Commit graph

174 commits

Author SHA1 Message Date
Firstyear bb8914c70d
20231120 2320 sssd compat (#2328) 2023-11-22 10:18:03 +10:00
Lincoln Bryant 782f7f58bb
Docs - Bump Fedora 36 to Fedora 38 (#2309) 2023-11-13 22:38:34 +00:00
James Hodgkinson 60e5935faa
Moving daemon tracing to OpenTelemetry (#2292)
* sally forth into the great otel unknown
* make the build env identification slightly more durable
* docs updates
* wasm recompile
2023-11-09 05:15:12 +00:00
James Hodgkinson 0174283115
Docs fixes for #2296 (#2297)
* docs touchups
2023-11-07 02:09:52 +00:00
Firstyear b7852d1d71
pw min length in account policy (#2289) 2023-11-05 10:33:25 +10:00
James Hodgkinson ffafb32389
WASM troubleshooting docs closes #2286 (#2291) 2023-11-05 10:32:39 +10:00
James Hodgkinson 7025a9ff55
Feature: kanidm CLI pulling OpenAPI schema (#2285)
* diag is super noisy when you actually turn on logging... even though it wasn't an error?
* adding api download-schema to the CLI
* docs
2023-11-03 17:37:27 +10:00
James Hodgkinson ef96ca6aa1
started writing docs and ended up in another rabbit hole (#2267)
* started writing docs and ended up in another rabbit hole
* updoots
* dangit fedora
2023-10-31 19:15:35 +10:00
James Hodgkinson 3bfc347c53
CLI integration test beginnings (#2261)
* more integration test things, using assert_cmd to test the CLI end-to-end
* packagez
* making clippy happy
* making deno happy
2023-10-30 06:10:54 +00:00
William Brown ecc46bb015 Add book chapter + cli 2023-10-28 13:07:06 +10:00
James Hodgkinson e02328ae8b
Splitting the SPAs (#2219)
* doing some work for enumerating how the accounts work together
* fixing up build scripts and removing extra things
* making JavaScript as_tag use the struct field names
* making shared.js a module, removing wasmloader.js
* don't compress compressed things
2023-10-27 06:03:58 +00:00
James Hodgkinson 55bd543434
.deb package build and docs fixes (#2252)
* moving docs around a bit
* workflow fixes
2023-10-26 01:48:58 +00:00
James Hodgkinson 7093149975
Auth flow docs (#2249) 2023-10-24 04:00:37 +00:00
Firstyear afe9d28754
20231019 1122 account policy basics (#2245)
---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-10-22 11:16:42 +00:00
kenjitamura 684d72d09c
Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244) 2023-10-19 14:11:33 +10:00
Firstyear 9e05c0f2f3
Fix incorrect references to LDAP in sync (#2239) 2023-10-18 06:30:46 +00:00
James Hodgkinson f28d5cef22
OpenAPI/swagger docs autogen (#2175)
* always be clippyin'
* pulling oauth2 api things out into their own module
* starting openapi generation
2023-10-14 12:39:14 +10:00
Firstyear 8bcf1935a5
20231012 346 name deny list (#2214)
* Migrate to improved system config reload, cleanup acc pol
* Denied names feature
2023-10-13 08:50:36 +10:00
James Hodgkinson 48979b8e1a
Replication tweaks - try the most recent successful one and error less (#2189)
* made an error less error-y and also found a way to try the last-most-working repl peer
2023-10-07 13:09:42 +10:00
Firstyear f6d2bcb44b
68 20230929 replication finalisation (#2160)
Replication is now ready for test deployments!
2023-10-05 11:11:27 +10:00
James Hodgkinson e7f594a1c1
In-system image storage (#2112)
* In-system image storage refers to #2057
* adding multipart feature to axum
* thanks to @Firstyear for fixing my bufs
* fixing coverage test things
* clippy-calming
* more tests, jpg acropalypse tests, benches
* spelling
* lockfile updates
* linting
2023-10-04 17:24:12 +10:00
James Hodgkinson 034ddd624a
Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154) 2023-09-27 14:08:20 +10:00
James Hodgkinson c7a269575c
Enforce TLS key size minimums (#2145)
* Enforce TLS key size minimums - Fixes #2144
* at some point clippy got mad
2023-09-26 09:59:00 +10:00
Miguel Angel Nubla 4aee3365aa
Typo (#2125) 2023-09-19 08:18:37 +10:00
Akash Kumar 6174d45848
Fix typo (#2109)
Signed-off-by: Akash Kumar <meakash7902@gmail.com>
2023-09-13 22:33:11 +10:00
James Hodgkinson d5c1f9de6a
sqlite3 doesn't need to be installed on dev machines (#2104)
* Dependencies - sqlite3 dev no longer needs to be installed - Fixes #2083
* setting workspace-level features for rusqlite
2023-09-12 09:54:54 +10:00
Firstyear b3aed1df34
68 20230908 replication attrunique (#2086)
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-09-12 08:50:51 +10:00
Firstyear 436a3f0307
68 20230831 design replication coordinator (#2051) 2023-09-05 16:39:16 +10:00
greizgh acce84edd5
docs: api tokens are managed by idm_admin (#2072)
Confirmed with:
- test on local server
- https://github.com/kanidm/kanidm/issues/1480
2023-09-04 21:40:59 +10:00
greizgh a185763176
docs: fix miniflux oauth example (#2046) 2023-08-30 07:24:06 +08:00
Sebastiano Tocci 70b19f0630
idv cli (#2001) 2023-08-23 20:51:24 +10:00
Philip Cristiano ed563d2416
docs: Update missed add_members command (#2018)
e33beea89d Updated add_members ->
add-members, but the radius.md was missed
2023-08-22 08:17:04 +10:00
pando85 01ddfb71df
docs: Fix outdated oauth2 subcommands (#1969) 2023-08-12 08:09:58 +10:00
James Hodgkinson ea4d755d7b
chasing weirdness (#1910)
* security headers, fixing error on empty username, handling login without SPN better

