- Update to version 1.3.1~git0.eed7c07:
* Fix incorrect logic in cred update flow (#2956)
* Resolve maintainer bikeshedding
- Update to version 1.3.0~git0.e2a563f:
* Release 1.3.0 (#2941)
* New orca models (#2909)
* Run rust_build CI between multiple Rust versions (#2939)
* Bump the all group across 1 directory with 9 updates (#2938)
* Bump the all group in /pykanidm with 4 updates (#2937)
* fixing println bug (#2935)
* Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
* clippying all the things (#2931)
* docs reordering and cleanup (#2932)
* Add scim proto to kanidm, refactor to improve serde performance. (#2933)
* 20240725 allow connection to older servers (#2930)
* Ubuntu/Debian buildy scripty tweaky things (#2928)
* kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
* Improve workflow when account policy isnt satisfied (#2927)
* Docs rework (#2919)
* Bump the all group in /pykanidm with 4 updates (#2924)
* Bump the all group with 5 updates (#2925)
* Substring Indexing (#2905)
* Oauth2 in htmx (#2912)
* Strict redirect URL enforcement (#2917)
* Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
* fix typos (#2908)
* Add missing groups scope to Grafana example scope-map (#2914)
* build profiles: rename release_suse_generic to release_linux (#2907)
* 20240716 check mkdir (#2906)
OBS-URL: https://build.opensuse.org/request/show/1192442
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kanidm?expand=0&rev=33
* Release 1.3.0
* Release 1.3.0-pre
* Release 1.3.0 (#2941)
* New orca models (#2909)
* Run rust_build CI between multiple Rust versions (#2939)
* Bump the all group across 1 directory with 9 updates (#2938)
* Bump the all group in /pykanidm with 4 updates (#2937)
* fixing println bug (#2935)
* Reorganising the daemon startup so it doesn't fail with OTEL configured (#2934)
* clippying all the things (#2931)
* docs reordering and cleanup (#2932)
* Add scim proto to kanidm, refactor to improve serde performance. (#2933)
* 20240725 allow connection to older servers (#2930)
* Ubuntu/Debian buildy scripty tweaky things (#2928)
* kanidm graph graphviz unfit for scripting bc. of non-graphviz output (#2876)
* Improve workflow when account policy isnt satisfied (#2927)
* Docs rework (#2919)
* Bump the all group in /pykanidm with 4 updates (#2924)
* Bump the all group with 5 updates (#2925)
* Substring Indexing (#2905)
* Oauth2 in htmx (#2912)
* Strict redirect URL enforcement (#2917)
* Bump gix-path from 0.10.8 to 0.10.9 in the cargo group (#2918)
* fix typos (#2908)
* Add missing groups scope to Grafana example scope-map (#2914)
* build profiles: rename release_suse_generic to release_linux (#2907)
* 20240716 check mkdir (#2906)
* Fix issues with suspend reported by himmelblau (#2911)
* Implement home_mount_path logic (#2894)
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=56
- Update to version 1.2.0~git0.9efa91a:
* Release 1.2.0 (#2733)
* Prepare 1.2.0
* Release 1.2.0 prep (#2724)
* Minor upgrade fixes (#2722)
* Resolve OAuth2 client/rs confusion (#2719)
* Improve access control doc to describe privilege access mode (#2721)
* Support 1.1 attribute in LDAP (#2720)
* Add mail support to groups (#2718)
* Add session limit (#2714)
* added profile and `memberof` search to the basic model (#2712)
* chore(deps): bump the all group in /pykanidm with 4 updates (#2717)
* Fix typo in oauth2 error message (#2715)
* 20240409 rework orca markov (#2699)
* Begin the basis of the key provider model (#2640)
* chore(deps): bump the all group in /pykanidm with 4 updates (#2707)
* chore(deps): bump peaceiris/actions-mdbook from 1 to 2 in the all group (#2706)
* chore(deps): bump idna from 3.4 to 3.7 in /pykanidm (#2703)
* fix(TotpDigits): fix typo in TryFrom impl (#2702)
* chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2696)
* chore(deps): bump h2 from 0.3.25 to 0.3.26 (#2694)
* Windows Hello Authentication requirements (#2688)
* chore(deps): bump the all group with 1 update (#2690)
* chore(deps-dev): bump the all group in /pykanidm with 1 update (#2691)
* Require kanidm-unixd before kanidm-unixd-tasks (#2687)
* kanidm unixd mfa capabilities (#2672)
* Add Grafana integration to OAuth2 documentation (#2685)
* [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)
* ldap-sync: allow to use attrs more than once (#2676)
* chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2683)
OBS-URL: https://build.opensuse.org/request/show/1171074
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=50
- Update to version 1.1.0~rc16~git1.a917291:
* Correct cargo versions
* Release 1.1.0-rc.16 (#2483)
* Fix for incorrect domain migration rollbacks (#2482)
