Skip to content

add authtype for consoleserver#22679

Merged
wangxin merged 2 commits intosonic-net:masterfrom
sdszhang:console_ssh
Mar 9, 2026
Merged

add authtype for consoleserver#22679
wangxin merged 2 commits intosonic-net:masterfrom
sdszhang:console_ssh

Conversation

@sdszhang
Copy link
Contributor

@sdszhang sdszhang commented Mar 1, 2026

Description of PR

Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs

console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

Type of change

  • Bug fix
  • Testbed and Framework(new/improvement)
  • New Test case
    • Skipped for non-supported platforms
  • Test case improvement

Back port request

  • 202205
  • 202305
  • 202311
  • 202405
  • 202411
  • 202505
  • 202511

Approach

What is the motivation for this PR?

user can use different credential for console server.

How did you do it?

introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?

Verified locally.

Any platform specific information?

Supported testbed topology if it's a new test case?

Documentation

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@sdszhang sdszhang marked this pull request as ready for review March 6, 2026 10:19
@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Signed-off-by: Dashuai Zhang <[email protected]>

# Conflicts:
#	tests/common/helpers/dut_utils.py
Signed-off-by: Dashuai Zhang <[email protected]>
@mssonicbld
Copy link
Collaborator

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@wangxin wangxin merged commit 443cfb9 into sonic-net:master Mar 9, 2026
21 of 22 checks passed
bingwang-ms added a commit to Azure/sonic-mgmt.msft that referenced this pull request Mar 9, 2026
Cherry-pick sonic-net/sonic-mgmt#22679 to 202503


<!--
Please make sure you've read and understood our contributing guidelines;
https://github.com/sonic-net/SONiC/blob/gh-pages/CONTRIBUTING.md

Please provide following information to help code review process a bit
easier:
-->
### Description of PR
<!--
- Please include a summary of the change and which issue is fixed.
- Please also include relevant motivation and context. Where should
reviewer start? background context?
- List any dependencies that are required for this change.
-->

Summary:
support specifying authentication credential choice for console server
(e.g. TACACS or AAD),

With the following device:
```
Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
```
console-1 will use the default credentials in secrets.yaml
"console_login".
console-2 will use more specific credentials in secrets.yaml
"console_login_options['tacacs']"

### Type of change

<!--
- Fill x for your type of change.
- e.g.
- [x] Bug fix
-->

- [ ] Bug fix
- [ ] Testbed and Framework(new/improvement)
- [ ] New Test case
    - [ ] Skipped for non-supported platforms
- [ ] Test case improvement


### Back port request
- [ ] 202205
- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [ ] 202505
- [ ] 202511

### Approach
#### What is the motivation for this PR?
user can use different credential for console server.

#### How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

#### How did you verify/test it?
Verified locally.

#### Any platform specific information?

#### Supported testbed topology if it's a new test case?

### Documentation
<!--
(If it's a new feature, new test case)
Did you update documentation/Wiki relevant to your implementation?
Link to the wiki page?
-->
ksravani-hcl pushed a commit to ksravani-hcl/sonic-mgmt that referenced this pull request Mar 10, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
ksravani-hcl pushed a commit to ksravani-hcl/sonic-mgmt that referenced this pull request Mar 10, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
aronovic pushed a commit to aronovic/sonic-mgmt that referenced this pull request Mar 10, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
Signed-off-by: Mihut Aronovici <[email protected]>
@mssonicbld
Copy link
Collaborator

@sdszhang PR conflicts with 202511 branch

sdszhang added a commit to sdszhang/sonic-mgmt that referenced this pull request Mar 14, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
selldinesh pushed a commit to selldinesh/sonic-mgmt that referenced this pull request Mar 16, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
Signed-off-by: selldinesh <[email protected]>
vmittal-msft pushed a commit that referenced this pull request Mar 17, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
abhishek-nexthop pushed a commit to nexthop-ai/sonic-mgmt that referenced this pull request Mar 17, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
Signed-off-by: Abhishek <[email protected]>
vrajeshe pushed a commit to vrajeshe/sonic-mgmt that referenced this pull request Mar 23, 2026
Summary:
support specifying authentication credential choice for console server (e.g. TACACS or AAD),

With the following device:

Hostname,ManagementIp,HwSku,Type,Protocol,Os,AuthType
console-1,192.168.10.1/23,Cisco,ConsoleServer,ssh,sonic,,
console-2,192.168.10.2/23,Cisco,ConsoleServer,ssh,sonic,,tacacs
console-1 will use the default credentials in secrets.yaml "console_login".
console-2 will use more specific credentials in secrets.yaml "console_login_options['tacacs']"

What is the motivation for this PR?
user can use different credential for console server.

How did you do it?
introduced new console_type, CONSOLE_SSH_TACACS

How did you verify/test it?
Verified locally.

Signed-off-by: Dashuai Zhang <[email protected]>
Signed-off-by: Venkata Gouri Rajesh Etla <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants