aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-06-08Added a new password object typeJon Robertson
The password type inherits almost everything from the file object, but if you try to get a password object that has never been stored, we generate a random string to put in the object rather than just erroring out. The maximum and minimum length of the string can be set in the wallet config. If a password object was stored earlier and then cleared out, we don't generate another random string. Change-Id: I17a65ca7dac9d4430e8a731f417297890ee612bb
2015-06-08Added acl replace command to wallet backendJon Robertson
New command for replacing the ownership of anything owned by a specific ACL with another ACL. This differs from acl rename in that it's to be used when the destination ACL already exists and potentially already owns some objects. Change-Id: I765bebf499fe0f861abc2ffe1873990590beed36
2015-06-08wallet-report: Added a report for unstored objectsJon Robertson
Report on all file objects that have never had data stored in them. Also clean up the text around the 'objects unused' report which said that it did this plus things that were never gotten, but in reality only reported on the objects that were never gotten. Change-Id: I30c9585ac6f3744fbea2f94b3d6874a64c0109ad
2015-06-08Updated Stanford policy to add optional extra to ssh keysJon Robertson
Change-Id: Ic575c22c741c29e814749d334e9ed40eb83014e5
2014-12-08Fix syntax of NAME section of Wallet::Object::Duo::* modulesRuss Allbery
2014-12-08Add a Bugs header since this package isn't in Debiandebian/1.2-1Russ Allbery
2014-12-08Really update the standards version to 3.9.6Russ Allbery
2014-12-08Finalize changes for 1.2-1Russ Allbery
2014-12-08Update standards version to 3.9.6Russ Allbery
2014-12-08Add changelog for upstream 1.2 releaseRuss Allbery
2014-12-08Merge tag 'upstream/1.2' into debianRuss Allbery
Upstream version 1.2
2014-12-08Add a debian/gbp.conf fileRuss Allbery
* Add a gbp.conf file to reflect the branch layout and settings of the normal packaging repository.
2014-12-08Imported Upstream version 1.2upstream/1.2Russ Allbery
2014-12-08Create the directory for the Wallet::Object::Duo classesrelease/1.2Russ Allbery
2014-12-08Add new files to the distributionRuss Allbery
2014-12-08Add stopwords for new modulesRuss Allbery
Change-Id: Ie1d2bcee19ace444f6f7083814133593b160d97d
2014-12-08Update skip count for systems without sqlite3Russ Allbery
Change-Id: I2180daf5055a90ae52b8a851f514993004da5303
2014-12-08Be more robust when setting up the Perl testsRuss Allbery
If the Test library directory already exists, we previously failed. Use mkdir -p and probe for it in Autoconf to avoid this. Change-Id: I1ad9f1a83af1f2ebfe1b2337aaab99913b4edeea
2014-12-08Release 1.2Russ Allbery
Change-Id: I4157db0f690542db0eb1bfbcb7e15bfee890cd65
2014-12-08Merge pull request #1 from jonrober/masterRuss Allbery
Duo and rename updates
2014-11-06Stanford.pm: Fixed incorrect name for new duo host parsing functionJon Robertson
Change-Id: Ica75f6614476088a9952cd7d97749d27811aed7e
2014-10-27Updated NEWS with pending release notesJon Robertson
Change-Id: I7730b4779180d7ad85dd4d1b6e71d8576a27a662
2014-10-27Added rename support for file objectsJon Robertson
File objects now support a rename command, which will rename the object and move the file to the right spot in the file store under its new name. Change-Id: I10ea2b8012586d69f0894905cfba54a738f3e418
2014-10-14Added rename support for file objectsJon Robertson
File objects now support a rename command, which will rename the object and move the file to the right spot in the file store under its new name. Change-Id: I10ea2b8012586d69f0894905cfba54a738f3e418
2014-10-14Added rename support for file objectsJon Robertson
File objects now support a rename command, which will rename the object and move the file to the right spot in the file store under its new name. Change-Id: I10ea2b8012586d69f0894905cfba54a738f3e418
2014-10-14Added Duo to the Stanford policy moduleJon Robertson
Duo object types currently all assume that the name of the object is the hostname of the server it's for. Change-Id: Ieb5ba144cd39d6aeb3a20466c75a2836a170744f
2014-10-13Wallet::Object::Duo: Respect new type field in Duo tableJon Robertson
Make all the searches and creations for the Duo table add or search for the type field as well. This avoids one Duo type clobbering another for the same object name. Change-Id: I62192c3616f43c7acd8ce3f94db8a0e43e77e317
