Stéphane Lesimple
3331e158a0
enh: better error detection and logging in (account|group)Delete
2022-01-19 11:24:03 +01:00
Stéphane Lesimple
9d371f90a9
doc: add documentation for osh-remove-empty-folders
2022-01-19 11:23:44 +01:00
Stéphane Lesimple
7bb0843de1
feat: add osh-remove-empty-folders.sh
2022-01-19 11:23:44 +01:00
Stéphane Lesimple
744bd5fa0c
enh: introduce exit_fail and exit_success for shell scripts
2022-01-19 11:23:44 +01:00
Stéphane Lesimple
d7a898a5fa
Release v3.08.00
2022-01-04 15:50:02 +01:00
Antoine Leblanc
1c8efa6590
fix: osh-accountCreate: fix typo
...
Signed-off-by: Antoine Leblanc <antoine.leblanc@ovhcloud.com>
2021-12-31 16:22:03 +01:00
Stéphane Lesimple
716594e20e
chore: doc: limit .rst lines to 120 chars
2021-12-30 15:39:31 +01:00
Stéphane Lesimple
7f28cce490
chore: install: remove obsolete upgrading sections
...
These portions of code were only useful to upgrade bastions from
versions older than v3.00.00, which was the first public release.
There has been no remaining pre-v3.x version in production internally
since some time now, so there is no use keeping that code.
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
37842c29d3
chore: packages-check.sh: remove obsolete -t and -v options
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
da5cb3c232
chore: packages-check.sh: implement installed pkg detection in rhel/suse, use proper pkg names
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
6694518ab5
chore: remove obsolete check-ssh-hardening.pl
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
bfaea07a12
docs: fix a log example line
2021-12-29 13:19:53 +01:00
Stéphane Lesimple
ae74a823f8
chore: perltidy: rewrite perl-tidy.sh to support single-file tidy
2021-12-29 11:40:34 +01:00
Stéphane Lesimple
ae997dd93c
chore: shellcheck: rewrite shell-check.sh and make files compliant with v0.8.0
2021-12-29 11:40:34 +01:00
Stéphane Lesimple
54a4dc6c65
chore: use state vars where we can
2021-12-29 11:21:04 +01:00
Stéphane Lesimple
b3af2933f9
enh: install.inc: random delay under CI
2021-12-29 11:20:55 +01:00
Stéphane Lesimple
be6a71afab
fix: install.inc: verbose under CI
2021-12-29 11:20:55 +01:00
Stéphane Lesimple
2f623dfb3a
fix: install.inc: fail nicely on invalid JSON under set -e
2021-12-29 11:20:55 +01:00
Stéphane Lesimple
11e81614a4
fix: remove hardcoded config path and fix FreeBSD
2021-12-29 11:20:55 +01:00
Stéphane Lesimple
f609565fe8
enh: batch: detect when asked to start a plugin requiring MFA
2021-12-29 11:20:55 +01:00
Stéphane Lesimple
000ed4e8af
feat: move scripts to GnuPG 2.x and add tests
2021-12-29 11:20:43 +01:00
Stéphane Lesimple
4471cee434
chore: tests: 400-piv: don't print data on countonly phase
2021-12-29 11:20:43 +01:00
Stéphane Lesimple
0f1596b51c
enh: tests: --module can be specified multiple times
2021-12-29 11:20:43 +01:00
Stéphane Lesimple
4e9dffda44
chore: tests: don't shadow the $name var
2021-12-28 09:54:44 +01:00
Stéphane Lesimple
f8f193b298
enh: selfMFASetupPassword: add more messages for the user
2021-12-28 09:54:17 +01:00
Stéphane Lesimple
0f90dfef2d
chore: tests: remove consistency check from long tests
2021-12-23 12:42:56 +01:00
Stéphane Lesimple
e847a19857
enh: ttyrec & yubico installs: hardcode URLs for when API is down
2021-12-22 18:00:21 +01:00
Stéphane Lesimple
415bc9b903
doc: add more info about root 2FA in sshd_config templates
2021-12-21 14:44:48 +01:00
Stéphane Lesimple
8b02d610be
doc: add FAQ entry about Ansible
2021-12-21 14:44:48 +01:00
Stéphane Lesimple
a68ccb3f8c
feat: add new OSes and deprecate old ones
...
add:
- Debian 11
- RockyLinux 8
remove:
- OpenSUSE Leap 15.2
- Old minor versions of CentOS 7.x
- Old minor versions of CentOS 8.x
2021-12-21 12:00:04 +01:00
Stéphane Lesimple
aaaa173764
feat: add the accountUnlock restricted plugin
2021-12-21 09:42:54 +01:00
Stéphane Lesimple
d51c4c8be0
fix: tests: full tests on FreeBSD
2021-12-20 12:54:32 +01:00
Stéphane Lesimple
c48af00ff8
feat: add info_syslog() and code-info syslog type
2021-12-16 11:02:26 +01:00
Stéphane Lesimple
7cc350b40d
chore: check for spurious args in all helpers
2021-12-16 11:02:13 +01:00
Stéphane Lesimple
90dbe04dde
enh: detect silent password change failures
2021-12-15 18:20:46 +01:00
Stéphane Lesimple
3507586de6
release v3.07.00
2021-12-13 14:02:41 +01:00
Stéphane Lesimple
cb28b44382
chore/fix: move HEXIT() to helper module, use HEXIT only in helpers
2021-12-13 09:51:00 +01:00
Stéphane Lesimple
850152a88c
enh: ensure proper Getopt::Long options are set everywhere
2021-12-13 09:51:00 +01:00
Stéphane Lesimple
d4cc727f74
chore: factorize helpers header
2021-12-13 09:51:00 +01:00
Stéphane Lesimple
2c2f723bbb
fix: add helpers handling of SIGPIPE/SIGHUP
...
To avoid having e.g. a group creation interrupted in the middle just because
the caller killed their ssh connection while we're still working
2021-12-13 09:51:00 +01:00
Stéphane Lesimple
1725130a15
fix: avoid double-close log messages on HUP
2021-12-13 09:50:36 +01:00
Stéphane Lesimple
373f4907de
fix: tests under OpenSUSE (fping raw sockets)
2021-12-13 09:32:52 +01:00
Antoine Leblanc
cbf1bd6645
doc: allowkeeper: fix typo
...
Signed-off-by: Antoine Leblanc <antoine.leblanc@ovhcloud.com>
2021-12-09 16:51:55 +01:00
Christophe Crochet
98c1c79382
update of --force-password: code style cleanup
2021-12-09 16:51:40 +01:00
Christophe Crochet
e9841b89bc
update of --force-password: removed guest support
2021-12-09 16:51:40 +01:00
Christophe Crochet
ff40617624
update of --force-password: guest support, autocompletion, new tests, code cleanups
2021-12-09 16:51:40 +01:00
Christophe Crochet
e4b132ed9a
new access option: --force-password <HASH>, to only try one specific password
2021-12-09 16:51:40 +01:00
Stéphane Lesimple
89ecb2c0d7
feat: add support for Duo PAM auth as MFA ( #249 )
2021-11-03 15:50:10 +01:00
Stéphane Lesimple
7dcbfeebc6
fix: --self-password was missing as a -P synonym ( #257 )
2021-10-28 11:33:13 +02:00
Stéphane Lesimple
11b2bc60b2
release v3.06.00
2021-10-20 13:42:13 +02:00
