Okay, the encrypted passwords are re-read from /var/lib/snmp/snmpd.conf and set on the CLI. The truncation originats from that file.

Ah, yes. In the past the Perl scripts re-read the newly generated configuration and altered the running configuration using /opt/vyatta/sbin/my_set or /opt/vyatta/sbin/my_delete. That's indeed missing. Thanks for the commands and I'll fix it this evening.

@Line2 thanks for the feedback. Could you tell me how you generated that encrypted key so I can retest this evening and bugfix this?

A first implementation is merged

Tested using:

Working again with 1.2.0-rolling+201806020337

@syncer this is implemented and working with a patched xl2tpd (T605).

This one should be closed and reopened if required @syncer

Good catch. The proper solution should be:

As soon as someone sets set system ntp allow-clients address 172.16.0.0/12 we act as NTP server for this network,too. It's a bit odd that this node is under system but ... it is as it is.

@syncer we do offer NTP as service (unfortunately it's unter the system tree instead of service.

any updates on this?

looks like a missing check on commit. Will add this case to the new Python script.

Ah, there it is! Thanks!

Implemented in https://github.com/c-po/vyos-1x/commit/b871546cdde982c65e243ec57610edecddb4701b

Even after changing the configuration to

snmp {
    listen-address 172.16.37.241 {
    }
    v3 {
        engineid 0xff42
        user test {
            auth {
                encrypted-key 0x63119b4e19ce4d69c7ad678ffe110047
                type sha
            }
            engineid 0xff42
            mode rw
            privacy {
                encrypted-key 0x63119b4e19ce4d69c7ad678ffe110047
                type aes
            }
        }
    }
}

Commands will be:

@syncer this seems to be the option, plese correct if wrong.

fixed by @higebu in VyOS 1.2.0-rolling+201805171657

... reverting ...

https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s07.html states:

Maybe I got something wrong but my Test indicated by upgrading from VyOS 1.1.7 to 1.2.x worked. the service ssh allow-root config line just vanished and remote login worked like a charm. I always tried to be backwards compatible at least with VyOS 1.1.7.

Proposal for command:

Merged as discussed via slack

It's a general problem with the new Python scripts. Somehow the lib is injured :/ @dmbaturin