Hi, Cohult:
Thank you so much for this information, it really helps.
I am able to do it in NSO 5.7:
curl -X GET -u admin:admin
http://localhost:8080/restconf/data/tailf-ncs-monitoring:ncs-state/tailf-ncs-monitoring:daemon-status -H "Accept: application/yang-data+json"
{
"tailf-ncs-monitoring:daemon-status": "started"
}
However, in NSO 6.1, I got error:
curl -X GET -u admin:admin
http://localhost:8080/restconf/data/tailf-ncs-monitoring:ncs-state/tailf-ncs-monitoring2:daemon-status -H "Accept: application/yang-data+json"
authentication_failed: Your credentials could not be authenticated: "Credentials are missing.". You will not be permitted access until your credentials can be verified.
Regardless of the pam set as password-auth, common-auth or system-auth. I also added admin to aaa.
And here is my nacm:
show configuration nacm
read-default permit;
write-default permit;
exec-default permit;
groups {
group admin {
user-name [ admin private ];
}
group ncsadmin {
user-name [ admin private ];
}
group ncsoper {
user-name [ admin oper public ];
}
group oper {
user-name [ admin oper public ];
}
}
rule-list admin {
group [ admin ncsadmin ];
rule any-access {
action permit;
}
cmdrule any-command {
action permit;
}
}
rule-list oper {
group [ ncsoper ];
rule tailf-aaa-user {
module-name tailf-aaa;
path /user[name='$USER'];
access-operations create,read,update,delete;
action permit;
}
rule tailf-webui-user {
module-name tailf-webui;
path /webui/data-stores/user-profile[username='$USER'];
access-operations create,read,update,delete;
action permit;
}
rule tailf-aaa-alluser {
module-name tailf-aaa;
path /user;
action permit;
}
rule tailf-aaa-aaa {
module-name tailf-aaa;
path /aaa;
action permit;
}
rule nacm {
module-name ietf-netconf-acm;
path /;
action permit;
}
rule read-only {
path /;
access-operations read;
action permit;
}
cmdrule c-logout {
command logout;
action permit;
}
cmdrule j-logout {
command "request system logout";
action permit;
}
cmdrule any-command {
action permit;
}
}
rule-list any-group {
group [ * ];
rule tailf-aaa-password-change {
module-name tailf-aaa;
path /aaa/authentication/users/user[name='$USER']/change-password;
access-operations read,exec;
action permit;
}
rule tailf-aaa-user {
module-name tailf-aaa;
path /user[name='$USER'];
access-operations create,read,update,delete;
action permit;
}
rule tailf-webui-user {
module-name tailf-webui;
path /webui/data-stores/user-profile[username='$USER'];
access-operations create,read,update,delete;
action permit;
}
rule tailf-aaa-authentication {
access-operations update;
action permit;
}
cmdrule c-logout {
command logout;
action permit;
}
cmdrule j-logout {
command "request system logout";
action permit;
}
}
cmd-read-default permit;
cmd-exec-default permit;
THX
Sm000x
