Commit Graph

228 Commits

Author SHA1 Message Date
Grant Limberg
a33d7c64fe more fixin 2021-11-30 17:27:13 -08:00
Grant Limberg
fa21fdc1cc rename stuff for clarity
authenticationURL will still be used by the client for v1 and v2 of sso
2021-11-11 16:19:26 -08:00
Grant Limberg
43433cdb5a integrate rust build of zeroidc to linux 2021-11-04 17:16:23 -07:00
Grant Limberg
8d39c9a861 plumbing full flow from controller -> client network 2021-11-04 15:40:08 -07:00
Adam Ierymenko
134d33c218 Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring. 2021-09-20 15:40:55 -07:00
Grant Limberg
20721491e8 kill some noisy logs 2021-08-19 13:03:56 -07:00
Grant Limberg
9eae444104 kill some verbose logs 2021-08-19 09:21:52 -07:00
Adam Ierymenko
576b4f03a5 Adjust deauth time window and send revocation when SSO members expire. 2021-08-18 12:17:40 -04:00
Adam Ierymenko
461810b06a Move return so record gets created before URL. 2021-08-10 11:22:29 -04:00
Grant Limberg
613d7b5ece fix backwards logic 2021-08-04 09:16:04 -07:00
Adam Ierymenko
663e748b8d Deauth expiring members right away. 2021-07-26 23:45:18 -04:00
Adam Ierymenko
0cf62d334d Remove pointless check. 2021-07-26 13:38:35 -04:00
Adam Ierymenko
0310bfa3e3 Include authentication URL in config 2021-07-23 19:17:42 -04:00
Adam Ierymenko
efe0e8aa7b Notification of about-to-expire status... almost there. 2021-07-23 19:05:59 -04:00
Adam Ierymenko
5c7e51feaf Merge branch 'dev' of github.com:zerotier/ZeroTierOne into dev 2021-07-23 18:49:05 -04:00
Adam Ierymenko
34de579c91 Handling of soon-to-expire members 2021-07-23 18:49:00 -04:00
Grant Limberg
10215af96d whoops 2021-07-06 13:18:08 -07:00
Grant Limberg
e67fee0264 debug logging 2021-07-06 13:08:21 -07:00
Grant Limberg
364ad87e2b add ssoEnabled flag to network config 2021-06-05 13:44:45 -07:00
Grant Limberg
e6b4fb5af7 add "ssoRedirectURL" to local.conf
plumbed it through to the central controller code
2021-06-04 16:29:03 -07:00
Adam Ierymenko
1dfe909bab Increase authentication URL sizes. 2021-06-04 16:46:56 -04:00
Grant Limberg
74a678c1e1 chicken or egg problem.
member must exist in the database before we can generate a nonce & SSO URL
2021-06-04 12:49:26 -07:00
Grant Limberg
f27d193cf6 . 2021-06-04 11:56:12 -07:00
Grant Limberg
7ca2ecb421 put expiry time back on nc object 2021-06-04 11:39:52 -07:00
Grant Limberg
0702e581a1 remove some noisy log lines & fix a query error 2021-06-04 11:06:54 -07:00
Grant Limberg
c78792a705 moar temporary debug printfs 2021-06-04 11:00:51 -07:00
Grant Limberg
287c19e822 move this outside the auth block. If SSO is enabled, it should be checked whether authorized or not 2021-06-04 09:46:31 -07:00
Grant Limberg
4f521baafd Big SSO update
make things hopefully work
2021-06-03 14:38:26 -07:00
Grant Limberg
fc6d90a04a set the correct default 2021-06-02 14:27:58 -07:00
Grant Limberg
d2f1d05a06 handle cases where authenticationURL and authenticationExpiryTime don't exist 2021-06-02 13:46:43 -07:00
Adam Ierymenko
c470c6255e Postgres code for SSO (almost certainly needs work) 2021-05-28 17:08:24 -04:00
Adam Ierymenko
6b3a7ec827 Fix a few things... 2021-05-25 14:40:40 -04:00
Adam Ierymenko
1ce71f9dc0 Build fix. 2021-05-25 13:05:06 -04:00
Adam Ierymenko
18508b5a2e Build fix. 2021-05-25 13:04:14 -04:00
Adam Ierymenko
621898f3c5 Forgot to set auth info in NetworkConfig. 2021-05-25 13:02:06 -04:00
Adam Ierymenko
2c1d7f3dcc CLI printing of URL. 2021-05-25 12:58:33 -04:00
Adam Ierymenko
b270d527f4 Basic plumbing for authentication requirement and piping through of URL information. 2021-05-24 22:58:17 -04:00
Adam Ierymenko
d64c5a92c6 Merge pull request #1233 from dosuperuser/improvement/optimizations
Minor C++ optimizations
2020-11-24 19:24:36 -05:00
Grant Limberg
ff23d3051f self hosted controller JSON format fix for DNS 2020-09-23 12:16:23 -07:00
Adam Ierymenko
06730c7d1d BSL date bump 2020-08-20 12:51:39 -07:00
Grant Limberg
c0c215c83c single dns config per network 2020-08-12 13:08:47 -07:00
Grant Limberg
058d888311 More debug logging cleanup 2020-08-12 10:00:09 -07:00
Grant Limberg
6868e98904 Get stuff building on Windows
Been a minute since any of this has been updated
2020-08-05 16:04:02 -07:00
Grant Limberg
88a3c685fb latest 2020-08-04 13:52:57 -07:00
Grant Limberg
2e52a1eebf forgot a couple queries in postgres. trying to pull dns of member not network in embedded network controller
also some debug logging
2020-08-04 09:45:45 -07:00
Grant Limberg
387039456d Pass 1 at adding DNS to controller 2020-07-20 14:34:19 -07:00
Suad Halilovic
ffebcd247f 2020/07/16, Minor optmizations 2020-07-16 18:31:56 +02:00
Grant Limberg
154470b570 add original hiredis 2020-05-11 15:03:56 -07:00
Grant Limberg
73b1d57b13 rip out rabbitMQ 2020-05-11 12:29:06 -07:00
Adam Ierymenko
52a166a71f Relicense: GPLv3 -> ZeroTier BSL 1.1 2019-08-23 09:23:39 -07:00