AAA

Overview

AAA (Authentication, Authorization, and Accounting) are services that help improve the security posture of an OpenDaylight deployment. By default, the majority of OpenDaylight’s northbound APIs (and all RESTCONF APIs) are protected by AAA after installing the +odl-restconf+ feature.

Behavior/Feature Changes

We have switched to Galois/Counter in AAA-267 to be default mode of operation algorithm for symmetric keys.

New Features

• AAA-267

Deprecated and Removed Features

There are no deprecated or removed features.

Resolved Issues

The following table lists the issues resolved in this release.

Issues resolved in versions 0.21.0 through 0.21.0 (JIRA)

Type	Key	Summary	Resolution	Fix Version(s)
	AAA-287	aaa-app-config.xml does not limit access to AAA URLs	Done	0.20.6, 0.21.0
	AAA-286	odl-aaa-shiro is causing commons-logging refreshes	Done	0.19.8, 0.20.4, 0.21.0
	AAA-284	Bump H2 to 2.3.232	Done	0.21.0

Known Issues

The following table lists the known issues that exist in this release.