Revisions of himmelblau
buildservice-autocommit
accepted
request 1217101
from
David Mulder (dmulder)
(revision 38)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1217100
from
David Mulder (dmulder)
(revision 37)
- Update to version 0.6.14+git.0.bbda0b6: * Version 0.6.14 * postinst should not fail on patch or apparmor update * Version 0.6.13 * Don't use sudo in postinst/postrm scripts for deb * Version 0.6.12 * PAM should be placed first in the stack * Match the object ID of the fake user and group * Version 0.6.11 * Move sshd config into it's own debian package * Version 0.6.10 * Allow the graph to start w/out network * Add hello_pin_min_length conf option * Version 0.6.9 * Don't attempt SFA fallback if AADSTSError * Have libhimmelblau handle the DAG fallback * Add a warning to user that SSH needs restarted * Version 0.6.8 * Ensure local users are ignored when CN mapping * Ensure DAG is rejected if lifetime expires * Version 0.6.7 * Rework the poll logic to resolve timeout issues * Version 0.6.6 * Add a sshd soft depends for the deb package * CN name mapping in PAM and NSS * Version 0.6.5 * Make CN an optional home directory attribute * Version 0.6.4 * Add Ubuntu pam-config for pam_himmelblau * Configuration patches for himmelblau on Debian * Version 0.6.3 * Bug in pam which needs defended against * Version 0.6.2 * Never return the Pam result from get_user() * Correct installation directory of the deb pam module * Makefile typo fixes * Add libdbus-1-dev dep * Version 0.6.1 * Debian build requires libdbus-1-dev
buildservice-autocommit
accepted
request 1205551
from
David Mulder (dmulder)
(revision 36)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1205329
from
David Mulder (dmulder)
(revision 35)
- Update to version 0.6.0+git.0.b8dae18: * Attempt to fix the cargo version in launchpad build * Add branch stable-0.6.x to the workflows * Install the pam module to the proper location * Update README.md * Add a debug option to the config * Add a pam option for the OpenSSH 2876 workaround * Update to the latest libhimmelblau * Authorize all users when pam_allow_groups is empty * Fix clippy warnings * Fix pam echo not displayed via ssh * Fix pam failure to register Pin following mfa poll * Fork from kanidm * Version 0.6.0 * Add cargo deb build * Version 0.5.3 * Improve the README installation instructions * Add `make install` command * Improve Debian/Ubuntu install instructions * Fix tag push permissions for tag-version workflow * Version 0.5.2 * Add a version check script * Version 0.5.1 * Remove the rustc dependency, breaking rustup * Added Debian packaging workflow and files
buildservice-autocommit
accepted
request 1202070
from
William Brown (firstyear)
(revision 34)
baserev update by copy to link target
William Brown (firstyear)
accepted
request 1200212
from
William Brown (firstyear)
(revision 33)
- explicitly depend on cargo to pull in latest compiler revision
buildservice-autocommit
accepted
request 1198755
from
David Mulder (dmulder)
(revision 32)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1198750
from
David Mulder (dmulder)
(revision 31)
- Update to version 0.5.0+git.0.22f84f0: * Update workflows for 0.5.x * Update Debian dependencies in README.md * Compilation fails on Ubuntu, missing ldb header * Fix base32 with kandim updates * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0 * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2 * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1 * Fix CI failures caused by cargo 1.80.1 * Update to libhimmelblau version 0.2.9 * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0 * deps(rust): update tonic requirement from 0.11.0 to 0.12.0 * update libnss requirement from 0.7.0 to 0.8.0 * Switch to using libhimmelblau * himmelblaud stops working after suspend * Update required packages for tumbleweed * Disable the SFA fallback by default * Fix ConsolidatedTelephony MFA method * Use the group ID for the name if no display name * Use latest msal with MFA fixes * PhoneAppNotification is not a cred request algorithm * The polling_interval is in milliseconds, not seconds * OneWaySMS is additionally a valid OTP * Relicensing as GPL3, as SSSD source inclusion requires * Utilize the graph code in msal * config: Remove comments about experimental policy enforement * Remove the experimental policy code from the id provider * Fix a refresh token leak in debug from msal * Correct README details * Always normalize idmap upn inputs * Add video links to the README * Minor updates to the Contributing section * Add a Installation section to the README * Add the new SSSD idmap build deps to the README * Add a section about donations * Include the Samba Technical matrix channel * Add github workflows for the 0.4.x branch * Version 0.5.0 bump for main
buildservice-autocommit
accepted
request 1187593
from
David Mulder (dmulder)
(revision 30)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1187592
from
David Mulder (dmulder)
(revision 29)
- Update to version 0.4.3+git.2.6379abc: * Specifically use msal 0.2.6 * Version 0.4.3 * update libnss requirement from 0.7.0 to 0.8.0 * himmelblaud stops working after suspend * Version 0.4.2 * Fix ConsolidatedTelephony MFA method
buildservice-autocommit
accepted
request 1177635
from
David Mulder (dmulder)
(revision 28)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1177633
from
David Mulder (dmulder)
(revision 27)
- Update to version 0.4.1+git.0.41dd0dc: * Version 0.4.1 * Use latest msal with MFA fixes * PhoneAppNotification is not a cred request algorithm * The polling_interval is in milliseconds, not seconds * OneWaySMS is additionally a valid OTP * Relicensing as GPL3, as SSSD source inclusion requires
buildservice-autocommit
accepted
request 1175969
from
David Mulder (dmulder)
(revision 26)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1175968
from
David Mulder (dmulder)
(revision 25)
- Update to version 0.4.0+git.4.63e3704: * Fix a refresh token leak in debug from msal
buildservice-autocommit
accepted
request 1175881
from
David Mulder (dmulder)
(revision 24)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1175878
from
David Mulder (dmulder)
(revision 23)
- Update to version 0.4.0+git.2.7b57f5e: * Always normalize idmap upn inputs
buildservice-autocommit
accepted
request 1175396
from
David Mulder (dmulder)
(revision 22)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1175395
from
David Mulder (dmulder)
(revision 21)
- Update to version 0.4.0+git.0.69b64fe: * Add github workflows for the 0.4.x branch * Do not append to pam_allow_groups automatically * Pam Allow Groups must be specified by Object ID * Request the correct resource and permissions * Improve error output on group lookup failure * When faking a uuid for NSS, use a random uuid * Fix clippy warning about inefficient use of clone() * Remove the initial uid hack, use name mapping * Don't stop an MR based on a clippy warning * Update Kanidm tracking * Modify CI workflows to handle idmap build * Add CI job for cargo test * Test the new and legacy idmapping * Ensure duplicate providers are not started * Use the SSSD Idmap code in Himmelblau * Specify in conf that pam_allow_groups is required * Remove code duplication in Hello PIN auth * Fix Device authentication failed after enrollment * Update the base64urlsafedata version * Update README.md with Matrix contact info * Version 0.4.0
buildservice-autocommit
accepted
request 1174276
from
David Mulder (dmulder)
(revision 20)
baserev update by copy to link target
David Mulder (dmulder)
accepted
request 1174273
from
David Mulder (dmulder)
(revision 19)
- Update to version 0.3.4+git.0.01d099f: * Version 0.3.4 * Only remove cached user if it doesn't exist * Use existing user token at refresh * Always use the spn of the user for nss requests * Generate a fake user token to please SSH * Fix aad-tool to handle MFA * Fix lib_crypto version * Fix user dropping from NSS
Displaying revisions 1 - 20 of 38