vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)

Age	Commit message (Collapse)	Author
2023-11-20	TACACS: T5577: Added `mandatory` and `optional` modes for TACACS+	zsdc
	In CLI we can choose authentication logic: - `mandatory` - if TACACS+ answered with `REJECT`, authentication must be stopped and access denied immediately. - `optional` (default) - if TACACS+ answers with `REJECT`, authentication continues using the next module. In `mandatory` mode authentication will be stopped only if TACACS+ clearly answered that access should be denied (no user in TACACS+ database, wrong password, etc.). If TACACS+ is not available or other errors happen, it will be skipped and authentication will continue with the next module, like in `optional` mode.
2023-11-20	RADIUS: T5577: Added `mandatory` and `optional` modes for RADIUS	zsdc
	In CLI we can choose authentication logic: - `mandatory` - if RADIUS answered with `Access-Reject`, authentication must be stopped and access denied immediately. - `optional` (default) - if RADIUS answers with `Access-Reject`, authentication continues using the next module. In `mandatory` mode authentication will be stopped only if RADIUS clearly answered that access should be denied (no user in RADIUS database, wrong password, etc.). If RADIUS is not available or other errors happen, it will be skipped and authentication will continue with the next module, like in `optional` mode.
2023-11-09	T1797: Remove vpp packages and mentions	Viacheslav Hletenko

2023-11-07	T5706: Add custom systemd udev rules to exclude dynamic interfaces	Viacheslav Hletenko
	Add custom systemd udev rules to exclude some regular and dynamic interfaces from "systemd-sysctl" calls. It fixes high CPU utilization (100%) as we have a lot of calls per interface for dynamic interfaces like ppp\|ipoe\|sstp etc. /lib/systemd/systemd-udevd should not be called for those interfaces (cherry picked from commit ca9cc86233520eb495c17602bf7a110094c1d8e7)
2023-09-13	frr: T5239: T2061: prevent writing logs to /var/log/frr/frr.log	Christian Breunig
	(cherry picked from commit d4b9b2aa5f5dda6a11b7038ab0ab52653531183d)
2023-08-16	netplug: T5476: rewrite dhclient helper from Perl -> Python	Christian Breunig
	There are two hooks called for bridge, ethernet and bond interfaces if the link-state changes up -> down or down -> up. The helpers are: * /etc/netplug/linkdown.d/dhclient * /etc/netplug/linkup.d/dhclient As those helpers use Linux actions to start/restart the dhclient process in Perl it's time to rewrite it. First goal is to get rid of all Perl code and the second is that we now have a Proper Python library. Instead of checking if the process is running the then restarting it without even systemd noticing (yeah we might get two processes beeing alive) we should: * Add a Python helper that can be used for both up and down (see man 8 netplugd FILES section) * Query the VyOS CLI config if the interface in question has DHCP(v6) configured and is not disabled * Add IPv6 DHCPv6 support MAN page: https://linux.die.net/man/8/netplugd
2023-07-01	T1797: Divert sysctl 80-vpp.conf	Viacheslav Hletenko

2023-06-22	tacacs: T141: initial implementation	Christian Breunig

2023-05-21	T5234: add bash prompt identifier for given VRF instance	Christian Breunig

2023-05-08	syslog: T2778: migrate to get_config_dict()	Christian Breunig

2022-10-10	build: T3664: Add missing divert for /usr/share/pam-configs/radius	sarthurdev

2022-03-05	conntrackd: T4259: prevent startup of multiple daemon instances	Christian Poessinger

2021-06-26	Import configuration files from vyatta-cfg-system	Christian Poessinger

2021-06-24	systemd: lcdproc: T3641: override upstream files	Christian Poessinger
	Debian Bullseye ships an upstream version of lcdproc.service which infact will start LCDd instead of the lcdproc client. Divert the Debian Upstream service file and use the ones provided by vyos-1x.