7782 Commits

Author SHA1 Message Date
Jeff Mitchell
ead5a34ca7 changelog++ 2017-02-16 01:05:32 -05:00
Jeff Mitchell
5e5d9baabe Add Organization support to PKI backend. (#2380)
Fixes #2369
2017-02-16 01:04:29 -05:00
Jeff Mitchell
106521b128 changelog++ 2017-02-16 00:55:29 -05:00
Vishal Nayak
37297080f2 cidrutil: added test data points (#2378) 2017-02-16 00:51:02 -05:00
Jeff Mitchell
61e0534a7f Merge branch 'master-oss' into acl-parameters-permission 2017-02-16 00:46:40 -05:00
Jeff Mitchell
45590ee0af Merge pull request #2379 from hashicorp/issue-2362
Compare headers case-insensitively for auditing
2017-02-16 00:46:25 -05:00
Jeff Mitchell
f7036559d1 Fix audit test and make audited headers more robust in map checks 2017-02-16 00:44:20 -05:00
Jeff Mitchell
d6cf46759e Remove "permissions" from ACL 2017-02-15 21:12:26 -05:00
Jeff Mitchell
e2b7d43e01 Merge branch 'master-oss' into acl-parameters-permission 2017-02-15 20:37:58 -05:00
Jeff Mitchell
5d016d712d Compare headers case-insensitively for auditing
Fixes #2362
2017-02-15 20:35:35 -05:00
Phil Watts
14e815eede Edit to the language of the description of disable_mlock on the configuration documentation page. Previous wording could lead to confusion as to the recommended setting of the disable_mlock option. (#2377) 2017-02-15 11:09:27 -05:00
vishalnayak
791d2a3013 changelog++ 2017-02-15 10:59:15 -05:00
Vishal Nayak
c61dc69d19 aws-ec2 auth: Return the role period in seconds (#2374)
* aws-ec2 auth: Return the role period in seconds

* cast return values to int64 for comparison with expected values
2017-02-15 10:57:57 -05:00
Vishal Nayak
fbcb52aafa aws-ec2 auth: fix docs (#2375) 2017-02-15 06:29:27 -05:00
Jeff Mitchell
a4ffdf6581 changelog++ 2017-02-14 16:29:00 -05:00
Jeff Mitchell
ed51388c02 Fix Okta auth issue when a user has no policies and/or groups set. (#2371)
Fixes #2367
2017-02-14 16:28:16 -05:00
Jeff Mitchell
5f6c4a9696 changelog++ 2017-02-10 19:57:53 -05:00
Tommy Murphy
57aac16cd2 audit: support a configurable prefix string to write before each message (#2359)
A static token at the beginning of a log line can help systems parse
logs better. For example, rsyslog and syslog-ng will recognize the
'@cee: ' prefix and will parse the rest of the line as a valid json message.
This is useful in environments where there is a mix of structured and
unstructured logs.
2017-02-10 16:56:28 -08:00
Jeff Mitchell
a18f77e69c Update go-cleanhttp 2017-02-10 19:34:41 -05:00
P.Nikolajevs (pl)
1ecf8b1409 Update libraries.html.md (#2360) 2017-02-10 09:39:18 -08:00
Tommy Murphy
214cd65d55 docs: transit parameter is actually deletion_allowed (#2356) 2017-02-09 15:10:28 -05:00
Seth Vargo
abf98a107a Merge pull request #2358 from hashicorp/sethvargo-patch-1
Change cache to 4h
2017-02-09 14:39:18 -05:00
Seth Vargo
44a352217a Cache assets longer 2017-02-09 14:39:12 -05:00
Seth Vargo
53b373dd25 Change cache to 4h 2017-02-09 14:37:12 -05:00
vishalnayak
8b9f3a0b49 use net.JoinHostPort 2017-02-08 18:39:09 -05:00
Jeff Mitchell
c01d394a8d Add support for backup/multiple LDAP URLs. (#2350) 2017-02-08 14:59:24 -08:00
vishalnayak
ee8b7e21c5 changelog++ 2017-02-08 13:52:29 -05:00
Jeff Mitchell
b505b3b81c Correct port parsing. (#2354)
* Correct port parsing.

Fixes #2351

* use strings.Contains instead of strings.HasSuffix

* Make the error message point to the wrong input
2017-02-08 13:50:17 -05:00
Jack Harris
6f4da5ff07 Add correct output to unmount documentation (#2352)
Simply adding the actual output of: 'vault unmount generic/'
2017-02-08 10:40:56 -05:00
Jeff Mitchell
bc047982bf Merge branch 'master-oss' into acl-parameters-permission 2017-02-08 02:13:39 -05:00
Jeff Mitchell
25bcca2fad Bump deps 2017-02-08 02:13:15 -05:00
Jeff Mitchell
1d59d98fc7 Merge branch 'master-oss' into acl-parameters-permission 2017-02-08 01:59:52 -05:00
Jeff Mitchell
ed215640f4 changelog++ 2017-02-08 00:49:42 -05:00
Jeff Mitchell
50ddab2a60 Merge pull request #2154 from fcantournet/default-ldap-username
ldap auth via cli defaults username to env (#2137)
2017-02-07 21:47:59 -08:00
Jeff Mitchell
9b96276ec1 Use Getenv instead of LookupEnv
This prevents returning empty username if LOGNAME is set but empty and USER is set but not empty.
2017-02-07 21:47:06 -08:00
Jeff Mitchell
aba31b7092 Update error text 2017-02-07 21:44:23 -08:00
Jeff Mitchell
087871bade Push test functions to a var for overriding 2017-02-07 20:44:31 -05:00
Brian Kassouf
5b8939120d changelog++ 2017-02-07 16:42:47 -08:00
Jeff Mitchell
56b4fffb50 Add audited headers to sidebar 2017-02-07 17:02:14 -05:00
Jeff Mitchell
73000d1a01 Add Okta docs to sidebar 2017-02-07 16:57:28 -05:00
Jeff Mitchell
5d8d702f33
Cut version 0.6.5 v0.6.5 2017-02-07 16:19:49 -05:00
Jeff Mitchell
ac8b1b29df Prep for 0.6.5 release 2017-02-07 16:11:32 -05:00
Jeff Mitchell
9cf27804af Bump dockerfile Go version 2017-02-07 16:08:31 -05:00
Jeff Mitchell
3086be9d80 Update some help text for RADIUS 2017-02-07 16:06:27 -05:00
Jeff Mitchell
1a1605a061 changelog++ 2017-02-07 16:05:43 -05:00
Matteo Sessa
cb293e3e23 RADIUS Authentication Backend (#2268) 2017-02-07 16:04:27 -05:00
Jeff Mitchell
c05d74be59 Add etcd API info 2017-02-07 11:33:02 -08:00
Brian Kassouf
68fdd34840 Merge pull request #2326 from hashicorp/pr-2161
Add Socket Audit Backend
2017-02-07 11:27:25 -08:00
Brian Kassouf
f5739bee4f Added a warning about the dropped socket connection edge case 2017-02-07 11:06:36 -08:00
Brian Vans
32d5d88119 Fixing a few typos in the docs (#2344) 2017-02-07 11:55:29 -05:00