Stéphane Lesimple
2c2064a484
feat: osh-encrypt-rsync: handle sqlite and user logs along with ttyrec files
2022-02-09 14:31:33 +01:00
Stéphane Lesimple
0ffdd108bd
v3.08.01
2022-01-19 11:24:12 +01:00
Stéphane Lesimple
9d371f90a9
doc: add documentation for osh-remove-empty-folders
2022-01-19 11:23:44 +01:00
Stéphane Lesimple
d7a898a5fa
Release v3.08.00
2022-01-04 15:50:02 +01:00
Stéphane Lesimple
716594e20e
chore: doc: limit .rst lines to 120 chars
2021-12-30 15:39:31 +01:00
Stéphane Lesimple
6694518ab5
chore: remove obsolete check-ssh-hardening.pl
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
bfaea07a12
docs: fix a log example line
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
000ed4e8af
feat: move scripts to GnuPG 2.x and add tests
2021-12-29 11:20:43 +01:00
Stéphane Lesimple
8b02d610be
doc: add FAQ entry about Ansible
2021-12-21 14:44:48 +01:00
Stéphane Lesimple
a68ccb3f8c
feat: add new OSes and deprecate old ones
...
add:
- Debian 11
- RockyLinux 8
remove:
- OpenSUSE Leap 15.2
- Old minor versions of CentOS 7.x
- Old minor versions of CentOS 8.x
2021-12-21 12:00:04 +01:00
Stéphane Lesimple
aaaa173764
feat: add the accountUnlock restricted plugin
2021-12-21 09:42:54 +01:00
Stéphane Lesimple
c48af00ff8
feat: add info_syslog() and code-info syslog type
2021-12-16 11:02:26 +01:00
Stéphane Lesimple
3507586de6
release v3.07.00
2021-12-13 14:02:41 +01:00
Christophe Crochet
e4b132ed9a
new access option: --force-password <HASH>, to only try one specific password
2021-12-09 16:51:40 +01:00
Stéphane Lesimple
89ecb2c0d7
feat: add support for Duo PAM auth as MFA ( #249 )
2021-11-03 15:50:10 +01:00
Stéphane Lesimple
11b2bc60b2
release v3.06.00
2021-10-20 13:42:13 +02:00
Christophe Crochet
d85298f229
new account option: --pubkey-auth-optional, to allow ingress login with or without pubkey when pam is required
2021-10-15 11:22:00 +02:00
madx
4d3ee1b99d
regenerated doc
2021-10-15 11:22:00 +02:00
madx
ea8ed97a34
new account option: mfa-any, to allow ingress login with pubkey alone or pam alone instead of requiring both
2021-10-15 11:22:00 +02:00
Jean "henyxia" Wasilewski
b40a2fd6e3
fix: add superowner group requirement
...
Signed-off-by: Jean "henyxia" Wasilewski <henyxia@revs0.com>
2021-09-24 11:56:35 +02:00
Stéphane Lesimple
b5c5d9d5ee
release v3.05.01
2021-09-22 10:43:40 +02:00
Stéphane Lesimple
b58388a3d9
feat: add --proactive-mfa and mfa/nofa interactive commands
...
For bastions using JIT MFA, where MFA can be requested when
attempting to connect through specific groups, or when using
some commands, with respect to MFA being enforced at connection
time directly through the sshd authentication process, one can
now request MFA validation in advance, to workaround problems
in commands such as ``clush`` or ``batch``, and interactive mode.
2021-09-21 12:06:40 +02:00
Stéphane Lesimple
99686499b1
feat: osh-backup-acl-keys: add the possibility to sign encrypted backups ( #209 )
2021-09-20 17:00:18 +02:00
Stéphane Lesimple
8e6c247cdf
doc: add upgrading notice
2021-09-14 16:05:27 +02:00
Stéphane Lesimple
d3f443a532
release v3.05.00
2021-09-14 10:21:04 +02:00
Stéphane Lesimple
4a21cfc421
enh: add --max-inactive-days to accountCreate
2021-09-06 14:52:46 +02:00
Stéphane Lesimple
ef10d509fd
enh: add max_inactive_days to account configuration ( #230 )
2021-09-06 14:52:46 +02:00
Stéphane Lesimple
15cb2c2453
enh: accountInfo: add --list-groups
...
