9692 Commits

Author SHA1 Message Date
Jeff Mitchell
abd71ce80e Add list support for mysql roles 2016-01-28 15:04:25 -05:00
Jeff Mitchell
9cf06240e0 Add list support for postgres roles 2016-01-28 14:41:50 -05:00
Jeff Mitchell
56e5615f18 Update SSH documentation with list 2016-01-28 14:41:43 -05:00
Jeff Mitchell
298892ef38 Fix postgres backend test SQL for user priv checking 2016-01-28 14:41:13 -05:00
Jeff Mitchell
5bfba62a77 Ensure generatePolicy checks disk, not just the cache, now that we aren't eager loading 2016-01-28 13:10:59 -05:00
Jeff Mitchell
c6992d80dc changelog++ 2016-01-28 12:49:25 -05:00
Jeff Mitchell
bb87e147a9 Merge pull request #983 from hashicorp/list-ssh-roles
Add listing of roles to ssh backend
2016-01-28 12:48:33 -05:00
Jeff Mitchell
886f641e5d Add listing of roles to ssh backend 2016-01-28 12:48:00 -05:00
Jeff Mitchell
15e77e0856 Show entry path in log, not internal view path 2016-01-28 12:34:49 -05:00
Jeff Mitchell
8270fddafc changelog++ 2016-01-28 08:59:57 -05:00
Jeff Mitchell
e0031a110f Merge pull request #981 from tanuck/master
Docs typo in server command
2016-01-28 08:59:38 -05:00
Jeff Mitchell
65c3bc631b Remove eager loading 2016-01-28 08:59:05 -05:00
Raja Nadar
f42f5ec306 fixed the return type of /ssh/lookup api 2016-01-28 01:04:35 -08:00
Raja Nadar
2270affc2f fix return type of post /ssh/creds
added sample json for both otp and dynamic credentials
2016-01-28 00:56:59 -08:00
James Tancock
6ab184596f Docs typo in server command 2016-01-28 08:26:49 +00:00
Raja Nadar
14c1bb4141 better description 2016-01-27 21:58:54 -08:00
Raja Nadar
61e0e3dd94 fixing the return type of verify otp
it seems to be 200 on valid OTP and 204 on invalid OTP. (i think it should be an error.. 400 or 404)
but for the moment, fixing the docs to match the existing behavior.
2016-01-27 20:04:11 -08:00
Jeff Mitchell
32aed5fa74 Embed the cache directly 2016-01-27 21:59:20 -05:00
Devin Christensen
c2b66587c8 Improve naming
Hopefully this naming scheme will be more straightforward.
2016-01-27 17:15:48 -07:00
Jeff Mitchell
dd4c5631d1 changelog++ 2016-01-27 17:27:53 -05:00
Jeff Mitchell
4808c811ed Merge pull request #942 from wikiwi/fix-ssh-open-con
Cleanly close SSH connections
2016-01-27 17:18:54 -05:00
Jeff Mitchell
8c742fa850 changelog++ 2016-01-27 17:18:17 -05:00
Jeff Mitchell
c67579d839 Update etcd sync option to be a string.
Ping #921
2016-01-27 17:15:52 -05:00
Jeff Mitchell
f8dafe653d Merge pull request #921 from faradayio/hosted-etcd-support
Load-balanced etcd support
2016-01-27 17:09:43 -05:00
Jeff Mitchell
92f9bdb320 changelog++ 2016-01-27 17:07:54 -05:00
Jeff Mitchell
8bec044770 Merge pull request #975 from vetinari/ldapbind
Implement LDAP username/password binding support, as well as anonymous search.
2016-01-27 17:06:45 -05:00
Jeff Mitchell
46514e01fa Implement locking in the transit backend.
This ensures that we can safely rotate and modify configuration
parameters with multiple requests in flight.

As a side effect we also get a cache, which should provide a nice
speedup since we don't need to decrypt/deserialize constantly, which
would happen even with the physical LRU.
2016-01-27 17:03:21 -05:00
Jeff Mitchell
ba03981739 Update contribution guide 2016-01-27 15:17:11 -05:00
Armon Dadgar
8d86a6d5e9 Merge pull request #791 from hashicorp/contributing-guide
Adds a CONTRIBUTING guide
2016-01-27 11:52:16 -08:00
Jeff Mitchell
d2e0c21cbb Changelog formatting 2016-01-27 14:33:41 -05:00
Jeff Mitchell
21da89bef0 Changelog formatting 2016-01-27 14:05:20 -05:00
Jeff Mitchell
65e8f7cf53 changelog++ 2016-01-27 13:43:53 -05:00
Jeff Mitchell
81d025a757 Merge pull request #977 from hashicorp/transit-key-archiving
Transit key archiving
2016-01-27 13:42:30 -05:00
Jeff Mitchell
e6b2d45c03 Move archive location; also detect first load of a policy after archive
is added and cause the keys to be copied to the archive.
2016-01-27 13:41:37 -05:00
Jeff Mitchell
625e8091a5 Address review feedback 2016-01-27 13:41:37 -05:00
Jeff Mitchell
463cdd3d32 Store all keys in archive always 2016-01-27 13:41:37 -05:00
Jeff Mitchell
e729ace3f1 Add unit tests 2016-01-27 13:41:37 -05:00
Jeff Mitchell
8d5a0dbcdc Force min decrypt version to 1 if it's zero, which allows fixing problematic archiving logic 2016-01-27 13:41:37 -05:00
Jeff Mitchell
9f2310c15c Fix logic bug when restoring keys 2016-01-27 13:41:37 -05:00
Jeff Mitchell
ea9fb68a34 Fix decrementing instead of incrementing 2016-01-27 13:41:37 -05:00
Jeff Mitchell
ebe319c96b Initial transit key archiving work 2016-01-27 13:41:37 -05:00
Jeff Mitchell
5897f29cc9 Bump godeps 2016-01-27 13:41:26 -05:00
Hanno Hecker
ba9b20d275 discover bind dn with anonymous binds 2016-01-27 17:06:27 +01:00
Hanno Hecker
c23b5bf1e6 samaccountname as login example 2016-01-27 09:25:05 +01:00
Hanno Hecker
769bee060c docs for binddn/bindpass 2016-01-27 07:51:10 +01:00
Jeff Mitchell
352f3abe87 Merge pull request #976 from hashicorp/audit-panic
Use reflect.Value.String() rather than a type assertion.
2016-01-26 13:05:05 -05:00
Jeff Mitchell
b53ac21f5e Bump travis to 1.5.3 2016-01-26 12:47:45 -05:00
Jeff Mitchell
a9b8148310 Add unit test for audit change 2016-01-26 12:47:04 -05:00
Jeff Mitchell
7876b8b7fe Use reflect.Value.String() rather than a type assertion.
Fixes a panic in hashstructure/auditing that can occur with custom
string types.

Fixes #973
2016-01-26 12:32:50 -05:00
Hanno Hecker
a702f849bc fix stupid c&p error 2016-01-26 16:15:25 +01:00