* feat: introduce new prometheus monitor object
* feat: add LDAPMonitorWatcher as a potential replacement for v0 Collector
* feat: pass monitor object as dependency and instrument core operations
* feat: instantiate monitor in main
* ci: exclude mock files
* ci: generate mocks before running tests and go vet
* ci: make vet command keep going in case of errors
reason is due to the following happening in the GetStats method of the ldap.Stats struct
```
internal/monitoring/mock_interfaces.go:92:13: assignment copies lock value to ret0: (github.com/nmcclain/ldap.Stats, bool) contains github.com/nmcclain/ldap.Stats contains sync.Mutex
internal/monitoring/mock_interfaces.go:93:9: return copies lock value: github.com/nmcclain/ldap.Stats contains sync.Mutex
internal/monitoring/ldap_test.go:23:56: call of mockLDAPServer.EXPECT().GetStats().MinTimes(1).Return copies lock value: github.com/nmcclain/ldap.Stats contains sync.Mutex
```
* deps: move to use go.uber.org/mock/gomock
* fix: offload prometheus logic to the monitoring package
* fix: offload ui logic to the asset package
* refactor: use handlers coming from assets and monitoring package
* ci: add unit test run and vet command
* fix: make vet happy and adjust code
* Pulling in latest changes and fixes for 1.1.1 (#56)
* Adding a few test dockerfiles
* Continued work on docker builds
* Basic example of docker build and run works - see build.sh for now
* Continuing to work on docker build
* Removing testing from build script, since it belongs later in process
* Implementing dumb init
* Docker build fully switched to alpine
* Setting up alpine build
* Cleaning up dockerfile
* Cleaning up repo in prep for merge
* Updating permissions for clean merge
* Removing old ansible cruft, as per #12
* Removing binaries (since we now build)
* Updating sample config to use new fields now available
* Testing travis
* another travis test
* Still working on travis builds
* Fix missing amazon packages
* Merge in Travis config feature branch (#26)
* Adding version string
* Fixing and cleaning up docker build
* Adding image hashing and verification to 'make all'
* Testing build
* Running gofmt to fix build
* Testing switching travis to make
* Testing build again
* Merging in Fixes from travis-build feature branch (#33)
This includes an integration test which runs glauth and compares ldapsearch snapshot output stored in the repo compared to the snapshot output of the glauth.
Additionally, removing old versions of go, and adding windows and linuxar builds (but not tests) to the makefile, and consequently, the travis build.
While the mac, linux-arm, and windows binaries are not able to be run in travis, they are able to be at least compiled.
* Remove needless comment from integration test
* Adding 'is-process-running' check before integration tests run, to clearly note if the program crashes on run
* Switching from 1 sec to 2 sec timeout for integration test
* Adding back config file to fix build. Previous commit intended to see if build failed (and it did)
* Add support for including groups in groups (#23)
* Add support for including groups in groups
* Pulling in Makefile structure to allow easier testing and builds
* Forgot to remove spare test
* Add Version Info at Buildtime (#39)
Adds the build info to the binary at buildtime via buildtime variables. This is shown by `./glauth --version`.
Example output for a non-release:
```
GLauth
Non-release build from branch feature/buildversion
Build time: 20180531_181011Z
Commit: 07ba631c2fd0050f375655ad7c44f862e0e6640c
```
And example of a built release:
```
GLauth v2.3.4
Build time: 20180601_041330Z
Commit: 931d666262b96bab8a5c760be42d7facec7a2d74
```
* Fixing Broken Docker Build (#41)
Forgot to include go-bindata run in Dockerfile.
* Removing leftover TODO from merge
* Testing releases
* Testing releases
* Testing releases
* Adjusting logging
* Add new group tests to integration tests
* add cleanup to test process
* Add documentation about otherGroups, which was a previously undocumented field.
* Auto fetching bindata during build so it's not needed to be done manually
* Syntax fix
* starting framework for unit tests
* Merging in ongoing progress from Feature/travis build (#44)
Fixes a few minor issues:
#42 - now uses the makefile in the docker build, which means version info is correctly embedded at runtime - also now outputs version data at the top of the log when the container starts
Fixing a simple issue found by go vet. Need to do more work on fixing issues found in go vet.
