mir/kea
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-22 18:08:16 +00:00
Code Issues Releases Wiki Activity

[#2226] Text edits

Browse Source
This commit is contained in:
Suzanne Goldlust 2021-12-06 21:38:37 +00:00 committed by Thomas Markwalder
parent 676a57c97b
commit 8a9e22463d
1 changed files with 29 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
doc/sphinx/arm/shell.rst
View File

@ -9,8 +9,8 @@ The Kea Shell
Overview of the Kea Shell Overview of the Kea Shell
========================= =========================
Kea 1.2.0 introduced the Control Agent (CA, see The Kea Control Agent (CA, see
:ref:`kea-ctrl-agent`), which provides a RESTful control interface :ref:`kea-ctrl-agent`) provides a RESTful control interface
over HTTP. That API is typically expected to be used by various IPAMs over HTTP. That API is typically expected to be used by various IPAMs
and similar management systems. Nevertheless, there may be cases when an and similar management systems. Nevertheless, there may be cases when an
administrator wants to send a command to the CA directly, and the Kea shell administrator wants to send a command to the CA directly, and the Kea shell
@ -19,7 +19,7 @@ scripting-friendly, text client that is able to connect to the CA, send
it commands with parameters, retrieve the responses, and display them. it commands with parameters, retrieve the responses, and display them.
As the primary purpose of the Kea shell is as a tool in a scripting As the primary purpose of the Kea shell is as a tool in a scripting
environment, it is not interactive. However, following simple guidelines it can environment, it is not interactive. However, by following simple guidelines it can
be run manually. be run manually.
Kea 1.9.0 introduced basic HTTP authentication support. Kea 1.9.0 introduced basic HTTP authentication support.
@ -45,18 +45,18 @@ where:
specified, an empty path is used. As the CA listens at the empty specified, an empty path is used. As the CA listens at the empty
path, this parameter is useful only with a reverse proxy. path, this parameter is useful only with a reverse proxy.
- ``--auth-user`` specifies the user id for basic HTTP authentication. - ``--auth-user`` specifies the user ID for basic HTTP authentication.
If not specified or specified as the empty string authentication is If not specified or specified as the empty string, authentication is
not used. not used.
- ``--auth-password`` specifies the password for basic HTTP authentication. - ``--auth-password`` specifies the password for basic HTTP authentication.
If not specified but the user id is specified an empty password is used. If not specified but the user ID is specified, an empty password is used.
- ``--timeout seconds`` specifies the timeout (in seconds) for the - ``--timeout seconds`` specifies the timeout (in seconds) for the
connection. If not given, 10 seconds is used. connection. If not given, 10 seconds is used.
- ``--service service-name`` specifies the target of a command. If not - ``--service service-name`` specifies the target of a command. If not
given, the CA will be used as the target. May be used more than once given, the CA is used as the target. This may be used more than once
to specify multiple targets. to specify multiple targets.
- ``command`` specifies the command to be sent. If not specified, the - ``command`` specifies the command to be sent. If not specified, the
@ -68,16 +68,16 @@ Other switches are:
- ``-v`` - prints the software version. - ``-v`` - prints the software version.
See :ref:`shell-tls` for TLS/HTTPS support new command line arguments. See :ref:`shell-tls` for new command-line arguments associated with TLS/HTTPS support.
Once started, the shell reads parameters for the command from standard Once started, the shell reads the parameters for the command from standard
input, which are expected to be in JSON format. When all have been read, input, which are expected to be in JSON format. When all have been read,
the shell establishes a connection with the CA using HTTP, sends the the shell establishes a connection with the CA using HTTP, sends the
command, and awaits a response. Once that is received, it is displayed command, and awaits a response. Once that is received, it is displayed
on standard output. on standard output.
For a list of available commands, see :ref:`ctrl-channel`; For a list of available commands, see :ref:`ctrl-channel`;
additional commands may be provided by hooks libraries. For a list of additional commands may be provided by hook libraries. For a list of
all supported commands from the CA, use the ``list-commands`` command. all supported commands from the CA, use the ``list-commands`` command.
The following shows a simple example of usage: The following shows a simple example of usage:
@ -89,14 +89,14 @@ The following shows a simple example of usage:
After the command line is entered, the program waits for command After the command line is entered, the program waits for command
parameters to be entered. Since ``list-commands`` does not take any parameters to be entered. Since ``list-commands`` does not take any
arguments, CTRL-D (represented in the above example by "^D") is pressed arguments, Ctrl-D (represented in the above example by "^D")
to indicate end-of-file and terminate the parameter input. The shell indicates end-of-file and terminates the parameter input. The shell
then contacts the CA and prints out the list of available commands then contacts the CA and prints out the list of available commands
returned for the service named ``dhcp4``. returned for the service named ``dhcp4``.
It is envisaged that the Kea shell will be most frequently used in The Kea shell will likely be most frequently used in
scripts; the next example shows a simple scripted execution. It sends scripts; the next example shows a simple scripted execution. It sends
the command "config-write" to the CA (the ``--service`` parameter has not the command ``config-write`` to the CA (the ``--service`` parameter has not
been used), along with the parameters specified in param.json. The been used), along with the parameters specified in param.json. The
result will be stored in result.json. result will be stored in result.json.
@ -119,9 +119,9 @@ The Kea shell requires Python to be installed on the system. It has been
tested with Python 2.7 and various versions of Python 3, up to 3.5. tested with Python 2.7 and various versions of Python 3, up to 3.5.
Since not every Kea deployment uses this feature and there are Since not every Kea deployment uses this feature and there are
deployments that do not have Python, the Kea shell is not enabled by deployments that do not have Python, the Kea shell is not enabled by
default. To use it, specify ``--enable-shell`` when running "configure" default. To use it, specify ``--enable-shell`` when running ``configure``
during the installation of Kea. When building on Debian systems, also during the installation of Kea. When building on Debian systems,
``--with-site-packages=...`` may be useful. ``--with-site-packages=...`` may also be useful.
The Kea shell is intended to serve more as a demonstration of the The Kea shell is intended to serve more as a demonstration of the
RESTful interface's capabilities (and, perhaps, an illustration for RESTful interface's capabilities (and, perhaps, an illustration for
@ -132,27 +132,26 @@ tool.
.. note:: .. note::
When using this tool with basic HTTP authentication please keep in When using this tool with basic HTTP authentication, please keep in
mind that command line arguments are not hidden to local users. mind that command-line arguments are not hidden from local users.
.. _shell-tls: .. _shell-tls:
TLS support TLS Support
=========== ===========
Starting with 1.9.6, kea-shell supports HTTPS connections. The TLS/HTTPS Since Kea 1.9.6, ``kea-shell`` supports HTTPS connections. The TLS/HTTPS
support requires python 3. Additional command line arguments are: support requires Python 3. The additional command-line arguments are:
- ``--ca`` Specifies the file or directory name of the Certification - ``--ca`` specifies the file or directory name of the Certification
Authority. If not specified HTTPS is not used. Authority. If not specified, HTTPS is not used.
- ``--cert`` Specifies the file name of the user end-entity public key - ``--cert`` specifies the file name of the user end-entity public key
certificate. If specified, the file name of the user key must be specified certificate. If specified, the file name of the user key must also be specified.
too.
- ``--key`` Specifies the file name of the user key file. If specified - ``--key`` specifies the file name of the user key file. If specified,
the file name of the user certificate must be specified too. Note the file name of the user certificate must also be specified.
that encrypted key files are not supported. Encrypted key files are not supported.
For example, a basic HTTPS request to get a list of commands could For example, a basic HTTPS request to get a list of commands could
look like this: look like this: