133 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
garrettmills	ae85c3fd24	fix format of oidc authorization checks	2021-04-15 14:03:14 -05:00
garrettmills	3301a48750	Track oidc authorizations by app, not client	2021-04-15 13:50:48 -05:00
garrettmills	d1312fe627	Add logic to save OpenID connect grants	2021-04-15 13:41:13 -05:00
garrettmills	bd6eaceaf3	Remove debugging	2021-04-15 13:16:19 -05:00
garrettmills	6b2257ae33	Fix recursive method call in sudo controller	2021-04-15 13:09:56 -05:00
garrettmills	636e1f8ab9	Fix recursive method call in sudo controller	2021-04-15 13:02:18 -05:00
garrettmills	627499537d	Look up IAM from sudo hosts	2021-04-15 13:00:13 -05:00
garrettmills	7e3f198c04	Debugging	2021-04-15 12:51:23 -05:00
garrettmills	b26519ea88	Make sudo access managed via IAM rather than group checkmark	2021-04-15 10:56:11 -05:00
garrettmills	f2995899ec	Add ability to manage and grant IAM permissions as policy	2021-04-15 10:38:43 -05:00
garrettmills	5645e8fae1	Clean up IAM to allow relations w/o explicit definitions	2021-04-15 09:55:25 -05:00
garrettmills	a7ed5d09f1	Better IAM denial logging	2021-03-16 15:24:21 -05:00
garrettmills	3a91417db3	Add default user to allow for default groups and IAM	2021-03-15 17:45:18 -05:00
garrettmills	0844da594e	Show iam filter for machines	2021-03-15 17:13:09 -05:00
garrettmills	64ad8931f3	Show iamTarget in relevant forms	2021-03-15 16:55:50 -05:00
garrettmills	a9d7b1c047	Allow IAM policy to manage user access to machines & machine groups	2021-03-15 16:28:42 -05:00
garrettmills	d6e4ea2e56	Add ability to manage computers and computer groups from web interface	2021-03-15 16:10:23 -05:00
garrettmills	718414d924	Clean up sudo LDAP formatting	2021-03-10 23:53:22 -06:00
garrettmills	943c30fa96	Add support for sudo	2021-03-10 23:43:16 -06:00
garrettmills	3d2c4c0fec	Cast gidNumber to strings	2021-03-10 23:21:33 -06:00
garrettmills	8b8c2e076f	User model - fix LDAP gidNumber	2021-03-10 23:16:04 -06:00
garrettmills	0ee36dc429	User - resolve posix groups for all member groups	2021-03-10 20:15:04 -06:00
garrettmills	48f5b3f71a	Make all groups appear in LDAP, get posix GIDs	2021-03-10 20:12:06 -06:00
garrettmills	ef819b0a2e	Groups - allow flagging group as su equivalent	2021-03-10 20:06:43 -06:00
garrettmills	91fc8a65a2	Allow users to set login shell in profile	2021-03-10 19:43:51 -06:00
garrettmills	2d31eaa148	LDAP - properly cast gidNumber to string	2021-03-10 19:21:41 -06:00
garrettmills	82e25ccef0	LDAP - support posixGroups in group model	2021-03-10 19:12:46 -06:00
garrettmills	53a1662f70	LDAP - specify user homeDirectory	2021-03-10 18:37:32 -06:00
garrettmills	dbb8684f68	LDAP - set default loginShell	2021-03-10 18:31:43 -06:00
garrettmills	6a4f82611b	LDAP - allow specifying certificate file	2021-03-10 18:22:51 -06:00
garrettmills	e6a7070589	Remove duplicate uid/gid number LDAP attrs	2021-03-10 16:26:59 -06:00
garrettmills	e6588b4f5b	LDAP - include gid number	2021-03-10 16:02:18 -06:00
garrettmills	20e723f39f	LDAP - cast modifications to support posix logins	2021-03-10 15:48:27 -06:00
garrettmills	a8729930e6	Update drone to use promotions for prod	2020-12-08 22:21:54 -06:00
garrettmills	c725f14bf2	Update flitter jobs	2020-12-04 20:49:37 -06:00
garrettmills	9b5216431d	Make jobs use built-in job logging	2020-12-04 20:40:27 -06:00
garrettmills	1d5c00768c	Update flitter jobs	2020-12-03 20:00:40 -06:00
garrettmills	7f1c9ec9a8	Update libflitter	2020-10-29 08:52:13 -05:00
garrettmills	fe0a4d5991	Update libflitter and set session max age	2020-10-29 08:46:30 -05:00
garrettmills	f06ff83dce	Move all front-end public field definitions into constructors for iOS support	2020-10-28 19:53:07 -05:00
garrettmills	251aa6cf97	Remove source map annotations from minified libraries	2020-10-28 19:29:00 -05:00
garrettmills	60003d64d5	Add front-end error logging	2020-10-28 19:13:13 -05:00
garrettmills	535dde13ff	Guarantee additional logging data object in permission middleware	2020-10-19 10:19:01 -05:00
garrettmills	63d102296f	Fix bad logging method call names	2020-10-19 09:55:26 -05:00
garrettmills	77d203b2b0	Add missing service injection...	2020-10-19 09:53:27 -05:00
garrettmills	fcbf25e3ce	Check IAM policy for OAuth2 logins	2020-10-19 09:51:36 -05:00
garrettmills	084ec7bbc1	inflate OpenID UID to case-sensitive on lookup	2020-10-19 09:39:28 -05:00
garrettmills	6b3339a883	Force OpenID UID to be lowercase	2020-10-19 09:35:49 -05:00
garrettmills	8f1bbfef56	OpenID - revert case insensitive session UID lookup	2020-10-19 09:26:52 -05:00
garrettmills	e400e16ccc	OpenID - revert case insensitive cast to UID	2020-10-19 09:22:09 -05:00