Commit graph

36 commits

Author SHA1 Message Date
Firstyear 8b331325ae
Add tls generator to main kanidmd (#1743) 2023-06-19 20:51:44 +10:00
Firstyear 6513fae5e2
1737 1739 sync - map uidnumbers mail (#1741) 2023-06-16 19:15:36 +10:00
Firstyear a77a7aa2a4
20230614 unix account security - move account name deny to unixd (#1733) 2023-06-15 13:24:53 +10:00
Firstyear 0eaab19775
20230608 ldap sync (#1728) 2023-06-13 14:26:50 +10:00
James Hodgkinson 18fe86db26
X-Forwarded-For catcher - improve ip addr parsing (#1725) 2023-06-12 12:14:34 +10:00
Sebastiano Tocci 1c1b54df86
Crono expression parser fix (#1682) 2023-06-03 13:07:29 +10:00
Kenton Groombridge e3d5f3c8ae
SELinux support for kanidm-unixd-tasks daemon (#1661)
* selinux is an optional feature
* unix_integration: add selinux config option

On SELinux systems, this setting controls whether SELinux relabeling of
newly created home directories should be performed. The default value of
this is on (even on non-SELinux systems), but the tasks daemon will
perform an additional runtime check for SELinux support and will disable
this feature automatically if this check fails.

* unix_integration: wire up home dir selinux labeling
* unix_integration: create equivalence rules in SELinux policy for aliases
* book: document selinux setting
* Add myself to CONTRIBUTORS.md

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
2023-05-30 19:51:12 +10:00
James Hodgkinson 5573ab9224
RADIUS container fixes (#1424) 2023-03-07 11:50:45 +10:00
Firstyear e33beea89d
1399 cleanup cli docs (#1413)
* Cleanup cli args
* Update book
* Update wasm
* making the CI happy


---------

Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2023-03-02 12:47:23 +10:00
Yuxuan Lu 251feac7cb
Fix debian build path (#1331)
* Update CONTRIBUTORS
* Fix debian & ubuntu packaging
* Use standard way to install pam config
* Fix simple_pkg.sh & add pam nss instructions
* Merge ssh with unixd; update CI to build for multiple os versions; upload packages to artifacts
2023-01-25 09:45:55 +10:00
James Hodgkinson b8dcb47f93
Spell checking and stuff (#1314)
* codespell run and spelling fixes
* some clippying
* minor fmt fix
* making yamllint happy
* adding codespell github action
2023-01-10 13:50:53 +10:00
Firstyear ed149e3825
Cleanup references to sqlite, add a FAQ section (#1307)
* Cleanup references to sqlite, add a FAQ section
* Formatting
2023-01-04 06:33:52 +10:00
Firstyear 27cb3d8510
20221224 cleanup (#1300)
* Cleanup
* schema
* Remove some Cell
* Fix mut
* clippy
2022-12-28 17:52:25 +10:00
Jan Christoph Ebersbach fd8afa065f
docs: reformat book and introduce workflow to ensure it stays formatted (#1286) 2022-12-27 08:52:03 +10:00
Firstyear def8f3f1bd
20221221 sync deploy (#1285) 2022-12-22 18:03:29 +10:00
Firstyear 3760615ddf
20221219 sync polish (#1284) 2022-12-21 09:53:57 +10:00
kalebo 55ee2410d7
Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113) 2022-11-04 09:49:11 +10:00
James Hodgkinson d179b23476
Systemd Unit Files in Deb packages (#1119)
* Adding systemd unit files for DEB packages, closes #1093
2022-10-12 13:17:04 +10:00
Firstyear 1908364075
Add trust x forward for option (#1112)
* Add trust x forward for option
2022-10-10 21:18:57 +10:00
James Hodgkinson f0caec57a2
Python updoots (#1081) 2022-09-29 10:08:15 +10:00
Firstyear ad468f0dfa
Add net bind service docs (#1070) 2022-09-21 13:51:23 +10:00
James Hodgkinson 657cefb4f1
TLS is now required for all connections (#1069) 2022-09-21 13:36:58 +10:00
James Hodgkinson d14c2d2330
Book updates (#1067)
* blep

* more blep

* fixed book build issues, updooted some FAQ and troubleshooting things

* more random updoots

* dat yak thoe
2022-09-21 13:05:32 +10:00
James Hodgkinson 66954213db
#896 kanidm_unixd UX updoots (#1024) 2022-09-08 13:37:03 +10:00
James Hodgkinson 845cabb206
A pile of Wasm UI tweaks (#958) 2022-08-01 15:52:01 +10:00
Firstyear 4151897948
383 164 authentication updates 9 (#956)
* implementation of passkeys as an auth mech
* listing the current passkeys when asking to remove one
* tweaking insecure dev server config so passkeys will work
* Fix domain rename
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-30 22:10:24 +10:00
James Hodgkinson 60f9541cdd
RADIUS fixes (#942)
* actually writing cert files properly now
* Updated readme with config file, fixed check for config file.
* minor tweaks to actions, removing job limits and skipping login to registry if not going to push
* removing old config.ini file
* temporarily adding Williams fixed package
2022-07-22 13:04:36 +10:00
James Hodgkinson 805ac2dd16
Python module and rewritten RADIUS integration (#826)
* added python kanidm module
* rewrote RADIUS integration
* updated the documentation
* updating github actions to run more often
* BLEEP BLOOP ASYNCIO IS GR8
* adding config to makefile to run pykanidm tests

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Firstyear <william@blackhats.net.au>
2022-06-20 20:16:55 +10:00
Kellin 790db7ea1d
Add domain key to example server configuration (#793)
- Adds the mandatory `domain` configuration key documentation to the
  configuration file at `examples/server.toml`.
2022-05-28 20:42:12 +10:00
James Hodgkinson a61ef91ac6
Fixes 654 - make DEVELOPER_README valid (#656)
* updating dev readme and scripting

* fixing confusing debug message about config loading
2022-03-28 08:36:25 +10:00
James Hodgkinson bc31d42f22
fixes #571 (#572) 2021-08-22 16:05:28 +10:00
cuberoot74088 b4f99c8e7a
Implement Online Backups (#25) (#536) 2021-07-31 17:13:46 +10:00
cuberoot74088 f3554d80cf
Set default shell to bin/sh (#488) 2021-06-19 15:35:11 +10:00
James Hodgkinson 35c1de4c45
Calming clippy's nerves, Friday edition (#448)
* whoa clippy you are very helpful
2021-05-21 16:35:09 +10:00
James Hodgkinson 08cf9a8dc7
Adding an example config file (#440) 2021-05-16 14:10:29 +10:00
Firstyear 4ba34d18e1
6 idm api design (#109)
Draft of the idm server rest api layout. This is no means a final representation of what this API will look like, but it's important that the ideas and direction, as well as capabilities were documented and discussed.
2019-09-30 19:01:20 +10:00