vyos-1x.git/interface-definitions/vpn-openconnect.xml.in, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2023-12-31T22:49:48+00:00T5474: establish common file name pattern for XML conf mode commands2023-12-31T22:49:48+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
ocserv: T5796: add CLI knob "http-security-headers"2023-12-16T07:27:49+00:00fett0fernando.gmaidana@gmail.com2023-12-15T18:39:29+00:00urn:sha1:24f449cc099703df95646c719e9d3f308ed1a3f0
OCserv manual recommended HTTP headers tobe included in the configuration.
(cherry picked from commit ad65d37ddf92ec8416c84707d7d41e63346b550c)
ocserv: T3896: improve XML definition and add warning about 3rd party configs2023-05-12T19:06:56+00:00Christian Breunigchristian@breunig.cc2023-05-12T19:03:03+00:00urn:sha1:d1abba03229128c3f2a6f718e9f14f4d7285e74d
When enabling identity-based-config, users can add arbitrary config keys
that are processed by ocserv. The user "must know" what he is been doing, as
invalid config option will make the ocserv daemon go ... whoop!
Thus add a warning and inform the user about this setting.
Merge pull request #1783 from PeppyH/T3896-ocserv-config-per-x2023-05-12T18:14:56+00:00Christian Breunigchristian@breunig.cc2023-05-12T18:14:56+00:00urn:sha1:c60e9c932cab24bcc324f45752f0528332cc69a4
ocserv: T3896: add CLI options to configure ocserv config-per-user/groupocserv: T3896: refactor: change ocserv config-per-x node name2023-04-20T07:10:27+00:00Jamie Austinjamiea@opusv.com.au2023-04-20T07:07:53+00:00urn:sha1:93de3abe1368cab5ab8cd292689466d7af8e86bc
Changes the node name from config-per-x to identity-based-config, as a result the j2 templates and vpn_openeconnect.py has been refactored to update the node name when accessing it's child nodes.
T4958: ocserv: openconnect: adds support for configuring RADIUS accounting2023-01-28T04:11:07+00:00Jamie Austinjamiea@opusv.com.au2023-01-27T06:32:29+00:00urn:sha1:e61f7abdb2136d8dfbf73729dbc14c3b5ab2ecba
Adds CLI configuration options to configure RADIUS accounting for OpenConnect VPN sessions. This functionality cannot be used outside of the RADIUS OpenConnect VPN authentication mode
ocserv: T3896: add CLI options to configure ocserv config-per-user/group2023-01-26T05:34:36+00:00Jamie Austinjamiea@opusv.com.au2023-01-26T05:34:36+00:00urn:sha1:70794c8266ffefc6660daac3bc8a63b412d7b350
Adds CLI configurations under VPN - OpenConnect to facilitate per user/group vpn session configurations. Validation has been added to restrict config-per-group to be exclusive to OpenConnect RADIUS authentication as the config file is looked up based on a RADIUS response attribute - as well as sanity check that the necessary configs are configured when not disabled.
ocserv: T4656: only one IP address is supported to listen on2023-01-18T19:59:17+00:00Christian Breunigchristian@breunig.cc2023-01-18T19:59:17+00:00urn:sha1:1f34027a1cb85c289da0f3b2b74263a80118bee7ipsec: T4787: add support for road-warrior/remote-access RADIUS timeout2022-10-31T14:10:39+00:00Christian Poessingerchristian@poessinger.com2022-10-31T14:09:58+00:00urn:sha1:22c3dcbb01d731f0dab0ffefa2e5a0be7009baf1
This enabled users to also use 2FA/MFA authentication with a radius backend as
there is enough time to enter the second factor.
T4722: consistently use the "RADIUS" spelling for the RADIUS protocol2022-10-01T10:03:27+00:00Daniil Baturindaniil@baturin.org2022-10-01T10:03:27+00:00urn:sha1:542a964d7207a052e04cb843c1ea4c7a68a981c9