Skip to content

[202012] [TACACS+] Add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting.(#9029)#15718

Merged
qiluo-msft merged 3 commits intosonic-net:202012from
liuh-80:dev/liuh/202012-cherry-pick-tacacs-cfgd
Jul 11, 2023
Merged

[202012] [TACACS+] Add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting.(#9029)#15718
qiluo-msft merged 3 commits intosonic-net:202012from
liuh-80:dev/liuh/202012-cherry-pick-tacacs-cfgd

Conversation

@liuh-80
Copy link
Contributor

@liuh-80 liuh-80 commented Jul 5, 2023

This pull request add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting.

Work item tracking
  • Microsoft ADO (number only): 24433713

Why I did it

Support TACACS per-command authorization&accounting.

How I did it

Change ConfigDB schema and HostCfg enforcer.
Add UT to cover changed code.

How to verify it

Build following project and pass all UTs:
make target/python-wheels/sonic_host_services-1.0-py3-none-any.whl

Which release branch to backport (provide reason below if selected)

N/A

Tested branch (Please provide the tested image version)

Extract tacacs support functions into library, this will share TACACS config file parse code with other project.
Also fix memory leak issue in parse config code.

  • SONiC.202012-15723.309781-38d8852cd

Description for the changelog

Add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting.

A picture of a cute animal (not mandatory but encouraged)

liuh-80 and others added 2 commits July 3, 2023 07:50
… TACACS+ per-command authorization&accounting. (sonic-net#9029)

[TACACS+] Add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting. (sonic-net#9029)

    Support TACACS per-command authorization&accounting.

    Change ConfigDB schema and HostCfg enforcer.
    Add UT to cover changed code.

    Build following project and pass all UTs:
    make target/python-wheels/sonic_host_services-1.0-py3-none-any.whl

    N/A

    Add Config DB schema and HostCfg Enforcer plugin to support TACACS+ per-command authorization&accounting.
@liuh-80
Copy link
Contributor Author

liuh-80 commented Jul 6, 2023

/azp run

@azure-pipelines
Copy link

Commenter does not have sufficient privileges for PR 15718 in repo sonic-net/sonic-buildimage

@liuh-80 liuh-80 closed this Jul 6, 2023
@liuh-80 liuh-80 reopened this Jul 6, 2023
@qiluo-msft qiluo-msft merged commit 228c3d3 into sonic-net:202012 Jul 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants