Commit graph

290 commits

Author SHA1 Message Date
Firstyear a77a7aa2a4
20230614 unix account security - move account name deny to unixd (#1733) 2023-06-15 13:24:53 +10:00
Sebastiano Tocci 76cee8cecb
fixed return value of add_ava_int (#1735) 2023-06-14 21:28:43 +10:00
Sebastiano Tocci cc5f21eee5
added pre_cand entries to both pre_modify and pre_batch_modify plugin functions (#1732) 2023-06-13 19:46:41 +10:00
Firstyear 0eaab19775
20230608 ldap sync (#1728) 2023-06-13 14:26:50 +10:00
Firstyear c5c483be98
Add acp allowing service accounts to clear their own sessions (#1731) 2023-06-13 14:10:28 +10:00
James Hodgkinson 18fe86db26
X-Forwarded-For catcher - improve ip addr parsing (#1725) 2023-06-12 12:14:34 +10:00
Firstyear 0ba4aec86b
Absolutely minimal implementation (#1711)
* Absolutely minimal implementation

* Add support for ip address to audit event
2023-06-08 20:17:46 +10:00
Firstyear 152bf95e71
Add further incremental replication tests (#1707) 2023-06-07 14:14:43 +10:00
Firstyear 6862a529ab
Improve diagnostic and docs of ldap bind requiring posix password (#1702) 2023-06-05 22:08:16 +10:00
Firstyear 10fa229cf1
Resolve ability to delete ssh keys with spaces in tags (#1674) 2023-05-29 16:11:00 +10:00
Firstyear 8a548fe13e
20230526 incremental replication improvements (#1659)
* Improve refresh ruv checking
* Expand comments for tests, add basic attribute merge statemachine
2023-05-29 08:53:27 +10:00
Firstyear 2752965de1
Add more replication tests, improve some handling of tombstones. (#1656) 2023-05-26 12:18:53 +10:00
Firstyear 0a16434bdc
during service account recovery, remove incompatible credentials (#1650) 2023-05-25 10:47:39 +10:00
James Hodgkinson fcab605320
Time travelling (#1648)
* yeet the time package into the future (updating min time version to 0.3.21)
* CI change to catch web ui builds in future, updating SCIM requirements
* removing allow deprecated flag
* making references to rfc3339 formatter shorter
* clippyisms
* fmt
2023-05-25 08:25:16 +10:00
Firstyear 48c620e43a
20230508 replication incremental (#1620) 2023-05-23 13:25:22 +10:00
James Hodgkinson 6e559a2eb4
fixing up some spelling errors (#1618) 2023-05-11 08:30:13 +10:00
Firstyear 6afb15ca92
20230505 replication groundwork - ruv consistency improvements (#1606) 2023-05-08 18:25:27 +10:00
Firstyear 125f138a50
20230506 ignore some references (#1600)
* Self heal from some invalid ref type issues
2023-05-06 23:09:38 +10:00
Firstyear d9b79ba6d1
Harden migrate session to prevent duplicate migration errors (#1599) 2023-05-06 22:56:52 +10:00
Firstyear bcdbb1837a
Release 1.1.0-alpha.12 (#1588) 2023-05-01 11:07:44 +10:00
Firstyear 1974d27dd8
Filter rdns and dns for ldap filters (#1576) 2023-04-27 22:37:44 +10:00
Firstyear 49a767179c
Cleanup incorrect log errors of denied entries (#1577) 2023-04-27 15:38:45 +10:00
Firstyear 33f0034b80
20230424 clippppppppppppyyyyyyyy (#1574)
* Resolve a lot of clips
2023-04-26 21:55:42 +10:00
Firstyear c670069db1
Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575) 2023-04-26 21:09:18 +10:00
Firstyear ea57b7e990
Improve user experince of refreshing with intent tokens during cred update (#1556) 2023-04-24 09:47:34 +10:00
Firstyear db8cf8883b
Fix incompatible future warnings by removing older crates (#1554) 2023-04-20 15:49:51 +10:00
Firstyear 155c93c931
20230330 oauth2 refresh tokens (#1502) 2023-04-20 08:34:21 +10:00
MinhPhan8803 3e860feb13
AuthSession non empty vec part 2 (#1543) 2023-04-18 10:19:52 +10:00
Firstyear 68b8bf71fb
Improve unicode control character detection (#1539) 2023-04-12 15:53:02 +10:00
MinhPhan8803 bd1215299a
Authsession non empty vec (#1522) 2023-04-08 10:00:45 +10:00
MinhPhan8803 f5fbf43991
Be non empty vec (#1501) 2023-03-30 11:41:52 +10:00
Firstyear c1f62674f5
1496 ldap basedn config (#1500) 2023-03-29 09:34:43 +10:00
Firstyear 2095efe45d
Improve string validation (#1497) 2023-03-28 12:42:06 +10:00
Firstyear 4718f2dc6b
1115 priv (reauth, sudo) mode (#1479) 2023-03-27 11:38:09 +10:00
Sebastiano Tocci 36f1efa559
User auth token session display implementation (#1415)
* removed old todo from #62
* implemented proper display for user_auth_token_session
* auth-token-session display fixes
* updated contributors list

---------

Co-authored-by: Firstyear <william@blackhats.net.au>
2023-03-07 14:33:51 +10:00
James Hodgkinson 5573ab9224
RADIUS container fixes (#1424) 2023-03-07 11:50:45 +10:00
Firstyear ff78dc8f38
Hopefully fix exp issues by making it a stable part of the access token. (#1434) 2023-03-06 16:17:19 +10:00
dependabot[bot] 113258d523
chore(deps): bump base64 from 0.13.1 to 0.21.0 (#1350)
* chore(deps): bump base64 from 0.13.1 to 0.21.0

Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.13.1 to 0.21.0.
- [Release notes](https://github.com/marshallpierce/rust-base64/releases)
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.13.1...v0.21.0)

---
updated-dependencies:
- dependency-name: base64
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* base64 fixes

* fmt fixes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-06 13:57:21 +10:00
Firstyear 0e57b6f914
1399 some async cleanup (#1421)
* More cleanerer
* More async!
* Fix up tests
2023-03-03 17:53:54 +10:00
Firstyear 00cca81012
1399 cleanup reorg (#1412) 2023-03-01 13:10:52 +10:00