* feat: introduce new prometheus monitor object
* feat: add LDAPMonitorWatcher as a potential replacement for v0 Collector
* feat: pass monitor object as dependency and instrument core operations
* feat: instantiate monitor in main
* ci: exclude mock files
* ci: generate mocks before running tests and go vet
* ci: make vet command keep going in case of errors
reason is due to the following happening in the GetStats method of the ldap.Stats struct
```
internal/monitoring/mock_interfaces.go:92:13: assignment copies lock value to ret0: (github.com/nmcclain/ldap.Stats, bool) contains github.com/nmcclain/ldap.Stats contains sync.Mutex
internal/monitoring/mock_interfaces.go:93:9: return copies lock value: github.com/nmcclain/ldap.Stats contains sync.Mutex
internal/monitoring/ldap_test.go:23:56: call of mockLDAPServer.EXPECT().GetStats().MinTimes(1).Return copies lock value: github.com/nmcclain/ldap.Stats contains sync.Mutex
```
* deps: move to use go.uber.org/mock/gomock
* fix: offload prometheus logic to the monitoring package
* fix: offload ui logic to the asset package
* refactor: use handlers coming from assets and monitoring package
* ci: add unit test run and vet command
* fix: make vet happy and adjust code
* fix: update and upgrade libraries
side note:
* using commit to trigger release-please workflow in light of recent changes regarding branch strategy
* ci: introduce dependabot
* build: make build vars optional and passable via env
* build: use . for BUILD_FILES var to allow buildvcs flag
* build: create mkbindir, build and sha256 targets
* build: reuse build target for each platform specific compilation
* Ensure same go version for main and plugins
* chore: release 2.3.0
Release-As: 2.3.0
* release-please
* Fix(plugins)!: Rename the groups table to ldapgroups (#326)
The groups table name is a reserved keyword in mysql and requires that
the table name be escaped with backticks in order to use the groups
name. Other databases such as postgres do not support the use of the
backticks in the query statements. This change renames the groups table
to ldapgroups in oder to avoid this problem altogether.
This does have a dependency on the backend sql plugins to alter the
schema to match the new name.
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: Chris F Ravenscroft <chris@voilaweb.com>
* chore: update docker sqlite with ldapgroups (#338)
* feat: Update migration code to support table names (#339)
* chore(dev): release 2.3.0 (#337)
* ci: change pr name pattern for release please
* ci: switch to use master as default branch and plan to drop dev
* fix: exploit release-please for tagging in code
* fix: use runtime/debug to fetch git build info
* fix: use newer function to fetch git info for version
* build: drop build tags
* feat: graceful shutdown (#343)
* fix: start servers on separate goroutines
* fix: listen to signals for graceful shutdowns
* fix: exit with 0 in case of programmed termination
---------
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: shipperizer <alexcabb@gmail.com>
Co-authored-by: Billy Olsen <wolsen@users.noreply.github.com>
* build: make build vars optional and passable via env
* build: use . for BUILD_FILES var to allow buildvcs flag
* build: create mkbindir, build and sha256 targets
* build: reuse build target for each platform specific compilation
* Ensure same go version for main and plugins
* chore: release 2.3.0
Release-As: 2.3.0
* release-please
* Fix(plugins)!: Rename the groups table to ldapgroups (#326)
The groups table name is a reserved keyword in mysql and requires that
the table name be escaped with backticks in order to use the groups
name. Other databases such as postgres do not support the use of the
backticks in the query statements. This change renames the groups table
to ldapgroups in oder to avoid this problem altogether.
This does have a dependency on the backend sql plugins to alter the
schema to match the new name.
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: Chris F Ravenscroft <chris@voilaweb.com>
* chore: update docker sqlite with ldapgroups (#338)
* feat: Update migration code to support table names (#339)
* chore(dev): release 2.3.0 (#337)
* ci: change pr name pattern for release please
* ci: switch to use master as default branch and plan to drop dev
* fix: exploit release-please for tagging in code
* fix: use runtime/debug to fetch git build info
* fix: use newer function to fetch git info for version
* build: drop build tags
---------
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: shipperizer <alexcabb@gmail.com>
Co-authored-by: Billy Olsen <wolsen@users.noreply.github.com>
* build: make build vars optional and passable via env
* build: use . for BUILD_FILES var to allow buildvcs flag
* build: create mkbindir, build and sha256 targets
* build: reuse build target for each platform specific compilation
* Ensure same go version for main and plugins
* chore: release 2.3.0
Release-As: 2.3.0
* release-please
* Fix(plugins)!: Rename the groups table to ldapgroups (#326)
The groups table name is a reserved keyword in mysql and requires that
the table name be escaped with backticks in order to use the groups
name. Other databases such as postgres do not support the use of the
backticks in the query statements. This change renames the groups table
to ldapgroups in oder to avoid this problem altogether.
This does have a dependency on the backend sql plugins to alter the
schema to match the new name.
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: Chris F Ravenscroft <chris@voilaweb.com>
* chore: update docker sqlite with ldapgroups (#338)
* feat: Update migration code to support table names (#339)
* chore(dev): release 2.3.0 (#337)
---------
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Co-authored-by: shipperizer <alexcabb@gmail.com>
Co-authored-by: Billy Olsen <wolsen@users.noreply.github.com>
The current TRIM_FLAGS specify gcflags and asmflags directly in order to
trim the path of the resulting binaries. This results in an error where
the plugins cannot be loaded due to the error: "built with a different
version of package". Per https://github.com/golang/go/issues/51955 in the
golang repository, this is explicitly not supported. Switching to use the
go build command's -trimpath flag resolves the issue.
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
Before:
dn: ou=vpn,ou=users,dc=glauth,dc=com
cn: vpn
After:
dn: ou=vpn,ou=users,dc=glauth,dc=com
ou: vpn <<< THIS HAS CHANGED
NOTE: whereas previously a search filter (cn=vpn) would have found the
group, now you need (ou=vpn)
* Plugin: Unix PAM Authentication (#263)
* Add plugin using pam authentication
Adds an additional plugin which us authenticating against
the PAM unix backend and exposing users and groups local
to the machine glauth is running on.
This can be used to expose local users for authentication
in other services which support ldap only.
* plugins: pam: Rewrite Bind() to use ldapopshelper
Modernizes the implementation of Bind() to make use of the helper
functions provided by LDAPOpsHelper.
In order to support custom authentication the existing config.User
has received an additional PassAppCustom property which allows to
specify a custom authentication callback for a user.
In case of the PAM backend this will be used to authenticate against
the local PAM database.
* plugins: pam: Rewrite Search() to use ldapopshelper
Modernizes the implementation of Search() to make use of the helper
functions provided by LDAPOpsHelper.
* plugins: pam: Capability through group membership
Adds a configuration option which decides if a user gets the search
capability or not based on the group memberships of a user.
* plugins: pam: Apply formatting
Runs gofmt and go get on all changes done earlier
* plugins: pam: Address feedback from CodeClimate
- reduce code similarity
- document new exports
- address casing of variables and functions
- reduce complexity of FindPosixGroups()
- reduce complexity of FindPosixAccounts()
- fix else branch in ldapopshelper
Co-authored-by: Marius Zwicker <marius.zwicker@mlba-team.de>
* Updated README for pam plugin
* Updated README for pam plugin
Co-authored-by: Marius Zwicker <marius@mlba-team.de>
Co-authored-by: Marius Zwicker <marius.zwicker@mlba-team.de>
* Dev -> Master after v1/v2 cleanup (#261)
* Reverse pull request from master to dev.
Reverse pull request.
* Fix/docker latest tag (#260)
* Dev (#254)
* use functional options pattern to inject logr (#124)
* use functional options pattern to inject logr
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* cleanup log formatting
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* allow clean shutdown (#126)
* fix owncloud posix query, log message and provisioning api results (#128)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't hardcode graphapi endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add support for write handlers (#135)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* config: match shadowaccount objectlcass (#136)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Makefile compatiblility (#134)
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* update travis.yml (#154)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* check owncloud status code is ok (#153)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Bulid and push multiarch docker images (#142)
Fix#141.
With this change, a github action is added that builds a multiarch docker image on every commit, supporting x86_64, aarch64 and arm/v7.
When the action is triggered on a release or tag, it also uploads the versioned image to github container image registry.
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't mix graph and provisioning api (#157)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Reuse http client as much as possible and allow insecure transport (#160)
* Allow using configmaps when deploying in kubernetes (#161)
* Ensure config watcher also works in kubernetes
When using configmaps in kubernetes, the file is a symlink, and then
file-watcher is not opdated with a write event. Instead it receives a
CHMOD and a REMOVE event.
This change adds two things
1) Removal of the current wacther and adding of a new watcher for the
same path
2) The do-reload conditional is updated to also include the remove
event.
* Align write and removed conditionals
* Fix API server json formating (#163) (#164)
* Update README.md (#167)
Fixing bad port in quickstart
* Use port 3893 with ldapsearch in example (#150)
* feat: add flags for ldap listen addresses (#169)
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
* Assets build fix. (#171)
* Docker build fix.
* Makefile fix.
* update readme, config and deps (#170)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Remove byanke's donation fields
* Database plugins (#133)
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch.
Covered:
- Database plugins (at this time: SQLite, MySQL, Postgres)
- Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend]
- Schema introspection (root DSE query with base scope)
- When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries
- When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know))
- Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8)
- Support for "want types only" queries, even when proxying
* Mac M1 Support and LDAP Req Attributes (#192)
* Mac M1 Support
* Augmented root DSS and schema discovery based on content of schema directory
* LDAP workaround where req. attribute gets injected in response now works with combined filters
* SubSchema query can return a minimal set, freeipa or openldap's schemas
* Feature/upgrade ldap library version (#194)
* Stronger, salted paswords using bcrypt. (#195)
* Fixed badges in README file and added a couple improvements (#196)
* fix lock for ownCloud / graph backend (#198)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* the config struct is only needed by the config backend (#199)
* Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201)
* fix: keep watch config file when changed,renamed,removed (#189)
I will need to run `glauth.go` through `gofmt` myself but that is fine.
* Returning when unable to start config watcher (#203)
* Introducing goconvey testing and refactoring of config and ... (#204)
* Introducing goconvey testing and refactoring of config and plugin backends.
* gofmt, oops
* Refactored re-insertion of requested attributes
* Allow bind operations with no group provided (#205)
* Support for userPrincipalName binding and browsing. (#206)
* Support for userPrincipalName binding and browsing.
* Fixed travis CI test for userprincipalname
* fixing travis tests for more users
* Rate limit after failed binds (#207)
* Capabilities -- part 2 (#214) + do not dump config at startup
* Attempting migration from Travis to Github Actions
* Migration Step#2
* Migration Step#3
* Migration Step#4
* Migration Step#5
* Migration Step#6
* Migration Step#7
* Migration Step#8
* Migration Step#9
* Migration Step#9
* Migration dev...
* Migration dev...
* Migration dev...
* Migration dev...
* Docker with plugins, first step (#215)
* Docker with plugins, first step
* Build better docker images, including plugins
* Merge back from dev to feature branch step #2
* Added capabilities to CI
* - Now creating two docker images, including one with plugins
- Moving from Travis CI to GitHub Actions
* Plugins now run on distroless (#217)
* Getting rid of Travis CI now that it doesn't support FOSS anymore.
* Internal Stats -- performance view (#221)
* Local merge
* Update CI to forget about bindata
* Forgot to cleanup the cleanup...
* assets: use stdlib "embed" package (#200)
This should make it easier to include GLAuth in other projects using `go get`
* 'Airgapping' web assets for security and preventing breakage (#227)
* v2 -- V2 hierarchy (#228)
* Search refactoring, tree traversal and scope correctness (#229)
Search refactoring, tree traversal and scope correctness.
* Feature/multi cfg (#233)
* Feature/custom attributes (#240)
* Makefiles: platform releases (#241)
* Feature/release script (#242)
* Bug/fix docker build in v2 (#244)
* Fix#246 and #252
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* Cleanup
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* SSH Keys support in database plugins
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* Reverse pull request from master to dev.
Reverse pull request.
* Fix/docker latest tag (#260)
* Dev (#254)
* use functional options pattern to inject logr (#124)
* use functional options pattern to inject logr
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* cleanup log formatting
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* allow clean shutdown (#126)
* fix owncloud posix query, log message and provisioning api results (#128)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't hardcode graphapi endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add support for write handlers (#135)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* config: match shadowaccount objectlcass (#136)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Makefile compatiblility (#134)
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* update travis.yml (#154)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* check owncloud status code is ok (#153)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Bulid and push multiarch docker images (#142)
Fix#141.
With this change, a github action is added that builds a multiarch docker image on every commit, supporting x86_64, aarch64 and arm/v7.
When the action is triggered on a release or tag, it also uploads the versioned image to github container image registry.
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't mix graph and provisioning api (#157)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Reuse http client as much as possible and allow insecure transport (#160)
* Allow using configmaps when deploying in kubernetes (#161)
* Ensure config watcher also works in kubernetes
When using configmaps in kubernetes, the file is a symlink, and then
file-watcher is not opdated with a write event. Instead it receives a
CHMOD and a REMOVE event.
This change adds two things
1) Removal of the current wacther and adding of a new watcher for the
same path
2) The do-reload conditional is updated to also include the remove
event.
* Align write and removed conditionals
* Fix API server json formating (#163) (#164)
* Update README.md (#167)
Fixing bad port in quickstart
* Use port 3893 with ldapsearch in example (#150)
* feat: add flags for ldap listen addresses (#169)
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
* Assets build fix. (#171)
* Docker build fix.
* Makefile fix.
* update readme, config and deps (#170)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Remove byanke's donation fields
* Database plugins (#133)
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch.
Covered:
- Database plugins (at this time: SQLite, MySQL, Postgres)
- Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend]
- Schema introspection (root DSE query with base scope)
- When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries
- When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know))
- Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8)
- Support for "want types only" queries, even when proxying
* Mac M1 Support and LDAP Req Attributes (#192)
* Mac M1 Support
* Augmented root DSS and schema discovery based on content of schema directory
* LDAP workaround where req. attribute gets injected in response now works with combined filters
* SubSchema query can return a minimal set, freeipa or openldap's schemas
* Feature/upgrade ldap library version (#194)
* Stronger, salted paswords using bcrypt. (#195)
* Fixed badges in README file and added a couple improvements (#196)
* fix lock for ownCloud / graph backend (#198)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* the config struct is only needed by the config backend (#199)
* Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201)
* fix: keep watch config file when changed,renamed,removed (#189)
I will need to run `glauth.go` through `gofmt` myself but that is fine.
* Returning when unable to start config watcher (#203)
* Introducing goconvey testing and refactoring of config and ... (#204)
* Introducing goconvey testing and refactoring of config and plugin backends.
* gofmt, oops
* Refactored re-insertion of requested attributes
* Allow bind operations with no group provided (#205)
* Support for userPrincipalName binding and browsing. (#206)
* Support for userPrincipalName binding and browsing.
* Fixed travis CI test for userprincipalname
* fixing travis tests for more users
* Rate limit after failed binds (#207)
* Capabilities -- part 2 (#214) + do not dump config at startup
* Attempting migration from Travis to Github Actions
* Migration Step#2
* Migration Step#3
* Migration Step#4
* Migration Step#5
* Migration Step#6
* Migration Step#7
* Migration Step#8
* Migration Step#9
* Migration Step#9
* Migration dev...
* Migration dev...
* Migration dev...
* Migration dev...
* Docker with plugins, first step (#215)
* Docker with plugins, first step
* Build better docker images, including plugins
* Merge back from dev to feature branch step #2
* Added capabilities to CI
* - Now creating two docker images, including one with plugins
- Moving from Travis CI to GitHub Actions
* Plugins now run on distroless (#217)
* Getting rid of Travis CI now that it doesn't support FOSS anymore.
* Internal Stats -- performance view (#221)
* Local merge
* Update CI to forget about bindata
* Forgot to cleanup the cleanup...
* assets: use stdlib "embed" package (#200)
This should make it easier to include GLAuth in other projects using `go get`
* 'Airgapping' web assets for security and preventing breakage (#227)
* v2 -- V2 hierarchy (#228)
* Search refactoring, tree traversal and scope correctness (#229)
Search refactoring, tree traversal and scope correctness.
* Feature/multi cfg (#233)
* Feature/custom attributes (#240)
* Makefiles: platform releases (#241)
* Feature/release script (#242)
* Bug/fix docker build in v2 (#244)
* Fix#246 and #252
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* Cleanup
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* Dev (#254)
* use functional options pattern to inject logr (#124)
* use functional options pattern to inject logr
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* cleanup log formatting
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* allow clean shutdown (#126)
* fix owncloud posix query, log message and provisioning api results (#128)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't hardcode graphapi endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add support for write handlers (#135)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* config: match shadowaccount objectlcass (#136)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Makefile compatiblility (#134)
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* update travis.yml (#154)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* check owncloud status code is ok (#153)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Bulid and push multiarch docker images (#142)
Fix#141.
With this change, a github action is added that builds a multiarch docker image on every commit, supporting x86_64, aarch64 and arm/v7.
When the action is triggered on a release or tag, it also uploads the versioned image to github container image registry.
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't mix graph and provisioning api (#157)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Reuse http client as much as possible and allow insecure transport (#160)
* Allow using configmaps when deploying in kubernetes (#161)
* Ensure config watcher also works in kubernetes
When using configmaps in kubernetes, the file is a symlink, and then
file-watcher is not opdated with a write event. Instead it receives a
CHMOD and a REMOVE event.
This change adds two things
1) Removal of the current wacther and adding of a new watcher for the
same path
2) The do-reload conditional is updated to also include the remove
event.
* Align write and removed conditionals
* Fix API server json formating (#163) (#164)
* Update README.md (#167)
Fixing bad port in quickstart
* Use port 3893 with ldapsearch in example (#150)
* feat: add flags for ldap listen addresses (#169)
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
* Assets build fix. (#171)
* Docker build fix.
* Makefile fix.
* update readme, config and deps (#170)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Remove byanke's donation fields
* Database plugins (#133)
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch.
Covered:
- Database plugins (at this time: SQLite, MySQL, Postgres)
- Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend]
- Schema introspection (root DSE query with base scope)
- When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries
- When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know))
- Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8)
- Support for "want types only" queries, even when proxying
* Mac M1 Support and LDAP Req Attributes (#192)
* Mac M1 Support
* Augmented root DSS and schema discovery based on content of schema directory
* LDAP workaround where req. attribute gets injected in response now works with combined filters
* SubSchema query can return a minimal set, freeipa or openldap's schemas
* Feature/upgrade ldap library version (#194)
* Stronger, salted paswords using bcrypt. (#195)
* Fixed badges in README file and added a couple improvements (#196)
* fix lock for ownCloud / graph backend (#198)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* the config struct is only needed by the config backend (#199)
* Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201)
* fix: keep watch config file when changed,renamed,removed (#189)
I will need to run `glauth.go` through `gofmt` myself but that is fine.
* Returning when unable to start config watcher (#203)
* Introducing goconvey testing and refactoring of config and ... (#204)
* Introducing goconvey testing and refactoring of config and plugin backends.
* gofmt, oops
* Refactored re-insertion of requested attributes
* Allow bind operations with no group provided (#205)
* Support for userPrincipalName binding and browsing. (#206)
* Support for userPrincipalName binding and browsing.
* Fixed travis CI test for userprincipalname
* fixing travis tests for more users
* Rate limit after failed binds (#207)
* Capabilities -- part 2 (#214) + do not dump config at startup
* Attempting migration from Travis to Github Actions
* Migration Step#2
* Migration Step#3
* Migration Step#4
* Migration Step#5
* Migration Step#6
* Migration Step#7
* Migration Step#8
* Migration Step#9
* Migration Step#9
* Migration dev...
* Migration dev...
* Migration dev...
* Migration dev...
* Docker with plugins, first step (#215)
* Docker with plugins, first step
* Build better docker images, including plugins
* Merge back from dev to feature branch step #2
* Added capabilities to CI
* - Now creating two docker images, including one with plugins
- Moving from Travis CI to GitHub Actions
* Plugins now run on distroless (#217)
* Getting rid of Travis CI now that it doesn't support FOSS anymore.
* Internal Stats -- performance view (#221)
* Local merge
* Update CI to forget about bindata
* Forgot to cleanup the cleanup...
* assets: use stdlib "embed" package (#200)
This should make it easier to include GLAuth in other projects using `go get`
* 'Airgapping' web assets for security and preventing breakage (#227)
* v2 -- V2 hierarchy (#228)
* Search refactoring, tree traversal and scope correctness (#229)
Search refactoring, tree traversal and scope correctness.
* Feature/multi cfg (#233)
* Feature/custom attributes (#240)
* Makefiles: platform releases (#241)
* Feature/release script (#242)
* Bug/fix docker build in v2 (#244)
* Fix#246 and #252
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* Cleanup
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
* use functional options pattern to inject logr (#124)
* use functional options pattern to inject logr
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* cleanup log formatting
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* allow clean shutdown (#126)
* fix owncloud posix query, log message and provisioning api results (#128)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't hardcode graphapi endpoint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* add support for write handlers (#135)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* config: match shadowaccount objectlcass (#136)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Makefile compatiblility (#134)
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* update travis.yml (#154)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* check owncloud status code is ok (#153)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Bulid and push multiarch docker images (#142)
Fix#141.
With this change, a github action is added that builds a multiarch docker image on every commit, supporting x86_64, aarch64 and arm/v7.
When the action is triggered on a release or tag, it also uploads the versioned image to github container image registry.
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* don't mix graph and provisioning api (#157)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Reuse http client as much as possible and allow insecure transport (#160)
* Allow using configmaps when deploying in kubernetes (#161)
* Ensure config watcher also works in kubernetes
When using configmaps in kubernetes, the file is a symlink, and then
file-watcher is not opdated with a write event. Instead it receives a
CHMOD and a REMOVE event.
