Ken Moore
5a5e0df1ad
API CHANGE
...
Add a new API call: sysadm/users, action=personacrypt_listdevs
This will run personacrypt and return any removeable devices which may be used as PC devices.
REST Request (example):
-------------------------------
PUT /sysadm/users
{
"action" : "personacrypt_listdevs"
}
WebSocket Request:
-------------------------------
{
"namespace" : "sysadm",
"name" : "users",
"id" : "fooid",
"args" : {
"action" : "personacrypt_listdevs"
}
}
Response:
-------------------------------
{
"args": {
"da0": "<SanDisk Cruzer 1.26> 7.5G"
},
"id": "fooid",
"name": "response",
"namespace": "sysadm"
}
2016-07-25 15:35:06 -04:00
Ken Moore
585beba03a
API CHANGE
...
Add new "usermod" action to the sysadm/users class. This is nearly identical to the "useradd" action, but performs changes to an existing user only (limited access users may modify their own settings, but not other users settings).
Additional OPTIONAL input: "newname" change the username to this instead.
REST Request (example):
-------------------------------
PUT /sysadm/users
{
"action" : "usermod",
"comment" : "somecomment",
"name" : "test2"
}
WebSocket Request:
-------------------------------
{
"name" : "users",
"namespace" : "sysadm",
"args" : {
"name" : "test2",
"comment" : "somecomment",
"action" : "usermod"
},
"id" : "fooid"
}
Response:
-------------------------------
{
"args": {
"result": "success"
},
"id": "fooid",
"name": "response",
"namespace": "sysadm"
}
2016-07-25 14:45:43 -04:00
Ken Moore
86528334e0
[API CHANGE]
...
Add a new API call to the sysadm/users framework as well as add a bunch more output to current users requests (error/success reporting instead of just the overall good/bad flag).
New API call: "action":"userdelete"
REQUIRED: "name":<username>
OPTIONAL: "clean_home"="true/false" (default is "true")
REST Request (example):
-------------------------------
PUT /sysadm/users
{
"name" : "test",
"action" : "userdelete"
}
WebSocket Request:
-------------------------------
{
"id" : "fooid",
"name" : "users",
"args" : {
"action" : "userdelete",
"name" : "test"
},
"namespace" : "sysadm"
}
Response:
-------------------------------
{
"args": {
"result": "success"
},
"id": "fooid",
"name": "response",
"namespace": "sysadm"
}
2016-07-25 10:14:06 -04:00
Ken Moore
6ed9dd4e74
Update a bit of the new "adduser" routine quite a bit, adding support for personacrypt init/import options as well (untested).
2016-07-22 13:20:23 -04:00
Ken Moore
f586a30d77
API CHANGE
...
Add a new API call for creating a user on the system:
action: "useradd"
Required fields: "password" AND ("name" OR "uid")
Optional fields: "comment", "home_dir", "expire", "change", "shell", "group", "other_groups", "class"
REST Request (example):
-------------------------------
PUT /sysadm/users
{
"password" : "test",
"name" : "test2",
"action" : "useradd"
}
WebSocket Request:
-------------------------------
{
"name" : "users",
"namespace" : "sysadm",
"id" : "fooid",
"args" : {
"password" : "test",
"name" : "test2",
"action" : "useradd"
}
}
Response:
-------------------------------
{
"args": {},
"id": "fooid",
"name": "response",
"namespace": "sysadm"
}
2016-07-21 16:21:28 -04:00
Ken Moore
35f8f466f9
API CHANGE
...
Add a new "sysadm/users" API class to sysadm for managing users/groups on the system. The "usershow" action is the only one enabled at the present time.
