summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-02-10banner: T2024: fix type on pre-login nodeChristian Poessinger
2020-02-10banner: T2024: migrate "system login banner" to XML/Python representationChristian Poessinger
2020-02-10service https: T1585: add missing check in verify()John Estabrook
2020-02-09snmp: T1931: instead of searching a pseudo marker find real marker in configChristian Poessinger
As we need to operate with usmUser, we can search for it directly if its present or not. There is always one usmUser entry for the system user.
2020-02-09radius: T2022: support both local and radius login at the same timeChristian Poessinger
2020-02-09user: remove ssh-key completionHelperChristian Poessinger
2020-02-09user: T2020: bugfix on wrong regex preventing ssh-ed25519 public keysChristian Poessinger
2020-02-09snmp: T1931: change calling order when setting marker flagChristian Poessinger
2020-02-09snmp: T1931: delete obsolete reading of oldEngineIDChristian Poessinger
2020-02-09snmp: T1931: harden logic when re-reading config fpr encrypted keysChristian Poessinger
2020-02-09snmp: T1931: shorten file read timeout to 10msChristian Poessinger
2020-02-09Merge pull request #213 from agh2342/feature/lldp-templateChristian Poessinger
service lldp: T2019: modify handling of interface 'all'
2020-02-09service lldp: T2019: modify handling of interface 'all'agh
Modify lldpd config template in './src/conf_mode/lldp.py'. conf_mode uses 'all' to specify all interfaces. lldpd config file uses '*' to specify all interfaces. Both use an exclamation mark ('!') as prefix to disable lldp on an interface, eg. '!eth1' or '!all'. Add jinja2 template filters to create and merge following sub-lists a) take list of conf_mode lldp interfaces, remove every interface except 'all', replace 'all' with '*' -> support interface all b) take list of conf_mode lldp interfaces, remove every interface except '!all', replace '!all' with '!*' -> support interface all disabled c) take list of conf_mode lldp interfaces, remove every interface named 'all' or '!all' -> support any other interface
2020-02-06migrator: system: add missing if when checking user level in 9-to-10Christian Poessinger
2020-02-06migrator: system: use base_level in 9-to-10Christian Poessinger
2020-02-06migrator: system: indent by 4 spacesChristian Poessinger
2020-02-05smoke-test: adding generate cmd to configsessionhagbard
- in preparation for a wireguard cli test case, generate is used to create the keys later used in the config
2020-02-05radius: T1990: fix sed command when removing radius serviceChristian Poessinger
2020-02-05radius: T1990: raise ConfigError in os exception handlerChristian Poessinger
2020-02-05user: T1990: encrypted password must be supplied in ''Christian Poessinger
2020-02-05user: T1948: logout user when he is deletedChristian Poessinger
2020-02-05user: T1948: raise ConfigError in os exception handlerChristian Poessinger
2020-02-05user: T1948: one can not delete his own user accountChristian Poessinger
2020-02-05Merge branch 't1948-system-login' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 't1948-system-login' of github.com:c-po/vyos-1x: radius: T1948: add libnss-mapname support radius: T1948: rename server dictionary radius: T1948: supply PAM configuration template user: T1948: fix system user creation ogin: user: radius: T1948: use discrete configuration for each system login: T1948: remove obsolete config nodes "group" and "level" login: T1948: SSH keys can only be added after user has been created login: T1948: initial support for RADIUS configuration login: T1948: support for SSH keys login: T1948: add/remove local users login: T1948: initial rewrite in XML/Python options: T1919: remove broken comment
2020-02-05radius: T1948: add libnss-mapname supportChristian Poessinger
2020-02-05radius: T1948: rename server dictionaryChristian Poessinger
2020-02-05radius: T1948: supply PAM configuration templateChristian Poessinger
2020-02-05user: T1948: fix system user creationChristian Poessinger
2020-02-05ogin: user: radius: T1948: use discrete configuration for each systemChristian Poessinger
Split combined XML/Python code to individual code for local user accounts and RADIUS authenticated accounts.
2020-02-06Merge pull request #212 from thomas-mangin/typoDaniil Baturin
fix typo in interfaces l2tpv3 encapsulation property
2020-02-05fix typo in interfaces l2tpv3 encapsulation propertyThomas Mangin
2020-02-05Merge pull request #211 from jestabro/T1585John Estabrook
service https: T1585: add support for letsencrypt certificates service https: T1443: reorder elements for clarity
2020-02-05service https: T1585: add support for letsencrypt certificatesJohn Estabrook
2020-02-04service https: T1443: reorder elements for clarityJohn Estabrook
2020-02-04http api T2013: remove default key if user api_keys are setJohn Estabrook
2020-02-02login: T1948: remove obsolete config nodes "group" and "level"Christian Poessinger
2020-02-02login: T1948: SSH keys can only be added after user has been createdChristian Poessinger
2020-02-02login: T1948: initial support for RADIUS configurationChristian Poessinger
2020-02-02login: T1948: support for SSH keysChristian Poessinger
2020-02-02login: T1948: add/remove local usersChristian Poessinger
2020-02-02login: T1948: initial rewrite in XML/PythonChristian Poessinger
2020-02-02options: T1919: remove broken commentChristian Poessinger
2020-02-02Debian: add iperf(3) to list of required packagesChristian Poessinger
We have a CLI wrapper so we must also have it in our list of dependencies.
2020-02-02T640: add dbus to required dependenciesChristian Poessinger
Without dbus the vyos-load-config.py will fail and nothing will work.
2020-02-01Revert "ifconfig: T2002: only admin up interfaces if parent interface is up"Christian Poessinger
This reverts commit 4a4e2b6386b4c036bbf4486a8a7ac7002d08158b.
2020-02-01Revert "ifconfig: T2002: T2009: bugfix for always disabled Ethernet/Bond ↵Christian Poessinger
interfaces" This reverts commit 95f7a440031c58b47fd88d6aa9fac3ddaf6ae231.
2020-02-01ifconfig: T2002: T2009: bugfix for always disabled Ethernet/Bond interfacesChristian Poessinger
Commit 4a4e2b6 ("ifconfig: T2002: only admin up interfaces if parent interface is up") contained an inheritance issue where the Ethernet and Bond interface was always admin down. This was caused by wrong calls in the inheritance structure.
2020-02-01sstp: shorten completion helper on "protocols"Christian Poessinger
2020-02-01sstp: add XML valueHelp node for subnet definitionChristian Poessinger
2020-01-31bond: T1992: only tear down interface if it's really requiredChristian Poessinger
Without this change the bond interface is always torn down prior changing it's parameters. This will also reset BGP sessions on other VLAN interfaces which is more then bad. This change will only tear down the interface when it is really required, indicated by bond['shutdown_required'], which is required by certain operations as e.g. changing the operating mode.
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-01 19:22:07 +0000