summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Update NEWS and version ready for 1.3HEADmasterDaniel Silverstone2019-01-192-1/+6
|
* Update copyright dates etc ready for 1.2Daniel Silverstone2019-01-196-6/+6
|
* Update NEWSDaniel Silverstone2019-01-191-0/+8
|
* Spare keysDaniel Silverstone2019-01-192-0/+28
|
* Preserve ssh authorized_keys suffix/prefixDaniel Silverstone2019-01-191-2/+31
|
* Ensure that config show will fail if none of the keys supplied are foundDaniel Silverstone2019-01-192-0/+22
|
* Fix issue where 'as' wasn't resetting keytag in _prep()Daniel Silverstone2019-01-192-0/+23
|
* admincommand: Fix 'as' to better hide bad usernamesDaniel Silverstone2019-01-192-6/+22
| | | | | | | | | | | Sometimes commands in their `_prep()` might need to assume the user they're running as does actually exist. Since there's only one user name guaranteed to exist (gitano-bypass) ensure that when `as` runs against a user which doesn't exist, we run the original command's `_prep()` against that user so that we don't leak the non-existence of a username via a crash/traceback. This fixes Debian bug #876078
* Fix editorconfig a bitDaniel Silverstone2018-06-061-1/+7
|
* News updatesDaniel Silverstone2018-06-061-0/+9
|
* LACE: Correct a bug in iterating table form valuesDaniel Silverstone2018-06-061-1/+4
| | | | | | | When a tabular value is given to Lace, we assume that it is in 'set' form (i.e. the keys are the important thing to match against) and as such, we need to ensure we skip non-string keys since tables might be dual form (set, and list).
* TESTING: Use prefix instead of isDaniel Silverstone2018-06-061-1/+1
| | | | | | In order to increase coverage of the 'prefix' match type in list context, this change alters one of the many treedelta related admin patches.
* DOC: Update Makefile for pandoc arg overrideDaniel Silverstone2018-06-011-2/+10
| | | | | | Pandoc 2 has made --chapters invalid, so this allows for the chapters (and other parts of the pandoc arguments) to be overridden
* Changed to confirm that user names can contain .lua-httpPhillip Smyth2017-10-241-7/+7
|
* Changed to confirm that group names can contain .Phillip Smyth2017-10-231-2/+2
|
* Added keys generated by testPhillip Smyth2017-10-172-0/+28
|
* Added test for renaming selfPhillip Smyth2017-10-171-0/+19
|
* Added documentation to "create new keys" testPhillip Smyth2017-10-171-0/+2
|
* Adding test ed25519 keysPhillip Smyth2017-10-172-0/+8
|
* Added ed25519 test implementationPhillip Smyth2017-10-171-0/+3
|
* Added Lines for testing edkeyPhillip Smyth2017-10-131-0/+5
|
* Use new ssh type testPhillip Smyth2017-10-131-4/+1
|
* Use new ssh type testPhillip Smyth2017-10-131-4/+2
|
* Added ssh_type_is_invalid functionPhillip Smyth2017-10-131-0/+13
|
* Add config list example to config helpRichard Ipsum2017-08-061-0/+6
| | | | And a newline.
* Bump version to 1.2.0 ready for development cycleDaniel Silverstone2017-08-031-1/+1
|
* Final bits of NEWS for 1.1v1.1Daniel Silverstone2017-08-031-0/+9
|
* Rework stats merger to map test inst paths back to git pathsdsilvers/testing-improvementDaniel Silverstone2017-08-031-0/+38
|
* Include hooks/ in coverage, we need itDaniel Silverstone2017-08-031-1/+2
|
* Test from an installationDaniel Silverstone2017-08-033-15/+42
| | | | | | | This corrects an oversight in our testing framework where we were using a local build of Gitano rather than an "installation" for test purposes. This should result in fewer cases of missed modules, plugins, skeleton entries, etc.
* Makefile: install simpleprojectauth.laceRichard Ipsum2017-08-031-1/+2
|
* Move config based auth to own fileRichard Maw2017-08-033-5/+64
| | | | | | | It warrants more explanation than is reasonable in the midst of the rest of the rules, and allows it to be included in alternative locations without unnecessary code duplication.
* Yarn for config authRichard Maw2017-08-033-4/+60
|
* ruleset: project.readers and project.writersRichard Ipsum2017-08-032-0/+10
|
* Cleanups of multimail pluginDaniel Silverstone2017-08-021-7/+9
| | | | | Richard spotted a --stdout and I wanted to clean up some of the logging. All good now.
* Add missing FINALLYDaniel Silverstone2017-08-021-0/+2
|
* Support git_multimail.py as a plugindsilvers/multimailDaniel Silverstone2017-08-021-0/+218
| | | | | | | | This plugin supports running git_multimail.py during the post-receive hook. It uses Lace and Supple to provide simple but flexible control of the service, and requires sysadmins to pre-configure the site outside of gitano-admin control which should ensure a reduction in the abuse-ability of it.
* Add README for a git_multimail.py pluginDaniel Silverstone2017-08-021-0/+161
| | | | | | Since supporting git_multimail.py is quite complex, this README provides documentation. Eventually it might do well to be converted to a chapter in the admin manual.
* Include test keys for 'as' checkDaniel Silverstone2017-08-022-0/+28
|
* Add NEWS file.Daniel Silverstone2017-08-021-0/+30
| | | | | | | This should be updated whenever a new feature is added to Gitano. It is not meant to be a full changelog, so only put headline items in this file please. The first time a change happens after a new version, please remember to add the new title.
* Add yarn to ensure auditability of 'as' useRichard Maw2017-08-012-0/+19
|
* Add Yarn for testing dangling HEADrichardmaw/test-warn-dangling-headRichard Maw2017-08-012-1/+26
|
* Move post-push dangling-HEAD check to post-receive hookRichard Maw2017-08-012-8/+12
| | | | | | | | | | | The smart-http interface starts http-backend which calls receive-pack. Unfortunately we were performing the dangling-HEAD check after calling receive-pack ourselves, so when using smart-http we weren't performing the check. By moving this into the post-receive hook the check can be performed in smart-http too.
* Add lang entry for dangling headRichard Maw2017-08-011-0/+1
|
* Add HOME during git archive callDaniel Silverstone2017-08-011-0/+1
| | | | | HOME is needed to find the modified git config. It not being set before now was an oversight.
* Also display stdin when failure ensuesDaniel Silverstone2017-08-011-0/+2
|
* Use $GTT rungit to handle git pullDaniel Silverstone2017-08-011-2/+1
| | | | | | | | Because additional git config is now required to use ext:: urls running git directly is not sufficient as the HOME variable needs to be set to locate the modified config. It's simplest to modify the yarns to use $GTT rungit to do this.
* Allow ext protocol for test purposesDaniel Silverstone2017-08-011-0/+1
| | | | | | | | Newer versions of git block the ext:: protocol by default, so that a repository with submodules may not run arbitrary code. Whitelisting the ext:: protocol for the test users is the minimum effort required to make it work again.
* Use new lock/unlock functions to guard htpasswd updatesdsilvers/sysbranch-fixesDaniel Silverstone2017-07-312-1/+4
|
* Add lock and unlock utility functionsDaniel Silverstone2017-07-311-0/+18
|