REST Request (example):
-------------------------------
PUT /sysadm/users
{
"action" : "usershow"
}
WebSocket Request:
-------------------------------
{
"namespace" : "sysadm",
"name" : "users",
"id" : "fooid",
"args" : {
"action" : "usershow"
}
}
Response:
-------------------------------
{
"args": {
"_dhcp": {
"change": "0",
"class": "",
"comment": "dhcp programs",
"expire": "0",
"gid": "65",
"home_dir": "/var/empty",
"name": "_dhcp",
"shell": "/usr/sbin/nologin",
"uid": "65"
},
"_ntp": {
"change": "0",
"class": "",
"comment": "NTP Daemon",
"expire": "0",
"gid": "123",
"home_dir": "/var/empty",
"name": "_ntp",
"shell": "/usr/sbin/nologin",
"uid": "123"
}
},
"id": "fooid",
"name": "response",
"namespace": "sysadm"
}
2016-07-21 14:57:03 -04:00
Mrt134
4bf475bdc6
SysAdm PEP8 Conversion
...
- Converted SysAdm Server Handbook to PEP8 standards.
- Converted SysAdm API Handbook to PEP8 standards.
2016-07-05 18:26:39 -04:00
Ken Moore
4da94971cc
Oops. Forgot to commit a change to the server Auth manager when working on the SSL crash issue on the client.
2016-06-22 20:12:16 -04:00
Ken Moore
bcaf188dc1
Disable the installation of the jobd routines, and also deactivate the 2nd layer SSL encryption through a bridge for the moment (base64 only right now).
2016-06-21 15:14:29 -04:00
Tim Moore II
5da15e8f0f
SysAdm Introduction addition
...
- Continued work on the Sysadm introduction section
2016-06-14 10:13:33 -04:00
Ken Moore
faf64cdc0d
Merge branch 'master' of github.com:pcbsd/sysadm
2016-06-03 15:10:11 -04:00
Ken Moore
0f3ec82dc1
[API CHANGE] Add a new field to the "rpc/identify" API call output
...
{
namespace : rpc,
name : identify,
id : junk,
args : junk
}
Return args:
args : {
type : [server/client/bridge],
hostname : <hostname>
}
2016-06-03 15:08:05 -04:00
Mrt134
d935b7b441
Syntax fix
...
- Updated bridge initialization commands to reflect new syntax
- fixed a make error in conf.py
2016-06-03 10:39:17 -04:00
Ken Moore
9343ce5e52
Merge branch 'master' of github.com:pcbsd/sysadm
2016-06-03 09:27:55 -04:00
Ken Moore
f65591ad3a
Unify the CLI flag format between the server/bridge, and add help/usage information to the server.
2016-06-03 09:27:20 -04:00
Mrt134
e184d4b9d6
Updated "starting sysadm" section
...
- Updated Starting SysAdm section to reflect current instructions
- Fixed a couple grammar and spelling errors in the Bridge Initialization section
2016-06-02 15:02:17 -04:00
Mrt134
4a51c050d4
Rework bridge initialization
...
- Reworked bridge initialization section for clarity
- fixed a css error in the handbook theme
2016-06-02 14:30:23 -04:00
Mrt134
2f5321ea75
Sysadm server handbook section addition
...
- Added WIP section "Bridge System Initialization" to server handbook
- Divided instructions into two methods - one for complete ground up and another for allowing user access to an established network.
- Began clarifying and testing instructions.
2016-05-31 15:03:32 -04:00
Ken Moore
0c6ef4dd85
Add the "BRIDGE_CONNECTIONS_ONLY" option to the sysadm.conf.dist which is distributed.
2016-05-27 13:44:17 -04:00
Ken Moore
2cc0b94db5
Merge branch 'master' of github.com:pcbsd/sysadm
2016-05-27 11:39:52 -04:00
Ken Moore
ea9ed1fa6b
Enable a randomized encryption layer within the server->client communications through a bridge.
2016-05-27 11:39:12 -04:00
Kris Moore
4963a82e13
Merge pull request #21 from mheily/master
...
small jobd fixups
2016-05-27 10:30:58 -04:00
Mark Heily
ad696629d6
Add documentation for running under jobd(8), and avoid auto-enabling the service at package install time
2016-05-26 21:53:47 -04:00
Ken Moore
ce41041ce5
Get encryption turned on in the server for bridged connections. Still not fully-functional - but getting there.
2016-05-26 15:37:55 -04:00
Ken Moore
bf4e4d4212
Merge branch 'master' of github.com:pcbsd/sysadm
2016-05-26 13:32:47 -04:00
Ken Moore
9fcc25d239
Clean up some more of the communication system for the server/client connection through a bridge. Seems to be functioning with base64 encoding only right now.
