proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-08-14 07:32:00 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
562 Commits 5 Branches 0 Tags 988 KiB
stable-7
Commit Graph

99 Commits

Author SHA1 Message Date
Thomas Lamprecht
f96a4de50d bump version to 7.4.3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-02-08 19:05:13 +01:00
Thomas Lamprecht
2c450c34d4 bump version to 7.4.2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-02-08 18:54:57 +01:00
Fabian Grünbichler
97a3696297 bump version to 7.4.1 
switch to native version while we are at it.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2023-06-09 12:00:16 +02:00
Wolfgang Bumiller
f2762a0359 bump version to 7.4-3 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-16 13:33:54 +02:00
Wolfgang Bumiller
d9f02efe49 use TFA authentication api v2 
Previously `authentication_verify` just `die`d on error and
would only return a boolean whether `priv/tfa.cfg` needs
updating as a positive result.

Since we want to support locking TOTP as well as a general
TFA lock-out via the config, we also want to be able to tell
when this occurs. Most of it is handled by the TFA rust
crate already, but notifying users needs to be done on this
end instead.

In pve-rs we now have a different API for this:
`authentication_verify2`, which, instead of die()ing on
errors, always returns a hash containing the result as well
as the flags 'tfa-limit-reached' and 'totp-limit-reached'
which, if set, tell us to notify the user.

However, doing so will introduce new fields in the
`priv/tfa.cfg` in a struct marked as `deny_unknown_fields`,
so in a cluster, the limits & notification handling should
only be done once we can be sure that all nodes are up to
date.

These fields are only introduced on login errors, so for
now, handle a failed result early without saving
`priv/tfa.cfg`.
The only case where saving the file was previously required
was when *successfully* logging in with a recovery key, by
which we cannot be reaching a limit, so this should still be
safe.

Once we can validate that all cluster nodes are up to date,
we can implement the notification system.
A commented-out code structure for this is included in this
patch.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-15 09:06:28 +02:00
Thomas Lamprecht
f0595d158e bump version to 7.4-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-23 15:44:29 +01:00
Thomas Lamprecht
a23eaa1a12 bump version to 7.4-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-20 17:16:15 +01:00
Thomas Lamprecht
df33b3b949 bump version to 7.3-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-06 11:40:15 +01:00
Fabian Grünbichler
25fb12c4cb d/control: wrap-and-sort 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2023-01-10 14:49:35 +01:00
Fabian Grünbichler
c00ad67e40 build: add missing build-dependency 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2023-01-10 14:48:50 +01:00
Thomas Lamprecht
2da8c203f9 bump version to 7.3-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-12-16 13:11:08 +01:00
Thomas Lamprecht
b84bf6238b bump version to 7.2-5 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-11-17 13:09:21 +01:00
Thomas Lamprecht
f4e68e4908 bump version to 7.2-4 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-07-14 13:06:55 +02:00
Thomas Lamprecht
26dde49104 bump version to 7.2-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-20 15:51:19 +02:00
Thomas Lamprecht
1cf4389b42 bump version to 7.2-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-03 14:02:35 +02:00
Thomas Lamprecht
7d23b7cac8 tree wide: typo fixes 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-03 13:58:07 +02:00
Thomas Lamprecht
e3604d4827 bump version to 7.2-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-05-31 13:43:47 +02:00
Thomas Lamprecht
79ae250ff9 bump version to 7.1-8 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-04-28 17:02:54 +02:00
Thomas Lamprecht
eed462861b bump version to 7.1-7 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-03-21 16:15:29 +01:00
Fabian Grünbichler
cd78b2958f bump version to 7.1-6 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2022-01-21 14:21:04 +01:00
Thomas Lamprecht
118088d89e bump version to 7.1-5 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-25 07:59:21 +01:00
Wolfgang Bumiller
ebb14277f1 bump version to 7.1-4 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-11-22 14:04:57 +01:00
Thomas Lamprecht
44a55ff792 bump version to 7.1-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-19 14:35:44 +01:00
Thomas Lamprecht
8a47ffa50b d/control: bump versioned dependency to libpve-rs-perl 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-19 14:35:44 +01:00
Thomas Lamprecht
6f643e7953 bump version to 7.1-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-17 13:48:24 +01:00
Thomas Lamprecht
dbbd91c27f d/control: bump versioned dependency to libpve-rs-perl 
to ensure we get the incompatible type set for such TFA entries

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-17 13:48:24 +01:00
Thomas Lamprecht
92bca71e86 bump version to 7.1-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-15 15:33:29 +01:00
Thomas Lamprecht
1c9b650186 bump version to 7.0-7 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-11 18:20:02 +01:00
Thomas Lamprecht
4a26e5f1c1 d/control: break pve-manager (<< 7.0-15) 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-11 18:19:52 +01:00
Wolfgang Bumiller
fb1a49f313 d/control: add liburi-perl dependency 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-11-10 13:52:40 +01:00
Thomas Lamprecht
cd46b379b3 bump version to 7.0-6 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-10-21 12:28:58 +02:00
Thomas Lamprecht
52da88a86c bump version to 7.0-5 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-10-04 12:47:15 +02:00
Thomas Lamprecht
543d646c44 bump version to 7.0-4 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-07-02 13:45:51 +02:00
Dietmar Maurer
f0c9ef167b depend on libpve-rs-perl 2021-07-01 13:13:59 +02:00
Thomas Lamprecht
7a4c4fd870 bump version to 7.0-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-06-21 10:31:23 +02:00
Fabian Grünbichler
0902a936f3 bump version to 7.0-2 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2021-06-01 11:29:49 +02:00
Fabian Grünbichler
8ac53236df d/control: add missing libuuid-perl b-d 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2021-05-19 11:54:26 +02:00
Thomas Lamprecht
67febb6933 bump version to 7.0-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-09 19:48:50 +02:00
Thomas Lamprecht
d4c9a54e35 d/control: update standards version 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-09 19:48:50 +02:00
Thomas Lamprecht
ce4b5d6066 d/control: drop perl dependency, added by ${perl:Depends} 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-09 19:48:50 +02:00
Thomas Lamprecht
08eb54c9dc d/control: bump debhelper compat to >= 12 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-09 18:16:38 +02:00
Thomas Lamprecht
ebcefa86d4 d/rules: fix dh_missing override 
note, with compat level >= 13 we can drop that override finally

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-05-09 18:16:04 +02:00
Thomas Lamprecht
2942ba4139 bump version to 6.4-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-04-24 19:48:25 +02:00
Thomas Lamprecht
54d312f350 bump version to 6.1-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-09-29 08:55:56 +02:00
Thomas Lamprecht
6a9be12f55 bump version to 6.1-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-06-30 13:06:59 +02:00
Thomas Lamprecht
e6624f504b bump version to 6.1-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-05-08 17:47:50 +02:00
Thomas Lamprecht
8f4a522f4f bump version to 6.0-7 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-04-25 19:35:20 +02:00
Thomas Lamprecht
8d400e7ece d/control: bump versioned to libpve-common-perl 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-03-21 16:51:06 +01:00
Thomas Lamprecht
c63e26c84e d/control: bump versioned dependency to pve-common 
to ensure we've the new LDAP module available

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-03-07 19:53:07 +01:00
Thomas Lamprecht
23059f3572 bump version to 6.0-6 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2020-01-29 21:21:59 +01:00