mirror of
https://gitlab.isc.org/isc-projects/kea
synced 2025-08-30 13:37:55 +00:00
[#3916] add warning on CA startup as being deprecated
This commit is contained in:
@@ -39,9 +39,9 @@ The CA processes received commands according to the following algorithm:
|
||||
|
||||
.. note::
|
||||
|
||||
The CA will be deprecated by a future Kea release: its function has
|
||||
been moved to Kea servers since release 2.7.2, see the section about
|
||||
migration from CA (:ref:`ctrl-channel-migration`).
|
||||
The CA is deprecated: its function has been moved to Kea servers since
|
||||
release 2.7.2, see the section about migration from CA
|
||||
(:ref:`ctrl-channel-migration`).
|
||||
|
||||
.. _agent-configuration:
|
||||
|
||||
|
@@ -1,4 +1,4 @@
|
||||
// File created from src/bin/agent/ca_messages.mes
|
||||
// File created from ../src/bin/agent/ca_messages.mes
|
||||
|
||||
#include <cstddef>
|
||||
#include <log/message_types.h>
|
||||
@@ -21,6 +21,7 @@ extern const isc::log::MessageID CTRL_AGENT_HTTPS_SERVICE_UPDATED = "CTRL_AGENT_
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED = "CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED";
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_STARTED = "CTRL_AGENT_HTTP_SERVICE_STARTED";
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_UPDATED = "CTRL_AGENT_HTTP_SERVICE_UPDATED";
|
||||
extern const isc::log::MessageID CTRL_AGENT_IS_DEPRECATED = "CTRL_AGENT_IS_DEPRECATED";
|
||||
extern const isc::log::MessageID CTRL_AGENT_RUN_EXIT = "CTRL_AGENT_RUN_EXIT";
|
||||
extern const isc::log::MessageID CTRL_AGENT_SECURITY_CHECKS_DISABLED = "CTRL_AGENT_SECURITY_CHECKS_DISABLED";
|
||||
extern const isc::log::MessageID CTRL_AGENT_STARTED = "CTRL_AGENT_STARTED";
|
||||
@@ -45,6 +46,7 @@ const char* values[] = {
|
||||
"CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED", "failed to reused HTTP service bound to address: %1 port: %2",
|
||||
"CTRL_AGENT_HTTP_SERVICE_STARTED", "HTTP service bound to address: %1 port: %2",
|
||||
"CTRL_AGENT_HTTP_SERVICE_UPDATED", "reused HTTP service bound to address: %1 port: %2",
|
||||
"CTRL_AGENT_IS_DEPRECATED", "Kea Control Agent is deprecated. Its function has been moved to Kea servers.",
|
||||
"CTRL_AGENT_RUN_EXIT", "application is exiting the event loop",
|
||||
"CTRL_AGENT_SECURITY_CHECKS_DISABLED", "Invoked with command line option -X, Security checks are disabled!!",
|
||||
"CTRL_AGENT_STARTED", "Kea Control Agent version %1 started",
|
||||
|
@@ -1,4 +1,4 @@
|
||||
// File created from src/bin/agent/ca_messages.mes
|
||||
// File created from ../src/bin/agent/ca_messages.mes
|
||||
|
||||
#ifndef CA_MESSAGES_H
|
||||
#define CA_MESSAGES_H
|
||||
@@ -22,6 +22,7 @@ extern const isc::log::MessageID CTRL_AGENT_HTTPS_SERVICE_UPDATED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_STARTED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_UPDATED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_IS_DEPRECATED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_RUN_EXIT;
|
||||
extern const isc::log::MessageID CTRL_AGENT_SECURITY_CHECKS_DISABLED;
|
||||
extern const isc::log::MessageID CTRL_AGENT_STARTED;
|
||||
|
@@ -82,9 +82,13 @@ This informational message indicates that the Control Agent has
|
||||
processed all configuration information and is ready to begin processing.
|
||||
The version is also printed.
|
||||
|
||||
% CTRL_AGENT_IS_DEPRECATED Kea Control Agent is deprecated. Its function has been moved to Kea servers.
|
||||
This warning message indicates that the Control Agent has been deprecated.
|
||||
All its function has been moved to Kea servers.
|
||||
|
||||
% CTRL_AGENT_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
|
||||
This warning is emitted when internal security checks normally
|
||||
performed by kea-ctrl-agent have been disabled via command line opion '-X'.
|
||||
performed by kea-ctrl-agent have been disabled via command line option '-X'.
|
||||
This means the server is not enforcing restrictions on resource
|
||||
paths or permissions. This mode of operation may expose your
|
||||
environment to security vulnerabilities and should only be used
|
||||
|
@@ -44,6 +44,8 @@ void
|
||||
CtrlAgentProcess::run() {
|
||||
LOG_INFO(agent_logger, CTRL_AGENT_STARTED).arg(VERSION);
|
||||
|
||||
LOG_WARN(agent_logger, CTRL_AGENT_IS_DEPRECATED);
|
||||
|
||||
if (!PathChecker::shouldEnforceSecurity()) {
|
||||
LOG_WARN(agent_logger, CTRL_AGENT_SECURITY_CHECKS_DISABLED);
|
||||
}
|
||||
|
@@ -1185,7 +1185,7 @@ expected: the erroneous response is dropped, the discover query is displayed.
|
||||
|
||||
% DHCP4_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
|
||||
This warning is emitted when internal security checks normally
|
||||
performed by kea-dhcp4 have been disabled via command line opion '-X'.
|
||||
performed by kea-dhcp4 have been disabled via command line option '-X'.
|
||||
This means the server is not enforcing restrictions on resource
|
||||
paths or permissions. This mode of operation may expose your
|
||||
environment to security vulnerabilities and should only be used
|
||||
|
@@ -1162,7 +1162,7 @@ new server id.
|
||||
|
||||
% DHCP6_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
|
||||
This warning is emitted when internal security checks normally
|
||||
performed by kea-dhcp6 have been disabled via command line opion '-X'.
|
||||
performed by kea-dhcp6 have been disabled via command line option '-X'.
|
||||
This means the server is not enforcing restrictions on resource
|
||||
paths or permissions. This mode of operation may expose your
|
||||
environment to security vulnerabilities and should only be used
|
||||
|
@@ -450,7 +450,7 @@ response from a DNS server.
|
||||
|
||||
% DHCP_DDNS_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
|
||||
This warning is emitted when internal security checks normally
|
||||
performed by kea-dhcp-ddns have been disabled via command line opion '-X'.
|
||||
performed by kea-dhcp-ddns have been disabled via command line option '-X'.
|
||||
This means the server is not enforcing restrictions on resource
|
||||
paths or permissions. This mode of operation may expose your
|
||||
environment to security vulnerabilities and should only be used
|
||||
|
Reference in New Issue
Block a user