Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NACM paths don't work for mounted YANG models #62

Closed
krihal opened this issue Nov 13, 2023 · 3 comments
Closed

NACM paths don't work for mounted YANG models #62

krihal opened this issue Nov 13, 2023 · 3 comments
Assignees
Labels
bug Something isn't working fixed: plz verify Bug/feature is fixed by developer, need verification

Comments

@krihal
Copy link
Collaborator

krihal commented Nov 13, 2023

NACM paths don't work when there are mounted YANG models. In the example below I try to use a path which spans over both the controller YANG and Juniper YANG(s):

   <nacm xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
     <enable-nacm>true</enable-nacm>
     <read-default>deny</read-default>
     <write-default>deny</write-default>
     <exec-default>permit</exec-default>
     <groups>
       <group>
         <name>test</name>
         <user-name>debian</user-name>
       </group>
     </groups>
     <rule-list>
       <name>test-acl</name>
       <group>test</group>
       <rule>
         <name>permit juniper1</name>
         <module-name>*</module-name>
         <access-operations>*</access-operations>
         <action>permit</action>
         <path xmlns:ctrl="http://clicon.org/controller" xmlns:js="http://yang.juniper.net/junos/conf/root">/ctrl:devices/ctrl:device[ctrl:name='juniper1']/ctrl:config/js:configure/js:firewall</path>
       </rule>
     </rule-list>
   </nacm>
@krihal krihal added the feature New feature or request label Nov 13, 2023
@olofhagsand olofhagsand added prio bug Something isn't working and removed feature New feature or request labels Nov 13, 2023
@olofhagsand olofhagsand added the fixed: plz verify Bug/feature is fixed by developer, need verification label Nov 15, 2023
@olofhagsand
Copy link
Member

Should be fixed, see https://github.com/clicon/clixon/blob/master/test/test_nacm_mount.sh for an example

@olofhagsand
Copy link
Member

NACM PATHs + CIi does not work correctly, see also clicon/clixon#463

@olofhagsand
Copy link
Member

Open a separate issue for the special case NACM+CLI+PATH+MOUNT, see #67
CLosing the generic case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working fixed: plz verify Bug/feature is fixed by developer, need verification
Projects
None yet
Development

No branches or pull requests

2 participants