2014-10-13Added Duo RDP object to the walletJon Robertson
Change-Id: Ic728297fa830ffdd40c1580e32a81f8c5123f66a
2014-10-13Fixed new SQLite schema to include IF EXISTS on drop tablesJon Robertson
Change-Id: I54edbb543be8bfcf0de355da3cef82c6ac1bf27f
2014-10-09Added new column in the Duo tableJon Robertson
New column is required to differentiate the Duo table entries now that we have more than one Duo object type. Added the new field and rebuilt schema definitions and upgrade files. Change-Id: Icf538eaded93f4f2820984c087d4850a586a7db1
2014-10-09Created tests for new Duo object typesJon Robertson
Change-Id: I818be125f3195316b44e650ba6e05b8e0b831ea6
2014-10-09NEWS: Added item for Duo object expansionJon Robertson
Change-Id: I91b8b5fd4043effe8b23a62624c47519976ace64
2014-10-08Split Duo type out into multiple sub-typesJon Robertson
The existing functionality is now in the duo-pam object type. The old duo type now returns output in a generic config file, and new types for the Duo auth proxy in LDAP and Radius proxies are added. Change-Id: I1525d79b44dafcf3ef85368297baefafcb5dc179
2014-08-02Update JIRA references in TODO, remove finished itemsRuss Allbery
JIRA's structure has been reorganized, so change the JIRA issue references to be accurate again. Add JIRA issues for the things that hadn't been entered into JIRA yet. Change-Id: I385d19b09108d94430bbe142a2b3f6f80b5e4c39 Reviewed-on: https://gerrit.stanford.edu/1588 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-16Finalize changes for 1.1-1debian/1.1-1Russ Allbery
Change-Id: I701dc2151a41087dd0457a1f756884a78013f622
2014-07-16Merge tag 'upstream/1.1' into debianRuss Allbery
Upstream version 1.1
2014-07-16Imported Upstream version 1.1upstream/1.1Russ Allbery
2014-07-16Register the duo object type on database creationrelease/1.1Russ Allbery
Change-Id: I1c53e0503b29d7add289d26e67b11f9789ba8ad8 Reviewed-on: https://gerrit.stanford.edu/1576 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-16Merge tag 'upstream/1.1' into debianRuss Allbery
Upstream version 1.1
2014-07-16Imported Upstream version 1.1Russ Allbery
2014-07-16Go back to recording the ADMIN ACL in historyRuss Allbery
This turned out to not be necessary for testing since I was already using sqlite3 to load an unversioned schema. Remove the offending line and restore the old code with some cleanup. Change-Id: I282b6f3b4754e4899222be6366b77a47f0cb7189 Reviewed-on: https://gerrit.stanford.edu/1575 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-16Parse the Duo key_file in relaxed JSON modeRuss Allbery
When reading the Duo object configuration to retrieve the Duo admin server, parse the JSON in relaxed mode to match the behavior of Net::Duo itself. Otherwise, we get hung up on trailing commas that Net::Duo doesn't care about. Change-Id: I0a7347b22e379fe5dfe5fdabaec3e23420cf9a63 Reviewed-on: https://gerrit.stanford.edu/1574 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-16Include the Duo type in the name of Duo integrationsRuss Allbery
Eventually, there will be multiple object types for different Duo integrations, and they will need to have unique names. Add the Duo type in parentheses after the name to help ensure this. Change-Id: I679130f9136077fc6bf5d8c6c9ad98ec83b400d0 Reviewed-on: https://gerrit.stanford.edu/1573 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-16Enable verification of upstream release signaturesRuss Allbery
* Enable uscan verification of the GnuPG signatures on upstream releases in debian/watch. Change-Id: Ic8555655c8b7cd3fd1a1d8fa55c381673ee8e2bf
2014-07-16Remove duplicate build dependencyRuss Allbery
Change-Id: Ida824647e538c06595818ec39d408b12b9c6f488
2014-07-16Add more missed dependencies and build dependenciesRuss Allbery
Change-Id: I2cf44dabde6c2ad4952c0c64dba88805120fd9a8
2014-07-16Drop now-unneeded dh_builddeb override for xz compressionRuss Allbery
Change-Id: Iac7c9bffb20e86b2b7dc5aa2b1acdfae928265cf
2014-07-16Adjust debian/rules for the new Module::Build Perl build systemRuss Allbery
Change-Id: I6cc0df81ab9507a6aceba772766c0a0588b2d750
2014-07-16Add sqlite3 to build dependencies for another testRuss Allbery
Change-Id: I37e92900dc13cdc6a538a7bf71f2d8b8d221006f
2014-07-16Rebuild Autoconf and Automake files during the buildRuss Allbery
Change-Id: If4c22583a8031e5197a6d6999ca1e270c6dda0c8