summaryrefslogtreecommitdiff
path: root/templates
AgeCommit message (Collapse)Author
2015-06-22Revert "vyatta-cfg-system: prevent deletion of all user authentication"Alex Harpin
This reverts commit 593899accdff03af23e6bb6c7189ad4ed05a4d8e. This commit reintroduced the inability to delete a user configured on the system, which was resolved in bug #557. Reverting this for the time being until a better fix can be implemented.
2015-06-13vyatta-cfg-system: prevent deletion of all authentication for userAlex Harpin
Prevent the deletion of both the encrypted-password and public-keys nodes for a user, ensuring that at least one of the methods is available. Also prevent the deletion of the public keys for a user if the encrypted password is set to "!". Bug #574 http://bugzilla.vyos.net/show_bug.cgi?id=574
2015-06-13vyatta-cfg-system: missing encrypted-password breaks user config nodeAlex Harpin
The fix for bug #557 now allows the encrypted-password Authentication node to be deleted again, but this causes the config to fail on reboot, leaving the user login node empty. This fix checks for an empty / missing encrypted-password node on reboot / config reload, either creating a new node or replacing the existing one and assigning it the value of "!". This has the same effect as the fix for bug #336, allowing the user to be set as only using RSA based logins. Bug #573 http://bugzilla.vyos.net/show_bug.cgi?id=573
2015-06-13vyatta-cfg-system: 'delete system login user' doesn't remove the userAlex Harpin
Following the fix for bug #336 that prevents the deletion of the encrypted password, which resulted in a broken config node on reboot, it was no longer possible to delete users. This reverts the fix for that bug. Bug #557 http://bugzilla.vyos.net/show_bug.cgi?id=557
2015-05-04Bug #410: add an option for ARP cache timeout.Daniil Baturin
2015-05-03Bug #541: load l2tp_ip6 module so L2TPv3 over IPv6 can work.Daniil Baturin
2015-03-18Add dhcpv6 client-id option (#519)kouak
2015-03-17Set correct dhclient configuration filename (#508)kouak
2015-03-09vyatta-cfg-system: set default stp priority to 32768 (additional)Alex Harpin
Update the bridge priority node to set the default STP priority to the standard of 32768 when it's deleted, and update the node help to indicate the new default and possible values. Bug #512 http://bugzilla.vyos.net/show_bug.cgi?id=512
2015-03-09Set default STP priority to 32768 (#512)kouak
2015-03-07vyatta-cfg-system: update node text so that it fits on a console lineAlex Harpin
2015-03-07vyatta-cfg-system: add additional services and check for protocolsAlex Harpin
Add the additional services that are supported by ddclient to the list of service defaults. Also add a function to use this list to check for the allowed protocols, and update the protocol node to use this. Bug #507 http://bugzilla.vyos.net/show_bug.cgi?id=507
2015-03-07vyatta-cfg-system: update protocol, remove server and node wordingAlex Harpin
Update the default protocol used for the dslreports service in the revised dynamic DNS system and remove the default server settings for freedns as it's already defined in ddclient. Uodate the wording in the server node to indicate it's only needed for custom services. Bug #507 http://bugzilla.vyos.net/show_bug.cgi?id=507
2015-03-05Add flexibility to dynamic dns configuration while preserving backwards ↵kouak
compatibility (#507)
2015-03-04vyatta-cfg-system: remove unnecessary service symlinkAlex Harpin
2015-03-03Fix broken commit 6257dfa1464d460de74e258b6290d4890a885218kouak
2015-02-26vyatta-cfg-system: redesign the layout and updating of ntpAlex Harpin
When NTP is configured on the system, it not only acts as a client for the configured servers, but also as a server. Although the server is only available as a time source, it still represents a service that the user hasn't specifically enabled. This commit sets the default configuration of NTP to disallow all external access, so the system acts purely as a client by default, and also introduces the ability to configure which addresses / subnets are allowed to both query and use it as a time source. If the servers configured are specified as host names, these are resolved to IP addresses before being added to ntp.conf, with the same process carried out after name server changes. syntax 'set system ntp client address' Bug #94 http://bugzilla.vyos.net/show_bug.cgi?id=94
2015-02-26vyatta-cfg-system: correct typo in node.defAlex Harpin
2015-02-26vyatta-cfg-system: adjust mtu node priority to set mtu after parentAlex Harpin
Adjusting the mtu node prority from 381 to 382 so child interfaces set their MTU after the parent interface. This was reported for multiple vifs when setting the MTU to 9000 for jumbo frames, although it only exhibited it when more than one vif was configured. Bug #473 http://bugzilla.vyos.net/show_bug.cgi?id=473
2015-02-23Add ingress-qos-mapping/egress-qos-mapping to VLAN configuration (#385)kouak
2015-02-22Merge pull request #40 from kouak/lithiumDaniil Baturin
Bug #389: Add RFC2136 configuration options for ddclient 3.8.2
2015-02-20Add RFC2136 configuration options for ddclient 3.8.2 (#389)kouak
2015-02-20Bug #492: fail commit in case of DHCPv6 configuration errors.Daniil Baturin
2015-02-20Bug #490: remove priority inversion in dhcpv6-options.Daniil Baturin
Seems to work with 319.
