proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-08-15 13:12:36 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
317 Commits 5 Branches 0 Tags 988 KiB
369851ac6d
Commit Graph

317 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dominik Csapak
8bdbfd4ddf fix trailing whitespace 
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
 2017-08-08 11:46:10 +02:00
Dominik Csapak
23e0cf85fd fix #1470: ad: server and client certificate support 
as with ldap we now accept
the verify, capath, cert and certkey parameters for active directory

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
 2017-08-08 11:46:10 +02:00
Wolfgang Bumiller
e03c2aef17 ldap: server and client certificate support 
This adds 4 more options to the ldap authentication method:

verify: boolean
  If enabled, the server certificate must be valid

capath: path to a file or directory
  The CA to use to verify the server certificate. Used only
  if 'verify' is true.

cert: path to a certificate
  Used as client certificate when connecting to a server,
  provided 'secure' is true. Requires 'certkey' to be set.

certkey: path to the certificate's key
  Required only used when 'cert' is used.
 2017-08-08 11:46:10 +02:00
Dietmar Maurer
63134bd436 bump version to 5.0-5 
In order to test new package built with dpkg-buildpackage.
 2017-06-22 09:13:00 +02:00
Fabian Grünbichler
a96a6fd40c build: remove fakeroot from dpkg-buildpackage 2017-06-12 10:08:46 +02:00
Fabian Grünbichler
c0041fa369 build: add substitution variable 2017-06-12 10:07:25 +02:00
Fabian Grünbichler
55a76f8830 build: reformat b-d and depends 2017-06-12 10:05:09 +02:00
Fabian Grünbichler
20922e7fbd build: make control static 2017-06-12 10:02:22 +02:00
Thomas Lamprecht
98eb404f77 change from dpkg-deb to dpkg-buildpackage 
add debian directory and move the respective files there and add
missing (rules, compat).

Add a Source section to the control.in file.

Move the verify_api check to the new "test" target, which gets
executed before the dh_auto_install target.

