108 Commits

Author	SHA1	Message	Date
garrettmills	627499537d	Look up IAM from sudo hosts	2021-04-15 13:00:13 -05:00
garrettmills	7e3f198c04	Debugging	2021-04-15 12:51:23 -05:00
garrettmills	b26519ea88	Make sudo access managed via IAM rather than group checkmark	2021-04-15 10:56:11 -05:00
garrettmills	f2995899ec	Add ability to manage and grant IAM permissions as policy	2021-04-15 10:38:43 -05:00
garrettmills	5645e8fae1	Clean up IAM to allow relations w/o explicit definitions	2021-04-15 09:55:25 -05:00
garrettmills	a7ed5d09f1	Better IAM denial logging	2021-03-16 15:24:21 -05:00
garrettmills	3a91417db3	Add default user to allow for default groups and IAM	2021-03-15 17:45:18 -05:00
garrettmills	0844da594e	Show iam filter for machines	2021-03-15 17:13:09 -05:00
garrettmills	64ad8931f3	Show iamTarget in relevant forms	2021-03-15 16:55:50 -05:00
garrettmills	a9d7b1c047	Allow IAM policy to manage user access to machines & machine groups	2021-03-15 16:28:42 -05:00
garrettmills	d6e4ea2e56	Add ability to manage computers and computer groups from web interface	2021-03-15 16:10:23 -05:00
garrettmills	718414d924	Clean up sudo LDAP formatting	2021-03-10 23:53:22 -06:00
garrettmills	943c30fa96	Add support for sudo	2021-03-10 23:43:16 -06:00
garrettmills	3d2c4c0fec	Cast gidNumber to strings	2021-03-10 23:21:33 -06:00
garrettmills	8b8c2e076f	User model - fix LDAP gidNumber	2021-03-10 23:16:04 -06:00
garrettmills	0ee36dc429	User - resolve posix groups for all member groups	2021-03-10 20:15:04 -06:00
garrettmills	48f5b3f71a	Make all groups appear in LDAP, get posix GIDs	2021-03-10 20:12:06 -06:00
garrettmills	ef819b0a2e	Groups - allow flagging group as su equivalent	2021-03-10 20:06:43 -06:00
garrettmills	91fc8a65a2	Allow users to set login shell in profile	2021-03-10 19:43:51 -06:00
garrettmills	2d31eaa148	LDAP - properly cast gidNumber to string	2021-03-10 19:21:41 -06:00
garrettmills	82e25ccef0	LDAP - support posixGroups in group model	2021-03-10 19:12:46 -06:00
garrettmills	53a1662f70	LDAP - specify user homeDirectory	2021-03-10 18:37:32 -06:00
garrettmills	dbb8684f68	LDAP - set default loginShell	2021-03-10 18:31:43 -06:00
garrettmills	6a4f82611b	LDAP - allow specifying certificate file	2021-03-10 18:22:51 -06:00
garrettmills	e6a7070589	Remove duplicate uid/gid number LDAP attrs	2021-03-10 16:26:59 -06:00
garrettmills	e6588b4f5b	LDAP - include gid number	2021-03-10 16:02:18 -06:00
garrettmills	20e723f39f	LDAP - cast modifications to support posix logins	2021-03-10 15:48:27 -06:00
garrettmills	9b5216431d	Make jobs use built-in job logging	2020-12-04 20:40:27 -06:00
garrettmills	f06ff83dce	Move all front-end public field definitions into constructors for iOS support	2020-10-28 19:53:07 -05:00
garrettmills	251aa6cf97	Remove source map annotations from minified libraries	2020-10-28 19:29:00 -05:00
garrettmills	60003d64d5	Add front-end error logging	2020-10-28 19:13:13 -05:00
garrettmills	535dde13ff	Guarantee additional logging data object in permission middleware	2020-10-19 10:19:01 -05:00
garrettmills	63d102296f	Fix bad logging method call names	2020-10-19 09:55:26 -05:00
garrettmills	77d203b2b0	Add missing service injection...	2020-10-19 09:53:27 -05:00
garrettmills	fcbf25e3ce	Check IAM policy for OAuth2 logins	2020-10-19 09:51:36 -05:00
garrettmills	084ec7bbc1	inflate OpenID UID to case-sensitive on lookup	2020-10-19 09:39:28 -05:00
garrettmills	6b3339a883	Force OpenID UID to be lowercase	2020-10-19 09:35:49 -05:00
garrettmills	8f1bbfef56	OpenID - revert case insensitive session UID lookup	2020-10-19 09:26:52 -05:00
garrettmills	e400e16ccc	OpenID - revert case insensitive cast to UID	2020-10-19 09:22:09 -05:00
garrettmills	97096f619f	Make UID case-insensitive	2020-10-18 23:27:23 -05:00
garrettmills	2d97b77bbf	Fix user bind error constructor	2020-10-18 23:04:01 -05:00
garrettmills	bb79d52911	Increase error stack trace limit	2020-10-18 22:07:12 -05:00
garrettmills	2e05ec77c8	Increase error stack trace limit	2020-10-18 22:06:08 -05:00
garrettmills	433af8261f	Add debug output	2020-10-18 21:44:53 -05:00
garrettmills	fac3431375	Add api authorization logging	2020-10-18 21:07:42 -05:00
garrettmills	5eb0487c77	Allow oauth2 clients to exercise permissions independent to the user	2020-10-18 20:22:10 -05:00
garrettmills	3f2680671b	Permission middleware log oauth client UUID	2020-10-18 18:55:21 -05:00
garrettmills	fd06e17d7d	Use req.user to check auth instead of req.is_auth	2020-10-18 18:35:55 -05:00
garrettmills	efdea10b14	Guarantee req.oauth in APIRoute middleware	2020-10-18 17:19:26 -05:00
garrettmills	ce7349565e	Fix LDAP search error for individual users	2020-10-18 17:06:34 -05:00