Commit graph

1401 commits

Author SHA1 Message Date
Ev Kontsevoy bbace4410e Hooked up static token to node registration 2016-05-12 01:16:13 -07:00
Ev Kontsevoy dab0ad347c Flexible tokens:
- Static never-expiring tokens
- TTL tokens
- Single-use tokens with TTL of 30 mins
2016-05-12 00:44:25 -07:00
Ev Kontsevoy 2f93c31c92 Proper handling of foles stored in returned certificates 2016-05-11 22:39:38 -07:00
Ev Kontsevoy 8b3d237252 Added unit tests to cover role set operations 2016-05-11 22:27:06 -07:00
Ev Kontsevoy 90368cb157 Better handling of edge cases in tun client
When a tunnel client (SSH client) finds itself in a situation when all
auth servers are offline, this edge case is handled better.
2016-05-11 22:07:54 -07:00
Ev Kontsevoy dcfd841020 Vagrant-based 3-node cluster
Each node has only one role.
2016-05-11 18:51:30 -07:00
Ev Kontsevoy 0fd6f2f31b Minor improvement to tunclient 2016-05-11 18:34:55 -07:00
Ev Kontsevoy 1b6d281611 Nicer libvirt-based Vagrantfile 2016-05-11 17:34:52 -07:00
Ev Kontsevoy efb4423109 Added flags to tctl nodes add
`--ttl`  : allows to specify TTL for each token
`--roles`: allows to specify which roles the new node will be able to
           assume
2016-05-11 16:43:07 -07:00
Ev Kontsevoy c91141509d Spelling in comments 2016-05-11 14:33:44 -07:00
Ev Kontsevoy 0b26b7fc47 Teleport Host Certificates support multiple roles now
Teleport CA-signed host certificates used to support only one
server role per cert.

This commit adds the ability to store multiple roles in a
certificate, paving the road for multi-role node support in
a near future.
2016-05-10 20:27:18 -07:00
Ev Kontsevoy 139b5188fd Merge remote-tracking branch 'origin/master' into ev/tmp 2016-05-10 16:58:15 -07:00
Ev Kontsevoy 566345bdb6 Merge pull request #413 from gravitational/sasha/fixlogin
Env var for TELEPORT_USER, refs #408
2016-05-10 16:57:39 -07:00
Ev Kontsevoy c5119ee1eb Merge branch 'master' into ev/tmp 2016-05-10 16:31:54 -07:00
Sasha Klizhentas 39d9f076c2 Env var for TELEPORT_USER, refs #408 2016-05-10 15:34:35 -07:00
Alexander Klizhentas 4540f90aa4 Merge pull request #411 from gravitational/alexey/bug-fixes-sso
(web) bug fixes (token handler for SSO)
2016-05-10 13:27:50 -07:00
Alexander Klizhentas a8876a36e0 Merge pull request #410 from gravitational/ev/tokens
Introduce multi-role tokens
2016-05-10 13:27:40 -07:00
Alexey Kontsevoy cf1cf51732 (web) bug fixes (token handler for SSO) 2016-05-10 09:25:05 -04:00
Ev Kontsevoy ee9443da1f Minor changes to Vagrantfile 2016-05-09 23:08:11 -07:00
Ev Kontsevoy e3d2114f28 Introduce multi-role tokens
This commit:

- Makes all Teleport tokens multi-role (a token is associated with a
  list of roles its owner can assume)
- Removes some unused/obsolete features
     a) "AllowedTokens" config setting which we don't use
     b) "authorities" TCTL command

