Skip to content

Commit

Permalink
address comments
Browse files Browse the repository at this point in the history
  • Loading branch information
rlucus committed Nov 20, 2024
1 parent 3059679 commit c4c0431
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions doc/mgmt/gnmi/gnsi.md
Original file line number Diff line number Diff line change
Expand Up @@ -174,6 +174,9 @@ Credentialz is for managing SSH and Console access. Changes are made through dbu
- Modify host's keys and certificates

##### Console Mgmt (users/passwords)
This describes the API and expected behavior of a host service module to be named console_mgmt. This handles the backend tasks needed for Credentialz.

The APIs may be called in any logical order (Create must be called before Restore or Delete).
###### Create checkpoint
When the console_mgmt.create_checkpoint message is received the back-end will make a copy of all password-related files. This copy will be used to restore the state of the system account credential configuration to the state it was when this message was received.
Files to be copied:
Expand Down Expand Up @@ -207,6 +210,7 @@ That differs from the other DBUS calls as it has a parameter - a string that con
When this type of message is received the back-end will replace the content of /etc/passwd and /etc/shadow files.

##### SSH Mgmt
This describes the API and expected behavior of a host service module to be named ssh_mgmt. This handles the backend tasks needed for Credentialz.
###### Create checkpoint
When ssh_mgmt.create_checkpoint message is received the backend will make a copy of all SSH-related files. This copy will be used to restore the state of the SSH configuration to the state it was when this message was received.
Files to be copied:
Expand Down Expand Up @@ -303,9 +307,9 @@ No change in SAI API.
#### gNMI

New flags for gnmi server:
- AuthzPolicy bool // Enable authz policy.
- EnableAuthzPolicy bool // Enable authz policy.
- AuthzPolicyFile string // Path to JSON file with authz policies.
- PathzPolicy bool // Enable gNMI pathz policy.
- EnablePathzPolicy bool // Enable gNMI pathz policy.
- PathzPolicyFile string // Path to gNMI pathz policy file.
- CertCRLConfig string // Path to the CRL directory. Disable if empty.
- SshCredMetaFile string // Path to JSON file with SSH server credential metadata.
Expand Down

0 comments on commit c4c0431

Please sign in to comment.