Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[TACACS+] Add audisp-tacplus for per-command accounting. #8750

Merged
merged 75 commits into from
Dec 1, 2021

Conversation

liuh-80
Copy link
Contributor

@liuh-80 liuh-80 commented Sep 14, 2021

This pull request integrate audisp-tacplus to SONiC for per-command accounting.

Why I did it

To support TACACS per-command accounting, we integrate audisp-tacplus project to sonic.

How I did it

  1. Add auditd service to SONiC
  2. Port and patch audisp-tacplus to SONiC

How to verify it

UT with CUnit to cover all new code in usersecret-filter.c
Also pass all current UT.

Which release branch to backport (provide reason below if selected)

N/A

Description for the changelog

Add audisp-tacplus for per-command accounting.

A picture of a cute animal (not mandatory but encouraged)

@liuh-80
Copy link
Contributor Author

liuh-80 commented Sep 14, 2021

This just draft PR still ongoing.
Need new code to remov user secret from accounting message.
Also need local accounting with syslog support.

@liuh-80 liuh-80 marked this pull request as ready for review September 16, 2021 03:06
@liuh-80 liuh-80 closed this Sep 16, 2021
@liuh-80 liuh-80 reopened this Sep 16, 2021
@liuh-80 liuh-80 marked this pull request as draft September 16, 2021 03:31
@liuh-80
Copy link
Contributor Author

liuh-80 commented Sep 16, 2021

Not ready for review, publish by mistake, switch back to draft. still need following change:

  1. Remove user secret from accounting message.
  2. Support syslog as 'local' accounting
  3. Make accounting method 'local' & 'tacacs' configurable.

qiluo-msft
qiluo-msft previously approved these changes Nov 25, 2021
@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 26, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 26, 2021

This PR build break because file permission of build_debian.sh change to 644, so fix this by:
'git update-index --chmod=+x build_debian.sh' and submit a new commit.

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 26, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 26, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 28, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 28, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 29, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 30, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80
Copy link
Contributor Author

liuh-80 commented Nov 30, 2021

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@liuh-80 liuh-80 merged commit 739c456 into sonic-net:master Dec 1, 2021
liuh-80 added a commit to liuh-80/sonic-buildimage that referenced this pull request Jul 11, 2023
)

This pull request integrate audisp-tacplus to SONiC for per-command accounting.

To support TACACS per-command accounting, we integrate audisp-tacplus project to sonic.

1. Add auditd service to SONiC
2. Port and patch audisp-tacplus to SONiC

UT with CUnit to cover all new code in usersecret-filter.c
Also pass all current UT.

N/A

Add audisp-tacplus for per-command accounting.
liuh-80 added a commit to liuh-80/sonic-buildimage that referenced this pull request Jul 11, 2023
)

This pull request integrate audisp-tacplus to SONiC for per-command accounting.

To support TACACS per-command accounting, we integrate audisp-tacplus project to sonic.

1. Add auditd service to SONiC
2. Port and patch audisp-tacplus to SONiC

UT with CUnit to cover all new code in usersecret-filter.c
Also pass all current UT.

N/A

Add audisp-tacplus for per-command accounting.
qiluo-msft pushed a commit that referenced this pull request Jul 13, 2023
) (#15788)

This pull request integrate audisp-tacplus to SONiC for per-command accounting.

##### Work item tracking
- Microsoft ADO **(number only)**: 24433713

#### Why I did it
To support TACACS per-command accounting, we integrate audisp-tacplus project to sonic.

#### How I did it
1. Add auditd service to SONiC
2. Port and patch audisp-tacplus to SONiC

#### How to verify it
UT with CUnit to cover all new code in usersecret-filter.c
Also pass all current UT.

#### Tested branch (Please provide the tested image version)
Extract tacacs support functions into library, this will share TACACS config file parse code with other project.
Also fix memory leak issue in parse config code.

- [ ]  SONiC.202012-15723.312602-e230e2d3e

#### Description for the changelog
Add audisp-tacplus for per-command accounting.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants