Commit Graph

17 Commits

Author SHA1 Message Date
Michael Klishin 15fe108cc3 LDAP: allow tagged values to be used for sensitive settings
Plus a drive-by Dialyzer improvement.
2024-08-14 11:57:37 -04:00
Michael Klishin 8ea212a6b6
New configuration settings for TLS
* [Client] hostname verification matching: wildcard or none
 * SNI hostname or none

Closes #2805
2021-02-11 00:12:24 +03:00
Spring Operator 2afc58cf87 URL Cleanup
This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener).

# HTTP URLs that Could Not Be Fixed
These URLs were unable to be fixed. Please review them to see if they can be manually resolved.

* http://blog.listincomprehension.com/search/label/procket (200) with 1 occurrences could not be migrated:
   ([https](https://blog.listincomprehension.com/search/label/procket) result ClosedChannelException).
* http://dozzie.jarowit.net/trac/wiki/TOML (200) with 1 occurrences could not be migrated:
   ([https](https://dozzie.jarowit.net/trac/wiki/TOML) result SSLHandshakeException).
* http://dozzie.jarowit.net/trac/wiki/subproc (200) with 1 occurrences could not be migrated:
   ([https](https://dozzie.jarowit.net/trac/wiki/subproc) result SSLHandshakeException).
* http://e2project.org (200) with 1 occurrences could not be migrated:
   ([https](https://e2project.org) result AnnotatedConnectException).
* http://nitrogenproject.com/ (200) with 2 occurrences could not be migrated:
   ([https](https://nitrogenproject.com/) result ConnectTimeoutException).
* http://proper.softlab.ntua.gr (200) with 1 occurrences could not be migrated:
   ([https](https://proper.softlab.ntua.gr) result SSLHandshakeException).
* http://yaws.hyber.org (200) with 1 occurrences could not be migrated:
   ([https](https://yaws.hyber.org) result AnnotatedConnectException).
* http://choven.ca (503) with 1 occurrences could not be migrated:
   ([https](https://choven.ca) result ConnectTimeoutException).

# Fixed URLs

## Fixed But Review Recommended
These URLs were fixed, but the https status was not OK. However, the https status was the same as the http request or http redirected to an https URL, so they were migrated. Your review is recommended.

* http://fixprotocol.org/ (301) with 1 occurrences migrated to:
  https://fixtrading.org ([https](https://fixprotocol.org/) result SSLHandshakeException).
* http://erldb.org (UnknownHostException) with 1 occurrences migrated to:
  https://erldb.org ([https](https://erldb.org) result UnknownHostException).

