search

CESNET / netopeer2

NETCONF toolset
BSD 3-Clause "New" or "Revised" License
296 stars 187 forks source link

How to change the NACM factory default? #1417

Closed troglobit closed 1 year ago

troglobit commented 1 year ago

Hi,

I've been trying to change the factory default datastore for ietf-netconf-acm in sysrepo, but no matter what I try, I get "already loaded" or similar, and the init data is ignored. All other models I've tried loading with sysrepoctl seem to get initialized properly. Any pointers on how to do it?

The reason I'm even attempting this is that we want to set up a basic set of default groups in the system (guest/admin/limited, as defined in RFC8341) which the ietf-system default 'admin' user is member of. So that on factory reset the system always returns to this defined state. (The password is random per-device and scanned by the site admin so that they can manage devices remotely using NETCONF after a factory reset).

troglobit commented 1 year ago

I'm realizing this question may actually fit better in sysrepo, I was under the impression that NACM was part of netopeer2. Apologies, I'll repost there.

michalvasko commented 1 year ago

It is fine, does not matter much, the problem you are having is relevant but I have not designed a solution yet hence me not replying.