2015-02-10vyatta-cfg-system: multiple servers for dns forwarding domain overrideAlex Harpin
When configuring DNS fowarding, allow multiple servers to be specified when setting domain overrides, in order to allow Dnsmasq to gracefully handle unavailable nameservers. Bug #408 http://bugzilla.vyos.net/show_bug.cgi?id=408
2015-02-08vyatta-cfg-system: allow dynamic dns updating from behind natAlex Harpin
Add a couple of configuration options to DDNS, to allow the use=web option from ddclient when determining the external IP address. This will allow DDNS to be correctly updated when behind a NAT device. Syntax: set service dns dynamic interface eth0 use-web url (url to use) set service dns dynamic interface eth0 use-web skip (search for this) Bug #455 http://bugzilla.vyos.net/show_bug.cgi?id=455
2015-02-06Can not change EtherType with vif-c interfaces configuredKim Hagen
2015-02-05Bug #352 - QinQ - changing the ethertype value of vif-sKim Hagen
2015-02-02Bug #467, tos inherit not turned on by default on tunnels (IPIP, GRE)Kim Hagen
2015-01-26Fix Bug#382. (Another fix).Hiroyuki Sato
If radvd is not running, the pgrep command returns an empty string, not zero. Reported-by Carl Byington <vyos-bug@five-ten-sg.com>
2015-01-24vyatta-cfg-system: remove default speed value for console accessAlex Harpin
Remove the default value for the console speed node as this is already set by the system. Update the help text to display the defaults for both serial and Xen consoles.
2015-01-17vyatta-cfg-system: add dynamic dns support for no-ip.com/noipAlex Harpin
Add support for using the no-ip.com dynamic DNS service with VyOS. Bug #436 http://bugzilla.vyos.net/show_bug.cgi?id=436
2015-01-02vyatta-cfg-system: add dynamic dns support for afraid.org/freednsAlex Harpin
Add support for using the afraid.org dynamic DNS service with VyOS. This requires the updated ddclient package built for VyOS to work correctly as the version currently in squeeze lacks support for the freedns protocol. Bug #287 http://bugzilla.vyos.net/show_bug.cgi?id=287
2014-12-20vyatta-cfg-system: fix for unusable "link" optionHiroshi Umehara
In the inital state, the "link" option was not usable, so I moved the "link" directory under "node.tag". Aftewards, the "link" option became usable.
2014-12-19support "remote" attribute of VXLAN tunnelRyo Nakamura
2014-11-25Merge pull request #34 from jhendryUK/rsyslog_log_everythingDaniil Baturin
Bug #391: Expose rsyslog log level 'all' in CLI
2014-11-24Expose rsyslog log level 'all' in CLIJason Hendry
2014-11-09Merge pull request #31 from hiroyuki-sato/patch-for-lithiumDaniil Baturin
Fix Bug#382 Removing system ipv6 forwarding causes script error.
2014-11-06Fix Bug#382 Removing system ipv6 forwarding causes script error.Hiroyuki Sato
2014-11-01Removing sysctl all node, adding net.ipv4.igmp_max_membershipsJason Hendry
2014-11-01Adding all + custom sysctl option nodesJason Hendry
2014-10-31Creating template for net.ipv4.ipfrag_time sysctlJason Hendry
2014-10-29Correcting udp offload option name form segmentation to fragmentationJason Hendry
2014-10-29Removing default settings offload valuesJason Hendry
2014-10-29Updating comments so they make a bit more senseJason Hendry
2014-10-29Making offload setting changes change on a single optionJason Hendry
2014-10-29Adding templates for tso options. fixing logic in vyatta-interfaces for tso ↵Jason Hendry
options
2014-10-18vyatta-cfg-system: comment change in the plaintext-password nodeAlex Harpin
Remove the comment from the plaintext-password node regarding empty encrypted password values as you can't set them as empty.
2014-10-18vyatta-cfg-system: fix for deleting encrypted password breaks configAlex Harpin
You can't create a user without a password, but once this user is created, you can then delete the encrypted password. However, deleting the encrypted password from the config doesn't actually remove the password on the system and in addition breaks the config on reboot, resulting in the system login node being entirely absent. This fix ensures that the encrypted password is set to "!" when the config node is deleted, removing the password login capability for this account but still allowing SSH RSA key login. Bug #336 http://bugzilla.vyos.net/show_bug.cgi?id=336
2014-10-07Fix a typo in help string.Daniil Baturin