* making deno happy

* cleaning up windows build
2023-07-31 10:49:59 +10:00
Firstyear e17dcc0ddb
1788 admin unix socket (#1880) 2023-07-24 10:05:10 +10:00
Firstyear 79ff5e9775
1785 allow sync attr yielding via partial write admin (#1879) 2023-07-19 11:42:53 +10:00
Firstyear 07580cf57a
Improve selinux in tasks daemon (#1847) 2023-07-11 15:39:28 +10:00
Firstyear 8e1e533f40
1792 public oauth clients (#1821) 2023-07-07 18:53:31 +10:00
Matthew Wilks 9f886b85dd
Fix diagram colours (#1815) 2023-07-06 11:53:26 +10:00
James Hodgkinson cc35654388
Converting from tide to axum (#1797)
* Starting to chase down testing
* commenting out unused/inactive endpoints, adding more tests
* clippyism
* making clippy happy v2
* testing when things are not right
* moar checkpoint
* splitting up testkit things a bit
* moving https -> tide
* mad lad be crabbin
* spawning like a frog
* something something different spawning
* woot it works ish
* more server things
* adding version header to requests
* adding kopid_middleware
* well that was supposed to be an hour... four later
* more nonsense
* carrying on with the conversion
* first pass through the conversion is DONE!
* less pub more better
* session storage works better, fixed some paths
* axum-csp version thing
* try a typedheader
* better openssl config things
* updating lockfile
* http2
* actually sending JSON when we say we will!
* just about to do something dumb
* flargl
* more yak shaving
* So many clippy-isms, fixing up a query handler bleep bloop
* So many clippy-isms, fixing up a query handler bleep bloop
* fmt
* all tests pass including basic web logins and nav
* so much clippyism
* stripping out old comments
* fmt
* commenty things
* stripping out tide
* updates
* de-tiding things
* fmt
* adding optional header matching ,thanks @cuberoot74088
* oauth2 stuff to match #1807 but in axum
* CLIPPY IS FINALLY SATED
* moving scim from /v1/scim to /scim
* one day clippy will make sense
* cleanups
* removing sketching middleware
* cleanup, strip a broken test endpoint (routemap), more clippy
* docs fmt
* pulling axum-csp from the wrong cargo.toml
* docs fmt
* fmt fixes
2023-07-05 22:26:39 +10:00
James Hodgkinson 3e4c8f6241
Fixing the kanidmd healthcheck (#1789)
* fixing the health check
* fixing pages while I am here
* flipping options like I flip burgers
* using the config-supplied cert
2023-06-28 19:41:24 +10:00
Sebastiano Tocci 9a3c12a79d
Name change history (#1727) 2023-06-28 18:34:44 +10:00
James Hodgkinson 69dfea3601
Still trying to fix the docs. (#1709)
* docs build/deploy fixes
* let us see if this makes the automerge less bad
2023-06-28 10:34:17 +10:00
James Hodgkinson cc1cc691f3
Started chasing noise, found some code to delete... (#1768)
logging changes:

* Offering auth mechanisms -> debug
* 404's aren't really warnings
* double tombstone message, one goes to debug

other changes:

