Stéphane Lesimple
e2a45596d0
fix: generation of MFA secret under FreeBSD
2024-02-20 17:41:53 +01:00
Stéphane Lesimple
867410a16d
enh: plugins: better signal handling to avoid dangling children processes
2024-02-20 12:14:01 +01:00
Stéphane Lesimple
f022bd9ac8
feat: add ttyrecStealthStdoutPattern config
...
Commands that generate a lot of stdout output and are M2M workflows, such as rsync,
can now be excluded from ttyrec to avoid filling up drives
2024-02-20 12:13:53 +01:00
Stéphane Lesimple
fd6850c7ef
fix: osh-sync-watcher: default to a valid rshcmd ( fixes #433 )
2024-02-20 12:13:43 +01:00
Stéphane Lesimple
ad9e14d568
chore: silence tr on secret generation
2024-02-20 12:13:33 +01:00
Stéphane Lesimple
a458e4b63c
fix: fixrights.sh: add +x run-tool.sh
2024-01-17 11:18:19 +01:00
Stéphane Lesimple
6dd43c66c0
enh: batch: openhandle() is overkill and doesn't work on EOF
2024-01-17 11:01:50 +01:00
Stéphane Lesimple
692ebca3c2
fix: accountInfo: return always_active=1 for globally-always-active accounts
2024-01-17 11:01:21 +01:00
Stéphane Lesimple
0502d13d0e
enh: osh-lingering-sessions-reaper.sh: handle dangling plugins
2024-01-10 14:46:25 +01:00
Stéphane Lesimple
797ef68273
enh: osh-orphaned-homedir.sh: also cleanup /run/faillock
2024-01-09 14:19:29 +01:00
Stéphane Lesimple
345a1f951f
fix: don't exit with fping host is unreachable
...
As ping can return unknown exit codes for unknown cases,
just never bail out to avoid taking bad decisions,
as we retry each second maximum, there's no DoS risk
2023-12-05 10:02:52 +01:00
Stéphane Lesimple
3d402a1bc6
feat: add admin-configurable lock/kill timeout per plugin
2023-11-08 14:55:35 +01:00
Stéphane Lesimple
7a288bd812
chore: perlcritic adjustement on RequireArgUnpacking
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
47e058c272
refacto: use osh_print to obey force_stderr
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
1bcec68d2a
enh: scp and sftp with mfa support
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
b48463076f
feat: osh.pl: jit mfa for plugins
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
926a177aa0
refacto: osh.pl: move code to do_jit_mfa()
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
c849e7d6ef
refacto: osh.pl: move code to get_details_from_access_array()
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
5ba7e52054
refacto: osh.pl: move hardcoded plugin special cases to config
2023-11-08 13:21:20 +01:00
Stéphane Lesimple
998080260c
refacto: osh.pl: use hash instead of multiple vars
2023-11-08 13:21:20 +01:00
Pierre-Elliott Bécue
35d4841638
Allow setup-gpg.sh --import to receive, trust, and add to configure multiple public keys at once
2023-10-27 17:26:23 +02:00
Stéphane Lesimple
6d5255d841
enh: orphaned homedirs: adjust behavior on master instances
2023-10-15 12:53:26 +02:00
Stéphane Lesimple
4fb5e17166
chore: connect.pl: more readable indentation
2023-10-09 17:22:55 +02:00
Stéphane Lesimple
ce9cf3213c
enh: connect.pl: report empty ttyrec as ttyrec_empty instead of ttyrec_error
2023-10-09 17:22:55 +02:00
Stéphane Lesimple
7934b6283b
Update bin/admin/check_uid_gid_collisions.pl
...
