2323 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
ToxicMushroom	bb0e759134	Add primary email selection, update email add button. Use scim.	2025-04-05 12:40:33 +02:00
ToxicMushroom	645f13b285	patch up rebase	2025-04-05 12:40:33 +02:00
ToxicMushroom	245e68c5ba	- Form validation ... - Editable emails - Basic profile updating	2025-04-05 12:40:33 +02:00
Arian van Putten	ad012cd6fd	implement notify-reload protocol (#3540)	2025-04-04 09:24:14 +10:00
Firstyear	82a883089f	Allow versioning of server configs (#3515) ... This allows our server configuration to be versioned, in preparation for a change related to the proxy protocol additions.	2025-04-02 02:44:19 +00:00
Firstyear	a2eae53328	20250314 remove protected plugin (#3504) ... Removes the protected plugin into an access control module so that it's outputs can be properly represented in effective access checks.	2025-04-01 01:00:56 +00:00
dependabot[bot]	ec3db91da0	Bump the all group with 10 updates (#3539) ... * Bump the all group with 10 updates Bumps the all group with 10 updates: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.32` | `4.5.34` | | [itertools](https://github.com/rust-itertools/itertools) | `0.13.0` | `0.14.0` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.12.5` | `0.13.0` | | [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` | | [rand_chacha](https://github.com/rust-random/rand) | `0.3.1` | `0.9.0` | | [whoami](https://github.com/ardaku/whoami) | `1.5.2` | `1.6.0` | | [axum-extra](https://github.com/tokio-rs/axum) | `0.9.6` | `0.10.1` | | [axum-macros](https://github.com/tokio-rs/axum) | `0.4.2` | `0.5.0` | | [fantoccini](https://github.com/jonhoo/fantoccini) | `0.21.4` | `0.21.5` | | [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.29.0` | `0.29.1` | Updates `clap` from 4.5.32 to 4.5.34 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.5.32...clap_complete-v4.5.34) Updates `itertools` from 0.13.0 to 0.14.0 - [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-itertools/itertools/compare/v0.13.0...v0.14.0) Updates `lru` from 0.12.5 to 0.13.0 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](https://github.com/jeromefroe/lru-rs/compare/0.12.5...0.13.0) Updates `rand` from 0.8.5 to 0.9.0 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-random/rand/compare/0.8.5...0.9.0) Updates `rand_chacha` from 0.3.1 to 0.9.0 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-random/rand/compare/rand_chacha-0.3.1...0.9.0) Updates `whoami` from 1.5.2 to 1.6.0 - [Release notes](https://github.com/ardaku/whoami/releases) - [Changelog](https://github.com/ardaku/whoami/blob/v1.6.0/CHANGELOG.md) - [Commits](https://github.com/ardaku/whoami/compare/v1.5.2...v1.6.0) Updates `axum-extra` from 0.9.6 to 0.10.1 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.9.6...axum-extra-v0.10.1) Updates `axum-macros` from 0.4.2 to 0.5.0 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/axum/compare/axum-macros-v0.4.2...axum-macros-v0.5.0) Updates `fantoccini` from 0.21.4 to 0.21.5 - [Commits](https://github.com/jonhoo/fantoccini/compare/v0.21.4...v0.21.5) Updates `jsonschema` from 0.29.0 to 0.29.1 - [Release notes](https://github.com/Stranger6667/jsonschema/releases) - [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md) - [Commits](https://github.com/Stranger6667/jsonschema/compare/rust-v0.29.0...rust-v0.29.1) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: itertools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: lru dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rand dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rand_chacha dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: whoami dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: axum-extra dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: axum-macros dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: fantoccini dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: jsonschema dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> * maint: revert rand and axum packages --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>	2025-03-31 00:28:22 +00:00
dependabot[bot]	efaef70abe	Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538) ... Bumps the all group with 1 update: [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action). Updates `mozilla-actions/sccache-action` from 0.0.8 to 0.0.9 - [Release notes](https://github.com/mozilla-actions/sccache-action/releases) - [Commits](https://github.com/mozilla-actions/sccache-action/compare/v0.0.8...v0.0.9) --- updated-dependencies: - dependency-name: mozilla-actions/sccache-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-30 23:25:40 +00:00
