efa09d5e1d
providers/ldap: fix: Return user DN with virtual group ( #1142 )
...
* fix: incorrect ldap virtual group member DN
Signed-off-by: Toboshii Nakama <toboshii@gmail.com>
* fix: imports
Signed-off-by: Toboshii Nakama <toboshii@gmail.com>
2021-07-14 10:59:40 +00:00
7f39399c32
providers/ldap: Added auto-generated uidNumber and guidNumber generated attributes for use with SSSD and similar software. ( #1138 )
...
* Added auto-generated uidNumber and guidNumber generated attributes for
use with SSSD and similar software.
The starting number for uid/gid can be configured iva environtment
variables and is by default 2000 which should work fine for most instances unless there are more than
999 local accounts on the server/computer.
The uidNumber is just the users Pk + the starting number.
The guidNumber is calculated by the last couple of bytes in the uuid of
the group + the starting number, this should have a low enough chance
for collisions that it's going to be fine for most use cases.
I have not added any interface stuff for configuring the environment variables as I couldn't really find my way around all the places I'd have to edit to add it and the default values should in my opinion be fine for 99% use cases.
* Add a 'fake' primary group for each user
* First attempt att adding config to interface
* Updated API to support new fields
* Refactor code, update documentation and remove obsolete comment
Simplify `GetRIDForGroup`, was a bit overcomplicated before.
Add an additional class/struct `LDAPGroup` which is the new argument
for `pi.GroupEntry` and util functions to create `LDAPGroup` from api.Group and api.User
Add proper support in the interface for changing gidNumber and uidNumber starting points
* make lint-fix for the migration files
2021-07-14 09:17:01 +02:00
7dfc621ae4
LDAP Provider: TLS support ( #1137 )
2021-07-13 18:24:18 +02:00
da8417a141
outposts/ldap: re-add old fields for backwards compatibility
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-04 18:10:39 +02:00
ade8644da6
outposts/ldap: add support for boolean fields in ldap
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-01 11:51:07 +02:00
2543b075be
outposts/ldap: fixed IsActive and IsSuperuser returning swapped incorrect values ( #1078 )
...
IsActive and IsSuperuser attributes were interchanged.
2021-06-26 15:07:43 +02:00
3a88dde545
web: fix declaration of Intl
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-13 23:13:43 +02:00
d824b09365
outposts/ldap: improve responses for unsuccessful binds
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-13 22:00:05 +02:00
7524e114d9
outpost/ldap: add http server for healthchecks
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-06 23:07:13 +02:00
523621daa2
core: make application's check_access API return a PolicyResult and accept for_user as superuser
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-26 11:47:23 +02:00
127ebed5c6
flows: fix mismatched names
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-24 21:09:18 +02:00
2a5926608f
outposts/ldap: return user info when user can't search
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-24 16:09:05 +02:00
763c3fcfe0
outposts/ldap: fix client usage
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-24 15:58:59 +02:00
25a88c17d1
outpost: update to new api schema
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-24 14:41:40 +02:00
6bd27d27ec
outpost: use shorter API Calls
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-16 21:35:23 +02:00
a5233f89b2
outpost: migrate to openapitools/openapi-generator-cli
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-16 21:07:01 +02:00
81056c3889
LDAP: use username instead of name for user dn ( #883 )
2021-05-14 12:58:27 +02:00
e9aa37ba67
outposts/ldap: fix user info caching, fix mixed case DN
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#864
2021-05-12 18:49:15 +02:00
9a0aa4c79b
outposts/ldap: add infinite loop prevention
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-12 18:31:44 +02:00
f1fd223bc7
outposts/ldap: fix concurrency issues
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-08 21:21:53 +02:00
9485f0b8cc
outpost/ldap: make users and groups OU instead of CN
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-07 11:46:26 +02:00
446f104c90
core: add user UID to API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 11:54:28 +02:00
32934fcd38
outpost/ldap: check access based on Group Membership
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 00:03:19 +02:00
08451c15f4
outposts/ldap: save user DN to determine who can search
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-04 21:49:15 +02:00
e7b498e8b4
outposts/ldap: use forked version of ldap library
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-29 21:06:30 +02:00
d27dfcc1e3
outposts/ldap: improve logging,return success for empty DN
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 23:25:31 +02:00
2a122845d9
core: add groups to users
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 19:51:24 +02:00
91ca90f700
outposts/ldap: add dockerfile
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 15:35:56 +02:00
b3c8ffb96c
outposts/ldap: use authorization_flow instead of separate field
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 15:09:41 +02:00
dcd80c6d63
outposts/ldap: fix linting
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 12:24:46 +02:00
5b150657f5
outposts/ldap: add ability to use multiple providers on the same outpost
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 11:53:06 +02:00
2f3bf5efe7
outposts/ldap: check application access
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 10:46:53 +02:00
6c9b3ebd2b
outposts: add LDAP Binding using flows
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-25 22:07:12 +02:00
4f5e1fb86b
outposts: initial ldap outpost implementation
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-20 00:30:27 +02:00
Toboshii Nakama
Lukas Söder
Jens L
linogics
Andreas Egli