rpm/kanidm
SHA256
1
0
Fork 0
forked from pool/kanidm
Code Pull Requests Activity

Accepting request 1032603 from home:firstyear:branches:network:idm

Browse Source 
- Update to kanidm 1.1.0-alpha.10
  * Management and tracking of authenticated sessions
  * Make upgrade migrations more robust when upgrading over multiple versions
  * Add support for service account tokens via ldap for extended read permissions
  * Unix password management in web ui for posix accounts
  * Support internal dynamic group entries
  * Allow selection of name/spn in oidc claims
  * Admin UI wireframes and basic elements
  * TLS enforced as a requirement for all servers
  * Support API service account tokens
  * Make name rules stricter due to issues found in production
  * Improve Oauth2 PKCE testing
  * Add support for new password import hashes
  * Allow configuration of trusting x forward for headers
  * Components for account permission elevation modes
  * Make pam\_unix more robust in high latency environments
  * Add proc macros for test cases
  * Improve authentication requests with cookie/token seperation
  * Cleanup of expired authentication sessions
  * Improved administration of password badlists

OBS-URL: https://build.opensuse.org/request/show/1032603
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=17
This commit is contained in:
William Brown 2022-11-01 05:36:06 +00:00 committed by Git OBS Bridge
parent 338eb79cc4
commit 6b229d097a
8 changed files with 44 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
_service
View File

@ -3,7 +3,7 @@
<param name="url">https://github.com/kanidm/kanidm.git</param>
<param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
<param name="scm">git</param>
<param name="revision">1.1.0-alpha.9</param>
<param name="revision">1.1.0-alpha.10</param>
<param name="match-tag">v*</param>
<param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)-alpha\.(\d+)</param>
<param name="versionrewrite-replacement">\1~alpha\2</param>
@ -13,12 +13,12 @@
<service mode="disabled" name="tar" />
<service mode="disabled" name="recompress">
<param name="file">*.tar</param>
<param name="compression">xz</param>
<param name="compression">zst</param>
</service>
<service mode="disabled" name="set_version"/>
<service name="cargo_vendor" mode="disabled">
<param name="srcdir">kanidm</param>
<param name="compression">xz</param>
<param name="compression">zst</param>
<param name="update">true</param>
</service>
<service name="cargo_audit" mode="disabled">

5
cargo_config
View File

@ -1,5 +1,10 @@
[source.crates-io]
replace-with = "vendored-sources"
[source."https://github.com/QnnOkabayashi/tracing-forest.git"]
git = "https://github.com/QnnOkabayashi/tracing-forest.git"
rev = "48d78f7294ceee47a22eee5c80964143c4fb3fe1"
replace-with = "vendored-sources"
[source.vendored-sources]
directory = "vendor"

3
kanidm-1.1.0~alpha10~git0.e43141c.tar.zst Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:47563dd98e6854beab67e147be2ba0ff0b7519f1d9a4fa1efe16561fcfa50dbe
size 4378358

3
kanidm-1.1.0~alpha9~git6.b20d5312.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:631b6c8cdb9f4ef8867ad542a5adda6577c5597ae788d8e63df15ec5c629e696
size 3879140

24
kanidm.changes
View File

@ -1,3 +1,27 @@
-------------------------------------------------------------------
Tue Nov 1 04:31:58 UTC 2022 - William Brown <william.brown@suse.com>
- Update to kanidm 1.1.0-alpha.10
* Management and tracking of authenticated sessions
* Make upgrade migrations more robust when upgrading over multiple versions
* Add support for service account tokens via ldap for extended read permissions
* Unix password management in web ui for posix accounts
* Support internal dynamic group entries
* Allow selection of name/spn in oidc claims
* Admin UI wireframes and basic elements
* TLS enforced as a requirement for all servers
* Support API service account tokens
* Make name rules stricter due to issues found in production
* Improve Oauth2 PKCE testing
* Add support for new password import hashes
* Allow configuration of trusting x forward for headers
* Components for account permission elevation modes
* Make pam\_unix more robust in high latency environments
* Add proc macros for test cases
* Improve authentication requests with cookie/token seperation
* Cleanup of expired authentication sessions
* Improved administration of password badlists
-------------------------------------------------------------------
Fri Sep 09 02:33:47 UTC 2022 - william.brown@suse.com

