ec9101f9c5
Why I did it HLD: https://github.com/Azure/SONiC/blob/master/doc/aaa/radius_authentication.md CLI: In a separate PR. How I did it How to verify it UT: src/sonic-host-services/tests/hostcfgd/hostcfgd_radius_test.py
56 lines
1.4 KiB
Plaintext
56 lines
1.4 KiB
Plaintext
#THIS IS AN AUTO-GENERATED FILE
|
|
# Generated from: /usr/share/sonic/templates/radius_nss.conf.j2
|
|
# RADIUS NSS Configuration File
|
|
#
|
|
# Debug: on|off|trace
|
|
# Default: off
|
|
#
|
|
# debug=on
|
|
debug=on
|
|
|
|
#
|
|
# User Privilege:
|
|
# Default:
|
|
# user_priv=15;pw_info=remote_user_su;gid=1000;group=sudo,docker;shell=/usr/bin/sonic-launch-shell
|
|
# user_priv=1;pw_info=remote_user;gid=999;group=docker;shell=/usr/bin/sonic-launch-shell
|
|
|
|
# Eg:
|
|
# user_priv=15;pw_info=remote_user_su;gid=1000;group=sudo,docker;shell=/usr/bin/sonic-launch-shell
|
|
# user_priv=7;pw_info=netops;gid=999;group=docker;shell=/usr/bin/sonic-launch-shell
|
|
# user_priv=1;pw_info=operator;gid=100;group=docker;shell=/usr/bin/sonic-launch-shell
|
|
#
|
|
|
|
# many_to_one:
|
|
# y: Map RADIUS users to one local user per privilege.
|
|
# n: Create local user account on first successful authentication.
|
|
# Default: n
|
|
#
|
|
|
|
# Eg:
|
|
# many_to_one=y
|
|
#
|
|
|
|
# unconfirmed_disallow:
|
|
# y: Do not allow unconfirmed users (users created before authentication)
|
|
# n: Allow unconfirmed users.
|
|
# Default: n
|
|
|
|
# Eg:
|
|
# unconfirmed_disallow=y
|
|
#
|
|
|
|
# unconfirmed_ageout:
|
|
# <seconds>: Wait time before purging unconfirmed users
|
|
# Default: 600
|
|
#
|
|
|
|
# Eg:
|
|
# unconfirmed_ageout=900
|
|
#
|
|
|
|
# unconfirmed_regexp:
|
|
# <regexp>: The RE to match the command line of processes for which the
|
|
# creation of unconfirmed users are to be allowed.
|
|
# Default: (.*: <user> \[priv\])|(.*: \[accepted\])
|
|
# where: <user> is the unconfirmed user.
|
|
# |