The workaround described above works. Changed it to following line and added few more system-users spotted in the AAA daemon logs:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 12 2024
Oct 12 2024
syncer moved T5543: Fix source address handling in static joins from Need Triage to Completed on the VyOS Rolling board.
syncer moved T6667: Problems with simultaneous usage of multiple `vtysh` processes from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
syncer edited projects for T6667: Problems with simultaneous usage of multiple `vtysh` processes, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
syncer moved T6667: Problems with simultaneous usage of multiple `vtysh` processes from Need Triage to Backport Candidates on the VyOS Rolling board.
dmbaturin moved T4851: wwan: error: couldn't find modem from Need Triage to Backlog - Bug on the VyOS Rolling board.
dmbaturin added a project to T5976: Allow commit-confirm to use soft-rollback instead of reboot: VyOS Rolling.
dmbaturin changed the status of T6650: Add op-mode-definitions XML cache from Unknown Status to Resolved.
dmbaturin changed the status of T6736: Make REST api and GraphQL api distinct nodes from Unknown Status to Resolved.
dmbaturin changed the status of T6608: configd should report exceptions uncaught by conf_mode scripts as commit error from Unknown Status to Resolved.
Oct 11 2024
Oct 11 2024
needless added a comment to T6613: VyOS local system users TACACS+ authorization requests do not work correctly.
Oct 10 2024
Oct 10 2024
tfiebig added a comment to T6481: Auto import Lets Encrypt root CA while using pki certificate acme.
ETICKET, sorry.
Oct 8 2024
Oct 8 2024
n.fort added a comment to T6613: VyOS local system users TACACS+ authorization requests do not work correctly.
Can you check if changing this line https://github.com/vyos/vyos-1x/blob/current/data/templates/login/tacplus_nss.conf.j2#L33 and adding those user helps?
This file can be changed locally in the router: /usr/share/vyos/templates/login/tacplus_nss.conf.j2
Change line:
exclude_users=root,telegraf,radvd,strongswan,tftp,conservr,frr,ocserv,pdns,_chrony,_lldpd,sshd,openvpn,radius_user,radius_priv_user,*{{ ',' + user | join(',') if user is vyos_defined }}And change it to something like:
Oct 7 2024
Oct 7 2024
c-po moved T6481: Auto import Lets Encrypt root CA while using pki certificate acme from Open to Finished on the VyOS 1.5 Circinus board.
If the device is not even listing in lspci it's more of a Hyper-V thing then VyOS.
c-po moved T6759: Add additional languages as keyboard-layout from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6759: Add additional languages as keyboard-layout from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6481: Auto import Lets Encrypt root CA while using pki certificate acme from Open to In progress.
Oct 6 2024
Oct 6 2024
c-po added projects to T6759: Add additional languages as keyboard-layout: VyOS Rolling, VyOS 1.4 Sagitta (1.4.1).
Oct 5 2024
Oct 5 2024
basic node_exporter finish, now i work on https://github.com/tynany/frr_exporter
Oct 4 2024
Oct 4 2024
Oct 3 2024
Oct 3 2024
Oct 2 2024
Oct 2 2024
a.apostoliuk changed the status of T6756: frr: add nhrp cisco authentication to frr 10.1, a subtask of T6747: frr: upgrade routing suite to 10.2, from Open to In progress.
Drivers seem to be present, but device is not even appearing in lspci. Wouldn't this be more likely due to a hyper-v driver issue than the mellanox driver?
Sep 30 2024
Sep 30 2024
c-po moved T6751: Missing Well Known Communities in Command Completion from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6719: syslog: fix the behavior of "syslog global preserve-fqdn" from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6719: syslog: fix the behavior of "syslog global preserve-fqdn" from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6751: Missing Well Known Communities in Command Completion from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5367: Syslog doesn't send timezone information to the server from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6667: Problems with simultaneous usage of multiple `vtysh` processes from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6727: lldp: missing input validation for interface names from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6727: lldp: missing input validation for interface names from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed Issue type from bug to improvement on T6751: Missing Well Known Communities in Command Completion.
c-po changed the status of T6751: Missing Well Known Communities in Command Completion from Open to In progress.
Sep 29 2024
Sep 29 2024
c-po added a project to T6741: SR-IOV not working on Hyper-V with Mellanox ConnectX-5: VyOS Rolling.
I can not immediately recreate the issue:
c-po edited projects for T6748: `show ntp sources` Command Broken, added: VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus, VyOS Rolling; removed VyOS 1.4 Sagitta (1.4.0).
Sep 28 2024
Sep 28 2024
Sep 25 2024
Sep 25 2024
jestabro changed the status of T6736: Make REST api and GraphQL api distinct nodes from Open to In progress.
PR to follow tests and migration script:
https://github.com/vyos/vyos-1x/compare/current...jestabro:distinct-api
jestabro closed T6608: configd should report exceptions uncaught by conf_mode scripts as commit error as Unknown Status.
c-po edited projects for T6719: syslog: fix the behavior of "syslog global preserve-fqdn" , added: VyOS Rolling; removed Restricted Project.
Sep 23 2024
Sep 23 2024
molocho raised the priority of T6731: name server forwarding from DHCP client interface to DHCP server interface without using VyOS DNS forwarding feature from Wishlist to Requires assessment.
c-po changed Version from 1..4.0 to 1.4.0 on T6731: name server forwarding from DHCP client interface to DHCP server interface without using VyOS DNS forwarding feature.
Sep 22 2024
Sep 22 2024
jestabro added a comment to T6608: configd should report exceptions uncaught by conf_mode scripts as commit error.
PR ready for review:
https://github.com/vyos/vyos-1x/pull/3876
c-po moved T6729: Upgrade ethtool to 6.10 to make use of more --json options from Open to Finished on the VyOS 1.5 Circinus board.
Sep 21 2024
Sep 21 2024
c-po changed the status of T6729: Upgrade ethtool to 6.10 to make use of more --json options from Open to In progress.
Sep 20 2024
Sep 20 2024
c-po changed the status of T6727: lldp: missing input validation for interface names from Open to In progress.
Sep 19 2024
Sep 19 2024
Smoketest fails for the wireless interfaces
DEBUG - ======================================================================
DEBUG - FAIL: test_wireless_add_single_ip_address (__main__.WirelessInterfaceTest.test_wireless_add_single_ip_address)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_interfaces_wireless.py", line 84, in test_wireless_add_single_ip_address
DEBUG - self.assertTrue(process_named_running('wpa_supplicant'))
DEBUG - AssertionError: None is not trueSep 17 2024
Sep 17 2024
I am not yet able to reproduce this in either case. @c-po suggestion of an interaction with the introduction of vyos.utils.configfs is quite reasonable, but I have not reproduced in current rolling or an image earlier than the recent changes (T6633, T6640) to resolve T6639. I've asked the forum user of the second report for further information.
HollyGurza moved T6525: SNMP extension script paths relative to /config/user-data do not work as expected from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T6578: Unhandled exception in "show openconnect-server sessions" from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T6578: Unhandled exception in "show openconnect-server sessions" from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Sep 16 2024
Sep 16 2024
c-po moved T6715: date: manually changing time/date is not synced into hardware clock from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6715: date: manually changing time/date is not synced into hardware clock from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin added a project to T5153: OpenConnect route restriction via iptables is ignored: Restricted Project.
jestabro updated the task description for T6717: Add hybrid Cstore manipulation library to replace set/delete/load_config functionality.
Sep 15 2024
Sep 15 2024
jestabro added a comment to T6717: Add hybrid Cstore manipulation library to replace set/delete/load_config functionality.