proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-10-19 08:42:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
638 Commits 5 Branches 0 Tags 988 KiB
37a813d721
Commit Graph

119 Commits

Author SHA1 Message Date
Thomas Lamprecht
2c74a9abd5 bump version to 8.1.4 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-04-22 13:45:27 +02:00
Thomas Lamprecht
787e4c06e3 bump version to 8.1.3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-03-22 14:14:39 +01:00
Thomas Lamprecht
85f6129773 bump version to 8.1.2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-02-28 15:42:20 +01:00
Thomas Lamprecht
588927f14a bump version to 8.1.1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-02-08 19:03:31 +01:00
Thomas Lamprecht
6324cbb39c bump version to 8.1.0 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2024-02-08 18:20:40 +01:00
Wolfgang Bumiller
ffc4e503ec bump version to 8.0.7 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-11-20 12:24:32 +01:00
Thomas Lamprecht
401e32056e bump version to 8.0.6 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-11-17 08:27:22 +01:00
Wolfgang Bumiller
b8a52eac77 bump version to 8.0.5 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-08-11 13:35:37 +02:00
Wolfgang Bumiller
9ac31bc6d3 bump pve-common dependency to 8.0.8 
required for next patch introducing the check-connection parameter for
ldap based realms

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-08-11 13:30:59 +02:00
Wolfgang Bumiller
33e4480a77 bump version to 8.0.4 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-07-20 10:59:56 +02:00
Thomas Lamprecht
8a856968f7 bump version to 8.0.3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-21 19:45:32 +02:00
Thomas Lamprecht
1852a92938 bump version to 8.0.2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-21 18:13:58 +02:00
Thomas Lamprecht
ebf82c7781 bump version to 8.0.1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-09 16:12:05 +02:00
Thomas Lamprecht
6004f25eda bump version to 8.0.0 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-09 10:14:36 +02:00
Thomas Lamprecht
8e8023b1e9 bump version to 8.0.0~3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-07 19:12:08 +02:00
Thomas Lamprecht
3ef602fe95 bump version to 8.0.0~2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-06-07 11:34:33 +02:00
Wolfgang Bumiller
f63364a755 bump version to 8.0.0~1 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-06-05 14:52:39 +02:00
Wolfgang Bumiller
209e9ab340 bump pve-rs dep to 0.8.3 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-06-05 12:59:32 +02:00
Wolfgang Bumiller
6b190c646e depend on pve-rs 0.8.0 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-22 10:27:15 +02:00
Wolfgang Bumiller
4a0d424f30 add anyevent to build deps 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-22 08:12:31 +02:00
Thomas Lamprecht
a3dc6ff488 bump version to 7.99.0 
use a pre-release like version as we got some breaking changes
planned for access control, so might be nice to get (most of) them in
a 8.0.0 for simpler versioned  dependencies (>= 8~), but it's also
just a bit of an experiment to see how doing such things plays out,
in the end we can cope with whatever versioning for dependency as bug
fixes might make it necessary to have a more specific version
boundary anyway.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-05-21 12:44:21 +02:00
Thomas Lamprecht
e6911a0845 d/control: raise standards version compliance to 4.6.2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-05-21 12:38:08 +02:00
Thomas Lamprecht
7426bae5c6 d/control: define compat level via build-depends and raise to 13 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-05-21 12:37:11 +02:00
Wolfgang Bumiller
f2762a0359 bump version to 7.4-3 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-16 13:33:54 +02:00
Wolfgang Bumiller
d9f02efe49 use TFA authentication api v2 
Previously `authentication_verify` just `die`d on error and
would only return a boolean whether `priv/tfa.cfg` needs
updating as a positive result.

Since we want to support locking TOTP as well as a general
TFA lock-out via the config, we also want to be able to tell
when this occurs. Most of it is handled by the TFA rust
crate already, but notifying users needs to be done on this
end instead.