* Forgot to run 'go fmt'
* Adding codecov for go now that a single test is written
* Testing not quite ready yet, removing from build
* Add Support For 2 Factor Authentication
Merging in feature from @ryskov (PR #24) adding 2FA support during LDAP binds. This is accomplished by concatenating the code to the end of the password.
Also added integration tests for the TOTP method to run in CI. Could not, however, add automated tests for the yubikey, due the physical nature.
* Expose LDAPS ports in Docker container (#49)
Currently, the LDAPS ports are not exposed in the docker container.
* Adding better logging to docker start script
* Add more logging info to docker startup script
* Fix Arm32 Build (#52)
As discussed in issue #51, Arm32 builds were using 368 (intel/amd) arch accidentally, generating linux 32 bit binaries instead of arm 32 bit binaries. This commit fixes this in the Makefile, which will fix both the local builds, as well as the travis CI and release builds.
fixes#52
* Update docker hub image badge to a working one
previous one simply returned 0.
* Removing 3893 - fixes#50
* Fixing readme MD formatting
* Adding travis_retry to fix against intermittent network outages
* Add TLS options for running both with TLS and without on the same time (#27)
* Add TLS options for running both with TLS and without on the same time.
This commit expands on the settings available for using TLS. It puts TLS settings under the [frontend.tls] section and adds a new setting to [frontend] called TLSExclusive (bool).
TLSExclusive specifies whether or not to only run TLS when it is enabled, and is 'true' by default. Setting it to 'false' and having TLS enabled, causes the server to start both a LDAP and LDAPS server,
and therefore requires to seperate 'listen' options (to run on different ports) - the Frontend.Listen and the Frontend.TLS.Listen. If TLSExclusive is set to 'true' and no Frontend.TLS.Listen is specified, it will use the Frontend.Listen.
* Adding PR template and improving integration test tooling
* Updating formatting
* Add get dependencies step to makefile setup
* Add go 1.11
* Add App Password Support (#60)
App passwords can now be used to allow easier OTP use alongside applications which need to bind with a static password. Use the key `passappsha256` and specify an array of password hashes. See the readme and sample configuration file for more information.
Fixes#54
* Adding NCoC as official project code of conduct
We happily accept contributions based on the merit of the contributions.
* Properly handling paramaters in logs - fixes#64
* Adding ldapsearch for healthchecks
* fixed quoting in docker startup script (#77)
Thanks @cxcv cxcv
* Minor tweak of help text
* More durable Dockerfile (#92)
* refactor with latest dev
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
* fix modules, update .gitignore
* pass in logger
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Ben Yanke <ben@benyanke.com>
Co-authored-by: Andrea Cervesato <andrea.cervesato@gmail.com>
* Add config options for customizing group and nate attribute prefixes and name of ssh-key output
* Rename nameattr and groupattr to respectively nameformat and groupformat
* Messed up setting up default values on merge for ldap and ldaps section
* Fix good-results after 'via LDAP' suffix was removed from gecos and description
* Added uid for good-results aswell
* Revert "Added uid for good-results aswell"
This reverts commit 21b86d257063d6fc00b9152a8b8ff87488e5c37a.
* Adjust tests
* order of cn and uid should be same for both posixaccount and posixgroup to pass tests
* Add TLS options for running both with TLS and without on the same time.
This commit expands on the settings available for using TLS. It puts TLS settings under the [frontend.tls] section and adds a new setting to [frontend] called TLSExclusive (bool).
TLSExclusive specifies whether or not to only run TLS when it is enabled, and is 'true' by default. Setting it to 'false' and having TLS enabled, causes the server to start both a LDAP and LDAPS server,
and therefore requires to seperate 'listen' options (to run on different ports) - the Frontend.Listen and the Frontend.TLS.Listen. If TLSExclusive is set to 'true' and no Frontend.TLS.Listen is specified, it will use the Frontend.Listen.
Adds the build info to the binary at buildtime via buildtime variables. This is shown by `./glauth --version`.
Example output for a non-release:
```
GLauth
Non-release build from branch feature/buildversion
Build time: 20180531_181011Z
Commit: 07ba631c2fd0050f375655ad7c44f862e0e6640c
```
And example of a built release:
```
GLauth v2.3.4
Build time: 20180601_041330Z
Commit: 931d666262b96bab8a5c760be42d7facec7a2d74
```
Chris F Ravenscroft
Alessandro Cabbia
Nick Borgers
Jeppe Ryskov Larsen