This change adds two things
1) Removal of the current wacther and adding of a new watcher for the
same path
2) The do-reload conditional is updated to also include the remove
event.
* Align write and removed conditionals
* Fix API server json formating (#163) (#164)
* Update README.md (#167)
Fixing bad port in quickstart
* Use port 3893 with ldapsearch in example (#150)
* feat: add flags for ldap listen addresses (#169)
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
* Assets build fix. (#171)
* Docker build fix.
* Makefile fix.
* update readme, config and deps (#170)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* Remove byanke's donation fields
* Database plugins (#133)
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch.
Covered:
- Database plugins (at this time: SQLite, MySQL, Postgres)
- Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend]
- Schema introspection (root DSE query with base scope)
- When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries
- When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know))
- Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8)
- Support for "want types only" queries, even when proxying
* Mac M1 Support and LDAP Req Attributes (#192)
* Mac M1 Support
* Augmented root DSS and schema discovery based on content of schema directory
* LDAP workaround where req. attribute gets injected in response now works with combined filters
* SubSchema query can return a minimal set, freeipa or openldap's schemas
* Feature/upgrade ldap library version (#194)
* Stronger, salted paswords using bcrypt. (#195)
* Fixed badges in README file and added a couple improvements (#196)
* fix lock for ownCloud / graph backend (#198)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* the config struct is only needed by the config backend (#199)
* Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201)
* fix: keep watch config file when changed,renamed,removed (#189)
I will need to run `glauth.go` through `gofmt` myself but that is fine.
* Returning when unable to start config watcher (#203)
* Introducing goconvey testing and refactoring of config and ... (#204)
* Introducing goconvey testing and refactoring of config and plugin backends.
* gofmt, oops
* Refactored re-insertion of requested attributes
* Allow bind operations with no group provided (#205)
* Support for userPrincipalName binding and browsing. (#206)
* Support for userPrincipalName binding and browsing.
* Fixed travis CI test for userprincipalname
* fixing travis tests for more users
* Rate limit after failed binds (#207)
* Capabilities -- part 2 (#214) + do not dump config at startup
* Attempting migration from Travis to Github Actions
* Migration Step#2
* Migration Step#3
* Migration Step#4
* Migration Step#5
* Migration Step#6
* Migration Step#7
* Migration Step#8
* Migration Step#9
* Migration Step#9
* Migration dev...
* Migration dev...
* Migration dev...
* Migration dev...
* Docker with plugins, first step (#215)
* Docker with plugins, first step
* Build better docker images, including plugins
* Merge back from dev to feature branch step #2
* Added capabilities to CI
* - Now creating two docker images, including one with plugins
- Moving from Travis CI to GitHub Actions
* Plugins now run on distroless (#217)
* Getting rid of Travis CI now that it doesn't support FOSS anymore.
* Internal Stats -- performance view (#221)
* Local merge
* Update CI to forget about bindata
* Forgot to cleanup the cleanup...
* assets: use stdlib "embed" package (#200)
This should make it easier to include GLAuth in other projects using `go get`
* 'Airgapping' web assets for security and preventing breakage (#227)
* v2 -- V2 hierarchy (#228)
* Search refactoring, tree traversal and scope correctness (#229)
Search refactoring, tree traversal and scope correctness.
* Feature/multi cfg (#233)
* Feature/custom attributes (#240)
* Makefiles: platform releases (#241)
* Feature/release script (#242)
* Bug/fix docker build in v2 (#244)
* Fix#246 and #252
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Zhou Wenzong <wenzong@users.noreply.github.com>
Co-authored-by: Jairo Llopis <Yajo@users.noreply.github.com>
Co-authored-by: Benedikt Kulmann <benedikt@kulmann.biz>
Co-authored-by: Nicolai Willems <172633+nwillems@users.noreply.github.com>
Co-authored-by: Thibault Soubiran <soubi.thibault@gmail.com>
Co-authored-by: Clement JACOB <clems71@gmail.com>
Co-authored-by: Lutz Horn <code@lhorn.de>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Co-authored-by: Peter Heise <pheise@koprolalie.com>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: fanlix <fanlix@gmail.com>
Co-authored-by: Hank Donnay <hdonnay@gmail.com>
Chris F Ravenscroft
Alessandro Cabbia
Daniel BarneyandDaniel Barney
guangwu
Konstantin Shalygin
Nick Borgers
NW
Sven Wick
Brian Candler
