Skip to content

Conversation

@obilodeau
Copy link
Contributor

ready for review.

obilodeau added 15 commits April 3, 2012 14:27
Warning: returns hardcoded role string for now!
new supportsRoleBasedEnforcement() hook that modules must override if they support role-based
new returnRoleAttribute() hook to return the VSA to set

Aruba support

basic tests for the role-supported network devices
stub getRoleByName() for now
extension tests are now all running the same code and extension points only listed in a test list
connected to CLI/Web UI
added to pf::SNMP base class
added to switch factory
performs caching of the roles parsing on first hit
@obilodeau
Copy link
Contributor Author

@fgaudreault told me some issues to look at:

  • locationlog isn't kept in sync so on access re-evaluation if the VLAN didn't change but the role should've (ex: recategorization) the user is not disconnected
  • simple validation should be performed on the format of the roles parameter in switches.conf

Francois Gaudreault and others added 8 commits April 11, 2012 09:32
Implementation differs than other modules. AeroHive uses Tunnel Attributes for role assignment and this is what is also used for the VLAN assignments. Since we can't use both at the same time we favor roles if they are configured and VLANs otherwise. This meant overriding the base role support implementation from pf::SNMP into the AeroHive module.
lib/pf/SNMP.pm Outdated
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

r_assign? not really self-documenting ;)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed in 1fade0b

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe reorder theses one for consistency purposes

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think putting instance() on top makes it clearer that we are dealing with a singleton. pf::SwitchFactory is structured that way too.

@obilodeau
Copy link
Contributor Author

thank you dear for your review

@obilodeau obilodeau merged commit 785d0a1 into stable Apr 12, 2012
@dwlfrth
Copy link
Contributor

dwlfrth commented Apr 12, 2012

my pleasure sir!

stegar123 pushed a commit to stegar123/packetfence that referenced this pull request Jan 17, 2024
@fdurand fdurand mentioned this pull request Oct 18, 2025
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants