Age | Commit message (Collapse) | Author |
|
|
|
Bug #195: Added feature to send log message to remote syslog server over UDP or TCP.
|
|
Add support to override default Ciphers and MACs options in SSH server
for eg:
set service ssh ciphers <list of ciphers>
set service ssh macs <list of macs>
|
|
See VyOS bug 196 for more information about the feature request.
|
|
Changes are copyright 2013, Vyatta, a Brocade company.
|
|
Minor fixes. Refactoring.
Add seclevel property to SNMPv3 group.
|
|
SNMP-135 store SNMP superuser password to config file
SNMP-130 add engineId for trap-target
SNMP-134 use 'stop' and 'start' instead of 'restart'
SNMP-141 change engineID syntax checking
SNMP-136 Users are lost after changing TSM port
SNMP-149 TLS Error: Permission denied
SNMP-147 Not correct priority in TSM users
SNMP-148 Configuring already use port for TSM is destroying users.
SNMP-151 Errors in logs after first snmp configuration
SNMP-152 Hide 'No such file or directory' error message
SNMP-153 Debug messages after 'delete service snmp'
SNMP-157 Run Perltidy for all Perl scripts
SNMP-158 change syntax of trap-target engineID
SNMP-163: added script to check name, apply it for user, group and view names
SNMP-161 Faulty configuration with many trap-target
SNMP-160 Look for TSM keys in /config folder
SNMP-162 CLI permit not correct oid
SNMP-163: typo in script
SNMP-160 Look for TSM keys in /config folder
SNMP-163: added support of upper case for names in the script
SNMP-163: create rule for names, permit only a-zA-Z0-9
SNMP-163: typo
|
|
|
|
Bug 6576
|
|
|
|
(cherry picked from commit edf507d5be8061475d00c0cb3278f7cdd8ae844a)
|
|
|
|
Syntax checking and help.
|
|
The key generation is done during installation or earlier
in rl-system.init
|
|
Bug 6474
Use priority 500 which is after login, syslog, etc.
|
|
|
|
Bug 4452
Allow configuring a telnet listen-address either IPv4 or IPv6 (like SSH).
Unlike SSH, telnet only supports a single listen-address
|
|
Bug 2410
Add ability to add configure listen address in ssh_config.
set service ssh listen-address 1.2.4.40
Multiple values are allowed, and works for both IPv4 and IPv6
|
|
Bug 4970
New CLI control of UseDNS option to sshd_config
set service ssh disable-host-validation
|
|
Putting it in 'system { ntp { server...' makes more sense.
|
|
Allows starting NTP server once at boot speeding up boot time
and allows specifying some NTP server options
|
|
|
|
Bug 6058
Put consitent checking port range on snmp, ssh, and telnet
|
|
For all nodes that do 'syntax:expression: $VAR(@) in' add allowed
tag to show possible values
|
|
Per current policy remove verb from all help messages in th is package
|
|
Allow combination of IPv4 and IPv6 address in community setting.
Use script to generate necessary community values in snmpd.conf
|
|
Add:
service snmp listen-address AAAA [port NNN]
|
|
Need to use different syntax for community values on IPv6
versus IPv4
|
|
This reverts commit 5aafb72b269d409500258f0b65f3e635d99712b7.
|
|
Simple change to allow ipv6 or ipv4 address in configuration.
|
|
|
|
Bug 5252
The boot script needs to restore default settings, and the
templates are then used to enable root access.
|
|
Bug 458
Add
service snmp trap-source <address>
wrapper for /etc/snmp/snmp.conf
|
|
Bug 3756
Allow setting trap communities and port values.
|
|
Postscript to bug 4499
|
|
Bug 212
The entries in config under protocols were all routing protocols
except SNMP which was an unfortunate original design choice.
Config script does migration.
|
|
Also change config version for migration.
|
|
Add public key support
Convert allow-root and password-authentication from boolean nodes to
regular nodes.
|
|
Part of Bug 3255
|
|
|
|
|
|
Bug 4591
Consolidate check for telnet login
Don't remove /etc/securetty edit it
(cherry picked from commit c6c477f2ffb0f2fd4cf12882f22c2c44ab57cc46)
|
|
|
|
If program can handle it no point in enforcing in CLI.
|
|
For consistency all templates should use same script to validate
interface names.
|
|
"Atleast" is not an English word, it should be "At least"
|
|
not exist
- Generate a warning rather than a commit fail when user enters a non-existent interface
|
|
Need to do restart of ssh daemon.
Rewriting config file is faster than checking
|
|
If configuration doesn't change (ie during boot), then do not
need to restart sshd. Also use newer format configuration file
syntax.
|
|
|