Clear Config Basic Should Not Clear TACACS Config
This enhancement focuses on NOT CLEARING all RBA (Role Based Access) related configurations when the clear config command is executed.
The current clear config command is performed in one of three levels:
Based on the level chosen, NetScaler configurations are cleared and reset to the factory default.
The command used is:
clear ns config \[-force\] \<level\>
The new command adds a knob to allow/deny the deletion of all RBA related configurations.
Described are the Clear RBAconfig features:
YES/NO knob with Default: YES.
The admin decides whether to retain the RBA config or not.
ONLY the BASIC LEVEL of clear config is supported.
The following configurations not cleared:
Add/bind system user/group.
Add cmd policy.
TACACS commands.(add TACACS action/policy).
Bind system global
Note: TACACS related config (action/policy) is preserved if the policy is bound to system global or else it is cleared
The command used
clear config [–force] <level> [-RBAconfig]
By default it is set to YES, and clears the configurations based on the level specified.
If –RBAconfig is set to NO, the RBA related config is retained. The following is included:
- Add /bind system user /group
- Bind system global
- tacacs related commands (add tacacs action/policy)
- Add cmd policy