Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DP-3: Horizon/Meridian: Add tabbed block to Configure Backup Sprint #6594

Merged
merged 1 commit into from
Aug 31, 2023
Merged

DP-3: Horizon/Meridian: Add tabbed block to Configure Backup Sprint #6594

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions ...dules/operation/pages/deep-dive/device-config-backup/dcb-accounts/aruba-os.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
This script creates a `dcb` user account based on a custom user group (`dcb-group`).
The user group has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
aruba-os# configure
aruba-os(config)# aaa authorization commands local
aruba-os(config)# aaa authorization group "dcb-group" 1 match-command "copy running-config tftp .*" permit
aruba-os(config)# aaa authorization group "dcb-group" 2 match-command "show running-config" permit
aruba-os(config)# aaa authorization group "dcb-group" 3 match-command "copy startup-config tftp .*" permit
aruba-os(config)# aaa authorization group "dcb-group" 4 match-command "show startup-config" permit
aruba-os(config)# aaa authentication local-user "dcb" group "dcb-group" password plaintext
New password for dcb: Pa55w0rd
Please retype new password for dcb: Pa55w0rd
aruba-os(config)# exit
----
17 changes: 17 additions & 0 deletions ...les/operation/pages/deep-dive/device-config-backup/dcb-accounts/aruba-oscx.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
This script creates a `dcb` user account based on a custom user group (`dcb-group`).
The user group has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
aruba-os-cx# config
aruba-os-cx(config)# user-group dcb-group
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "copy startup-config tftp.*"
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "copy running-config tftp.*"
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "show running-config"
aruba-os-cx(config-usr-grp-dcb-group)# deny cli command ".*"
aruba-os-cx(config-usr-grp-dcb-group)# exit
aruba-os-cx(config)# user dcb group dcb-group password
Enter password: Pa55w0rd
Confirm password: Pa55w0rd
aruba-os-cx(config)#
----
10 changes: 10 additions & 0 deletions ...ules/operation/pages/deep-dive/device-config-backup/dcb-accounts/cisco-ios.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
This script creates a `dcb` user account based on a custom privilege configuration:

[source, script]
----
cisco-ios#configure terminal
cisco-ios(config)#username dcb privilege 2 secret Pa55w0rd
cisco-ios(config)#privilege exec level 2 copy running-config
cisco-ios(config)#privilege exec level 2 copy startup-config
cisco-ios(config)#exit
----
27 changes: 27 additions & 0 deletions ...odules/operation/pages/deep-dive/device-config-backup/dcb-accounts/juniper.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
This script creates a `dcb` user account based on a custom login class (`dcb-class`).
The login class has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
admin@juniper-junos# set system login class dcb-class permissions all

[edit]
admin@juniper-junos# set system login class dcb-class allow-commands "(exit)|(start shell)|(show configuration.*)"

[edit]
admin@juniper-junos# set system login class dcb-class deny-commands .*

[edit]
admin@juniper-junos# set system login user dcb uid 1006

[edit]
admin@juniper-junos# set system login user dcb class dcb-class

[edit]
admin@juniper-junos# set system login user dcb authentication plain-text-password
New password: Pa55w0rd
Retype new password: Pa55w0rd

[edit]
admin@juniper-junos# exit
----
106 changes: 26 additions & 80 deletions docs/modules/operation/pages/deep-dive/device-config-backup/ssh.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,84 +124,30 @@ There are several example scripts available in `$\{OPENNMS_HOME}/etc/examples/de
We recommend that you limit the privileges of any user accounts used for configuration retrieval.
The following examples demonstrate how to configure a `dcb` user account, specify its password (`Pa55w0rd`), and limit its privileges to only configuration retrieval commands.

==== ArubaOS configuration
[{tabs}]
====
ArubaOS::
+
--
include::dcb-accounts/aruba-os.adoc[]
--

ArubaOS-CX::
+
--
include::dcb-accounts/aruba-oscx.adoc[]
--

Cisco IOS::
+
--
include::dcb-accounts/cisco-ios.adoc[]
--

Juniper Junos::
+
--
include::dcb-accounts/juniper.adoc[]
--
====

This script creates a `dcb` user account based on a custom user group (`dcb-group`).
The user group has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
aruba-os# configure
aruba-os(config)# aaa authorization commands local
aruba-os(config)# aaa authorization group "dcb-group" 1 match-command "copy running-config tftp .*" permit
aruba-os(config)# aaa authorization group "dcb-group" 2 match-command "show running-config" permit
aruba-os(config)# aaa authorization group "dcb-group" 3 match-command "copy startup-config tftp .*" permit
aruba-os(config)# aaa authorization group "dcb-group" 4 match-command "show startup-config" permit
aruba-os(config)# aaa authentication local-user "dcb" group "dcb-group" password plaintext
New password for dcb: Pa55w0rd
Please retype new password for dcb: Pa55w0rd
aruba-os(config)# exit
----

==== ArubaOS-CX configuration

This script creates a `dcb` user account based on a custom user group (`dcb-group`).
The user group has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
aruba-os-cx# config
aruba-os-cx(config)# user-group dcb-group
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "copy startup-config tftp.*"
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "copy running-config tftp.*"
aruba-os-cx(config-usr-grp-dcb-group)# permit cli command "show running-config"
aruba-os-cx(config-usr-grp-dcb-group)# deny cli command ".*"
aruba-os-cx(config-usr-grp-dcb-group)# exit
aruba-os-cx(config)# user dcb group dcb-group password
Enter password: Pa55w0rd
Confirm password: Pa55w0rd
aruba-os-cx(config)#
----

==== Cisco IOS configuration

This script creates a `dcb` user account based on a custom privilege configuration:

[source, script]
----
cisco-ios#configure terminal
cisco-ios(config)#username dcb privilege 2 secret Pa55w0rd
cisco-ios(config)#privilege exec level 2 copy running-config
cisco-ios(config)#privilege exec level 2 copy startup-config
cisco-ios(config)#exit
----

==== Juniper Junos configuration

This script creates a `dcb` user account based on a custom login class (`dcb-class`).
The login class has limited privileges, which are passed on to the `dcb` account.

[source, script]
----
admin@juniper-junos# set system login class dcb-class permissions all

[edit]
admin@juniper-junos# set system login class dcb-class allow-commands "(exit)|(start shell)|(show configuration.*)"

[edit]
admin@juniper-junos# set system login class dcb-class deny-commands .*

[edit]
admin@juniper-junos# set system login user dcb uid 1006

[edit]
admin@juniper-junos# set system login user dcb class dcb-class

[edit]
admin@juniper-junos# set system login user dcb authentication plain-text-password
New password: Pa55w0rd
Retype new password: Pa55w0rd

[edit]
admin@juniper-junos# exit
----
1 change: 1 addition & 0 deletions docs/modules/reference/pages/configuration/minion-confd/minion-confd.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,7 @@ ipc:
kafka:
bootstrap.servers: "127.0.0.1:9092"
# Any other keys necessary can be specified here
----

Writes the specified configuration settings to `$\{MINION_HOME}/etc/org.opennms.core.ipc.kafka.cfg`.
If the `bootstrap.servers` key is specified, `$\{MINION_HOME}/etc/featuresBoot.d/kafka-ipc.boot` is also updated.
Expand Down
Loading