Skip to content

[tacacs]: Add SSH TraceId authorization attribute support#407

Open
Rod-Persky wants to merge 2 commits into
sonic-net:masterfrom
Rod-Persky:dev/rodpersky/traceid-hld-support
Open

[tacacs]: Add SSH TraceId authorization attribute support#407
Rod-Persky wants to merge 2 commits into
sonic-net:masterfrom
Rod-Persky:dev/rodpersky/traceid-hld-support

Conversation

@Rod-Persky

@Rod-Persky Rod-Persky commented Jul 9, 2026

Copy link
Copy Markdown

This pull request introduces support for a new traceid_authorization option for TACACS+ authorization, allowing the system to include an SSH TraceId in TACACS+ authorization requests. The changes ensure this option is configurable, has a sensible default, and is properly reflected in configuration templates and tests.

Related:

New feature: TACACS+ TraceId Authorization

  • Added support for the traceid_authorization option in TACACS+ configuration, defaulting to on, and updated the Jinja template (tacplus_nss.conf.j2) and sample output files to include this option and its documentation. [1] [2] [3]
  • Introduced the TACPLUS_TRACEID_AUTHORIZATION_DEFAULT constant (default: True) and included it in the global TACACS+ defaults in hostcfgd. [1] [2]
  • Ensured that the traceid_authorization value is correctly parsed and normalized when updating the global TACACS+ configuration.
  • Updated the configuration rendering logic to pass the traceid_authorization value to the template.

Test updates

  • Modified test vectors and sample outputs to cover the new traceid_authorization option, ensuring correct behavior when the option is set or unset. [1] [2]

Signed-off-by: Rod Persky <770327+Rod-Persky@users.noreply.github.com>
@mssonicbld

Copy link
Copy Markdown

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld

Copy link
Copy Markdown

Hi, there are workflow run(s) waiting for approval, you may be first-time contributor. I will notify maintainers to help approve once PR is approved. Thanks!

---Powered by SONiC BuildBot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants