NetopeerGUI
NetopeerGUI is web graphical user interface for configuring devices based on protocol NETCONF. For more info visit Public web section about Netopeer.
NetopeerGUI is developed as Symfony2 app.
Important: This is new version using Libnetconf2 and NetopeerGUID. It might contain some new bugs, especially in UI, but we are trying to improve all the stuff. You can use older version v1.0, which is working with libnetconf1 and mod_netconf, if you need.
NetopeerGUI demo installation - using Vagrant on CentOS7
If you do not have a vagrant box for CentOS7 box yet, use:
vagrant box add centos/7 --provider=virtualbox
Clone this repository and run following:
cd install
vagrant up
vagrant ssh
sudo su
sed -i 's/SELINUX=\(enforcing\|permissive\)/SELINUX=disabled/g' /etc/selinux/config
exit; exit
# due to SElinux settings
vagrant reload
vagrant ssh
sudo su
cd /var/www/netopeergui
php composer.phar install
./install-no-composer.sh
service httpd restart
service netopeerguid restart
After that, you can run NetopeerGUI on local port :2280, so open http://localhost:2280/netopeergui Username and password is admin:pass. Now, you can connect to any NETCONF device.
TODO: Removing problems with SElinux are in progress.
You can use Vagrant for Ubuntu too
Clone this repository and run following:
cd install/ubuntu
vagrant up
Installation
Requirements:
- all dependencies will be checked during installation script
- https://github.com/CESNET/libnetconf2 (will be installed in make install)
- https://github.com/CESNET/netopeerguid (will be installed in make install)
To install, run the following commands:
# go to apache web directory
cd /var/www
git clone https://github.com/cesnet/netopeer-gui.git
cd netopeer-gui
# build from predefined scripts
cd install
./centos7/install.sh
# or build manually
git submodule update --init --recursive
cd install
./bootstrap.sh
# for change some variables, look at ./configure --help
./configure
su # installation must be done as root
make install
cd ../
# check server configuration and repair errors
php app/check.php
php ./composer.phar install
Underhood - install folder
Install folder includes necesarry files for communicating with NETCONF devices. For netopeerguid update follow instructions on netopeerguid site.
Configure script check all dependencies and prepares all resources for install.
Make install will also copy netopeergui.conf into /etc/httpd/conf.d/ folder. Change this manually, if you need.
Note:
For a more detailed explanation of symfony2 installation, see the Installation chapter of the Symfony Documentation.
First steps
- Open site http://localhost/netopeergui
- Login using admin, pass (this credentials were created during installation)
- Connect to the device using SSH credentials
- Click Configure device
Setting custom user
For setting new user or edit current, use command line script. This script will create or update user in DB. There is no "GUI" for user settings.
Create user
su
php app/console app:user [--action=add] --user=username --pass=password
Remove user
su
php app/console app:user --action=add --user=username
Change password
su
php app/console app:user --action=edit --user=username --pass=newpass [--new-username=newusername]
Using SAML
NetopeerGUI has implemented login using SAML and SamlSPBundle. For configuration, you must edit /app/config/security.yml file. Find section
saml:
pattern: ^/(?!login_check)
anonymous: true
aerial_ship_saml_sp:
login_path: /saml/sp/login
check_path: /saml/sp/acs
logout_path: /saml/sp/logout
failure_path: /saml/sp/failure
metadata_path: /saml/sp/FederationMetadata.xml
discovery_path: /saml/sp/discovery
local_logout_path: /logout/
provider: saml_user_provider
create_user_if_not_exists: true
services:
openidp:
idp:
file: "@FITNetopeerBundle/Resources/saml/openidp.metadata.xml"
sp:
config:
# required
entity_id: netopeergui_sauvignon
# if different then url being used in request
# used for construction of assertion consumer and logout urls in SP entity descriptor
base_url: https://sauvignon.liberouter.org/netopeergui
signing:
# must implement SPSigningProviderInterface
# id: my.signing.provider.service.id
# or use built in SPSigningProviderFile with specific certificate and key files
cert_file: "@FITNetopeerBundle/Resources/saml/server.pem"
key_file: "@FITNetopeerBundle/Resources/saml/server.key"
key_pass: ""
meta:
# must implement SpMetaProviderInterface
# id: my.sp.provider.service.id
# or use builtin SpMetaConfigProvider
# any valid saml name id format or shortcuts: persistent or transient
name_id_format: persistent
binding:
# any saml binding or shortcuts: post or redirect
authn_request: redirect
logout_request: post
and edit following lines:
file: "@FITNetopeerBundle/Resources/saml/openidp.metadata.xml"
entity_id: netopeergui_sauvignon
base_url: https://sauvignon.liberouter.org/netopeergui
Configuration notes are described in SamlSPBundle configuration doc.
This example service uses https://openidp.feide.no user provider. For register this your netopeerGUI, generate FederationMetadata.xml file (located in /saml/sp/FederationMetadata.xml) and upload it into OpenIDP.