Commit graph

109 commits

Author SHA1 Message Date
Firstyear c7179ae2be
Oauth2 app listing design (#971) 2022-10-19 09:48:55 +10:00
Firstyear 2845f8c4cc
20221011 sudo mode components (#1120) 2022-10-13 10:54:44 +10:00
Firstyear af33a4580f
Design doc (#1111) 2022-10-12 09:03:33 +10:00
Firstyear 7e4e2f1ad1
1063 967 oauth2 improvements (#1102) 2022-10-09 17:11:55 +10:00
Firstyear e9ed430199
Improve badlist updating (#1095) 2022-10-07 11:35:58 +10:00
Firstyear aa9af0705c
Fix issues with radius (#1084) 2022-10-02 11:28:58 +10:00
Sebastian Neubauer 2e9a94e703
[doc] Missing database prefix for backup/restore (#1085)
Apparently, the commands backup and restore commands changed to be
subcommands of the database command.
Update the docs to reflect that.
2022-10-02 11:27:39 +10:00
Firstyear 082464f786
20220911 api tokens (#1071) 2022-09-25 11:21:30 +10:00
Firstyear ad468f0dfa
Add net bind service docs (#1070) 2022-09-21 13:51:23 +10:00
James Hodgkinson 657cefb4f1
TLS is now required for all connections (#1069) 2022-09-21 13:36:58 +10:00
James Hodgkinson d14c2d2330
Book updates (#1067)
* blep

* more blep

* fixed book build issues, updooted some FAQ and troubleshooting things

* more random updoots

* dat yak thoe
2022-09-21 13:05:32 +10:00
Firstyear bba5bd1a42
Add access rework doc, add domain doc (#1026) 2022-09-09 20:54:55 +10:00
Firstyear 925c03b3fb
20220817 ldap service tokens (#1002) 2022-09-02 14:21:20 +10:00
James Hodgkinson c6e5e426d0
Fixing broken images and probably making it worse, because that's how I roll. (#973) 2022-08-08 09:55:03 +10:00
Firstyear 0c5c5e609f
Fix the developer readme location (#965) 2022-08-02 17:00:38 +10:00
James Hodgkinson b249747e55
.deb packaging config and scripting (#920)
* working on debian builds again
* github actions tweaks
* fixed a ref in the build script
* updating makefile targets to include build profile env
* updates to docs and makefiles
2022-07-20 17:21:40 +10:00
James Hodgkinson 799bf13cdf
Tide route map things (#913)
* magic routemap things
2022-07-11 18:16:41 +10:00
James Hodgkinson 403016b0f8
WebUI Cleanup, icons, Profile Wireframing (#910)
* account person extend was showing failure when succeeding
* first run on a user profile page, did some other CSS tweaks to the UI
* UI neatening, profile wireframing, robotstxt, PWA manifest
* adding domain_display_name to webmanifest
2022-07-07 18:57:28 +10:00
James Hodgkinson d2ea936b16
Domain Display Name (#872) 2022-07-07 13:03:08 +10:00
James Hodgkinson 61e32bce4f
docs updates and UI cleanup (#874)
* showing the queried user when running account validity show
* updating account delete
* tweaking account and radius delete to show new message formats
* renaming credential reset token ui
* updating documentation for functionality
* added notes to dev readme on how to install/build mdbook and updated docs
2022-07-05 11:38:25 +10:00
Leoyzen 33caec05d2
fix account_and_group docs (#895)
fix typo "group2" to "group_2"
2022-07-05 09:04:27 +10:00
James Hodgkinson 57f8fa9d2b
Update to account recovery UX (#859)
* JSON-formatted output for recover_account, moved a bunch of logs to debug instead of info
* updated documentation
2022-06-26 18:02:16 +10:00
James Hodgkinson 805ac2dd16
Python module and rewritten RADIUS integration (#826)
* added python kanidm module
* rewrote RADIUS integration
* updated the documentation
* updating github actions to run more often
* BLEEP BLOOP ASYNCIO IS GR8
* adding config to makefile to run pykanidm tests

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Firstyear <william@blackhats.net.au>
2022-06-20 20:16:55 +10:00
Thomas Sanchez bf53e4aff8
Add documentation for vouch-proxy integration (ref #600) (#823) 2022-06-15 09:06:13 +10:00
Mateus Amin 8078925e6f
K8s Ingress Example (#805)
* Created kanidm_book/src/examples/k8s_ingress_example.md