dependabot[bot]	5b48f1dfe3	Bump the all group in /pykanidm with 4 updates (#3537) ... Bumps the all group in /pykanidm with 4 updates: [pydantic](https://github.com/pydantic/pydantic), [types-requests](https://github.com/python/typeshed), [mkdocs-material](https://github.com/squidfunk/mkdocs-material) and [mkdocstrings-python](https://github.com/mkdocstrings/python). Updates `pydantic` from 2.10.6 to 2.11.1 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.10.6...v2.11.1) Updates `types-requests` from 2.32.0.20250306 to 2.32.0.20250328 - [Commits](https://github.com/python/typeshed/commits) Updates `mkdocs-material` from 9.6.9 to 9.6.10 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.9...9.6.10) Updates `mkdocstrings-python` from 1.16.7 to 1.16.8 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/python/compare/1.16.7...1.16.8) --- updated-dependencies: - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: types-requests dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-31 07:54:28 +10:00
Firstyear	567fe7b259	Add max_ber_size to freeipa sync (#3530)	2025-03-28 10:46:00 +10:00
dependabot[bot]	5edc6be51c	Bump the all group in /pykanidm with 5 updates (#3524) ... Bumps the all group in /pykanidm with 5 updates: | Package | From | To | | --- | --- | --- | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.11.13` | `3.11.14` | | [ruff](https://github.com/astral-sh/ruff) | `0.11.0` | `0.11.2` | | [coverage](https://github.com/nedbat/coveragepy) | `7.7.0` | `7.7.1` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.8` | `9.6.9` | | [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.16.5` | `1.16.7` | Updates `aiohttp` from 3.11.13 to 3.11.14 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](https://github.com/aio-libs/aiohttp/compare/v3.11.13...v3.11.14) Updates `ruff` from 0.11.0 to 0.11.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.11.0...0.11.2) Updates `coverage` from 7.7.0 to 7.7.1 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.7.0...7.7.1) Updates `mkdocs-material` from 9.6.8 to 9.6.9 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.8...9.6.9) Updates `mkdocstrings-python` from 1.16.5 to 1.16.7 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/python/compare/1.16.5...1.16.7) --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-24 11:59:26 +10:00
William Brown	c75c97893e	Update Concread	2025-03-22 12:47:18 +10:00
Peter Todd Decker ("Todd")	638904f12c	Update developer_ethics.md (#3520)	2025-03-22 01:58:54 +00:00
Jeff Scrum	e1b9063b99	Update examples.md (#3519) ... fix command in OAuth2 Proxy example	2025-03-21 23:18:16 +00:00
Firstyear	bf1e9b0989	Make schema indexing a boolean instead of index types (#3517) ... Previously on schema definitions for attributes, the list of index types was manually set on attributes. The issue with this approach is that not all index types apply to all attribute syntaxes. This made it error prone not just to Kanidm developers, but to future users who want to define custom attributes and may incorrectly index those attributes. Instead, this changes the index value to be a boolean to indicate if this attribute should or should not be indexed. Internally Kanidm has a list of appropriate indexes to apply to these syntax types. As part of this change, the tests were reviewed to find missing index types for syntaxes, and other causes of unindexed searches which led to some changes around the dyngroup plugin (which pushes the boundaries of a lot of things in Kani due to how it works).	2025-03-21 02:13:54 +00:00
Foosec	11c7266ff3	Add missing lld dependency and fix syntax typo (#3490) ... * Add missing lld dependency and fix syntax typo in devcontainer_postcreate.sh * replace pushd/popd with shell agnostic solution and do not throw away std out/err --------- Co-authored-by: foobar <foobar>	2025-03-21 01:51:58 +00:00
Katherina Walshe-Grey	ef638a62e9	Update shell.nix to work with stable nixpkgs (#3514) ... The existing shell.nix uses whatever versions of rustc and cargo are in the system nixpkgs. In the current stable nixpkgs version (24.11), this is rustc 1.82.0. Unfortunately, we depend on the `strict_provenance` feature, which was unstable before 1.84.0. (See: kanidm/concread#132) This patch makes minimal changes to shell.nix to overlay nixpkgs with the rustc version defined in rust-toolchain.toml, enabling Kanidm to build locally on stable versions of NixOS. Co-authored-by: Firstyear <william@blackhats.net.au>	2025-03-20 13:06:51 +10:00
Firstyear	f86bc03a93	Improve unixd tasks channel comments (#3510)	2025-03-19 00:57:39 +00:00
Jinna Kiisuo	46eda59cff	Update kanidm_ppa_automation reference to latest (#3512)	2025-03-18 12:10:36 +00:00
Firstyear	b13951a79b	Add set-description to group tooling (#3511)	2025-03-18 21:54:20 +10:00
Jinna Kiisuo	1e91f244a2	packaging: Add kanidmd deb package, update documentation (#3506) ... * packaging: Use cargo-deb multiarch support This allows building all platforms from one definition, assuming the --multiarch=foreign flag is used. * packaging: Use correct path naming for unixd service files While cargo-deb works around the mistake, better to name them as per the rules: https://github.com/kornelski/cargo-deb/blob/main/systemd.md#systemd-unit-file-naming * docs: Update book chapter on Debian packaging * packaging: Shift Debian builds to a separate build profile * packaging: Add deb for kanidmd	2025-03-18 12:10:42 +10:00
dependabot[bot]	23bb656c6b	Bump the all group in /pykanidm with 5 updates (#3508) ... Bumps the all group in /pykanidm with 5 updates: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.9.10` | `0.11.0` | | [coverage](https://github.com/nedbat/coveragepy) | `7.6.12` | `7.7.0` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.7` | `9.6.8` | | [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) | `0.28.3` | `0.29.0` | | [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.16.3` | `1.16.5` | Updates `ruff` from 0.9.10 to 0.11.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.9.10...0.11.0) Updates `coverage` from 7.6.12 to 7.7.0 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.6.12...7.7.0) Updates `mkdocs-material` from 9.6.7 to 9.6.8 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.7...9.6.8) Updates `mkdocstrings` from 0.28.3 to 0.29.0 - [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases) - [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/mkdocstrings/compare/0.28.3...0.29.0) Updates `mkdocstrings-python` from 1.16.3 to 1.16.5 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/python/compare/1.16.3...1.16.5) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-17 08:44:26 +10:00
Firstyear	b88b6923eb	20250313 unixd system cache (#3501) ... The implementation of the unixd cache relies on inotify to detect changes to files in /etc so that we know when to reload the data for nss/passwd. However, the way that groupadd/del and other tools work is they copy the file, change it, and then move it into place. It turns out that william of the past didn't realise that inotify works on inodes not paths like other tools do (auditctl for example). As a result, when something modified /etc/group or another related file, the removal was seen, but this breaks notifications on any future change until you reload unixd. To resolve this we need to recursively watch /etc with inotify - yep, that's correct. We have to watch everything in /etc for changes because it's the only way to pick up on the add/remove of files. But because we have to watch everything, we need permissions to watch everything. This forces us to move the parsing of the etc passwd/group/shadow files to the unixd tasks daemon - arguably, this is the correct place to read these anyway since that is a high priv (and locked down) daemon. Because of this, we actually end up solving the missing "shadow" group on debian issue, and probably similar on the BSD's in future. In order to make my life easier while testing I also threw in a makefile that symlinks the files to needed locations for testing. It has plenty of warnings as it should. Fixes #3499 Fixes #3407 Fixes #3249	2025-03-14 13:46:26 +10:00
Firstyear	e3243ce6b0	Support rfc2307 memberUid in sync operations. (#3466) ... A lot of legacy directory servers will use rfc2307 schema where members of groups are stored as the uid instead of a dn. Within kani, we absolutely need this to be a dn, else we risk accidentally adding kanidm entries into ldap synced groups which isn't what we want. If we have an rfc2307 schema, then we pre-resolve the uid to the member dn so that kanidm gets the correct information.	2025-03-14 00:48:05 +00:00
dependabot[bot]	4b4e690642	Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496) ... * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group * fix: remove manual specification of sccache version from github actions Bumps the all group with 1 update: [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action). Updates `mozilla-actions/sccache-action` from 0.0.7 to 0.0.8 - [Release notes](https://github.com/mozilla-actions/sccache-action/releases) - [Commits](https://github.com/mozilla-actions/sccache-action/compare/v0.0.7...v0.0.8) --- updated-dependencies: - dependency-name: mozilla-actions/sccache-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-14 00:32:14 +00:00
Jason	d6549077fb	Update Traefik config example to remove invalid label (#3500) ... Remove non-existent traefik label config	2025-03-13 04:36:02 +00:00
Firstyear	2c5ce227ae	Add uid/gid allocation table (#3498)	2025-03-11 06:42:08 +00:00