* Add tools for remigration and domain level raising (#2481)
* chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480)
* Support SPN in groups claim (#2474)
* Credential update tweaks (#2475)
* Oauth2 pkce faq (#2473)
* Fix debian versioning (#2472)
* chore(deps): bump the all group in /pykanidm with 7 updates (#2479)
* chore(deps): bump the all group with 1 update (#2478)
* Fix RUV trim (#2466)
* 20240125 2217 client credentials grant (#2456)
* docs: Add application passwords design document (#2427)
* handling master docs (#2465)
* update the artifact name in the download step (#2464)
* Book SUMMARY.md: Fix part titles according to mdbook (#2463)
* Update chat link, add keywords (#2462)
* PyKanidm updates and testing (#2301)
* chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461)
* 1222 what rights does anonymous have (#2436)
* Fix inverted key/chain logic from TLS error improvement (#2453)
* Improve TLS configuration errors (#2447)
* chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445)
* chore(deps): bump the all group with 1 update (#2441)
* chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443)
* Return sshkey label to cli fields (#2440)
* Add rfc8414 metadata (#2434)
* Add test for delete referer invalid (#2435)
OBS-URL: https://build.opensuse.org/request/show/1144782
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=40
- Update to version 1.1.0~rc15~git2.74f5c0f:
* make versions consistent
* 1.1.0 rc.15 dev post-release (#2271)
* Release 1.1.0-rc.15-dev
* started writing docs and ended up in another rabbit hole (#2267)
* CLI integration test beginnings (#2261)
* chore(deps): bump the all group with 7 updates (#2266)
* chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
* Add book chapter + cli
* Cargo fmt and clippy checks
* Restrict posix passwords on ldap bind with config
* Splitting the SPAs (#2219)
* Bug chasing (#2257)
* cargo fmt + clippy (#2241)
* service-account or person validity show returns for non-existing identity (#2258)
* don't need write if we are not writing (#2256)
* adding service account patch methods (#2255)
* .deb package build and docs fixes (#2252)
* Auth flow docs (#2249)
* pykanidm test code (#2202)
* chore(deps): bump the all group with 5 updates (#2247)
* chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
* 20231019 1122 account policy basics (#2245)
* Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
* 20231014 account policy (#2218)
* chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
* Fix incorrect references to LDAP in sync (#2239)
* Remove unused crate users (#2240)
* chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
* Windows build fixes and test coverage (#2220)
OBS-URL: https://build.opensuse.org/request/show/1121430
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=36
- Update to version 1.1.0~beta13~git2.5d1e2f9:
* Resolve build failiures when selinux is enabled (#1927)
* Resolve issue with publishing (#1925)
* Set dev version (#1924)
* Release 1.1.0-beta.13 (#1922)
* 20230731 release (#1921)
* Improve default shells for distros (#1920)
* 20230728 techdebt paydown (#1909)
* chasing weirdness (#1910)
* chore(deps-dev): bump mkdocs-material from 9.1.19 to 9.1.21 in /pykanidm (#1918)
* chore(deps): bump serde_json from 1.0.103 to 1.0.104 (#1917)
* chore(deps): bump serde from 1.0.174 to 1.0.178 (#1916)
* chore(deps): bump tikv-jemallocator from 0.5.0 to 0.5.4 (#1915)
* chore(deps-dev): bump mkdocs from 1.4.3 to 1.5.1 in /pykanidm (#1913)
* chore(deps-dev): bump pylint-pydantic from 0.2.3 to 0.2.4 in /pykanidm (#1912)
* chore(deps): bump pydantic from 2.0.3 to 2.1.1 in /pykanidm (#1911)
* 20230727 unix int modularity (#1907)
* bumping action version (#1908)
* 68 20230720 replication improvements (#1905)
* Resolve compilation issue with tpm enabled on linux (#1902)
* Improve service file for host installs (#1901)
* 20230720 unix int modular (#1881)
* fixing up pydantic things (#1885)
* 1788 admin unix socket (#1880)
* chore(deps-dev): bump pylint-pydantic from 0.2.1 to 0.2.3 in /pykanidm (#1900)
* chore(deps-dev): bump ruff from 0.0.278 to 0.0.280 in /pykanidm (#1899)
* chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1898)
* chore(deps-dev): bump mkdocs-material from 9.1.18 to 9.1.19 in /pykanidm (#1897)
* chore(deps): bump async-trait from 0.1.71 to 0.1.72 (#1895)
* chore(deps-dev): bump types-toml from 0.10.8.6 to 0.10.8.7 in /pykanidm (#1896)
OBS-URL: https://build.opensuse.org/request/show/1101674
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=29
- Update to version 1.1.0~alpha12~git0.bcdbb18:
* Release 1.1.0-alpha.12 (#1588)
