Commit graph

37 commits

Author SHA1 Message Date
Georg dd1d148543
Repair systemd reload notifications ()
In order for the RELOAD and the subsequent READY notifications to be
correctly processed, the RELOAD notification must be accompanied with a
MONOTONIC_USEC one.
2025-01-17 15:17:58 +10:00
James Hodgkinson b6f63f3605
kanidm-unixd example config enfixening ()
* kanidm-unixd default config via PPA problem with version 2 on debian bookworm
Fixes 

* fix(coverage): moving to using cargo-tarpaulin

* kanidm-unixd default config via PPA problem with version 2 on debian bookworm
Fixes 
2024-12-21 15:17:12 +10:00
James Hodgkinson 4f53bce3d3
Devcontainertainertainer () 2024-12-02 11:02:56 +00:00
Firstyear 2e6d940691
Remove WASM ()
liberal party took over, more cuts
2024-10-26 17:19:13 +10:00
Jinna Kiisuo 03645c8bf2
Improve deb packaging, add aarch64 ()
* feat: Rebuild the deb packaging flow
fix: Add more sudo, GHA likes sudo
fix: Give build_debs.sh only the triplet argument
fix: Work around more GHA weirdness in apt sources
Drop crossbuild as it was only used by debian packaging
docs: Update book and other docs for packaging flow
feat: package kanidm_tools aka kanidm cli
docs: Update packaging docs for latest process and clarity
fix: use full triple in sdynlib variants
fix: Correct kanidm.pam asset placement
fix: Give pam & nss modules a description so the debs get it
fix: Work around wonky libssl3 naming in Ubuntu 24.04
fix: Place kanidm bin correctly :3
feat: Pin all blame on @yaleman :3
WIP: Swap out the submodule reference. Still not the final one though.
refactor: Switch kanidm-pam & kanidm-nss to mandatory deps
While in theory unixd will start and run without them, it also won't do
anything useful.
fix: explicit depends for nss & pam libs without versions
We build the debs on the ubuntu24.04 GHA runner so automatic pins
versions that are too new for 22.04. Ideally we'd run cargo-deb also on
the target images but that'll have to be a future improvement.
* refactor: Switch nss_kanidm & pam_kanidm package naming closer to debian guidance
* feat: Attempt enabling unixd by default with secure defaults
* fix: Relax config permissions so the kanidm user can read
Also, update postinst config instructions
2024-10-15 02:27:48 +00:00
James Hodgkinson c8b3b6214c
Cache buster buster () 2024-10-15 01:54:46 +00:00
James Hodgkinson 38b0a6f8af
Ubuntu/Debian buildy scripty tweaky things ()
* updating container builder
* tweaking dependency script
* closes  - updates the book for install
2024-07-25 01:10:55 +00:00
Sebastiano Tocci 772c6ca9f7
added orca docker file, make target and credential reset capabilities ()
* added orca docker file and make target
* made clippy happy
* fixed Orca dockerfile
* Update tools/orca/src/profile.rs
* trying to fix debian builds

---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2024-07-04 00:38:10 +00:00
James Hodgkinson 3c01a96348
Better WebAuthn and other error responses () 2024-06-05 09:57:16 +10:00
James Hodgkinson dbf59474bb
OpenAPI schema fixes ()
* OpenAPI schema fixes
* Adding OpenAPI schema checks to the release script
2024-03-01 16:57:36 +10:00
James Hodgkinson 4096b8f02d
Changing to allow startup without a config file ()
* Changing to allow startup without a config file, using environment variables
2024-02-27 15:40:00 +10:00
Firstyear adb575947f
Adjust output of claim maps for better parsing ()
* Adjust output of claim maps for better parsing
* Update python tests for OAuth2 bits
* fixing workflows for container builds