Firstyear	919e0ba6fe	20250225 ldap testing in testkit (#3460) ... Add support for ldap servers in integration tests This allows the ldap interface to be enabled during tests, which is a final requirement to complete ldap application passwords.	2025-03-11 12:35:31 +10:00
dependabot[bot]	23d35dc324	Bump the all group in /pykanidm with 5 updates (#3494) ... Bumps the all group in /pykanidm with 5 updates: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.9.9` | `0.9.10` | | [types-requests](https://github.com/python/typeshed) | `2.32.0.20250301` | `2.32.0.20250306` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.6` | `9.6.7` | | [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) | `0.28.2` | `0.28.3` | | [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.16.2` | `1.16.3` | Updates `ruff` from 0.9.9 to 0.9.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.9.9...0.9.10) Updates `types-requests` from 2.32.0.20250301 to 2.32.0.20250306 - [Commits](https://github.com/python/typeshed/commits) Updates `mkdocs-material` from 9.6.6 to 9.6.7 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.6...9.6.7) Updates `mkdocstrings` from 0.28.2 to 0.28.3 - [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases) - [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/mkdocstrings/compare/0.28.2...0.28.3) Updates `mkdocstrings-python` from 1.16.2 to 1.16.3 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/python/compare/1.16.2...1.16.3) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: types-requests dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-11 08:49:13 +10:00
dependabot[bot]	7d9661ef45	Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491) ... Bumps the cargo group with 1 update: [ring](https://github.com/briansmith/ring). Updates `ring` from 0.17.10 to 0.17.13 - [Changelog](https://github.com/briansmith/ring/blob/main/RELEASES.md) - [Commits](https://github.com/briansmith/ring/commits) --- updated-dependencies: - dependency-name: ring dependency-type: indirect dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-09 11:53:42 +10:00
Firstyear	dcd5cd23f4	Handle form-post as a response mode (#3467) ... Some oauth2 clients apparently ignore what we tell them and request response modes we don't support. First, we should deserialise these and error correctly. Second, to maintain temporary compatibility, we remap form-post to query. This will be removed in future.	2025-03-05 13:21:09 +10:00
Tshepang Mbambo	7b2bd38ab2	book: fix english (#3487) ... * fix Python docs wording --------- Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>	2025-03-04 21:16:00 +00:00
Firstyear	775dd520cb	Correct paths with Kanidm Tools Container (#3486)	2025-03-04 14:52:30 +10:00
Firstyear	63deda350c	20250225 improve test performance (#3459) ... * Ignore tests that are no longer used. Each time a library or binary is added, that requires compilation to create the *empty* test harness, which then is executed and takes multiple seconds to start up, do nothing, and return success. This removes test's for libraries that aren't actually using or running any tests. Additionally, each time a new test binary is added, that adds a ton of compilation time, but also test execution time as the binary for each test runner must start up, execute, and shutdown. So this merges all the testkit integration tests to a single running which significantly speeds up test execution. * Improve IDL exists behaviour, improve memberof verification Again to improve test performance. This improves the validation of idx existance to be a faster SQLite call, caches the results as needed. Memberof was taking up a large amount of time in verify phases of test finalisation, and so a better in memory version has been added. * Disable TLS native roots when not needed * Cleanup tests that are hitting native certs, or do nothing at all	2025-03-04 10:36:53 +10:00
dependabot[bot]	7eedb0159f	Bump the all group in /pykanidm with 8 updates (#3484) ... --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: authlib dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: types-requests dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-03 08:00:57 +10:00
Firstyear	e98d60a962	Use lld by default on linux (#3477) ... * Use lld by default on linux --------- Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>	2025-02-28 08:30:59 +00:00