* chore(deps): bump tokio-util from 0.7.7 to 0.7.8 (#1587)
* chore(deps): bump reqwest from 0.11.16 to 0.11.17 (#1586)
* chore(deps): bump tokio from 1.27.0 to 1.28.0 (#1585)
* chore(deps): bump uuid from 1.3.1 to 1.3.2 (#1584)
* chore(deps): bump clap from 3.2.23 to 3.2.25 (#1583)
* chore(deps-dev): bump coverage from 7.2.3 to 7.2.5 in /pykanidm (#1582)
* Correctly prevent start up when https sockets in use (#1579)
* Filter rdns and dns for ldap filters (#1576)
* use sccache, merge "test" actions into "build", remove homebrew caching (#1578)
* Cleanup incorrect log errors of denied entries (#1577)
* 20230424 clippppppppppppyyyyyyyy (#1574)
* Add exclusive process lock to Kanidm to prevent accidental duplicate commands. (#1575)
* more more more unixd build fixes (#1573)
* chore(deps-dev): bump mkdocs-material from 9.1.7 to 9.1.8 in /pykanidm (#1572)
* chore(deps): bump openssl from 0.10.51 to 0.10.52 (#1571)
* chore(deps): bump openssl-sys from 0.9.86 to 0.9.87 (#1570)
* chore(deps-dev): bump ruff from 0.0.262 to 0.0.263 in /pykanidm (#1569)
* more-merge unixd commands (#1568)
* Consolidate unix tools (#1566)
* 1553 pam remote or local detection (#1565)
* chore(deps): bump openssl from 0.10.50 to 0.10.51 (#1563)
* Improve user experince of refreshing with intent tokens during cred update (#1556)
* chore(deps): bump tracing-subscriber from 0.3.16 to 0.3.17 (#1562)
* chore(deps): bump regex from 1.7.3 to 1.8.1 (#1561)
* chore(deps): bump libc from 0.2.141 to 0.2.142 (#1560)
* chore(deps-dev): bump ruff from 0.0.261 to 0.0.262 in /pykanidm (#1559)
* chore(deps-dev): bump mkdocs-material from 9.1.6 to 9.1.7 in /pykanidm (#1558)
* chore(deps): bump actions/upload-artifact from 1 to 3 (#1557)
OBS-URL: https://build.opensuse.org/request/show/1083794
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=27
- Update to version 1.1.0~alpha11~git0.d3a2a6b:
* Release 1.1.0-alpha.11 (#1354)
* 20230128 protected to access (#1349)
* 20230125 pre rel cleanup (#1348)
* 20230125 pre rel cleanup (#1347)
* Allow multiple backends to run in parallel for repl tests (#1346)
* 20230121 access improvement (#1345)
* Fix debian build path (#1331)
* Windows-related build fixes (#1344)
* chore(deps): bump gloo-net from 0.2.5 to 0.2.6 (#1338)
* chore(deps-dev): bump mkdocstrings from 0.19.1 to 0.20.0 in /pykanidm (#1334)
* making the robots easier and happier (#1343)
* chore(deps): bump tokio from 1.24.1 to 1.24.2 (#1340)
* chore(deps): bump toml from 0.5.10 to 0.5.11 (#1337)
* chore(deps): bump proc-macro2 from 1.0.49 to 1.0.50 (#1332)
* chore(deps): bump reqwest from 0.11.13 to 0.11.14 (#1333)
* chore(deps): bump async-trait from 0.1.61 to 0.1.62 (#1335)
* 2023 orca improve (#1342)
* Adding healthcheck functionality to kanidmd (#1330)
* less lint more bark, ruff ruff (#1341)
* 1121 SCIM import totp freeipa (#1328)
* 1121 multiple totp (#1325)
* chore(deps-dev): bump pylint from 2.15.9 to 2.15.10 in /pykanidm (#1324)
* chore(deps-dev): bump mkdocs-material from 9.0.3 to 9.0.5 in /pykanidm (#1322)
* chore(deps-dev): bump coverage from 7.0.4 to 7.0.5 in /pykanidm (#1323)
* chore(deps-dev): bump pytest from 7.2.0 to 7.2.1 in /pykanidm (#1318)
* chore(deps): bump regex from 1.7.0 to 1.7.1 (#1316)
* chore(deps): bump ldap3_client from `2c9dc31` to `b3c7653` (#1320)
* chore(deps-dev): bump pook from 1.0.2 to 1.1.1 in /pykanidm (#1319)
* chore(deps): bump dialoguer from 0.10.2 to 0.10.3 (#1317)
OBS-URL: https://build.opensuse.org/request/show/1062368
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=21
- Update to kanidm 1.1.0-alpha.10
* Management and tracking of authenticated sessions
* Make upgrade migrations more robust when upgrading over multiple versions
* Add support for service account tokens via ldap for extended read permissions
* Unix password management in web ui for posix accounts
* Support internal dynamic group entries
* Allow selection of name/spn in oidc claims
* Admin UI wireframes and basic elements
* TLS enforced as a requirement for all servers
* Support API service account tokens
* Make name rules stricter due to issues found in production
* Improve Oauth2 PKCE testing
* Add support for new password import hashes
* Allow configuration of trusting x forward for headers
* Components for account permission elevation modes
* Make pam\_unix more robust in high latency environments
* Add proc macros for test cases
* Improve authentication requests with cookie/token seperation
* Cleanup of expired authentication sessions
* Improved administration of password badlists
OBS-URL: https://build.opensuse.org/request/show/1032603
OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=17
