Skip to content

Commit

Permalink
[JIRA SONIC-11207] RADIUS source_ip CLI fix
Browse files Browse the repository at this point in the history
Change-Id: Ie9562c5dec0e366408c102f18222a7943b65b922
  • Loading branch information
a-barboza committed Oct 31, 2019
1 parent fb2ac1b commit 2015792
Show file tree
Hide file tree
Showing 4 changed files with 5 additions and 8 deletions.
4 changes: 2 additions & 2 deletions files/image_config/hostcfgd/common-auth-sonic.j2
Original file line number Diff line number Diff line change
Expand Up @@ -53,14 +53,14 @@ auth [success=1 default=ignore] pam_exec.so /usr/sbin/cache_radius

{% elif auth['login'] == 'radius' %}
# root user can only be authenticated locally. Jump to local.
auth [success={{ (servers | count) + 1 }} default=ignore] pam_succeed_if.so user = root
auth [success={{ (servers | count) + 2 }} default=ignore] pam_succeed_if.so user = root
# For the RADIUS servers, on success jump to the cache the MPL(Privilege)
{% for server in servers %}
auth [success={{ (servers | count) - loop.index0 }} new_authtok_reqd=done default=ignore{{ ' auth_err=die' if not auth['failthrough'] }}] pam_radius_auth.so conf=/etc/pam_radius_auth.d/{{ server.ip }}:{{ server.auth_port }}.conf privilege_level protocol={{ server.auth_type }} retry={{ server.retransmit }} try_first_pass
{% endfor %}
auth requisite pam_deny.so
# Cache MPL(Privilege)
auth [success=1 default=ignore] pam_exec.so /usr/sbin/cache_radius
auth [success=2 default=ignore] pam_exec.so /usr/sbin/cache_radius
# Local
auth [success=done new_authtok_reqd=done default=ignore{{ ' auth_err=die maxtries=die' if not auth['failthrough'] }}] pam_unix.so nullok try_first_pass

Expand Down
5 changes: 1 addition & 4 deletions src/radius/nss/debian/README.Debian
Original file line number Diff line number Diff line change
@@ -1,8 +1,5 @@
libnss-radius for Debian

Please edit this to provide information specific to
this libnss-radius Debian package.

(Automatically generated by debmake Version 4.2.2)
The Debian version of the libnss-radius package.

-- Arun Barboza <29963827+a-barboza@users.noreply.github.com> Tue, 24 Sep 2019 00:20:55 +0000
2 changes: 1 addition & 1 deletion src/radius/pam/debian/changelog
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,4 @@ libpam-radius-auth (1.4.1-1) unstable; urgency=low

* Initial version.

-- Arun Barboza <arunbmail-cat@yahoo.com> Tue, 13 Aug 2019 16:46:25 -0700
-- Arun Barboza <29963827+a-barboza@users.noreply.github.com> Tue, 13 Aug 2019 16:46:25 -0700
2 changes: 1 addition & 1 deletion src/radius/pam/debian/control
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
Source: libpam-radius-auth
Maintainer: Debian QA Group <packages@qa.debian.org>
Maintainer: Arun Barboza <29963827+a-barboza@users.noreply.github.com>
Section: libs
Priority: extra
Standards-Version: 3.6.2
Expand Down

0 comments on commit 2015792

Please sign in to comment.