---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2024-02-26 13:33:32 +10:00
James Hodgkinson 5794cc5217
Adding duplicate-finder script ()
* Adding duplicate-finder script
* removing unused constant and updated doctstring
2024-02-20 08:39:16 +00:00
James Hodgkinson 097db70c3d
prctl compile-time fixes, also chasing lints ()
* fixing up error handling for prctl calls
* minor clippy lintypoos
* making clippy happier
* clippizing a test
* more clippy-calming
* adding tpm-udev to ubuntu flows for testing
* rebuilt wasm
* moving from rg to grep because someone doesn't like nice things
* such clippy like wow
* clippy config to the rescue
2024-02-20 18:21:33 +10:00
James Hodgkinson 7394ac86cb
fixing the test script () 2024-02-16 23:54:07 +00:00
James Hodgkinson 48f33fb8c9
when the HTTPS server fails, handle that gracefully () 2024-02-16 08:30:43 +00:00
James Hodgkinson c8bd1739f9
PyKanidm updates and testing ()
* otel can eprintln kthx

* started python integration tests, features

* more tests more things

* adding heaps more things

* updating docs

* fixing python test

* fixing errors, updating integration test

* Add models for OAuth2, Person, ServiceAccount and add missing endpoints

* Alias Group to GroupInfo to keep it retrocompatible

* Fixed issues from review

* adding oauth2rs_get_basic_secret

* adding oauth2rs_get_basic_secret

* Fixed mypy issues

* adding more error logs

* updating test scripts and configs

* fixing tests and validating things

* more errors

---------

Co-authored-by: Dogeek <simon.bordeyne@gmail.com>
2024-01-31 03:27:43 +00:00
James Hodgkinson cf87993a1c
Debian build fixes (also the book) ()
* betterer errors on things
* Adding tpm-udev as a dependency of kanidm-unixd
* fixing makefile arch error
* adding jq to deb build deps
* adding kanidm deb to autobuild
* making the debian build script more resilient
2024-01-16 01:30:52 +00:00
James Hodgkinson 0e50451715
fixing up the integration script () 2023-12-28 08:46:47 +10:00
James Hodgkinson 60e5935faa
Moving daemon tracing to OpenTelemetry ()
* sally forth into the great otel unknown
* make the build env identification slightly more durable
* docs updates
* wasm recompile
2023-11-09 05:15:12 +00:00
James Hodgkinson 0174283115
Docs fixes for ()
* docs touchups
2023-11-07 02:09:52 +00:00
James Hodgkinson 12f1de8358
Update OpenAPI schema gen to actually... be kinda sorta valid. ()
* updating lockfile

* OpenAPI validation issues
Fixes 

* clippy sez no

* adding another validator, more specs
2023-11-07 11:35:17 +10:00
James Hodgkinson 85c2b0fd82
Problems with bash completion autocomplete ()
refers 
2023-11-02 10:55:32 +10:00
James Hodgkinson 3bfc347c53
CLI integration test beginnings ()
* more integration test things, using assert_cmd to test the CLI end-to-end
* packagez
* making clippy happy
* making deno happy
2023-10-30 06:10:54 +00:00
James Hodgkinson e02328ae8b
Splitting the SPAs ()
* doing some work for enumerating how the accounts work together
* fixing up build scripts and removing extra things
* making JavaScript as_tag use the struct field names
* making shared.js a module, removing wasmloader.js
* don't compress compressed things
2023-10-27 06:03:58 +00:00
James Hodgkinson eead47aec8
Fixing dependabot and its mistakes ()
* updating to utoipa 4.0.0
* hi dependabot
2023-10-16 05:15:53 +00:00
James Hodgkinson 034ddd624a
Can't build kanidmd using the Ubuntu docker builder scripts - cleanup () 2023-09-27 14:08:20 +10:00
James Hodgkinson d5c1f9de6a
sqlite3 doesn't need to be installed on dev machines ()
* Dependencies - sqlite3 dev no longer needs to be installed - Fixes 
* setting workspace-level features for rusqlite
2023-09-12 09:54:54 +10:00
James Hodgkinson 4b7563adc8
CLI and test things ()
* testing things actually run is handy
* adding build mode to scripts
* uh, so I started messing with handling exit codes...
2023-09-09 09:35:59 +10:00
James Hodgkinson 83f189fed3
error handling and web server logging fixes ()
* Fixing the setup_dev_environment script
* clippy calming
* handle_internalunixusertokenread throwing 500's without context
Fixes 
2023-08-14 20:47:49 +10:00
James Hodgkinson 9246293922
Fighting with zypper, tagging our images ()
* fighting weird build issues

