From 1e3909f4186e29d2d8e7be7e255ccdfec050537f Mon Sep 17 00:00:00 2001
From: goodNETnick <pknet@ya.ru>
Date: Thu, 21 Apr 2022 08:14:32 -0400
Subject: ocserv: T4380: 2FA OTP key generator in VyOS CLI

---
 .../generate-openconnect-user-key.xml.in           | 67 ++++++++++++++++++++++
 1 file changed, 67 insertions(+)
 create mode 100644 op-mode-definitions/generate-openconnect-user-key.xml.in

(limited to 'op-mode-definitions')

diff --git a/op-mode-definitions/generate-openconnect-user-key.xml.in b/op-mode-definitions/generate-openconnect-user-key.xml.in
new file mode 100644
index 000000000..80cdfb3d7
--- /dev/null
+++ b/op-mode-definitions/generate-openconnect-user-key.xml.in
@@ -0,0 +1,67 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+  <node name="generate">
+    <children>
+      <node name="openconnect">
+        <properties>
+          <help>Generate OpenConnect client parameters</help>
+        </properties>
+        <children>
+          <tagNode name="username">
+            <properties>
+              <help>Username used for authentication</help>
+              <completionHelp>
+                <list>&lt;username&gt;</list>
+              </completionHelp>
+            </properties>
+            <children>
+              <node name="otp-key">
+                <properties>
+                  <help>Generate OpenConnect OTP token</help>
+                </properties>
+                <children>
+                  <node name="hotp-time">
+                    <properties>
+                      <help>HOTP time-based token</help>
+                    </properties>
+                    <command>sudo ${vyos_op_scripts_dir}/generate_openconnect_otp_key.py --username "$4" --interval 30 --digits 6</command>
+                    <children>
+                      <tagNode name="interval">
+                        <properties>
+                          <help>Duration of single time interval</help>
+                        </properties>
+                        <command>sudo ${vyos_op_scripts_dir}/generate_openconnect_otp_key.py --username "$4" --interval "$8" --digits 6</command>
+                        <children>
+                          <tagNode name="digits">
+                            <properties>
+                              <help>The number of digits in the one-time password</help>
+                            </properties>
+                            <command>sudo ${vyos_op_scripts_dir}/generate_openconnect_otp_key.py --username "$4" --interval "$8" --digits "${10}"</command>
+                          </tagNode>
+                        </children>
+                      </tagNode>
+                      <tagNode name="digits">
+                        <properties>
+                          <help>The number of digits in the one-time password</help>
+                        </properties>
+                        <command>sudo ${vyos_op_scripts_dir}/generate_openconnect_otp_key.py --username "$4" --interval 30 --digits "$8"</command>
+                        <children>
+                          <tagNode name="interval">
+                            <properties>
+                              <help>Duration of single time interval</help>
+                            </properties>
+                            <command>sudo ${vyos_op_scripts_dir}/generate_openconnect_otp_key.py --username "$4" --interval "${10}" --digits $8</command>
+                          </tagNode>
+                        </children>
+                      </tagNode>
+                    </children>
+                  </node>
+                </children>
+              </node>
+            </children>
+          </tagNode>
+        </children>
+      </node>
+    </children>
+  </node>
+</interfaceDefinition>
-- 
cgit v1.2.3