Listing groups can be slow on bastions having thousands
of groups, hence this is now disabled by default.
2021-09-02 13:13:44 +02:00
Stéphane Lesimple
82b681a38d
doc: add faq about session locking ( #226 )
2021-09-02 11:42:48 +02:00
Stéphane Lesimple
5d188faac0
chore: trick perltidy
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
2510de0cd5
doc: generate scripts doc reference
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
710eb2e4cb
doc: use autosectionlabel
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
92d4a46ac5
doc: add osh-piv-grace-reaper.pl config reference
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
9f28dfa977
doc: add osh-backup-acl-keys.sh config reference
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
3c6ce52e8e
doc: add osh-encrypt-rsync.pl config reference
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
0dc448943a
doc: add osh-sync-watcher.sh config reference
2021-09-02 10:06:47 +02:00
Stéphane Lesimple
a08f56df9f
feat: support pam_faillock for Debian 11 ( #163 )
2021-07-05 10:35:58 +02:00
Stéphane Lesimple
a447662cfd
release v3.04.00
2021-07-02 17:31:47 +02:00
Stéphane Lesimple
d3f323d0c6
doc: micro fixes
2021-07-02 16:50:53 +02:00
Stéphane Lesimple
01690e8111
bump to v3.03.99-rc2
2021-06-30 17:20:48 +02:00
Stéphane Lesimple
ecee68c8bc
chore: fix spurious empty lines at end of generated rst files
2021-06-30 15:52:47 +02:00
Stéphane Lesimple
458c50eff1
documentation: add a lot of new documentation topics
2021-06-30 15:52:47 +02:00
Stéphane Lesimple
2193ee487d
enh: replace 'allowUTF8' (introduced in rc1) by 'fanciness'
2021-06-30 09:53:04 +02:00
Stéphane Lesimple
2f1e3fbfa8
support: del deb8/ubuntu1404/opensuse150/opensuse151, add opensuse153
...
Remove support for EOL OSes:
- Debian 8
- Ubuntu 14.04
- OpenSUSE 15.0
- OpenSUSE 15.1
Add support for:
- OpenSUSE 15.3
2021-06-25 16:02:38 +02:00
Stéphane Lesimple
d400ceeb9f
doc: clush: document --user and --port
...
Partly fixes #201
2021-06-23 12:24:32 +02:00
Stéphane Lesimple
76639b665c
chore: doc: auto-detect current year in generated documentation
...
and set 2021 in LICENSE
2021-06-15 09:00:19 +02:00
Romain Lebbadi-Breteau
2d43a7c915
Add extract argument to tar
2021-06-14 11:23:44 +02:00
Stéphane Lesimple
710b55d845
bump to v3.03.99-rc1
2021-06-03 17:01:10 +02:00
Stéphane Lesimple
3925e67d43
feat: add groupDestroy command for owners
...
This command deletes a group, as `groupDelete` does, but works
for owners so that they can delete their own group.
`groupDelete` remains as a restricted command, able to delete any group.
Closes #40 .
2021-06-02 15:32:40 +02:00
Stéphane Lesimple
8cc990ad57
feat: add filtering options to several cmds,nicify print_acls()
...
The commands selfListAccesses, accountListAccesses,
groupList, groupListServers, groupListGuestAccesses and
accountList now have options to filter their output through
pattern matching, with --include and --exclude.
The output from the commands using print_acls() is also more
human-friendly, with auto-adjusting column length, and empty
columns omitted.
Closes #60 .
2021-05-25 09:42:28 +02:00