2016-05-26 13:31:46 -04:00
Mrt134
18e61346b6
Refinement to connection.rst &
...
-Further refined connection.rst to explain the encryption elements to the SSL certificate authentication initiation
2016-05-26 09:35:50 -04:00
Mrt134
65f8f7f747
Added initial examples of client-bridge-server ssl authentication to api handbook (api/connection.rst)
...
- added #4 to section 1.1 Authentication: SSL Certificate Initiation
- provided examples of an initial request and reply
- added notation to identify at which point messages become encrypted
2016-05-25 10:22:31 -04:00
Ken Moore
68a4bb29c7
Get the encryption systems setup with a temporary base64 encoding instead of full SSL encryption (for testing the encode/decode routines)
2016-05-25 09:01:38 -04:00
Ken Moore
90eeee0469
Enable the variant of the SSL auth procedures in the websocket.
2016-05-25 08:36:23 -04:00
Ken Moore
12d2517f17
Another couple minor tweaks to the server auth systems.
2016-05-25 08:35:35 -04:00
Ken Moore
d845364382
Merge branch 'master' of github.com:pcbsd/sysadm
2016-05-25 08:17:06 -04:00
Ken Moore
4ec1dd2694
Get the server all setup for enabling encryption (alternate API calls implemented - just no encryption turned on yet).
2016-05-25 08:16:15 -04:00
Kris Moore
dc7b2f6138
Opps fix typo
2016-05-24 09:43:30 -04:00
Kris Moore
f5bdfc4f1d
Fix pkg-plist
2016-05-24 09:42:12 -04:00
Kris Moore
84481bec41
Merge pull request #20 from mheily/master
...
Convert manifests from relaunchd to jobd
2016-05-24 09:35:01 -04:00
Mark Heily
22e9088a81
Remove /usr/local/share path
2016-05-23 22:20:10 -04:00
Mark Heily
ebb5029255
Migrate relaunchd manifests to jobd
2016-05-23 22:17:31 -04:00
Ken Moore
2ac91c7c70
Get all the MD5 key generation/matching functional for the server/bridge. Also add an internal 1 minute timer to the bridge connections just to check/remove any broken connections as necessary.
2016-05-23 10:31:49 -04:00
Ken Moore
376a903991
Fix up the bridge/server connection management stuff. Now the server will automatically check/re-connect as needed.
2016-05-23 10:05:09 -04:00
Kris Moore
87f344e218
Update sysutils/relaunchd -> sysutils/jobd
2016-05-22 20:51:24 -04:00
Ken Moore
d479e424f5
Turn off a bunch of debugging in the sysadm-server.
2016-05-20 14:56:02 -04:00
Ken Moore
13fe684d78
Get the final bridge systems setup. Seems to be functioning perfectly now.
2016-05-20 14:46:47 -04:00
Ken Moore
23c254e11e
Get a lot more of the bridge/server connections functional. Just have to work through a mismatch between server/client MD5 sums of valid keys.
2016-05-20 14:11:06 -04:00
Ken Moore
d8a0faea79
Clean up the server and bridge systems so that connections are now successful as needed.
2016-05-20 12:40:32 -04:00
Ken Moore
6e07eb7c49
Commit another batch of fine-tuning for the bridge/server. Still not getting the server->bridge connection for some reason - working on it...
2016-05-18 14:44:42 -04:00
Ken Moore
18bcd3b03e
Fix up the import of a public key through the CLI on the sysadm-bridge.
2016-05-18 14:07:05 -04:00
Ken Moore
dc14b0c89b
Fix up all the file paths and such needed for sysadm-bridge to function. Now it should be usable when run either as root or as a user.
2016-05-18 13:40:54 -04:00
Ken Moore
ae892c3e5b
Turn off some debugging in the server.
2016-05-18 09:03:44 -04:00
Ken Moore
826eb104c4
Make the api-test script ask for which server to test (rest/ws).
2016-05-18 08:59:56 -04:00