<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Am Mo., 13. Feb. 2023 um 08:44 Uhr schrieb Andrei Borzenkov <<a href="mailto:arvidjaar@gmail.com" target="_blank">arvidjaar@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Mon, Feb 13, 2023 at 10:20 AM Till Maas <<a href="mailto:till@redhat.com" target="_blank">till@redhat.com</a>> wrote:<br>
><br>
><br>
><br>
> Am So., 12. Feb. 2023 um 21:20 Uhr schrieb Thomas Haller <<a href="mailto:thaller@redhat.com" target="_blank">thaller@redhat.com</a>>:<br>
>><br>
>> Hi,<br>
>><br>
>><br>
>> On Sun, 2023-02-12 at 11:00 +0100, John Doe wrote:<br>
>> > We're currently looking into requiring 802-1x for all wired ethernet<br>
>> > connections.<br>
>> > We have a large number of Linux clients. Mostly slim laptops that<br>
>> > don't have an ethernet adapter. These connect to the wired network<br>
>> > using docking stations or usb to ethernet adapters. All Linux clients<br>
>> > are deployed using PXE boot to deploy the company image.<br>
>> > Problem is during the deploy process there's of course only the<br>
>> > adapter used for the deploy availbale on the client. I can get the<br>
>> > 802-1x settings added for this adapter as part of the deploy.<br>
>> > But then I'm out of control. I can't control NetworkManager to setup<br>
>> > 802-1x for the connection created by NetworkManager when the user<br>
>> > connects to a docking station. Yes, unfortunately it creates a new<br>
>> > wired connection.<br>
>><br>
>> you can disable that with "[main].no-auto-default=*" in<br>
>> NetworkManager.conf. Of course, the the user plugs in a new ethernet<br>
>> device and NetworkManager isn't doing anything automatically. Whether<br>
>> that is more desirable is unclear.<br>
><br>
><br>
> It seems to me that having NM ship a default profile with "connection.multi-connect=multiple" that contains the settings that the automatically created profile simplifies the configuration and makes the behavior accessible via the API and reduces the need to configure this with the NetworkManager-config-server subpackage. What would be the downside of removing the auto-default behavior?<br>
><br>
<br>
I am not aware of the possibility to match only wired interfaces (or<br>
for that matter any other kind of interfaces) in connection profiles.<br>
Auto-default is only done for wired interfaces. If I am wrong and such<br>
a possibility exists, it would certainly be preferable to any hard<br>
coded behavior.<br></blockquote><div><br></div><div>Currently, the matching is based on the type, so I guess the default profile would be an ethernet type. It would be better IMHO to have this also as part of the match setting, so a generic profile (which need to become usable again), can match a wired interface.</div><div><br></div><div>Cheers</div><div>Till</div><div><br></div><div><br></div><div> </div></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr">Till Maas<br>He/His/Him<br>Manager, Software Engineering<div>Network Management Team - NetworkManager, Nmstate, Ansible RHEL Networking System Role<br><div><br></div><div>Red Hat GmbH, <a href="https://www.redhat.com/de/global/dach" target="_blank">https://www.redhat.com/de/global/dach</a>, Registered seat: Werner von Siemens Ring 12, 85630 Grasbrunn, Germany </div><div>Commercial register: Amtsgericht Muenchen/Munich, HRB 153243,</div><div>Managing Directors: Ryan Barnhart, Charles Cachera, Michael O'Neill, Amy Ross</div></div></div></div></div>