RADIUS Management User Authentication Feature

[a-barboza]

What I did

Radius Management User Authentication Feature

How I did it

HLD: https://github.com/Azure/SONiC/blob/master/doc/aaa/radius_authentication.md

How to verify it

This is the CLI only. The changes are reflected in the Redis Config DB.

Previous command output (if the output of a command-line utility has changed)

New command output (if the output of a command-line utility has changed)

admin@sonic:~$ show radius
RADIUS global auth_type pap (default)
RADIUS global retransmit 3 (default)
RADIUS global timeout 5 (default)
RADIUS global passkey <EMPTY_STRING> (default)

admin@sonic:~$

admin@sonic:~$ sudo config radius
Usage: config radius [OPTIONS] COMMAND [ARGS]...

RADIUS server configuration

Options:
-?, -h, --help Show this message and exit.

Commands:
add Specify a RADIUS server
authtype Specify RADIUS server global auth_type [chap | pap | mschapv2]
default set its default configuration
delete Delete a RADIUS server
nasip Specify RADIUS server global NAS-IP|IPV6-Address
passkey Specify RADIUS server global passkey
retransmit Specify RADIUS server global retry attempts <0 - 10>
sourceip Specify RADIUS server global source ip
statistics Specify RADIUS server global statistics [enable | disable |...
timeout Specify RADIUS server global timeout <1 - 60>
admin@sonic:~$

[lguohan]

need unit test to be added.

[a-barboza]

need unit test to be added.

Done.

[a-barboza]

UT's are added and seemed to have passed.
...
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_show_radius_default PASSED [ 81%]
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_config_radius_server PASSED [ 82%]
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_config_radius_server_invalidkey PASSED [ 82%]
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_config_radius_nasip_invalid PASSED [ 82%]
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_config_radius_sourceip_invalid PASSED [ 82%]
[2021-03-25T22:41:02.610Z] tests/radius_test.py::TestRadius::test_config_radius_authtype PASSED [ 82%]
...
build completes
...
[2021-03-25T22:47:41.168Z] Successfully tagged docker-sonic-vs:sonic-utilities-build-pr.4574
[2021-03-25T22:47:41.168Z] + docker save docker-sonic-vs:sonic-utilities-build-pr.4574
...
sonic-swss-tests, fail in an unrelated test because of a unrelated error.
...
[2021-03-25T22:48:57.568Z] + git clone https://github.com/Azure/sonic-swss sonic-swss-tests
[2021-03-25T22:48:57.568Z] Cloning into 'sonic-swss-tests'...
...
[2021-03-26T01:31:24.475Z] ==================================== ERRORS ====================================
[2021-03-26T01:31:24.475Z] _______________ ERROR at setup of TestVxlan.test_vxlan_term_orch _______________
[2021-03-26T01:31:24.475Z]
[2021-03-26T01:31:24.475Z] self = <docker.transport.unixconn.UnixHTTPConnectionPool object at 0x7facdcc26d30>
[2021-03-26T01:31:24.475Z] conn = <docker.transport.unixconn.UnixHTTPConnection object at 0x7facdcc7abb0>
...

[yxieca]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[a-barboza]

The system lag timing issues in the build tests are unrelated. They appear to have been fixed here (sonic-net/sonic-swss#1692)

[lguohan]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[renukamanavalan]

Thank you, Arun!