Firstyear	25c1c1573e	20250213 patch used wrong acp (#3432) ... Migrations and server bootstrap are very interconnected processes and in this we'll be addressing and improving both. Server bootstrap was performed by creating base entries in phases, eventually bringing up enough of the *oldest* supported server minimum remigration level, to then allow triggering of migrations. Migrations then applied "patches" effectively ontop of this minimum level to update entries to what they should be in newer versions of the server. This scheme has it's pros and cons, but the major con was that to remove a migration meant squashing it's content back into the minimum remigration level, and this was a human process that was quite error prone and difficult to automate. As well, this scheme also led to cases where the patch migrations would sometimes *not* reflect all the needed changes or content, or in one case was actually undone by a patchlevel fix up that was required to address a bug. Invariably this led to issues, and cases where a new server may have different content to a migrated one - not exactly what we want! This is a new migration scheme that addresses this fragility. However what it trades is verbosity of the content. Rather than having a base set of entries and patching/updating small sections ontop, we have migration data folders that contain the full set of entries as they should appear at that migration level. This makes the bootstrap process easier as we can just apply the migration level as a whole, and targetted to what precise version we want. This also makes migrations more durable as the content is explicitly copied and all entries fully applied, so there is no risk that a migration or data change can be forgotten or applied incorrectly. We are expressing the full state of what our builtin and provided entries should be. Finally this rips out a number of places where migration data was being used as test case data. Not all of these have been replaced (notably in authsession with Account), but the majority have and have been replaced with clearer use of constants rather than building whole entries just to access the name and throw them away for example.	2025-02-28 10:18:48 +10:00
Ludea	145ffed7c6	Android support (#3475)	2025-02-27 11:45:33 +00:00
CEbbinghaus	b669f38d23	Changed all CI/CD builds to locked (#3471)	2025-02-26 22:04:23 +00:00
Firstyear	537d6fd93b	Make it a bit clearer that providers are needed (#3468)	2025-02-27 00:05:33 +10:00
Firstyear	b6ffb31e4a	Fix incorrect credential generation in radius docs (#3465)	2025-02-26 12:03:10 +10:00
Firstyear	0e0e8ff844	Add crypt formats for password import (#3458) ... Adds crypt md5, sha256 and sha512 allowing import of legacy credentials from external ldap servers.	2025-02-25 11:09:34 +00:00
Jade Ellis	266dc77536	build: Create daemon image from scratch (#3452)	2025-02-25 14:16:08 +10:00
micolous	3edee485dd	address webfinger doc feedbacks (#3446)	2025-02-25 02:53:53 +00:00
dependabot[bot]	38c260214b	Bump the all group across 1 directory with 5 updates (#3453) ... Bumps the all group with 5 updates in the /pykanidm directory: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.9.5` | `0.9.7` | | [coverage](https://github.com/nedbat/coveragepy) | `7.6.11` | `7.6.12` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.3` | `9.6.5` | | [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) | `0.28.0` | `0.28.1` | | [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.14.6` | `1.16.1` | Updates `ruff` from 0.9.5 to 0.9.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.9.5...0.9.7) Updates `coverage` from 7.6.11 to 7.6.12 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.6.11...7.6.12) Updates `mkdocs-material` from 9.6.3 to 9.6.5 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.3...9.6.5) Updates `mkdocstrings` from 0.28.0 to 0.28.1 - [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases) - [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/mkdocstrings/compare/0.28.0...0.28.1) Updates `mkdocstrings-python` from 1.14.6 to 1.16.1 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](https://github.com/mkdocstrings/python/compare/1.14.6...1.16.1) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocs-material dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mkdocstrings-python dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-02-24 13:22:51 +10:00
Merlijn	857dcf5087	[htmx] Admin ui for groups and users management (#3019) ... * Some progress on admin ui for managing groups and users * Improve scim querying --------- Co-authored-by: William Brown <william@blackhats.net.au>	2025-02-22 13:43:54 +10:00
Sebastiano Tocci	9611a7f976	Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)	2025-02-21 12:14:47 +10:00
sinavir	f40679cd52	Accept invalid certs and fix token_cache_path (#3439) ... * Add accept-invalid-certs option for cli * Fix token_cache_path behavior --------- Co-authored-by: sinavir <sinavir@sinavir.fr>	2025-02-20 08:07:48 +00:00
Firstyear	52824b58f1	Accept lowercase ldap pwd hashes (#3444)	2025-02-20 04:34:27 +00:00
CEbbinghaus	848af4cecd	TOTP label verification (#3419) ... * Adding TOTP Label verification (for both empty and duplicate)	2025-02-19 06:54:50 +00:00