Security.idl

#include <UserEvent.idl>

module security {

    enumeration IpfwPolicy {
        ACCEPT,                         
        DROP,                           
        REJECT                          
    };

    structure IpfwRule {
        string ipMask;                  
        IpfwPolicy policy;              
    };

    structure IpFw_2_0_0 {
        boolean enabled;                
        IpfwPolicy defaultPolicyIn;     
        IpfwPolicy defaultPolicyOut;    
        vector<IpfwRule> ruleSetIn;     
        vector<IpfwRule> ruleSetOut;    
    };

    enumeration RoleAccessPolicy {
        ALLOW,                          
        DENY                            
    };

    structure RoleAccessRule {
        string           startIp;       
        string           endIp;         
        int              roleId;        
        RoleAccessPolicy policy;        
    };

    structure RoleAccessControl {
        boolean enabled;                
        RoleAccessPolicy defaultPolicy; 
        vector<RoleAccessRule> rules;   
    };

    structure PasswordSettings {
        boolean   enableAging;          
        int       agingInterval;        
        boolean   enableStrongReq;      
        int       minPwLength;          
        int       maxPwLength;          
        boolean   enforceLower;         
        boolean   enforceUpper;         
        boolean   enforceNumeric;       
        boolean   enforceSpecial;       
        int       pwHistoryDepth;       
    };

    structure SSHSettings {
        boolean  allowPasswordAuth;     
        boolean  allowPublicKeyAuth;    
    };
    
    structure RestrictedServiceAgreement {
        boolean enabled;                
        string  banner;                 
    };
    
    valueobject PasswordSettingsChanged extends event.UserEvent {
        PasswordSettings oldSettings;
        PasswordSettings newSettings;
    };
    
    interface Security_3_0_1 {

        constant int ERR_INVALID_VALUE = 1; 

        structure Settings {
            boolean             http2httpsRedir;        
            int                 userBlockTimeout;       
            int                 userMaxFailedLogins;    
            IpFw_2_0_0          ipFw;                   
            IpFw_2_0_0          ipV6Fw;                 
            RoleAccessControl   roleAccessControl;      
            RoleAccessControl   roleAccessControlV6;    
            PasswordSettings    pwSettings;             
            int                 idleTimeout;            
            boolean             singleLogin;            
            SSHSettings         sshSettings;            
        };

        [deprecated]
        Settings getSettings();

        [deprecated]
        int setSettings(in Settings settings);

        boolean getHttpRedirSettings();

        void setHttpRedirSettings(in boolean http2httpsRedir);

        IpFw_2_0_0 getIpFwSettings();

        int setIpFwSettings(in IpFw_2_0_0 ipFw);

        IpFw_2_0_0 getIpV6FwSettings();

        int setIpV6FwSettings(in IpFw_2_0_0 ipV6Fw);

        RoleAccessControl getRoleAccessControlSettings();

        int setRoleAccessControlSettings(in RoleAccessControl settings);

        RoleAccessControl getRoleAccessControlSettingsV6();

        int setRoleAccessControlSettingsV6(in RoleAccessControl settings);

        void getBlockSettings(out int blockTimeout, out int maxFailedLogins);

        int setBlockSettings(in int blockTimeout, in int maxFailedLogins);

        PasswordSettings getPwSettings();

        int setPwSettings(in PasswordSettings pwSettings);

        int getIdleTimeoutSettings();

        int setIdleTimeoutSettings(in int idleTimeout);

        boolean getSingleLoginLimitation();

        void setSingleLoginLimitation(in boolean singleLogin);
        
        SSHSettings getSSHSettings();

        void setSSHSettings(in SSHSettings settings);

        RestrictedServiceAgreement getRestrictedServiceAgreement();

        int setRestrictedServiceAgreement(in RestrictedServiceAgreement settings);

        vector<string> getSupportedFrontPanelPrivileges();

        vector<string> getFrontPanelPrivileges();

        int setFrontPanelPrivileges(in vector<string> privileges);

    };

}