It does not affect how Teleport works, just preparing the plumbing for
--roles flag for `tctl nodes add`
2016-05-09 22:39:07 -07:00
Alexander Klizhentas 1461019b35 Merge pull request #409 from gravitational/ev/reconnect
Minor improvements
2016-05-09 21:19:42 -07:00
Alexander Klizhentas 02953c61fd Merge branch 'master' into ev/reconnect 2016-05-09 20:58:19 -07:00
Ev Kontsevoy b6f11b00d9 Fixed tests 2016-05-09 20:53:33 -07:00
Ev Kontsevoy a620f4dfe3 Removed Docker experiment 2016-05-09 20:50:42 -07:00
Ev Kontsevoy 74d8dc1b52 Removed Docker experiment 2016-05-09 20:48:59 -07:00
Ev Kontsevoy 389e0a1a75 Started working on multi-site, multi-cluster demo via Docker 2016-05-09 16:27:50 -07:00
Alexander Klizhentas e9e38252e2 Merge pull request #407 from gravitational/alexey/bug-fixes-and-tests
Alexey/bug fixes and tests
2016-05-09 15:24:18 -07:00
Alexey Kontsevoy 0e50912486 Merge remote-tracking branch 'origin/ev/reconnect' into alexey/logs 2016-05-09 17:44:00 -04:00
Ev Kontsevoy af67bfb9a8 Changed "page size max" for stream fetching from 512Kb to 10MB 2016-05-09 14:43:05 -07:00
Alexey Kontsevoy fdf206aa9e (web) bug fixes and session player unit-test coverage 2016-05-09 17:29:15 -04:00
Ev Kontsevoy 907707cb92 Merge remote-tracking branch 'origin/master' into ev/reconnect 2016-05-09 13:56:26 -07:00
Sasha Klizhentas f82069d785 fix source release 2016-05-09 13:14:02 -07:00
Alexey Kontsevoy 54f577410e Merge remote-tracking branch 'origin/master' into alexey/logs 2016-05-09 14:23:36 -04:00
Ev Kontsevoy 6b9374d2ea Reduced the verbosity of debug logging a bit. 2016-05-09 10:36:40 -07:00
Alexander Klizhentas 3fa4ddda84 Merge pull request #403 from gravitational/ev/399
Properly set content-type for gzipped responses
2016-05-09 09:04:33 -07:00
Alexander Klizhentas a0c17f2951 Merge branch 'master' into ev/399 2016-05-09 09:01:58 -07:00
Alexander Klizhentas 80236cff1d Merge pull request #405 from gravitational/ev/osx
Full OSX compatibility
2016-05-09 09:01:50 -07:00
Alexander Klizhentas 794d0b6de0 Merge branch 'master' into ev/399 2016-05-09 09:00:02 -07:00
Alexander Klizhentas 926b894745 Merge branch 'master' into ev/osx 2016-05-09 08:59:56 -07:00
Alexander Klizhentas 53e1ce57fd Merge pull request #404 from gravitational/alexey/player2
Alexey/player2
2016-05-09 08:59:20 -07:00
Alexander Klizhentas 938a2777b3 Merge branch 'master' into alexey/player2 2016-05-09 08:57:46 -07:00
Ev Kontsevoy 5c4b45caaa Full OSX compatibility
Teleport has always worked on OSX, but not all tests were OSX
compatible:

- some wouuld hang
- others would fail

This commit fixes that. `make test` passes on OSX.
2016-05-09 00:21:21 -07:00
Ev Kontsevoy b995d6073c Added --auth flag back to the docs 2016-05-08 23:40:00 -07:00
Ev Kontsevoy 4a05db4c11 Copy/paste fixes 2016-05-08 22:22:47 -07:00
Ev Kontsevoy 63c3109c6e OIDC documentation polish 2016-05-08 22:20:26 -07:00
Ev Kontsevoy 331b725e9e Code review gone wrong...
Fixes #400

Accidentally copy/pasted the channel into the wrong struct (session vs
party) when implementing PR suggestions
2016-05-08 21:57:34 -07:00
Ev Kontsevoy b3bde057b2 Merge pull request #401 from gravitational/sasha/oidc
Add OIDC documenation
2016-05-08 21:29:43 -07:00
Ev Kontsevoy 7b44ea6525 Merge branch 'master' into alexey/player2 2016-05-08 21:26:42 -07:00
Ev Kontsevoy 5458e5e0d6 Properly set content-type for gzipped responses
Fixes #399
2016-05-08 21:23:28 -07:00
Alexey Kontsevoy 55858f13e5 (web) datepicker bug fix 2016-05-08 17:12:05 -04:00