mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 20:47:01 +01:00
8cfa8f3f95
Implements #12, TOTP. This adds support for TOTP to the api and server, with server side token generation, authentication and the correct URI for encoding into QR codes for client token addition. Some extra measures have been taken such as in the stepped auth to always notify on the success or failure of the TOTP first (regardless of order) to prevent PW bruteforce attacks.
34 lines
1.1 KiB
Docker
34 lines
1.1 KiB
Docker
FROM opensuse/tumbleweed:latest AS ref_repo
|
|
RUN zypper mr -d repo-non-oss && \
|
|
zypper mr -d repo-oss && \
|
|
zypper mr -d repo-update && \
|
|
zypper ar https://download.opensuse.org/update/tumbleweed/ repo-update-https && \
|
|
zypper ar https://download.opensuse.org/tumbleweed/repo/oss/ repo-oss-https && \
|
|
zypper ar https://download.opensuse.org/tumbleweed/repo/non-oss/ repo-non-oss-https && \
|
|
zypper ref
|
|
|
|
# // setup the builder pkgs
|
|
FROM ref_repo AS build_base
|
|
RUN zypper install -y cargo rust gcc sqlite3-devel libopenssl-devel pam-devel
|
|
|
|
# // setup the runner pkgs
|
|
FROM ref_repo AS run_base
|
|
RUN zypper install -y sqlite3 openssl timezone pam
|
|
|
|
# // build artifacts
|
|
FROM build_base AS builder
|
|
|
|
COPY . /home/kanidm/
|
|
WORKDIR /home/kanidm/
|
|
RUN cargo build --release
|
|
|
|
# == end builder setup, we now have static artifacts.
|
|
FROM run_base
|
|
MAINTAINER william@blackhats.net.au
|
|
EXPOSE 8443
|
|
|
|
|
|
ENV RUST_BACKTRACE 1
|
|
CMD ["/sbin/kanidmd", "server", "-D", "/data/kanidm.db", "-C", "/data/ca.pem", "-c", "/data/cert.pem", "-k", "/data/key.pem", "--bindaddr", "0.0.0.0:8443"]
|
|
|