## Fixed Success
These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended.

* http://cloudi.org/ with 27 occurrences migrated to:
  https://cloudi.org/ ([https](https://cloudi.org/) result 200).
* http://erlware.org/ with 1 occurrences migrated to:
  https://erlware.org/ ([https](https://erlware.org/) result 200).
* http://github.com/rabbitmq/rabbitmq-auth-backend-cache with 1 occurrences migrated to:
  https://github.com/rabbitmq/rabbitmq-auth-backend-cache ([https](https://github.com/rabbitmq/rabbitmq-auth-backend-cache) result 200).
* http://inaka.github.io/cowboy-trails/ with 1 occurrences migrated to:
  https://inaka.github.io/cowboy-trails/ ([https](https://inaka.github.io/cowboy-trails/) result 200).
* http://ninenines.eu with 6 occurrences migrated to:
  https://ninenines.eu ([https](https://ninenines.eu) result 200).
* http://www.actordb.com/ with 2 occurrences migrated to:
  https://www.actordb.com/ ([https](https://www.actordb.com/) result 200).
* http://www.cs.kent.ac.uk/projects/wrangler/Home.html with 1 occurrences migrated to:
  https://www.cs.kent.ac.uk/projects/wrangler/Home.html ([https](https://www.cs.kent.ac.uk/projects/wrangler/Home.html) result 200).
* http://www.rabbitmq.com/ldap.html with 4 occurrences migrated to:
  https://www.rabbitmq.com/ldap.html ([https](https://www.rabbitmq.com/ldap.html) result 200).
* http://www.rabbitmq.com/plugin-development.html with 1 occurrences migrated to:
  https://www.rabbitmq.com/plugin-development.html ([https](https://www.rabbitmq.com/plugin-development.html) result 200).
* http://www.rebar3.org with 1 occurrences migrated to:
  https://www.rebar3.org ([https](https://www.rebar3.org) result 200).
* http://contributor-covenant.org with 1 occurrences migrated to:
  https://contributor-covenant.org ([https](https://contributor-covenant.org) result 301).
* http://contributor-covenant.org/version/1/3/0/ with 1 occurrences migrated to:
  https://contributor-covenant.org/version/1/3/0/ ([https](https://contributor-covenant.org/version/1/3/0/) result 301).
* http://inaka.github.com/apns4erl with 1 occurrences migrated to:
  https://inaka.github.com/apns4erl ([https](https://inaka.github.com/apns4erl) result 301).
* http://inaka.github.com/edis/ with 1 occurrences migrated to:
  https://inaka.github.com/edis/ ([https](https://inaka.github.com/edis/) result 301).
* http://lasp-lang.org/ with 1 occurrences migrated to:
  https://lasp-lang.org/ ([https](https://lasp-lang.org/) result 301).
* http://rabbitmq.com/access-control.html with 1 occurrences migrated to:
  https://rabbitmq.com/access-control.html ([https](https://rabbitmq.com/access-control.html) result 301).
* http://saleyn.github.com/erlexec with 1 occurrences migrated to:
  https://saleyn.github.com/erlexec ([https](https://saleyn.github.com/erlexec) result 301).
* http://www.mozilla.org/MPL/ with 7 occurrences migrated to:
  https://www.mozilla.org/MPL/ ([https](https://www.mozilla.org/MPL/) result 301).
* http://zhongwencool.github.io/observer_cli with 1 occurrences migrated to:
  https://zhongwencool.github.io/observer_cli ([https](https://zhongwencool.github.io/observer_cli) result 301).
2019-03-20 03:11:50 -05:00
Luke Bakken fbb9aa1dd8 Add user_bind_pattern to schema
See #102
2018-10-30 19:34:23 -07:00
Michael Klishin e0dda13ef6 Allow auth_ldap.dn_lookup_bind to be set to anon in rabbitmq.conf, closes #94
[#158471902]
2018-06-19 21:45:30 +03:00
Michael Klishin 88f5728649 Make it possible to configure TLS options via auth_ldap.ssl_options
Much like we do for the server.

Closes #88.

[#156159684]
2018-03-22 01:18:58 +03:00
Michael Klishin 229a64f5c2 Make it possible to configure group_lookup_base via new style config file
See #85 for justification. Closes #85.

[#156122704]
2018-03-20 14:56:06 +03:00
Michael Klishin 3ee2352a93 Ninja fix for #86
Closes #86.

[#156123202]
2018-03-20 14:38:09 +03:00
Luke Bakken 1518216c30 Timeouts are in milliseconds 2018-03-14 07:07:35 -07:00
Michael Klishin 682735669c Add missing [single value] LDAP config properties to Cuttlefish schema
Plus tests for some keys that haven't had any.

Fixes #78.

[#154330703]
2018-01-15 23:11:46 +03:00
Daniil Fedotov f34c76f80f Use auth_ldap for configuration prefix 2017-02-09 10:40:49 +00:00
Daniil Fedotov fe214a0503 Shorter prefix for LDAP plugin conf keys 2017-02-08 18:13:14 +00:00
Michael Klishin 4a13ccdeb5 Use full module name in configuration schema
"ldap" works well but that's not the case for, say, the http
backend and we need to keep things consistent.
2016-03-23 09:38:02 +03:00
Daniil Fedotov 8e9df51d44 More config options in sysctl format 2016-03-04 11:55:19 +00:00
Daniil Fedotov 67d434a6de 'none' option for dn_lookup config 2016-03-02 18:14:01 +00:00
Daniil Fedotov 988a914688 none option for ldap_servers 2016-02-26 14:43:13 +00:00
Daniil Fedotov e770563510 cuttlefish schema 2016-02-19 11:29:32 +00:00