9692 Commits

Author SHA1 Message Date
Jeff Mitchell
67c501309e Add deprecation notices for App ID 2016-07-26 10:08:46 -04:00
Jeff Mitchell
586fb4ac03 Add app-id deprecation to upgrade notes 2016-07-26 10:04:08 -04:00
Jeff Mitchell
d1d5902706 changelog++ 2016-07-26 10:03:55 -04:00
vishalnayak
e5c61509d6 Remove global name/id. Make only cluster name configurable. 2016-07-26 10:01:35 -04:00
Jeff Mitchell
968212b650 Bump deps before RC 2016-07-26 09:55:35 -04:00
Jeff Mitchell
8d277ce4bc Use 1.7rc3 2016-07-26 09:54:24 -04:00
Jeff Mitchell
354d7d02e1 Update version number 2016-07-26 09:48:56 -04:00
Vishal Nayak
ed839dae6f Merge pull request #1426 from hashicorp/appgroup-backend
AppRole backend
2016-07-26 09:48:31 -04:00
vishalnayak
59930fda8f AppRole authentication backend 2016-07-26 09:32:41 -04:00
vishalnayak
bae3e09071 As it is 2016-07-26 09:18:38 -04:00
vishalnayak
55cf44bc91 Storing local and global cluster name/id to storage and returning them in health status 2016-07-26 02:32:42 -04:00
Laura Bennett
1d0b055482 Merge pull request #1649 from hashicorp/internal-policy-block
Closes hashicorp/vault#1618
2016-07-25 17:41:48 -04:00
Jeff Mitchell
edc7baab02 Fix tests 2016-07-25 17:05:54 -04:00
Laura Bennett
3a05c02f9b adding ids 2016-07-25 16:54:43 -04:00
Jeff Mitchell
fffea5eab9 Add test for non-assignable policies 2016-07-25 16:00:18 -04:00
Laura Bennett
f73a6c13cf moving id to http/logical 2016-07-25 15:24:10 -04:00
Jeff Mitchell
02a9d878d5 Add base version 2016-07-25 15:00:58 -04:00
Jeff Mitchell
5be8189e72 Use RFC3339Nano for better precision 2016-07-25 14:11:57 -04:00
Laura Bennett
d410787d0d minor edit for error statement 2016-07-25 13:29:57 -04:00
Jeff Mitchell
948fdeacc3 Explicitly set invalid request status when a password isn't included 2016-07-25 11:14:15 -04:00
Jeff Mitchell
a642b26f93 Merge pull request #1653 from hashicorp/userpass-no-500
Don't return 500 for user error in userpass when setting password
2016-07-25 11:10:12 -04:00
Jeff Mitchell
41922b2a9c Don't return 500 for user error in userpass when setting password 2016-07-25 11:09:46 -04:00
Laura Bennett
eef0685d04 still fixing git mistake 2016-07-25 10:11:51 -04:00
Laura Bennett
0c70c493f3 Fixing git mistake 2016-07-25 09:57:47 -04:00
Laura Bennett
1acea5246f edits based on comments in PR 2016-07-25 09:46:10 -04:00
Jeff Mitchell
d466462b8d Fix re-specification of filter 2016-07-25 09:08:29 -04:00
Jeff Mitchell
ecfaba1ac6 Add upgrade notes for LDAP 2016-07-25 09:07:52 -04:00
Jeff Mitchell
57bf0c466c changelog++ 2016-07-25 08:48:09 -04:00
Jeff Mitchell
8b834aa6e0 Merge pull request #1388 from shomron/ldap_groupfilter
Added new configuration option to ldap auth backend - groupfilter
2016-07-25 08:41:48 -04:00
Laura Bennett
3c8e4da359 minor error correction 2016-07-24 22:35:54 -04:00
Laura Bennett
4235173d78 initial commit for nonAssignablePolicies 2016-07-24 22:27:41 -04:00
Laura Bennett
149cf2e634 reverting branch mistake 2016-07-24 21:56:52 -04:00
Laura Bennett
f8bc3b125e website update for request uuuid 2016-07-24 21:23:12 -04:00
Laura Bennett
509c4abb92 Merge branch 'master' of https://github.com/hashicorp/vault into request-uuid 2016-07-23 21:47:08 -04:00
Laura Bennett
7b646fcc5e initial local commit 2016-07-23 21:46:28 -04:00
Oren Shomron
005cb3e042 LDAP Auth Backend Overhaul
--------------------------

Added new configuration option to ldap auth backend - groupfilter.
GroupFilter accepts a Go template which will be used in conjunction with
GroupDN for finding the groups a user is a member of. The template will
be provided with context consisting of UserDN and Username.

Simplified group membership lookup significantly to support multiple use-cases:
  * Enumerating groups via memberOf attribute on user object
  * Previous default behavior of querying groups based on member/memberUid/uniqueMember attributes
  * Custom queries to support nested groups in AD via LDAP_MATCHING_RULE_IN_CHAIN matchind rule

There is now a new configuration option - groupattr - which specifies
how to resolve group membership from the objects returned by the primary groupfilter query.

Additional changes:
  * Clarify documentation for LDAP auth backend.
  * Reworked how default values are set, added tests
  * Removed Dial from LDAP config read. Network should not affect configuration.
2016-07-22 21:20:05 -04:00
Jeff Mitchell
5a454e1afa Update vendored deps 2016-07-22 20:11:59 -04:00
vishalnayak
787db812c2 changelog++ 2016-07-22 18:37:14 -04:00
Vishal Nayak
484dc253c1 Merge pull request #1647 from hashicorp/version-in-api
Add version information to health status
2016-07-22 18:34:33 -04:00
vishalnayak
5b9b07e073 Updated sys/health docs 2016-07-22 18:33:29 -04:00
vishalnayak
96155753c4 Add version information to health status 2016-07-22 18:28:16 -04:00
Jeff Mitchell
d31af06321 changelog++ 2016-07-22 18:02:08 -04:00
Jeff Mitchell
5e5ec7452c Merge pull request #1646 from maier/master
Circonus integration for telemetry metrics
2016-07-22 18:00:15 -04:00
Jeff Mitchell
3bea6a7afe Rename err var to be more clear 2016-07-22 16:57:47 -04:00
matt maier
a1b50427f2 Circonus integration for telemetry metrics 2016-07-22 15:49:23 -04:00
Vishal Nayak
418257d27c Merge pull request #1645 from hashicorp/update-init-docs
Update docs on the `init` command
2016-07-22 11:32:27 -04:00
vishalnayak
8f8b421c07 Address review feedback 2016-07-22 11:31:55 -04:00
vishalnayak
26ea86a100 Update docs on the init command 2016-07-22 11:22:10 -04:00
Jeff Mitchell
2767858507 Remove manual selection of nextprotos from tls config coming from certutil; it's really not up to us to dictate third party requirements 2016-07-22 11:12:46 -04:00
Jeff Mitchell
e3eafd4834 Have Travis use go 1.7rc3 for testing 2016-07-22 10:59:19 -04:00