Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-17 | Handle DSA keys | Stephen Hemminger | |
Bug 5350 Need some changes to support DSA keys (Protocol V2). Also add support for options in key file. | |||
2010-02-16 | Use template to do syntax checks on ethernet device name | Stephen Hemminger | |
Bug 5256 Going out to perl to repeatedly validate ethernet device name slows down adding VLAN's and other operations with lots of sub-devices. | |||
2010-02-16 | Check current status (not configured value) when enabling vlan device | Stephen Hemminger | |
2010-02-16 | Speed up VIF creation | Stephen Hemminger | |
The overhead of compiling perl script repeatedly slows down VIF creation | |||
2010-02-16 | Don't allow format strings in snmp-community | Stephen Hemminger | |
2010-02-03 | Set system host-name and time-zone first | Stephen Hemminger | |
Bug 4754 Want correct host-name for DHCP to work right later under interfaces. Want timezone correct so that any services started that print time information have correct data. | |||
2010-02-02 | Run login update as root | Stephen Hemminger | |
Need ability to open file of new user (to load authorized key). So move sudo to template. | |||
2010-02-02 | Static host-name mapping changes | Stephen Hemminger | |
Fix help text (Bug 5254) and allow IPV6 static mapping (Bug 5298) | |||
2010-02-02 | Add help string for system ip neighbor | Stephen Hemminger | |
Bug 5285 | |||
2010-02-02 | Add help for system ip arp | Stephen Hemminger | |
Bug 5286 | |||
2010-01-26 | Add additional check that new user doesn't exist in NSS | Stephen Hemminger | |
If user exists in NSS (LDAP, TACACS+) but not on local machine, then it can not be changed with CLI. useradd will fail (user exists), and usermod will fail (can't find user in passwd file). Bug 5249 | |||
2010-01-26 | Don't allow vyatta configured accounts to overlap internal accounts | Stephen Hemminger | |
Bug 5269 This prevents user from doing something harmful like making a user named quagga or cron and putting vbash on that account. | |||
2010-01-24 | Fix allow-root for telnet/ssh | Stephen Hemminger | |
Bug 5252 The boot script needs to restore default settings, and the templates are then used to enable root access. | |||
2010-01-19 | Bugfix 5162: Make disabling flow control work at boot time. | Bob Gilligan | |
We need to delay disabling flow control in the sequence of events until after the interface address has been set. An additional benefit of adding a "priority" field is that interface configuration will not fail if the attempt to disable flow control fails for some reason. | |||
2010-01-19 | fix bug 5226: Hostname does not allow number as first char | Robert Bays | |
2010-01-19 | Restrict radius-server timeout value | Stephen Hemminger | |
Values > 30 are likely to cause login timeout, so don't allow them. | |||
2010-01-07 | Add support trap source address | Stephen Hemminger | |
Bug 458 Add service snmp trap-source <address> wrapper for /etc/snmp/snmp.conf | |||
2010-01-07 | Add support for trap community and port | Stephen Hemminger | |
Bug 3756 Allow setting trap communities and port values. | |||
2010-01-05 | Need to be root to remove snmpd.conf | Stephen Hemminger | |
Postscript to bug 4499 | |||
2010-01-05 | Change 'protocols snmp' to 'service snmp' | Stephen Hemminger | |
Bug 212 The entries in config under protocols were all routing protocols except SNMP which was an unfortunate original design choice. Config script does migration. | |||
2010-01-05 | Remove snmpd.conf on deletion | Stephen Hemminger | |
Bug 4499 | |||
2010-01-04 | Do loopback before other interfaces | Stephen Hemminger | |
Want to process loopback first, so any local addresses assigned to loopback are done. | |||
2009-12-22 | Update snmp template | Stephen Hemminger | |
1. Use non-expression syntax 2. Remove unused init action | |||
2009-12-21 | Move interface support from vyatta-cfg to vyatta-cfg-system | Stephen Hemminger | |
All the other interface types are in vyatta-cfg-system, only loopback and ethernet were in vyatta-cfg | |||
2009-12-04 | Add back public-key templates | Stephen Hemminger | |
Move them under user/node.tag/authorization | |||
2009-12-04 | Rearrange the public-key configuration schema | Stephen Hemminger | |
New syntax: system login user vyatta authentication public-key user@remote type ssh-rsa | |||
2009-12-04 | Change telnet allow-root to existance (instead of boolean) | Stephen Hemminger | |
Also change config version for migration. | |||
2009-12-03 | Require key-type to be set. | Stephen Hemminger | |
2009-12-03 | SSH enhancements | Stephen Hemminger | |
Add public key support Convert allow-root and password-authentication from boolean nodes to regular nodes. | |||
2009-12-02 | Changes related to co-ordination between kernel parameters and radvd. | Bob Gilligan | |
First, we need to set the global IPv6 parameter under "all" when "disable-forwarding" is deleted because this is the parameter that actually controls whether the stack will forward IPv6 packets. Second, if router advertisements were configured while global IPv6 forwarding was disabled, we need to re-start the daemon when global IPv6 forwarding is re-enabled. | |||
2009-12-02 | Co-ordinate global and per-interface IPv6 forwarding control. | Bob Gilligan | |
Now a flag file indicates that IPv6 forwarding is disabled on a specific interface. | |||
2009-12-02 | Add ability to disable password authentication | Stephen Hemminger | |
Part of Bug 3255 | |||
2009-11-30 | added required keyword to help text. | Michael Larson | |
2009-11-30 | added required keyword to help text. | Michael Larson | |
2009-11-30 | added required keyword to help text. | Michael Larson | |
2009-11-30 | added required keyword to help text. | Michael Larson | |
2009-11-02 | Fix 5063: committing "set interfaces ethernet <> bridge-group bridge <>" ↵ | Stig Thormodsrud | |
got "invalid variable reference (invalid format)" - need extra escape magic to call vyatta-cli-expand-var.pl. | |||
2009-11-01 | Add priority for bonding vrrp nodes. | Stig Thormodsrud | |
2009-10-31 | Merge branch 'kenwood' of http://git.vyatta.com/vyatta-cfg-system into kenwood | Stig Thormodsrud | |
2009-10-31 | added missed vrrp priorities. | slioch | |
2009-10-31 | Add VRRP capability to bonding interfaces and vifs of bonding interfaces. | David S. Madole | |
2009-10-22 | Fix description of vif bonding | Stephen Hemminger | |
Other half of Bug 5014 | |||
2009-10-21 | move priority after tag nodes. | slioch | |
2009-10-20 | move priority after multi tags | slioch | |
2009-10-15 | partial fix for bug 4903. | slioch | |
2009-10-02 | use pattern instead of exec | Mohit Mehta | |
2009-09-24 | Bugfix 4951: Add configuration parameter to blacklist the IPv6 module. | Bob Gilligan | |
2009-09-23 | Bugfix 4892: Add a config parameter to disable IPv6 | Bob Gilligan | |
Added the parameter "system ipv6 disable". If set, the module parameter "disable_ipv6=1" will be passed to the IPv6 module. This inhibits assignment of IPv6 addresses on any interfaces, effectively preventing any IPv6 communication. But it leaves the IPv6 module loaded so that applications that depend upon its existence will not fail. | |||
2009-09-11 | User group fixes | Stephen Hemminger | |
Some changes to group interface: * don't allow vyattaop the new group used for operators * check for allowed syntax * add missing continuation on syntax check | |||
2009-09-09 | Allow null description on device | Stephen Hemminger | |
Bug 4918 |