openconfig / featureprofiles

Feature Profiles are groups of OpenConfig paths and tests which verify their behavior
Apache License 2.0
49 stars 145 forks source link

SEC-3.1: Authentication : required "Role" is missing while configuring users for authentication #328

Open avaneesh90 opened 2 years ago

avaneesh90 commented 2 years ago

SEC-3.1: Authentication : required "Role" is missing while configuring users for authentication Script name : https://github.com/openconfig/featureprofiles/blob/main/feature/experimental/security/aaa/kne_tests/tls_authentication_over_grpc_test/tls_authentication_over_grpc_test.go

Code changes needed in below code: dut := ondatra.DUT(t, "dut") dut.Config().System().Aaa().Authentication(). User("alice"). Replace(t, &telemetry.System_Aaa_Authentication_User{ Username: ygot.String("alice"), Password: ygot.String("password"), Role: "superuser" >>>>> here we need to add role })

aredmon8551 commented 2 years ago

Without specifying the role we end up with undefined behavior - it's up to the implementation to give a set of default permissions/privileges. Opened the following PR to address this in the AAA models: https://github.com/openconfig/public/pull/682