Commit graph

1215 commits

Author SHA1 Message Date
Russell Jones a425423103 Renamed IdentityProvider to Provider. 2017-04-12 22:24:18 -07:00
Russell Jones 7275c767fc Added support for ACR values for OIDC connectors. 2017-04-12 17:24:26 -07:00
Russell Jones f85bb0de3c Set defaults for templated roles. 2017-04-11 17:03:31 -07:00
Russell Jones 64d5b1d93c Don't set logins directly from allowed logins for CertAuthority V2. 2017-04-11 16:55:26 -07:00
Jose Plana f98a645fcf Merge branch 'master' into fix_no_userinfo_endpoint 2017-04-10 16:26:37 +02:00
Jose Plana 9d1ea5ec3e Skip userinfo if provider doesn't support it. 2017-04-10 16:01:03 +02:00
Russell Jones 10177ade5d Fixed typo when checking for clustername. 2017-04-07 18:01:05 -07:00
Sasha Klizhentas 3c2570fa35 Sasha High Availability. 2017-04-07 16:54:15 -07:00
Russell Jones 95192e3777 Redirect timeout is 10 mins and redirect to error page on failed login. 2017-04-07 14:56:32 -07:00
Russell Jones 4b95db44cb Corrected the Session URL returned when calling "teleport status". 2017-04-07 10:12:36 -07:00
Russell Jones d330d68ec5 If a role is not found, continue on in GetRoles. 2017-04-06 12:37:19 -07:00
Russell Jones fb4c280c0c Fixed User CA export and parsing and added --compat=1.0 flag to tctl. 2017-04-06 12:05:00 -07:00
Russell Jones 72ecdb8d24 Code review fixes. 2017-04-04 18:16:56 -07:00
Russell Jones fcfb8834de Update exisiting OIDC users upon re-login. 2017-04-04 17:06:32 -07:00
Russell Jones fde0ae4178 Added TTL to UpsertRole. Dynamic roles for OIDC users now have TTL. 2017-04-04 17:06:28 -07:00
Russell Jones 81ba372833 Added support for dynamic roles in claim mappings for OIDC. 2017-04-04 15:09:21 -07:00
Sasha Klizhentas 9ef7e64eca bring seed_config, make it deprecated fixes #890 2017-03-31 18:10:55 -07:00
Sasha Klizhentas 2de85cb5bf Merge branch 'master' into sasha/export 2017-03-30 17:53:50 -07:00
Sasha Klizhentas daf04f1abe introduce setter and fix typo 2017-03-30 17:52:58 -07:00
Russell Jones c7956899d5 Merge claims from UserInfo endpoint into claims from ID token. Also,
fallback to Base64 decoding if Base64-URL decoding fails.
2017-03-30 17:40:00 -07:00
Russell Jones 835a754fdb Fixed Ansible regressions and added documentation for docker build. 2017-03-30 13:52:06 -07:00
Sasha Klizhentas fd46d88a0c try to fix the test 2017-03-29 19:26:10 -07:00
Russell Jones 81b379e2bc Remove log line that contains err. 2017-03-29 17:12:50 -07:00
Russell Jones d304e47490 Use ioutil.TempDir to create path to socket instead. 2017-03-29 17:12:50 -07:00
Russell Jones 1cab059039 Changes to Unix socket path to make it cross platform. 2017-03-29 17:12:50 -07:00
Ev Kontsevoy 35f80ca798 Added 'data_dir' value to backend params
Fixes #867
2017-03-29 17:12:50 -07:00
Ev Kontsevoy 1755870f27 Logging fixes and more
- Fixed logging. Closes #875
- Removed dead code
- Fixed 'exec' tests on OSX
2017-03-29 17:12:50 -07:00
Ev Kontsevoy dd9db5ec2e Minor cosmetic commit
- Added comments to explain the purpose of clientConfig.HostPort
- Fixed typo
- Fixed docker-based 'make release' to include Teleport version into the
  produced tarball
- More informative logging around host lookups
2017-03-29 17:12:50 -07:00
Ev Kontsevoy 99672d09a7 Fixed scp regressions
In this commit:

1. Minor addition to Makefile to pull new .go files from
   tool/teleport/common

2. os.Glob() returns an empty list (instead of an error) if the
   file/pattern is not found, so added check for that.

3. sendFile was prematurely sending 'C' command before trying to open a
   file. This used to lead to creation of empty files for invlaid
   sources.

Also, removed some confusing comments.
2017-03-29 16:49:40 -07:00
Sasha Klizhentas facfc9495b fix test 2017-03-28 16:18:59 -07:00
Sasha Klizhentas 30e1e1325d add principal 2017-03-28 16:18:59 -07:00
Russell Jones 51c347e35c Migrated auth preferences. 2017-03-22 17:08:24 -07:00
Ev Kontsevoy 4722b2d6da Updated comments for DynamoDB package 2017-03-22 17:04:06 -07:00
Russell Jones 2b10e53a1d Allow creating local users without second factor. 2017-03-22 15:06:40 -07:00
Russell Jones cbfd00879c Always create default namespace. 2017-03-22 12:10:01 -07:00
Sasha Klizhentas 17574fef54 fix trusted cluster key exchange 2017-03-21 18:15:05 -07:00
Russell Jones f7934b5be4 Set default PTY size if an invalid size is requested and
correctly split command.
2017-03-21 16:50:07 -07:00
Russell Jones a110e48108 Support Get/Set Cluster Authentication Preferences and Universal Second
Factor Settings from tctl.
2017-03-21 16:47:18 -07:00
Sasha Klizhentas f02d391172 add optional agent forward cert extension 2017-03-21 13:56:05 -07:00
Sasha Klizhentas 21403b4291 try permit agent forwarding 2017-03-21 10:39:20 -07:00
Russell Jones d707eaaf4e Unload all keys before reloading them. This ensures we don't leave stale
keys in the agent.
2017-03-17 14:47:38 -07:00
Russell Jones 00567f6d0c Added public_address to proxy server configuration and heartbeat. 2017-03-17 11:38:40 -07:00
Sasha Klizhentas 320dc0c57d fix window resize for OpenSSH, fixes #800 2017-03-16 11:20:35 -07:00
Sasha Klizhentas c438f3192b TTL Cert 2017-03-14 17:26:42 -07:00
Russell Jones f62efca23f Added more debug logging for "tsh agent". 2017-03-14 17:07:47 -07:00
Alexey Kontsevoy d6c78f4cb1 addressing code review 2017-03-13 18:48:01 -04:00
Alexey Kontsevoy c2008fb72e add remove resource method to Role interface 2017-03-13 18:39:48 -04:00
Sasha Klizhentas 9141f94b8d fix flaky test 2017-03-12 12:28:31 -07:00
Sasha Klizhentas 6e2b69acf1 fix retrieval TTL 2017-03-12 12:23:51 -07:00
Alexey Kontsevoy 29c059556b bug fix 2017-03-11 19:14:46 -05:00