* labels are better outside

* ugh that stupid linter

* why do you always lint on me

* neat

* adding comments
2023-08-14 10:06:53 +10:00
James Hodgkinson cc35654388
Converting from tide to axum ()
* Starting to chase down testing
* commenting out unused/inactive endpoints, adding more tests
* clippyism
* making clippy happy v2
* testing when things are not right
* moar checkpoint
* splitting up testkit things a bit
* moving https -> tide
* mad lad be crabbin
* spawning like a frog
* something something different spawning
* woot it works ish
* more server things
* adding version header to requests
* adding kopid_middleware
* well that was supposed to be an hour... four later
* more nonsense
* carrying on with the conversion
* first pass through the conversion is DONE!
* less pub more better
* session storage works better, fixed some paths
* axum-csp version thing
* try a typedheader
* better openssl config things
* updating lockfile
* http2
* actually sending JSON when we say we will!
* just about to do something dumb
* flargl
* more yak shaving
* So many clippy-isms, fixing up a query handler bleep bloop
* So many clippy-isms, fixing up a query handler bleep bloop
* fmt
* all tests pass including basic web logins and nav
* so much clippyism
* stripping out old comments
* fmt
* commenty things
* stripping out tide
* updates
* de-tiding things
* fmt
* adding optional header matching ,thanks @cuberoot74088
* oauth2 stuff to match  but in axum
* CLIPPY IS FINALLY SATED
* moving scim from /v1/scim to /scim
* one day clippy will make sense
* cleanups
* removing sketching middleware
* cleanup, strip a broken test endpoint (routemap), more clippy
* docs fmt
* pulling axum-csp from the wrong cargo.toml
* docs fmt
* fmt fixes
2023-07-05 22:26:39 +10:00
James Hodgkinson 69dfea3601
Still trying to fix the docs. ()
* docs build/deploy fixes
* let us see if this makes the automerge less bad
2023-06-28 10:34:17 +10:00
James Hodgkinson cc1cc691f3
Started chasing noise, found some code to delete... ()
logging changes:

* Offering auth mechanisms -> debug
* 404's aren't really warnings
* double tombstone message, one goes to debug

other changes:

* CSP changes to allow the bootstrap images to load
* more testing javascriptfile things, I R 
* it's nice to know where things are
* putting non-rust web things in static/ instead of src/
* RequestCredentials::SameOrigin is the default, also adding a utility function to save dupe code. Wow this saved... kilobytes.
* removing commented code, fixing up codespell config
* clippyisms
* wtf, gha
* dee-gloo-ing some things
* adding some ubuntu build test things
* sigh rustwasm/wasm-pack/issues/1138
* more do_request things
* packaging things
* hilarious dev env setup script
* updated script works, all the UI works, including the experimental UI for naughty crabs
* deb package fixes
* fixed some notes
* setup experimental UI tweaks
2023-06-27 11:38:22 +10:00
Firstyear 4725d625af
Remove scripts that are no longer required () 2023-06-21 15:52:19 +10:00
Firstyear e33beea89d
1399 cleanup cli docs ()
* Cleanup cli args
* Update book
* Update wasm
* making the CI happy


---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 12:47:23 +10:00
Firstyear 00cca81012
1399 cleanup reorg () 2023-03-01 13:10:52 +10:00