search

Bairdo / gasket

Gasket is a system that provides authentication and authorisation to the https://github.com/faucetsdn/faucet network controller.
3 stars 3 forks source link

Reconsider ACL naming scheme #56

Open Bairdo opened 6 years ago

Bairdo commented 6 years ago

port_<dp_name>_<port_number>

Maybe also use faucet's new acl_in syntax (list)

acls_in: [1x_to_hostapd, some_user_defined_port_rules, authentications_for_dp_1_port_3, all_to_hostapd] #89

~~and then create a script to generate these acls/faucet conf. e.g. auth.yaml hostapd-mac: 44:44:44:44:44:44~~ #90

base-acls.yaml contains the 'some_user_defined_port_rules' and nothing else. so auth.yaml + base-acls.yaml = faucet.yaml (+ faucet-acl.yaml)

Bairdo commented 6 years ago

keeping the port__ is probably a good idea. And separate the auth over multiple ports stuff out to another unit (config & code)