Co-authored-by: Adrien Barreau <adrien.barreau@live.fr>
2023-10-04 17:55:07 +02:00
Stéphane Lesimple
a468220df7
fix: check_collisions: don't report orphan uids on slave, just use their name
2023-10-04 17:55:07 +02:00
Stéphane Lesimple
0353557939
enh: check_collisions: allow usage of /dev/null
2023-10-04 17:55:07 +02:00
Stéphane Lesimple
0eb61f26f2
meta: dev: add devenv docker, pre-commit info, and doc
2023-10-03 14:23:30 +02:00
Stéphane Lesimple
213bd28616
fix: scp: adapt wrapper and tests to new scp versions
2023-09-20 16:39:29 +02:00
Stéphane Lesimple
733fd054a6
fix: setup-gpg.sh: in some cases, an invalid configuration file could be generated
...
The escape code didn't work correctly, remove it as it's not needed,
indeed we already ensure that the generated password doesn't contain
any " or \, hence surrounding the var by "" quotes is enough.
2023-09-20 15:14:55 +02:00
Stéphane Lesimple
5c7389e85f
fix: when no command-line is passed, a warn could be emitted in some cases
...
This depends on the version of Perl libs, but in any case we shouldn't
pass an undef var to GetOptionsFromString, ensure this never happens
2023-09-20 13:38:40 +02:00
Stéphane Lesimple
13c885df42
enh: enable stealth_stdout mode for sftp
2023-09-19 17:32:27 +02:00
Stéphane Lesimple
a6a25fd53b
feat: add type8 and type9 password hashes
...
This requires the-bastion-mkhash-helper v1.1.0+
2023-09-19 17:12:48 +02:00
Stéphane Lesimple
5dc50b3e57
feat: add stealth_stderr/stdout ttyrec support, enable it for scp ( #413 )
2023-09-19 15:27:00 +02:00
Stéphane Lesimple
87d3f721e5
fix: clush: restore default handlers for SIGHUP/PIPE
2023-08-22 15:53:27 +02:00
Philipp Walter
e616f24d89
enh: setup-gpg.sh: create additional backup signing config with --generate
2023-08-22 14:32:30 +02:00
Stéphane Lesimple
4d8b5f520d
fix: selfMFASetupPassword: restore default sighandlers to avoid being zombified
2023-07-28 14:17:50 +02:00
Stéphane Lesimple
a65c53b76e
enh: use ttyrec instead of sqlite to record plugin output
2023-07-28 11:09:10 +02:00
Antoine Guerrée
7821c9ff75
chore(helper): remove -v ssh option
...
`--verbose` is the way to go
2023-07-20 14:52:52 +02:00
Antoine Guerrée
1b6131a753
chore(helper/doc): fix typos
2023-07-20 14:52:52 +02:00
Stéphane Lesimple
f77b8a25d3
fix: accountList: crash in some cases
2023-06-13 10:14:22 +02:00
Stéphane Lesimple
5cfb049a82
chore: doc: adding plugin configuration autogeneration
2023-06-01 11:52:39 +02:00
Stéphane Lesimple
cf405badfb
feat: add 2 configurable knobs to (self|account)AddPersonalAccess
...
widest_v4_prefix (maximum allowed prefix to add in a single ACL),
and self_remote_user_only (only allow ACLs where the remote user
is the same than the bastion account name)
2023-06-01 11:52:39 +02:00
Stéphane Lesimple
482eddb10c
feat: plugins: add loadConfig parameter & config validator support
2023-06-01 11:52:39 +02:00
Stéphane Lesimple
0515753f91
fix: add missing autocompletions, readonly flags and help category for some plugins
2023-05-31 17:37:52 +02:00
Stéphane Lesimple
902508f7d1
fix: update undocumented rename-group.sh script
2023-05-31 17:34:34 +02:00
Stéphane Lesimple
c6a6f806d2
feat: add uid/gid collisions checking script & amend doc
2023-04-17 17:53:14 +02:00
Stéphane Lesimple
f7f1514dd0
fix: groupInfo: show group name in human-readable output
2023-04-17 14:18:51 +02:00
Stéphane Lesimple
84687256a8
fix: --force-key wasn't working for groups
...
Fixes #259
2023-04-07 10:44:14 +02:00
Stéphane Lesimple
708efd90ca
chore: add RockyLinux 9 support
2023-04-07 10:44:05 +02:00
