Commit graph

91 commits

Author SHA1 Message Date
James Hodgkinson d2ea936b16
Domain Display Name (#872) 2022-07-07 13:03:08 +10:00
James Hodgkinson 61e32bce4f
docs updates and UI cleanup (#874)
* showing the queried user when running account validity show
* updating account delete
* tweaking account and radius delete to show new message formats
* renaming credential reset token ui
* updating documentation for functionality
* added notes to dev readme on how to install/build mdbook and updated docs
2022-07-05 11:38:25 +10:00
Leoyzen 33caec05d2
fix account_and_group docs (#895)
fix typo "group2" to "group_2"
2022-07-05 09:04:27 +10:00
James Hodgkinson 57f8fa9d2b
Update to account recovery UX (#859)
* JSON-formatted output for recover_account, moved a bunch of logs to debug instead of info
* updated documentation
2022-06-26 18:02:16 +10:00
James Hodgkinson 805ac2dd16
Python module and rewritten RADIUS integration (#826)
* added python kanidm module
* rewrote RADIUS integration
* updated the documentation
* updating github actions to run more often
* BLEEP BLOOP ASYNCIO IS GR8
* adding config to makefile to run pykanidm tests

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Firstyear <william@blackhats.net.au>
2022-06-20 20:16:55 +10:00
Thomas Sanchez bf53e4aff8
Add documentation for vouch-proxy integration (ref #600) (#823) 2022-06-15 09:06:13 +10:00
Mateus Amin 8078925e6f
K8s Ingress Example (#805)
* Created kanidm_book/src/examples/k8s_ingress_example.md

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-06-06 09:11:29 +10:00
James Hodgkinson 06eeead51d
updates the oauth2 URL, updating book layout (#807) 2022-06-05 15:08:02 +10:00
Carla Schroder 55d76cd7dc
minor corrections, line breaks, capitalization, expand abbreviations (#802)
* minor corrections, line breaks, capitalization, expand abbreviations
2022-06-03 08:05:01 +10:00
Carla Schroder e5b37dfe20
Kanidm book review 6 (#800)
* change capitalization on section headings, and some terminology, small wording tweaks
* more small corrections, line breaks, capitalization, small wording changes
* minor corrections, punctuation, wording
* NAS = Network Access Server
2022-06-02 11:09:02 +10:00
James Hodgkinson 7d27612174
Windows automagical buildingtons (#798)
* windows build automation
* making fmt happy, fixing windows-related bug
* disabled cargo_incremental when using `sccache`, added build options ARG to Dockerfile, limit docker build to one job
2022-05-31 14:13:21 +10:00
Carla Schroder 547e283318
continuing review of Kanidm book (#775) 2022-05-27 09:07:56 +10:00
Carla Schroder 8abd5b2052
Minor corrections to case, punctuation, spelling (#789) 2022-05-27 09:07:15 +10:00
Carla Schroder e0ebd322dd
some small corrections to accounts_and_groups.md, administrivia.md (#776) 2022-05-26 14:57:01 +10:00
Carla Schroder 70db0630ea
More small corrections: line breaks, capitalization, typos (#778) 2022-05-26 07:38:28 +10:00
Firstyear c26ccb9b38
Improve token readability, Fix issue with spn format (#773) 2022-05-24 13:49:51 +10:00
Kellin f3a73426c5
Fix typos of kanidm in the documentation (#766)
- Fix volume mount name typo in the server configuration and
  administrivia documentation pages
- Fix typo in link from PAM and nsswitch documentation

Signed-off-by: Kellin <kellin@retromud.org>
2022-05-23 11:58:27 +10:00
Carla Schroder 6114d59158
First review of the Kanidm Administration book (#760) 2022-05-18 11:22:56 +10:00
matthew-salerno 28d31234d0
Update docs with some personal experience (#750) 2022-05-10 10:52:53 +10:00
Firstyear 3a07842d56
20220501 fix logging (#730) 2022-05-01 13:34:19 +10:00
Euan Kemp 9427d27141
Add a new ACP and group allowing self-service mail updates (#672)
* Add a new ACP and group allowing self-service mail updates

This adds a new "idm_people_self_write_mail_priv" group which follows
the existing canned group+acp format closely.

This also adds a test for the functionality

See the discussion in #648 for a bit more background

* Limit the self-write ACP to targets with the "account" class

Per feedback on #672, it's better to limit these APIs specifically to
accounts.

* Fix up

Co-authored-by: Firstyear <william.brown@suse.com>
2022-04-13 20:45:45 +10:00
Euan Kemp 0c3ce226cf
Add 'account person set' command (#667)
* Add 'account person set' command

This command allows a user to modify, say, their legal name in a
self-service fashion.

This wasn't possible before by default since the 'extend' operation
required additional ACPs in order to operate which not every user would
have.

The new "person set" api is compatible with the default self_write ACP,
and so allows self-service modification.

* Add a short section on people attributes to the book
2022-04-02 13:24:07 +10:00
Firstyear 5cb429904d
Improve description of how the suse pam files work (#663) 2022-03-30 10:34:56 +10:00
Firstyear bd41ef8f91
Add design doc, revive the domain wide enc token (#649)
* Add design doc, revive the domain wide enc token, use jwt from our lib instead of bundy, update docs
2022-03-14 17:29:04 +10:00
James Hodgkinson 58fb559262
Docs build cleanup for #646 (#647)
* moving docs build to makefile
2022-03-10 08:55:44 +10:00
Firstyear 840024f006
Change how domain names are handled in our configuration. (#639) 2022-02-15 16:17:43 +10:00
Firstyear a0ef768fc8
Correct issuer to match url of connected client (#635) 2022-01-27 12:19:03 +10:00
Firstyear c6c564cebb
Finalise email changes for oidc (#629) 2021-12-25 09:47:14 +10:00
James Hodgkinson 615ddee75f
adding notes about OIDCRemoteUserClaim to the oauth2 book chapter (#621) 2021-11-30 10:34:54 +10:00
James Hodgkinson b7837f3aae
add logging for oauth2 errors (#620) 2021-11-25 14:55:12 +10:00
Firstyear fad0dd86e0
Improve book and errors related to domain name and origin mismatch (#617) 2021-11-25 08:37:50 +10:00
Firstyear 0f4189a57e
278 603 OIDC implementation (#608) 2021-11-21 16:41:49 +10:00
Firstyear 761bed0569
20211010 rfc7662 token introspect (#607) 2021-10-26 13:00:02 +10:00
James Hodgkinson 4ef064e4ed
updating docs re oidc (#606) 2021-10-22 08:34:24 +10:00
Firstyear 8e3525c736
Fix state parameter to be string (#602) 2021-10-20 14:00:14 +10:00
James Hodgkinson bfea182a89
fixes #594 - updates pam module (#596) 2021-10-17 21:19:15 +10:00
William Brown b51d32d623 Minor book change 2021-10-17 08:21:55 +10:00
Firstyear c62b39c338
509 oauth2 scope mapping (#586) 2021-10-07 18:31:48 +10:00
James Hodgkinson ea8801f23d
Improving logging and docs around unixd/PAM/NSS (#577) 2021-09-06 07:48:37 +10:00
James Hodgkinson bc31d42f22
fixes #571 (#572) 2021-08-22 16:05:28 +10:00
Firstyear aca6b23d54
Update SUMMARY.md
Fix server_configuration.md
2021-08-16 10:22:49 +10:00
cuberoot74088 b4f99c8e7a
Implement Online Backups (#25) (#536) 2021-07-31 17:13:46 +10:00
James Hodgkinson a621cbc6a7
Fixing #521 - Documenting the server role (#535) 2021-07-24 15:00:08 +10:00
James Hodgkinson 6ff74c976e
Auto-publishing the book and rustdoc. (#534) 2021-07-24 11:12:35 +10:00
cuberoot74088 ff952cbed2
Fix docu for generate password (#526) 2021-07-15 08:23:11 +10:00
Firstyear e1f4a57ddc
Update repo locations and versions in prep for release (#492) 2021-06-25 18:38:45 +10:00
Firstyear e209904d53
Add workaround for podman subid issue (#491) 2021-06-25 17:08:20 +10:00
cuberoot74088 f3554d80cf
Set default shell to bin/sh (#488) 2021-06-19 15:35:11 +10:00
Firstyear 033b977906
Add ldap vattr mapping (#459) 2021-05-29 12:50:16 +10:00
Firstyear e8b1089bfd
414 clear stale credentials (#447) 2021-05-26 16:11:00 +10:00