Break the rules of the Dnsmasq implementation while at it:
An alias can consist of a host and/or domain and/or description.
At least a host name or a domain need to be set, the rest will be
taken from the original entry.
Missing GUI parts in the override section...
- since the apply never has been complete, the current situations either results in user not knowning where their waiting for (an openvpn client for example) or users assuming all is in sync (which isn't the case)
- move restart filter action to existing sync page
closes https://github.com/opnsense/core/issues/3165
- add aliases() to IService, so one service can be used for multiple pam services, eases implementation (pam has an include statement for this purpose)
- move logging to AuthenticationFactory->authenticate() and communicate more about choices taken, eases debugging
- remove OpnsenseAuthTest, Sshd, implemented by System
for https://github.com/opnsense/core/issues/3242
While testing 4g modems, it seems that initial device detection isn't flawless leading to USB_ERR_IOERROR failures and non functional modems.
Most likely cause of these issues seems to be that some devices need a bit of time between powering the bus and performing registration.
This option adds an early boot script, which optionally performs a usbconfig reset on boot.
This seems to be a cosmetic cleanup. get_failover_interface()
is used incorrectly but then merely seems to be used to look
up IPv4 connectivity to make a "smart" decision about resync
duties.
A few annoying and disabled line removals while here.
todo:
* add userHasPrivilege($user, "user-proxy-auth") replacement
* change squid template to pam, as long as the template isn't changed, this service doesn't do anything
* using setUserName() --> getUsername() we could support additional services per pam service registration (which would be needed for OpenVPN)
* checkConstraints() can be used to implement current "has group" patterns
First (functional) attempt, this needs to stay on devel for some time there might be dragons ;)
src/etc/rc.d/configd --> command_interpreter could cause restart issues after an upgrade, the rc system doesn't like command changes it seems. Maybe not a real world problem, just haven't tried it yet.
unit tests are somewhat functional, although generating all templates will likely fail, since the test config doesn't include all data involved.