Age | Commit message (Collapse) | Author |
|
Fix help text (Bug 5254) and allow IPV6 static mapping (Bug 5298)
|
|
Bug 5285
|
|
Bug 5286
|
|
If user exists in NSS (LDAP, TACACS+) but not on local machine,
then it can not be changed with CLI. useradd will fail (user exists),
and usermod will fail (can't find user in passwd file).
Bug 5249
|
|
Bug 5269
This prevents user from doing something harmful like making a user
named quagga or cron and putting vbash on that account.
|
|
Bug 5252
The boot script needs to restore default settings, and the
templates are then used to enable root access.
|
|
We need to delay disabling flow control in the sequence of events
until after the interface address has been set. An additional benefit
of adding a "priority" field is that interface configuration will not
fail if the attempt to disable flow control fails for some reason.
|
|
|
|
Values > 30 are likely to cause login timeout, so don't allow them.
|
|
Bug 458
Add
service snmp trap-source <address>
wrapper for /etc/snmp/snmp.conf
|
|
Bug 3756
Allow setting trap communities and port values.
|
|
Postscript to bug 4499
|
|
Bug 212
The entries in config under protocols were all routing protocols
except SNMP which was an unfortunate original design choice.
Config script does migration.
|
|
Bug 4499
|
|
Want to process loopback first, so any local addresses assigned
to loopback are done.
|
|
1. Use non-expression syntax
2. Remove unused init action
|
|
All the other interface types are in vyatta-cfg-system, only
loopback and ethernet were in vyatta-cfg
|
|
Move them under user/node.tag/authorization
|
|
New syntax:
system login user vyatta authentication public-key user@remote type ssh-rsa
|
|
Also change config version for migration.
|
|
|
|
Add public key support
Convert allow-root and password-authentication from boolean nodes to
regular nodes.
|
|
First, we need to set the global IPv6 parameter under "all" when
"disable-forwarding" is deleted because this is the parameter that
actually controls whether the stack will forward IPv6 packets.
Second, if router advertisements were configured while global IPv6
forwarding was disabled, we need to re-start the daemon when global
IPv6 forwarding is re-enabled.
|
|
Now a flag file indicates that IPv6 forwarding is disabled on a specific
interface.
|
|
Part of Bug 3255
|
|
|
|
|
|
|
|
|
|
got "invalid variable reference (invalid format)"
- need extra escape magic to call vyatta-cli-expand-var.pl.
|
|
|
|
|
|
|
|
|
|
Other half of Bug 5014
|
|
|
|
|
|
|
|
|
|
|
|
Added the parameter "system ipv6 disable". If set, the module
parameter "disable_ipv6=1" will be passed to the IPv6 module. This
inhibits assignment of IPv6 addresses on any interfaces, effectively
preventing any IPv6 communication. But it leaves the IPv6 module
loaded so that applications that depend upon its existence will not
fail.
|
|
Some changes to group interface:
* don't allow vyattaop the new group used for operators
* check for allowed syntax
* add missing continuation on syntax check
|
|
Bug 4918
|
|
Enforce syntax checks on encrypted password field to prevent user errors.
But can't check salt field because it is optional and default
config.boot doesn't use one!
Bug: 4077
|
|
This reverts commit a0fe319ce069e15646077a635bc970b961124540.
|
|
Enforce syntax checks on encrypted password field to prevent user
errors.
Bug: 4077
|
|
Since kernel driver does not handle mode changes properly. Workaround
by removing slaves (and readding) before changing mode.
Bug 4758
|
|
The last change broke bond-group setup.
|
|
Use similar action to new bridge-group
Bug 4768
|
|
Use similar action to new bridge-group
Bug 4768
|