Ruben S. Montero
5e67ef24b9
feature #754 : Removed comment
2011-08-30 01:00:45 +02:00
Ted
02bd5ec4ef
Remove restriction for plain auth for oneadmin.
...
(cherry picked from commit ff05d07af0231ae4a2e8a0915973c05f9b533409)
2011-08-30 00:58:17 +02:00
Ruben S. Montero
daab17b4e0
feature #754 : If CA path is not defined, CAs will not be checked instead of raising an exception
2011-08-30 00:22:51 +02:00
Ted
ac1338c737
Raise exception if there is no ca_dir. Fix indentations.
...
(cherry picked from commit ecbde5f8798168d58520ec30a6cecb46d97ef671)
2011-08-30 00:17:34 +02:00
Ted
ea51d0b9b9
Remove validate call, as admin-installed host certs are assumed trustworthy.
...
(cherry picked from commit 6904317c68da51aa3df3be9ee98aa8a8478fc59d)
2011-08-30 00:15:48 +02:00
Daniel Molina
1c875dd438
Merge branch 'feature-754' of git.opennebula.org:one into feature-754
2011-08-26 19:08:53 +02:00
Daniel Molina
c6e8767f3b
feature #754 : Add quota functionality
2011-08-26 19:08:15 +02:00
Daniel Molina
e38d385dc6
feature #754 : Add user_id to the authorize parameters
2011-08-26 19:07:20 +02:00
Ruben S. Montero
4c9f95ad58
Feature #754 : Update configuration files
2011-08-26 16:51:13 +02:00
Ruben S. Montero
1b1d4f900a
feature #754 : Missing require
2011-08-26 16:41:56 +02:00
Ruben S. Montero
48c0e06544
feature #754 : Fix bugs for server authN
2011-08-26 16:34:17 +02:00
Daniel Molina
bbe32d8375
Allow large options in the CLI without defining the short version
2011-08-26 12:17:26 +02:00
Ruben S. Montero
3409f9d6b4
feature #754 : Default for expiration time
2011-08-26 01:15:08 +02:00
Ruben S. Montero
2534cea8ae
feature #754 : Fixing bugs. login and create users based on x509 works
2011-08-26 00:45:46 +02:00
Ruben S. Montero
304a888415
feature #754 : Fixing bugs...
2011-08-26 00:37:06 +02:00
Ruben S. Montero
5d45fc9391
feature #754 : fix install bugs
2011-08-26 00:02:32 +02:00
Ruben S. Montero
3531a0f5eb
feature #754 : Authenticate file for server auth
2011-08-25 23:49:14 +02:00
Ruben S. Montero
986dcbbf28
feature #754 : Better names for varibles.
2011-08-25 23:48:54 +02:00
Ruben S. Montero
23a9743910
feature #754 : Removed unneeded files
2011-08-25 18:20:00 +02:00
Ruben S. Montero
606ff23435
feature #754 : Update authenticate to make use of new x509 auth class
2011-08-25 18:10:38 +02:00
Ruben S. Montero
cfbe1f18e4
feature #754 : Install server auth files
2011-08-25 17:52:22 +02:00
Ruben S. Montero
f3f2925b0d
feature #754 : Do not check trusted CA's if directory not specified
2011-08-25 17:43:55 +02:00
Ruben S. Montero
d44282c982
feature #754 : Support for proxy certificates in oneuser
2011-08-25 17:42:13 +02:00
Ruben S. Montero
84b3ff38af
feature #754 : Added a server based authentication using x509 certificates
2011-08-25 17:10:17 +02:00
Ruben S. Montero
50de4242d4
feauture #754 : Included check of expiration times for the complete cert chain (from Ted). Do not modify cert_chain in validation
2011-08-25 17:08:46 +02:00
Ruben S. Montero
7ad661b5f8
feature #754 : Split login tokan generation and write login file
2011-08-25 16:24:40 +02:00
Ruben S. Montero
8cdf5e06b4
feature #754 : minor change
2011-08-25 00:07:24 +02:00
Ruben S. Montero
3364d10eb7
feature #754 : Some formatting. Changed delete! & simple gsub with delete. Make use of class constant LOGIN_PATH
2011-08-25 00:03:36 +02:00
Ruben S. Montero
de067c3869
feature #754 : removed unneeded reader attribute
2011-08-24 23:45:36 +02:00
Ted
dd2b770b01
Always validate.
...
Added steps to validate the proxy certificates.
Check that some DN in the chain must matches DN in the password.
2011-08-24 12:39:49 -05:00
Ted
fd9813477e
Merge branch 'feature-754' of git://git.opennebula.org/one into x509-2
...
Conflicts:
src/authm_mad/remotes/x509/x509_auth.rb
2011-08-24 10:47:50 -05:00
Ted
d4e96b2a5e
Replaced underscore in ca_dir.
2011-08-24 10:37:16 -05:00
Ted
9dbbccb9d6
Use pems as x509 class init parameters.
2011-08-23 14:29:36 -05:00
Ted
a6fb02f3a6
.init: take cert chain array and key in pem form as inputs
...
.login: remove superfluous dn in tbs text. add default max expiration time, put whole cert chain in token.
2011-08-23 14:28:50 -05:00
Ted
f9f2ad176d
Made timespan an option. Added default proxy locations. read in certificate chain and key from files. Hold cert chain in array.
2011-08-23 14:28:18 -05:00
Daniel Molina
3769652006
feature #754 : Add CLI functionality for ssh and x509
2011-08-23 16:29:38 +02:00
Daniel Molina
4ae6c2d8f0
feature #754 : Options can be defined without short value
2011-08-23 16:25:11 +02:00
Daniel Molina
f0e959c77e
feature #754 : Add PROXY_PATH constant
2011-08-23 16:24:03 +02:00
Daniel Molina
e7e96a9fab
feature #754 : Change initialize parameters for SshAuth
2011-08-23 16:22:04 +02:00
Ruben S. Montero
2508c1fbe7
feature #754 : Rename proxy file name
2011-08-21 02:03:37 +02:00
Ruben S. Montero
1488d536c3
feature #754 : Validate X509 expiration times. Support for trusted CA's
2011-08-21 01:55:00 +02:00
Ruben S. Montero
5406c948ec
feature #754 : Authentication based on X509 proxy certificates
2011-08-21 01:42:15 +02:00
Ruben S. Montero
cc36e3858c
feature #754 : Include also the username in the security token
2011-08-19 18:17:06 +02:00
Ruben S. Montero
b4b5fc97aa
feature #754 : Moved proxy path creation to login function
2011-08-19 18:11:33 +02:00
Ruben S. Montero
26387a9f88
feature #754 : Removed uneeded parameters for x509 authenticate
2011-08-19 17:56:34 +02:00
Ruben S. Montero
7c362c64b4
feature #754 : Bug when parsing the ONE_AUTH file
2011-08-19 03:14:56 +02:00
Ruben S. Montero
15b9d5dae4
feature #754 : Simple loginx509 option for oneauth. Needs merge with current login option
2011-08-19 03:14:17 +02:00
Ruben S. Montero
7347a36990
feature #754 : Basic X509 authorization
2011-08-19 03:13:50 +02:00
Tino Vázquez
3c369e67f2
feature #754 : Add dummy authenticate script
2011-07-29 13:43:25 +02:00
Tino Vázquez
6b7628c2e5
feature #754 : New dummy authN protocol
2011-07-28 19:49:30 +02:00
