mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-23 20:47:01 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
kanidm/kanidmd/Cargo.toml

62 lines
992 B
TOML
Raw Normal View History

3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
# cargo-features = ["default-run"]
[package]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidm"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
version = "0.1.0"
authors = ["William Brown <william@blackhats.net.au>"]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
# default-run = "kanidm_core"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
edition = "2018"
[lib]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidm"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
path = "src/lib/lib.rs"
[[bin]]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
name = "kanidmd"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
path = "src/server/main.rs"
[dependencies]
Complete the rename of the project from rsidm to kanidm
2019-09-14 15:44:08 +02:00
kanidm_proto = { path = "../kanidm_proto" }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
actix = "0.7"
65 cli options (#85) Add support for command line options to the server. This supports server sid regeneration, persistence, address binding, tls configuration and more. This also improves TLS support in the client tools for CA cert addition to queries.
2019-09-14 10:21:41 +02:00
actix-web = { version = "0.7", features = ["ssl"] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
bytes = "0.4"
log = "0.4"
env_logger = "0.6"
rand = "0.6"
chrono = "0.4"
cookie = "0.11"
regex = "1"
lazy_static = "1.2.0"
lru = "0.1"
tokio = "0.1"
futures = "0.1"
60 authsession gc (#80) Implements #60 authsession garbage collection. If we assume that an authsession is around 1024 bytes (this assumes a 16 char name + groups + claims) then this means that in 1Gb of ram we can store about 1 million in progress auth attempts. Obviously, we don't want infinite memory growth, but we can't use an LRU cache due to the future desire to use concurrent trees. So instead we prune the tree based on a timeout when we start and auth operation. Auth session id's are generated from a timestamp similar to how we'll generate replication csn's. We can then apply a diff that will split all items lower than the csn/sid and remove them from future consideration. We set the default timeout to 5 minutes. This means that assuming 10,000 auths per second, we would require 3GB of ram to process these sessions before they are expired. We expect any deployment with such large loadings can affort 3Gb of ram :)
2019-09-06 05:04:58 +02:00
uuid = { version = "0.7", features = ["serde", "v4" ] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
serde = "1.0"
serde_cbor = "0.10"
serde_json = "1.0"
serde_derive = "1.0"
Implement #8 indexing - today this is only eq and pres indexes, but (#102) it does handle the cases correctly for test threshold, andnot, or, and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
rusqlite = { version = "0.20", features = ["backup"] }
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
r2d2 = "0.8"
Implement #8 indexing - today this is only eq and pres indexes, but (#102) it does handle the cases correctly for test threshold, andnot, or, and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
r2d2_sqlite = "0.12"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
structopt = { version = "0.2", default-features = false }
time = "0.1"
concread = "0.1"
openssl = "0.10"
126 ssh key features (#146) Implemnt SSH public key management This implements ssh public key distribution for kanidm, enforcing that valid ssh public keys are placed into the ssh_publickey attribute, adds management tools so that accounts can self-service manage their keys, and finally adds an authorized keys command helper suitable for sshd_config to utilise.
2019-11-16 05:40:45 +01:00
sshkeys = "0.1"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
rpassword = "0.4"
65 cli options (#85) Add support for command line options to the server. This supports server sid regeneration, persistence, address binding, tls configuration and more. This also improves TLS support in the client tools for CA cert addition to queries.
2019-09-14 10:21:41 +02:00
num_cpus = "1.10"
3 authentication (#79) This adds support for authentication and credential storage to the server. It also adds account recovery and options for integration test fixtures, refactors to make the client library easier to manage, and support clean seperation of the proto vs lib.
2019-09-04 03:06:37 +02:00
Implement #8 indexing - today this is only eq and pres indexes, but (#102) it does handle the cases correctly for test threshold, andnot, or, and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
idlset = "0.1"
29 password badlisting (#158) Implements #29 password badlist and quality checking. This checks all new passwords are at least length 10, pass zxcvbn and are not container in a badlist. The current badlist is a preprocessed content of rockyou from seclists, but later wwe'll update this to the top 10million badlist which when processed is about 70k entries..
2019-12-12 23:49:32 +01:00
zxcvbn = "2.0"
Implement #8 indexing - today this is only eq and pres indexes, but (#102) it does handle the cases correctly for test threshold, andnot, or, and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
Reference in a new issue Copy permalink