18
kanidm.spec
View File

@ -19,13 +19,13 @@
%global rustflags -Clink-arg=-Wl,-z,relro,-z,now -C debuginfo=2
Name: kanidm
Version: 1.1.0~alpha9~git6.b20d5312
Version: 1.1.0~alpha10~git0.e43141c
Release: 0
Summary: A identity management service and clients.
License: ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR ISC OR MIT ) AND ( Apache-2.0 OR MIT ) AND ( Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT ) AND ( CC0-1.0 OR Apache-2.0 ) AND ( MIT OR Apache-2.0 OR Zlib ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND MIT AND MPL-2.0 AND MPL-2.0+
URL: https://github.com/Firstyear/kanidm
Source: kanidm-%{version}.tar.xz
Source1: vendor.tar.xz
Source: kanidm-%{version}.tar.zst
Source1: vendor.tar.zst
Source2: cargo_config
ExcludeArch: %ix86 s390x ppc ppc64 ppc64le armhfp armv6l armv7l armv7hl
@ -33,7 +33,7 @@ ExcludeArch: %ix86 s390x ppc ppc64 ppc64le armhfp armv6l armv7l armv7hl
BuildRequires: cargo
BuildRequires: libudev-devel
BuildRequires: pam-devel
BuildRequires: rust >= 1.59.0
BuildRequires: rust >= 1.64.0
BuildRequires: sqlite-devel
BuildRequires: zstd
@ -134,7 +134,6 @@ install -D -d -m 0755 %{buildroot}%{_datadir}/kanidm/ui/pkg
install -D -d -m 0755 %{buildroot}%{_datadir}/kanidm/ui/pkg/external
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/kanidmd %{buildroot}%{_sbindir}/kanidmd
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/kanidm_badlist_preprocess %{buildroot}%{_bindir}/kanidm_badlist_preprocess
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/kanidm %{buildroot}%{_bindir}/kanidm
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/kanidm_cache_clear %{buildroot}%{_sbindir}/kanidm_cache_clear
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/kanidm_cache_invalidate %{buildroot}%{_sbindir}/kanidm_cache_invalidate
@ -157,7 +156,6 @@ install -m 0640 %{_builddir}/%{name}-%{version}/examples/server.toml %{buildroot
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidmd %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidmd
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidm %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidm
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidm_badlist_preprocess %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidm_badlist_preprocess
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidm_ssh_authorizedkeys_direct %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidm_ssh_authorizedkeys_direct
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidm_cache_clear %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidm_cache_clear
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/_kanidm_cache_invalidate %{buildroot}%{_sysconfdir}/zsh_completion.d/_kanidm_cache_invalidate
@ -166,15 +164,14 @@ install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidmd.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidmd.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_badlist_preprocess.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_badlist_preprocess.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_ssh_authorizedkeys_direct.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_ssh_authorizedkeys_direct.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_cache_clear.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_cache_clear.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_cache_invalidate.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_cache_invalidate.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_ssh_authorizedkeys.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_ssh_authorizedkeys.sh
install -m 0755 %{_builddir}/%{name}-%{version}/target/release/build/completions/kanidm_unixd_status.bash %{buildroot}%{_sysconfdir}/bash_completion.d/kanidm_unixd_status.sh
rm %{_builddir}/%{name}-%{version}/kanidm_book/src/DEVELOPER_README.md
cp %{_builddir}/%{name}-%{version}/DEVELOPER_README.md %{_builddir}/%{name}-%{version}/kanidm_book/src/DEVELOPER_README.md
# rm %{_builddir}/%{name}-%{version}/kanidm_book/src/DEVELOPER_README.md
# cp %{_builddir}/%{name}-%{version}/DEVELOPER_README.md %{_builddir}/%{name}-%{version}/kanidm_book/src/DEVELOPER_README.md
cp -r %{_builddir}/%{name}-%{version}/kanidm_book/src/ %{buildroot}%{_datadir}/kanidm/docs/
## TODO: Add /usr/share/kanidm/ui/pkg
@ -262,7 +259,6 @@ install -m 0644 %{_builddir}/%{name}-%{version}/kanidmd_web_ui/pkg/external/conf
%{_sysconfdir}/bash_completion.d/kanidm.sh
%files server
%{_bindir}/kanidm_badlist_preprocess
%{_sbindir}/kanidmd
%{_unitdir}/kanidmd.service
%dir %{_datadir}/kanidm
@ -276,9 +272,7 @@ install -m 0644 %{_builddir}/%{name}-%{version}/kanidmd_web_ui/pkg/external/conf
%dir %{_sysconfdir}/zsh_completion.d
%dir %{_sysconfdir}/bash_completion.d
%{_sysconfdir}/zsh_completion.d/_kanidmd
%{_sysconfdir}/zsh_completion.d/_kanidm_badlist_preprocess
%{_sysconfdir}/bash_completion.d/kanidmd.sh
%{_sysconfdir}/bash_completion.d/kanidm_badlist_preprocess.sh
%files unixd-clients
%{_libdir}/libnss_kanidm.so.2

3
vendor.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:61dbbfdf9e4497dbf4329c026c975d55222c95c51990a366df3202ba37f1d071
size 31469768

3
vendor.tar.zst Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f6e9e1ae398a63051848c6cef2fccdab108897fa2d373ed75f6e4c3fe041976f
size 56022571