PR for 1.3 https://github.com/vyos/vyos-1x/pull/2310

In T5586#160073, @Apachez wrote:

How does FRR/vrrpd work regarding SNMP compatability?

Im thinking if the keepalived could be replaced in favour of FRR/vrrpd?

And for now keep keepalived around only for virtual-server (unless that too can be dealt with by FRR/vrrpd)?

Ok, I was thinking if that then waited for some password or such.

I haven't tried anything else since I rebooted back into 1.4, but I did try sudo su - which gave the same error.

How does a simple "sudo bash" work?

I think this broke a whole lot of things for RADIUS users (these work fine in 1.4-rolling-202308040317, but are broken in 1.5-rolling-202309170024):

How does FRR/vrrpd work regarding SNMP compatability?

PR https://github.com/vyos/vyos-1x/pull/2273

PR created: https://github.com/vyos/vyos-1x/pull/2264

Should probably add "-M rpki" permanently to FRR/bgp.

Could the error from latest nightly be due to that rpki module isnt loaded for FRR/bgp?

Could https://vyos.dev/T2044 be related to the failed nightly build from last night?

PR for 1.3.x https://github.com/vyos/vyatta-cfg-quagga/pull/102

op-mode: https://github.com/vyos/vyos-1x/pull/2242

PR for 1.3.x https://github.com/vyos/vyos-1x/pull/2225

PR: https://github.com/vyos/vyos-1x/pull/2222

For 1.4 add session [default=ignore success=2] pam_succeed_if.so service = sudo to /etc/pam.d/common-session-noninteractive fixes the issue

# here are the per-package modules (the "Primary" block)
session [default=1]                     pam_permit.so
# here's the fallback if no module succeeds
session requisite                       pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required                        pam_permit.so
# and here are more per-package modules (the "Additional" block)
session required        pam_mkhomedir.so umask=0022 skel=/etc/skel
session [default=ignore success=2] pam_succeed_if.so service = sudo
session [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
session [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so
session required        pam_unix.so
# end of pam-auth-update config

current PR: https://github.com/vyos/vyos-1x/pull/2217
1.4 PR: https://github.com/vyos/vyos-1x/pull/2218
1.3 PR: https://github.com/vyos/vyos-1x/pull/2219