is created, not when nodes below it are modified.
(cherry picked from commit e500a9e4494649e0ecb523d36b28452f2e9dd326)
|
|
A couple more places where update should be replaced with create
because multiple values allowed.
(cherry picked from commit a6c4d64593bf647e61133ef9d9383428b0ac5807)
|
|
|
|
Use a wrapper script in vyatta_update_login.pl and per login method
objects for the update.
|
|
1. Don't start NTP server at boot (network not configed yet)
2. Start NTP as needed based on vyatta config
|
|
This reverts commit 5a5ca056ba439d2ff3fec19e97fb7111f9fe9819.
|
|
Bug 4051
set system syslog console
needs to default to:
set system syslog console facility all level err
|
|
Had incorrect grep expressions, and don't need to use sudo
unless changing values.
|
|
On boot if ntp.conf contains proper server, there is no need
to restart ntpd.
|
|
Since quagga uses local7, make it a real facility.
Allow local7 for compatiablity.
Bug 4263
|
|
1. User and Radius separate scripts
2. Tacacs (incomplete) moved to separate package
|
|
|
|
The dynamic option is the default in current versions and generates
bogus message.
Bug: 4264
|
|
|
|
Template change only. TACACS+ support is still not complete
but this shows the syntax for configuration.
|
|
The new code was requiring full pathname, but old version was
using /var/log/user/<filename> so make new code work like old code.
|
|
Do most of the work in the rewritten vyatta_update_syslog code.
Handle multiple facilities for same target without causing duplicate
log messages.
Never restart syslog daemon, just reload it and only if the configuration
has changed.
|
|
|
|
Makes global facility change work.
Still need to rework the syslog templates and parsing.
|
|
|
|
"Atleast" is not an English word, it should be "At least"
|
|
This reverts commit fd605ab5d4ce4aa4015089042afd90f6e5c6ba59.
|
|
Getting cumbersome with one big script.
|
|
|
|
modified via the CLI - (modify ARP table size)
* added cli to configure [arp (ipv4)] and [neighbor (ipv6)] table-size
* set default value for arp_announce so as to avoid local addresses that are
not in the target's subnet for the interface
|
|
|
|
|
|
If ntpd isn't already running, use the start rather than the
restart target to save 2 seconds in boot time.
|
|
|
|
|
|
|
|
previous ones in /etc/syslog.conf
- multiple nodes configured under 'system syslog global' are appended to syslog.conf
- default '*.notice -/var/log/messages' is removed from syslog.conf if any
node is configured under 'system syslog global' and is put back when nothing
configured under 'system syslog global'
- syslog process only restarted once after making all changes in config
- added commit checks at 'system syslog <>' level nodes to specify facility
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- restart dnsmasq when /etc/hosts is modified from CLI to re-read added or deleted hosts
|
|
'name-server' and 'domain-name-server' options
in /etc/resolv.conf received by a dhcp client for an interface
=> Modified name-server/node.def so as to have the name-server set by our CLI on the top of
/etc/resolv.conf to take priority over name-servers received from dhcp client
|
|
|
|
|
|
The template will go back in when vyatta_login_user.pl needs it.
|
|
This is a workaround for bug 3313. The problem is that MD5
uses up what little space there for TCP options in header.
|