ff09b8b8ed
This pull request add a bash plugin for TACACS+ per-command authorization
#### Why I did it
1. To support TACACS per command authorization, we check user command before execute it.
2. Fix libtacsupport.so can't parse tacplus_nss.conf correctly issue:
Support debug=on setting.
Support put server address and secret in same row.
3. Fix the parse_config_file method not reset server list before parse config file issue.
#### How I did it
The bash plugin will be called before every user command, and check user command with remote TACACS+ server for per-command authorization.
#### How to verify it
UT with CUnit cover all code in this plugin.
Also pass all current UT.
#### Which release branch to backport (provide reason below if selected)
N/A
#### Description for the changelog
Add Bash TACACS+ plugin.
#### A picture of a cute animal (not mandatory but encouraged)
36 lines
1.1 KiB
Plaintext
36 lines
1.1 KiB
Plaintext
#DPKG FRK
|
|
|
|
SPATH := $($(LIBTAC2)_SRC_PATH)
|
|
DEP_FILES := $(SONIC_COMMON_FILES_LIST) rules/tacacs.mk rules/tacacs.dep
|
|
DEP_FILES += $(SONIC_COMMON_BASE_FILES_LIST)
|
|
DEP_FILES += $(shell git ls-files $(SPATH))
|
|
|
|
$(LIBTAC2)_CACHE_MODE := GIT_CONTENT_SHA
|
|
$(LIBTAC2)_DEP_FLAGS := $(SONIC_COMMON_FLAGS_LIST)
|
|
$(LIBTAC2)_DEP_FILES := $(DEP_FILES)
|
|
|
|
|
|
|
|
|
|
SPATH := $($(LIBNSS_TACPLUS)_SRC_PATH)
|
|
DEP_FILES := $(SONIC_COMMON_FILES_LIST) rules/tacacs.mk rules/tacacs.dep
|
|
DEP_FILES += $(SONIC_COMMON_BASE_FILES_LIST)
|
|
DEP_FILES += $(shell git ls-files $(SPATH))
|
|
|
|
$(LIBNSS_TACPLUS)_CACHE_MODE := GIT_CONTENT_SHA
|
|
$(LIBNSS_TACPLUS)_DEP_FLAGS := $(SONIC_COMMON_FLAGS_LIST)
|
|
$(LIBNSS_TACPLUS)_DEP_FILES := $(DEP_FILES)
|
|
|
|
|
|
|
|
|
|
SPATH := $($(BASH_TACPLUS)_SRC_PATH)
|
|
DEP_FILES := $(SONIC_COMMON_FILES_LIST) rules/tacacs.mk rules/tacacs.dep
|
|
DEP_FILES += $(SONIC_COMMON_BASE_FILES_LIST)
|
|
DEP_FILES += $(shell git ls-files $(SPATH))
|
|
|
|
$(BASH_TACPLUS)_CACHE_MODE := GIT_CONTENT_SHA
|
|
$(BASH_TACPLUS)_DEP_FLAGS := $(SONIC_COMMON_FLAGS_LIST)
|
|
$(BASH_TACPLUS)_DEP_FILES := $(DEP_FILES)
|
|
|