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-06-06 09:11:29 +10:00
James Hodgkinson 06eeead51d
updates the oauth2 URL, updating book layout (#807) 2022-06-05 15:08:02 +10:00
Carla Schroder 55d76cd7dc
minor corrections, line breaks, capitalization, expand abbreviations (#802)
* minor corrections, line breaks, capitalization, expand abbreviations
2022-06-03 08:05:01 +10:00
Carla Schroder e5b37dfe20
Kanidm book review 6 (#800)
* change capitalization on section headings, and some terminology, small wording tweaks
* more small corrections, line breaks, capitalization, small wording changes
* minor corrections, punctuation, wording
* NAS = Network Access Server
2022-06-02 11:09:02 +10:00
James Hodgkinson 7d27612174
Windows automagical buildingtons (#798)
* windows build automation
* making fmt happy, fixing windows-related bug
* disabled cargo_incremental when using `sccache`, added build options ARG to Dockerfile, limit docker build to one job
2022-05-31 14:13:21 +10:00
Carla Schroder 547e283318
continuing review of Kanidm book (#775) 2022-05-27 09:07:56 +10:00
Carla Schroder 8abd5b2052
Minor corrections to case, punctuation, spelling (#789) 2022-05-27 09:07:15 +10:00
Carla Schroder e0ebd322dd
some small corrections to accounts_and_groups.md, administrivia.md (#776) 2022-05-26 14:57:01 +10:00
Carla Schroder 70db0630ea
More small corrections: line breaks, capitalization, typos (#778) 2022-05-26 07:38:28 +10:00
Firstyear c26ccb9b38
Improve token readability, Fix issue with spn format (#773) 2022-05-24 13:49:51 +10:00
Kellin f3a73426c5
Fix typos of kanidm in the documentation (#766)
- Fix volume mount name typo in the server configuration and
  administrivia documentation pages
- Fix typo in link from PAM and nsswitch documentation

Signed-off-by: Kellin <kellin@retromud.org>
2022-05-23 11:58:27 +10:00
Carla Schroder 6114d59158
First review of the Kanidm Administration book (#760) 2022-05-18 11:22:56 +10:00
matthew-salerno 28d31234d0
Update docs with some personal experience (#750) 2022-05-10 10:52:53 +10:00
Firstyear 3a07842d56
20220501 fix logging (#730) 2022-05-01 13:34:19 +10:00
Euan Kemp 9427d27141
Add a new ACP and group allowing self-service mail updates (#672)
* Add a new ACP and group allowing self-service mail updates

This adds a new "idm_people_self_write_mail_priv" group which follows
the existing canned group+acp format closely.

This also adds a test for the functionality

See the discussion in #648 for a bit more background

* Limit the self-write ACP to targets with the "account" class

Per feedback on #672, it's better to limit these APIs specifically to
accounts.

* Fix up

Co-authored-by: Firstyear <william.brown@suse.com>
2022-04-13 20:45:45 +10:00
Euan Kemp 0c3ce226cf
Add 'account person set' command (#667)
* Add 'account person set' command

This command allows a user to modify, say, their legal name in a
self-service fashion.

This wasn't possible before by default since the 'extend' operation
required additional ACPs in order to operate which not every user would
have.

The new "person set" api is compatible with the default self_write ACP,
and so allows self-service modification.

* Add a short section on people attributes to the book
2022-04-02 13:24:07 +10:00
Firstyear 5cb429904d
Improve description of how the suse pam files work (#663) 2022-03-30 10:34:56 +10:00
Firstyear bd41ef8f91
Add design doc, revive the domain wide enc token (#649)
* Add design doc, revive the domain wide enc token, use jwt from our lib instead of bundy, update docs
2022-03-14 17:29:04 +10:00
James Hodgkinson 58fb559262
Docs build cleanup for #646 (#647)
* moving docs build to makefile
2022-03-10 08:55:44 +10:00
Firstyear 840024f006
Change how domain names are handled in our configuration. (#639) 2022-02-15 16:17:43 +10:00
Firstyear a0ef768fc8
Correct issuer to match url of connected client (#635) 2022-01-27 12:19:03 +10:00
Firstyear c6c564cebb
Finalise email changes for oidc (#629) 2021-12-25 09:47:14 +10:00
James Hodgkinson 615ddee75f
adding notes about OIDCRemoteUserClaim to the oauth2 book chapter (#621) 2021-11-30 10:34:54 +10:00
James Hodgkinson b7837f3aae
add logging for oauth2 errors (#620) 2021-11-25 14:55:12 +10:00
Firstyear fad0dd86e0
Improve book and errors related to domain name and origin mismatch (#617) 2021-11-25 08:37:50 +10:00
Firstyear 0f4189a57e
278 603 OIDC implementation (#608) 2021-11-21 16:41:49 +10:00