Skip to content

Comments

SNC-3888: mask the password/key in cli command history#621

Open
kwangsuk wants to merge 1 commit intodell_sonicfrom
experimental-kwan
Open

SNC-3888: mask the password/key in cli command history#621
kwangsuk wants to merge 1 commit intodell_sonicfrom
experimental-kwan

Conversation

@kwangsuk
Copy link
Collaborator

@kwangsuk kwangsuk commented Feb 21, 2020

Enhance Klish parser to mask the password/key values in the command history.
As of now, masking is applied to the commands which have the keyword - password/key/auth-password/priv-password. It can be extended as needed.

  • username password role }
  • radius-server key
  • tacacs-server key
  • snmp-server user [encrypted] auth [md5|sha] auth-password priv [aes-128 | des] priv-password
configure terminal
username dellemc password ***** role admin
radius-server key *****
tacacs-server key *****
snmp-server user dellemc auth md5 auth-password *****

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants