Commit graph

41 commits

Author SHA1 Message Date
James Hodgkinson ea4d755d7b
chasing weirdness (#1910)
* security headers, fixing error on empty username, handling login without SPN better

* making deno happy

* cleaning up windows build
2023-07-31 10:49:59 +10:00
Firstyear e17dcc0ddb
1788 admin unix socket (#1880) 2023-07-24 10:05:10 +10:00
Firstyear 79ff5e9775
1785 allow sync attr yielding via partial write admin (#1879) 2023-07-19 11:42:53 +10:00
Firstyear 07580cf57a
Improve selinux in tasks daemon (#1847) 2023-07-11 15:39:28 +10:00
Firstyear 8e1e533f40
1792 public oauth clients (#1821) 2023-07-07 18:53:31 +10:00
Matthew Wilks 9f886b85dd
Fix diagram colours (#1815) 2023-07-06 11:53:26 +10:00
James Hodgkinson cc35654388
Converting from tide to axum (#1797)
* Starting to chase down testing
* commenting out unused/inactive endpoints, adding more tests
* clippyism
* making clippy happy v2
* testing when things are not right
* moar checkpoint
* splitting up testkit things a bit
* moving https -> tide
* mad lad be crabbin
* spawning like a frog
* something something different spawning
* woot it works ish
* more server things
* adding version header to requests
* adding kopid_middleware
* well that was supposed to be an hour... four later
* more nonsense
* carrying on with the conversion
* first pass through the conversion is DONE!
* less pub more better
* session storage works better, fixed some paths
* axum-csp version thing
* try a typedheader
* better openssl config things
* updating lockfile
* http2
* actually sending JSON when we say we will!
* just about to do something dumb
* flargl
* more yak shaving
* So many clippy-isms, fixing up a query handler bleep bloop
* So many clippy-isms, fixing up a query handler bleep bloop
* fmt
* all tests pass including basic web logins and nav
* so much clippyism
* stripping out old comments
* fmt
* commenty things
* stripping out tide
* updates
* de-tiding things
* fmt
* adding optional header matching ,thanks @cuberoot74088
* oauth2 stuff to match #1807 but in axum
* CLIPPY IS FINALLY SATED
* moving scim from /v1/scim to /scim
* one day clippy will make sense
* cleanups
* removing sketching middleware
* cleanup, strip a broken test endpoint (routemap), more clippy
* docs fmt
* pulling axum-csp from the wrong cargo.toml
* docs fmt
* fmt fixes
2023-07-05 22:26:39 +10:00
James Hodgkinson 3e4c8f6241
Fixing the kanidmd healthcheck (#1789)
* fixing the health check
* fixing pages while I am here
* flipping options like I flip burgers
* using the config-supplied cert
2023-06-28 19:41:24 +10:00
Sebastiano Tocci 9a3c12a79d
Name change history (#1727) 2023-06-28 18:34:44 +10:00
James Hodgkinson 69dfea3601
Still trying to fix the docs. (#1709)
* docs build/deploy fixes
* let us see if this makes the automerge less bad
2023-06-28 10:34:17 +10:00
James Hodgkinson cc1cc691f3
Started chasing noise, found some code to delete... (#1768)
logging changes:

* Offering auth mechanisms -> debug
* 404's aren't really warnings
* double tombstone message, one goes to debug

other changes:

* CSP changes to allow the bootstrap images to load
* more testing javascriptfile things, I R 
* it's nice to know where things are
* putting non-rust web things in static/ instead of src/
* RequestCredentials::SameOrigin is the default, also adding a utility function to save dupe code. Wow this saved... kilobytes.
* removing commented code, fixing up codespell config
* clippyisms
* wtf, gha
* dee-gloo-ing some things
* adding some ubuntu build test things
* sigh rustwasm/wasm-pack/issues/1138
* more do_request things
* packaging things
* hilarious dev env setup script
* updated script works, all the UI works, including the experimental UI for naughty crabs
* deb package fixes
* fixed some notes
* setup experimental UI tweaks
2023-06-27 11:38:22 +10:00
Matthias Endler 56a2257360
Mention client configuration in tool installation guide (#1756) 2023-06-21 16:48:03 +10:00
Firstyear 4725d625af
Remove scripts that are no longer required (#1759) 2023-06-21 15:52:19 +10:00
Firstyear 8d2565773e
Resolve codespell issues (#1753) 2023-06-20 13:19:21 +10:00
Firstyear 8b331325ae
Add tls generator to main kanidmd (#1743) 2023-06-19 20:51:44 +10:00
Firstyear a77a7aa2a4
20230614 unix account security - move account name deny to unixd (#1733) 2023-06-15 13:24:53 +10:00
Firstyear 0eaab19775
20230608 ldap sync (#1728) 2023-06-13 14:26:50 +10:00
James Hodgkinson 18fe86db26
X-Forwarded-For catcher - improve ip addr parsing (#1725) 2023-06-12 12:14:34 +10:00
greizgh ad3ee88a0c
docs: fix typo in sync concepts (#1715) 2023-06-12 08:03:10 +10:00
Firstyear 6862a529ab
Improve diagnostic and docs of ldap bind requiring posix password (#1702) 2023-06-05 22:08:16 +10:00
James Hodgkinson 2e62a72a09
Documentation root directory 404 (#1681)
Refers to #1680
2023-06-03 19:44:03 +10:00
Martin Weinelt d3fda4210f
Document OpenID connect setup for Miniflux (#1683)
This change adds documentation on how to set up OpenID connect with
Miniflux, a feedreader application.

Miniflux currently does not support PKCE, and I've therefore raised and
upstream issue, that I reference in the book section.
2023-06-03 11:28:24 +10:00
Firstyear a185177a2e
Improve the readme (#1679)
* Improvements to the readme
2023-05-31 17:52:33 +10:00
Kenton Groombridge e3d5f3c8ae
SELinux support for kanidm-unixd-tasks daemon (#1661)
* selinux is an optional feature
* unix_integration: add selinux config option

On SELinux systems, this setting controls whether SELinux relabeling of
newly created home directories should be performed. The default value of
this is on (even on non-SELinux systems), but the tasks daemon will
perform an additional runtime check for SELinux support and will disable
this feature automatically if this check fails.

* unix_integration: wire up home dir selinux labeling
* unix_integration: create equivalence rules in SELinux policy for aliases
* book: document selinux setting
* Add myself to CONTRIBUTORS.md

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
2023-05-30 19:51:12 +10:00
Sebastiano Tocci 655a688ceb
Doc fixes (#1658) 2023-05-26 10:43:50 +10:00
James Hodgkinson 150a064cfa
Identifiable tokens (#1623) 2023-05-25 14:09:23 +10:00
cuberoot74088 8de3641614
Fix use-reset-token command hint (#1639)
* Fix use-reset-token command hint

running

`kanidm person credential create-reset-token` 

prints out information how to do credential reset.

This fixes the provided cli command.

* Update book with use-reset-token

* Update kanidm.rs on use-reset-token
2023-05-17 08:35:24 +10:00
Firstyear 1ddac86df7
Update policy (#1619) 2023-05-11 17:46:22 +10:00
James Hodgkinson 6b0d1bacd8
Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
* Document that you need to tell Nginx or other proxies to use HTTP 1.1 or later - Fixes #1591
* fixing workflows
2023-05-05 21:08:54 +10:00
Firstyear ade1591554
Consolidate unix tools (#1566) 2023-04-24 19:47:52 +10:00
Firstyear 155c93c931
20230330 oauth2 refresh tokens (#1502) 2023-04-20 08:34:21 +10:00
Firstyear ab49c7f21d
Add troubleshooting step for pam home dirs (#1550)
* Add troubleshooting step for pam home dirs
2023-04-18 13:43:08 +10:00
Firstyear c1f62674f5
1496 ldap basedn config (#1500) 2023-03-29 09:34:43 +10:00
Firstyear 26b233acc0
Make examples in ldap chapter consistent (#1495) 2023-03-28 09:10:54 +10:00
Firstyear 4718f2dc6b
1115 priv (reauth, sudo) mode (#1479) 2023-03-27 11:38:09 +10:00
Cale "poptart" Black 27f54c0e36
Fix path-relative links in documentation (#1478)
The documentation for integrations was not path relative and would 404
in all links to documentation. This fixes them by pointing to the parent
directory
2023-03-23 10:07:46 +10:00
James Hodgkinson 6d2b7dd504
Image fixes in the build (#1441)
* Crabs were not waving - Fixes #1440
* codespell fixes
2023-03-13 10:41:16 +10:00
h7x4 56a05223b4
Update book - OAuth2 integration step (#1437)
* Update book - OAuth2 integration step
* Add h7x4 to CONTRIBUTORS.md
2023-03-07 11:24:03 +10:00
Firstyear 7ed3d84f98
Update the dev docs to flow nicer (#1420)
* Update the dev docs to flow nicer

* Update book/src/DEVELOPER_README.md

* Update book/src/DEVELOPER_README.md

* doc formatting

---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 22:14:33 +10:00
Firstyear e33beea89d
1399 cleanup cli docs (#1413)
* Cleanup cli args
* Update book
* Update wasm
* making the CI happy


---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 12:47:23 +10:00
Firstyear 00cca81012
1399 cleanup reorg (#1412) 2023-03-01 13:10:52 +10:00