* CSP changes to allow the bootstrap images to load
* more testing javascriptfile things, I R 
* it's nice to know where things are
* putting non-rust web things in static/ instead of src/
* RequestCredentials::SameOrigin is the default, also adding a utility function to save dupe code. Wow this saved... kilobytes.
* removing commented code, fixing up codespell config
* clippyisms
* wtf, gha
* dee-gloo-ing some things
* adding some ubuntu build test things
* sigh rustwasm/wasm-pack/issues/1138
* more do_request things
* packaging things
* hilarious dev env setup script
* updated script works, all the UI works, including the experimental UI for naughty crabs
* deb package fixes
* fixed some notes
* setup experimental UI tweaks
2023-06-27 11:38:22 +10:00
Matthias Endler 56a2257360
Mention client configuration in tool installation guide (#1756) 2023-06-21 16:48:03 +10:00
Firstyear 4725d625af
Remove scripts that are no longer required (#1759) 2023-06-21 15:52:19 +10:00
Firstyear 8d2565773e
Resolve codespell issues (#1753) 2023-06-20 13:19:21 +10:00
Firstyear 8b331325ae
Add tls generator to main kanidmd (#1743) 2023-06-19 20:51:44 +10:00
Firstyear a77a7aa2a4
20230614 unix account security - move account name deny to unixd (#1733) 2023-06-15 13:24:53 +10:00
Firstyear 0eaab19775
20230608 ldap sync (#1728) 2023-06-13 14:26:50 +10:00
James Hodgkinson 18fe86db26
X-Forwarded-For catcher - improve ip addr parsing (#1725) 2023-06-12 12:14:34 +10:00
greizgh ad3ee88a0c
docs: fix typo in sync concepts (#1715) 2023-06-12 08:03:10 +10:00
Firstyear 6862a529ab
Improve diagnostic and docs of ldap bind requiring posix password (#1702) 2023-06-05 22:08:16 +10:00
James Hodgkinson 2e62a72a09
Documentation root directory 404 (#1681)
Refers to #1680
2023-06-03 19:44:03 +10:00
Martin Weinelt d3fda4210f
Document OpenID connect setup for Miniflux (#1683)
This change adds documentation on how to set up OpenID connect with
Miniflux, a feedreader application.

Miniflux currently does not support PKCE, and I've therefore raised and
upstream issue, that I reference in the book section.
2023-06-03 11:28:24 +10:00
Firstyear a185177a2e
Improve the readme (#1679)
* Improvements to the readme
2023-05-31 17:52:33 +10:00
Kenton Groombridge e3d5f3c8ae
SELinux support for kanidm-unixd-tasks daemon (#1661)
* selinux is an optional feature
* unix_integration: add selinux config option

On SELinux systems, this setting controls whether SELinux relabeling of
newly created home directories should be performed. The default value of
this is on (even on non-SELinux systems), but the tasks daemon will
perform an additional runtime check for SELinux support and will disable
this feature automatically if this check fails.

* unix_integration: wire up home dir selinux labeling
* unix_integration: create equivalence rules in SELinux policy for aliases
* book: document selinux setting
* Add myself to CONTRIBUTORS.md

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
2023-05-30 19:51:12 +10:00
Sebastiano Tocci 655a688ceb
Doc fixes (#1658) 2023-05-26 10:43:50 +10:00
James Hodgkinson 150a064cfa
Identifiable tokens (#1623) 2023-05-25 14:09:23 +10:00
cuberoot74088 8de3641614
Fix use-reset-token command hint (#1639)
* Fix use-reset-token command hint

running

`kanidm person credential create-reset-token` 

prints out information how to do credential reset.

This fixes the provided cli command.

* Update book with use-reset-token

* Update kanidm.rs on use-reset-token
2023-05-17 08:35:24 +10:00
Firstyear 1ddac86df7
Update policy (#1619) 2023-05-11 17:46:22 +10:00
James Hodgkinson 6b0d1bacd8
Document that you need to tell Nginx or other proxies to use HTTP 1.1… (#1592)
* Document that you need to tell Nginx or other proxies to use HTTP 1.1 or later - Fixes #1591
* fixing workflows
2023-05-05 21:08:54 +10:00
Firstyear ade1591554
Consolidate unix tools (#1566) 2023-04-24 19:47:52 +10:00
Firstyear 155c93c931
20230330 oauth2 refresh tokens (#1502) 2023-04-20 08:34:21 +10:00
Firstyear ab49c7f21d
Add troubleshooting step for pam home dirs (#1550)
* Add troubleshooting step for pam home dirs
2023-04-18 13:43:08 +10:00
Firstyear c1f62674f5
1496 ldap basedn config (#1500) 2023-03-29 09:34:43 +10:00
Firstyear 26b233acc0
Make examples in ldap chapter consistent (#1495) 2023-03-28 09:10:54 +10:00
Firstyear 4718f2dc6b
1115 priv (reauth, sudo) mode (#1479) 2023-03-27 11:38:09 +10:00
Cale "poptart" Black 27f54c0e36
Fix path-relative links in documentation (#1478)
The documentation for integrations was not path relative and would 404
in all links to documentation. This fixes them by pointing to the parent
directory
2023-03-23 10:07:46 +10:00
James Hodgkinson 6d2b7dd504
Image fixes in the build (#1441)
* Crabs were not waving - Fixes #1440
* codespell fixes
2023-03-13 10:41:16 +10:00
h7x4 56a05223b4
Update book - OAuth2 integration step (#1437)
* Update book - OAuth2 integration step
* Add h7x4 to CONTRIBUTORS.md
2023-03-07 11:24:03 +10:00
Firstyear 7ed3d84f98
Update the dev docs to flow nicer (#1420)
* Update the dev docs to flow nicer

* Update book/src/DEVELOPER_README.md

* Update book/src/DEVELOPER_README.md

* doc formatting

---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 22:14:33 +10:00
Firstyear e33beea89d
1399 cleanup cli docs (#1413)
* Cleanup cli args
* Update book
* Update wasm
* making the CI happy


---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 12:47:23 +10:00
Firstyear 00cca81012
1399 cleanup reorg (#1412) 2023-03-01 13:10:52 +10:00