In pve-rs we now have a different API for this:
`authentication_verify2`, which, instead of die()ing on
errors, always returns a hash containing the result as well
as the flags 'tfa-limit-reached' and 'totp-limit-reached'
which, if set, tell us to notify the user.

However, doing so will introduce new fields in the
`priv/tfa.cfg` in a struct marked as `deny_unknown_fields`,
so in a cluster, the limits & notification handling should
only be done once we can be sure that all nodes are up to
date.

These fields are only introduced on login errors, so for
now, handle a failed result early without saving
`priv/tfa.cfg`.
The only case where saving the file was previously required
was when *successfully* logging in with a recovery key, by
which we cannot be reaching a limit, so this should still be
safe.

Once we can validate that all cluster nodes are up to date,
we can implement the notification system.
A commented-out code structure for this is included in this
patch.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2023-05-15 09:06:28 +02:00
Thomas Lamprecht
f0595d158e bump version to 7.4-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-23 15:44:29 +01:00
Thomas Lamprecht
a23eaa1a12 bump version to 7.4-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-20 17:16:15 +01:00
Thomas Lamprecht
df33b3b949 bump version to 7.3-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2023-03-06 11:40:15 +01:00
Fabian Grünbichler
25fb12c4cb d/control: wrap-and-sort 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2023-01-10 14:49:35 +01:00
Fabian Grünbichler
c00ad67e40 build: add missing build-dependency 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2023-01-10 14:48:50 +01:00
Thomas Lamprecht
2da8c203f9 bump version to 7.3-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-12-16 13:11:08 +01:00
Thomas Lamprecht
b84bf6238b bump version to 7.2-5 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-11-17 13:09:21 +01:00
Thomas Lamprecht
f4e68e4908 bump version to 7.2-4 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-07-14 13:06:55 +02:00
Thomas Lamprecht
26dde49104 bump version to 7.2-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-20 15:51:19 +02:00
Thomas Lamprecht
1cf4389b42 bump version to 7.2-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-03 14:02:35 +02:00
Thomas Lamprecht
7d23b7cac8 tree wide: typo fixes 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-06-03 13:58:07 +02:00
Thomas Lamprecht
e3604d4827 bump version to 7.2-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-05-31 13:43:47 +02:00
Thomas Lamprecht
79ae250ff9 bump version to 7.1-8 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-04-28 17:02:54 +02:00
Thomas Lamprecht
eed462861b bump version to 7.1-7 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2022-03-21 16:15:29 +01:00
Fabian Grünbichler
cd78b2958f bump version to 7.1-6 
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
 2022-01-21 14:21:04 +01:00
Thomas Lamprecht
118088d89e bump version to 7.1-5 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-25 07:59:21 +01:00
Wolfgang Bumiller
ebb14277f1 bump version to 7.1-4 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-11-22 14:04:57 +01:00
Thomas Lamprecht
44a55ff792 bump version to 7.1-3 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-19 14:35:44 +01:00
Thomas Lamprecht
8a47ffa50b d/control: bump versioned dependency to libpve-rs-perl 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-19 14:35:44 +01:00
Thomas Lamprecht
6f643e7953 bump version to 7.1-2 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-17 13:48:24 +01:00
Thomas Lamprecht
dbbd91c27f d/control: bump versioned dependency to libpve-rs-perl 
to ensure we get the incompatible type set for such TFA entries

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-17 13:48:24 +01:00
Thomas Lamprecht
92bca71e86 bump version to 7.1-1 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-15 15:33:29 +01:00
Thomas Lamprecht
1c9b650186 bump version to 7.0-7 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-11 18:20:02 +01:00
Thomas Lamprecht
4a26e5f1c1 d/control: break pve-manager (<< 7.0-15) 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 2021-11-11 18:19:52 +01:00
Wolfgang Bumiller
fb1a49f313 d/control: add liburi-perl dependency 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
 2021-11-10 13:52:40 +01:00