Cleanup the "clean" target.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2017-06-12 09:58:59 +02:00
Dietmar Maurer
868fb1eae5 bump version to 5.0-4 2017-05-02 11:58:54 +02:00
Dietmar Maurer
e623414a30 PVE/CLI/pveum.pm: call setup_default_cli_env() 2017-05-02 10:39:22 +02:00
Dietmar Maurer
3641833bc0 PVE/Auth/PVE.pm: encode uft8 password before calling crypt 2017-05-02 10:37:20 +02:00
Dietmar Maurer
d146e52028 check_api2_permissions: avoid warning about uninitialized value 2017-03-31 17:05:52 +02:00
Dietmar Maurer
63358f40b3 use new PVE::Tools::encrypt_pw, bump version to 5.0-3 2017-03-30 17:54:38 +02:00
Dietmar Maurer
972859d115 use new PVE::OTP class from pve-common 2017-03-30 17:44:54 +02:00
Dietmar Maurer
05fd50af58 bump version to 5.0-2 2017-03-30 08:54:30 +02:00
Dietmar Maurer
54028297ea encrypt_pw: avoid '+' for crypt salt 
And make salt less predictable.
 2017-03-30 08:53:12 +02:00
Fabian Grünbichler
0835385bea bump release to 5.0 2017-03-13 11:25:30 +01:00
Fabian Grünbichler
3b6996cd8e buildsys: update make upload target for stretch 2017-03-13 11:25:30 +01:00
Wolfgang Bumiller
156fd8f736 buildsys: use fakeroot for dpkg-deb 2017-02-06 11:47:37 +01:00
Wolfgang Bumiller
8ae77032bd buildsys: use gzip -n to disable timestamps 2017-02-06 11:47:18 +01:00
Wolfgang Bumiller
4e515e6d6d buildsys: make job safety 2017-02-06 11:46:12 +01:00
Dietmar Maurer
730f8863eb bump version to 4.0-23 2017-01-19 13:42:26 +01:00
Dietmar Maurer
81bc8fa7e0 remove old test.pl code (does not work anyways). 2017-01-19 13:41:12 +01:00
Dietmar Maurer
a1f8aaae84 use new PVE::Ticket class 2017-01-19 13:40:25 +01:00
Dietmar Maurer
1f1c4593a1 bump version to 4.0-22 2017-01-19 09:12:34 +01:00
Dietmar Maurer
e83e0ed584 RPCEnvironment: removed check_volume_access() to avoid cyclic dependency 
moved to PVE::Storage
 2017-01-18 17:35:50 +01:00
Dietmar Maurer
c104e4abe6 PVE::PCEnvironment: use new PVE::RESTEnvironment as base class 2017-01-18 13:25:51 +01:00
Dietmar Maurer
f910506387 bump versuion to 4.0-21 2017-01-12 13:56:28 +01:00
Dietmar Maurer
86c4f1e6d1 setup_default_cli_env: expect $class as first parameter 2017-01-12 13:53:18 +01:00
Dietmar Maurer
9595066e5f bump version to 4.0-20 2017-01-12 10:01:17 +01:00
Dietmar Maurer
5ae5900d26 PVE/RPCEnvironment.pm: new function setup_default_cli_env 
Convenience function for command line tools.
 2017-01-12 10:01:17 +01:00
Dietmar Maurer
52b2eff3c5 PVE/API2/Domains.pm: fix property description 2017-01-11 12:11:01 +01:00
Dietmar Maurer
eecad221ba use new repoman for upload target 2016-08-05 13:10:17 +02:00
Dietmar Maurer
2af5a79392 bump version to 4.0-19 2016-08-05 13:09:27 +02:00
Wolfgang Bumiller
b5040b42f1 Close #833: ldap: non-anonymous bind support 
The password will be read from /etc/pve/priv/ldap/$realm.pw
 2016-08-05 10:59:14 +02:00
Wolfgang Bumiller
03e2a71e3d don't import 'RFC' from MIME::Base32 
call encode_rfc3548 explicitly instead as newer versions of
the base32 package will drop this import scheme (stretch)
 2016-07-26 15:02:49 +02:00
Wolfgang Bumiller
5d87bb77e4 bump version to 4.0-18 2016-07-21 08:44:25 +02:00
Dominik Csapak
5426494b10 fix #1062: use correct length for base32 keys 
we wrongly assumed the keys to be 32 chars long,
instead of 16

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
 2016-07-20 15:21:48 +02:00
Wolfgang Bumiller
28ddf48b46 bump version to 4.0-17 2016-07-11 12:04:39 +02:00
Wolfgang Bumiller
9d52f6f2ae drop oathtool dependency 
Generate hotp/totp in perl directly, also support keys in
hex notation (this is how eg. the
yubikey-personalization-gui displays them, but without the
whitespaces).
 2016-07-01 10:21:53 +02:00
Wolfgang Bumiller
b10d0e266b drop libdigest-hmac-perl dependency 
Its functionality is provided by perl core's Digest::SHA
module now.
 2016-07-01 10:21:53 +02:00
Dietmar Maurer
175d238cc9 remove unused inline docs 2016-04-08 07:08:23 +02:00
Dietmar Maurer
15cebb282b use pve-doc-generator, bump version to 4.0-16 2016-04-08 07:06:27 +02:00
Dietmar Maurer
678df887bc bump version to 4.0-15 2016-04-01 07:11:24 +02:00
Fabian Grünbichler
8978ab373c Fix uninitialized warning 
when shadow.cfg does not exist, parsing should return an
empty hash instead of displaying a warning
 2016-04-01 07:10:23 +02:00
Dietmar Maurer
cca9761a20 bump version to 4.0-14 2016-03-15 16:47:51 +01:00
Fabian Grünbichler
7b6dfe82df Add is_worker to RPCEnvironment 
after forking the actual worker process, the child/worker
sets a flag that can be checked later on by methods called
in the worker.

used in the ZFS storage plugins in pve-storage to decide on
a short or long default timeout for ZFS operations.
 2016-03-15 16:47:11 +01:00
Dietmar Maurer
8643c99de5 bump version to 4.0-13 2016-03-14 11:39:43 +01:00
Fabian Grünbichler
1075c589ee fix typos and grammar 2016-03-14 11:38:50 +01:00