Add an option to enable retrieving a user's traffic quota from RADIUS. The code uses a new vendor-specific attribute so the RADIUS server must be configured appropriately and load the pfSense dictionary.
Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced UI (SSH section), sshd will generate /etc/ssh/sshd_config file that requires an authorized key AND username+password.
Note: requires corresponding edits (reb00tz-sshd_key_and_password-patch-2) for proper UI options to show up. Otherwise, manually set $config['system']['ssh']['sshdkeyonly'] to "both" then restart sshd to take effect.
Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced UI (SSH section), sshd will generate /etc/ssh/sshd_config file that requires an authorized key AND username+password.
Note: requires corresponding edits (reb00tz-sshd_key_and_password-patch-2) for proper UI options to show up. Otherwise, manually set $config['system']['ssh']['sshdkeyonly'] to "both" then restart sshd to take effect.
- Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgrade config and set default value on systems where
it's not defined
- Changed default config to match new default and version 18.0
- Added checks to enable 'block bogons' and to enable IPv6 requesting
the minimum value
- Notify admin when Maximum Table Entries value is too small and in
this case skip bogonsv6 table creation
I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell scripts) so it would be easier to review.
-RJ
A recent change changed the IP alias setup to only happen on enabled interfaces. As the loopback interfaces do not have the enabled flag on config there are being skiped.
While here reduce some duplicate code and apply the same rules for VIPs and IP aliases.
Ticket: #8393
Github PR: #3920
