Page MenuHomeVyOS Platform
Create Task
Maniphest T5570

PAM config RADIUS ignore for default and success
Closed, ResolvedPublicBUG
Actions

Description

There are two ignores for default and success whats seems to be wrong and ignored anyway.

Auth:
   ...
    [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet

https://github.com/vyos/vyos-1x/blob/6c3defcc1e5e89cd2c031fdaa0975737529d7d5f/src/pam-configs/radius#L7

Details

Version
VyOS 1.5-rolling-202309090613
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects
Search...

Event Timeline

Viacheslav created this task.Sep 11 2023, 10:34 AM
pasik subscribed.Sep 11 2023, 11:41 AM
zsdc added a parent task: T5577: Optimize PAM configs for RADIUS/TACACS+.Sep 13 2023, 8:07 AM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.6); removed VyOS 1.3 Equuleus (1.3.5).Dec 17 2023, 11:36 PM
Viacheslav assigned this task to zsdc.Jan 20 2024, 1:20 PM
Viacheslav triaged this task as Normal priority.

Can we close it?

syncer edited projects, added VyOS 1.3 Equuleus (1.3.7); removed VyOS 1.3 Equuleus (1.3.6).Feb 10 2024, 9:17 AM
syncer edited projects, added VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.May 7 2024, 8:02 AM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.8); removed VyOS 1.3 Equuleus (1.3.7).May 13 2024, 7:31 PM
dmbaturin edited projects, added VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).Jun 20 2024, 10:18 AM
dmbaturin edited projects, added VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus.Jul 2 2024, 7:29 PM
syncer renamed this task from PAM config RADIUS ignore for default and seccess to PAM config RADIUS ignore for default and success.Jul 3 2024, 1:25 PM
Viacheslav closed this task as Resolved.Jul 3 2024, 2:12 PM
Viacheslav moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.Dec 6 2024, 2:49 PM
dmbaturin changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).
dmbaturin mentioned this in 1.4.1.Tue, Dec 31, 1:23 AM