trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
11,814 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

13 Commits

Author SHA1 Message Date
Marc 'risson' Schmitt 5d87eb97be outposts/ldap: fix race condition when refreshing the provider 
Fixes the race condition causing the crash found in #4138, which doesn't
actually have anything to do with the issue itself.

As far as I can work out, when the outpost refreshes its list of
providers, it copies over its `boundUsers`, probably to avoid having to
fetch them all again, and does so by making a shallow copy of that
`map`, but not the mutex associated with it. It now has multiple
references to the same map, each protected by a different mutex, which
under certain conditions can cause a `concurrent map read and map write`
error.

This fix copies the map contents instead of make a shallow copy.

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2023-06-02 15:42:19 +02:00
Jens L a9b32e2f97
providers/ldap: add unbind flow execution (#4484) 
add unbind flow execution

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-23 20:36:30 +01:00
Jens Langhammer ff13b4bb46
outposts/ldap: use configured certificate for LDAPS when all providers' certificates are identical 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 19:15:29 +01:00
Jens Langhammer 8d3275817b providers/ldap: fix existing binder not being carried forward correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-06-05 18:51:01 +02:00
Jens Langhammer bb244b8338 providers/ldap: fix session cache being lost on provider refresh 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-06-04 18:03:00 +02:00
Jens Langhammer 5c91658484 internal: fix nil pointer dereference in ldap outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-21 15:48:50 +02:00
dependabot[bot] 4d755dc0f6
build(deps): bump goauthentik.io/api/v3 from 3.2022041.4 to 3.2022041.5 (#2843) 
* build(deps): bump goauthentik.io/api/v3 from 3.2022041.4 to 3.2022041.5

Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go) from 3.2022041.4 to 3.2022041.5.
- [Release notes](https://github.com/goauthentik/client-go/releases)
- [Commits](https://github.com/goauthentik/client-go/compare/v3.2022041.4...v3.2022041.5)

---
updated-dependencies:
- dependency-name: goauthentik.io/api/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-10 20:33:19 +02:00
Jens L ab2299ba1e
outposts/ldap: cached bind (#2824) 
* initial cached ldap bind support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add web

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* clean up api generation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use gh action for golangci-lint

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-08 16:48:53 +02:00
Jens Langhammer 62a939b91d internal: bump api client to v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-03-03 10:40:07 +01:00
Jens Langhammer ae9f1c1063 outpost/ldap: fix panic when attempting to update without locked users mutex 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-18 19:36:27 +01:00
Jens Langhammer f069cfb643 outposts/ldap: copy boundUsers map when running refresh instead of using blank map 
closes #1651

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-13 00:26:01 +01:00
Jens L 5a8c66d325
providers/ldap: memory Query (#1681) 
* outposts/ldap: modularise ldap outpost, to allow different searchers and binders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add basic in-memory searcher

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:37:30 +01:00
Jens Langhammer a6a6b3bd06 outposts: add outpost_name label to metrics 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 10:04:17 +02:00