Commit Graph

76 Commits

Author SHA1 Message Date
Michael Klishin cd683de436
Correct a duplicate snippet name 2021-02-11 19:46:06 +03:00
Michael Klishin 8ea212a6b6
New configuration settings for TLS
* [Client] hostname verification matching: wildcard or none
 * SNI hostname or none

Closes #2805
2021-02-11 00:12:24 +03:00
Michael Klishin 52479099ec
Bump (c) year 2021-01-22 09:00:14 +03:00
dcorbacho 015e1152c2 Switch to Mozilla Public License 2.0 (MPL 2.0) 2020-07-10 20:19:35 +01:00
Jean-Sébastien Pédron 0a71c3cf7b system_SUITE: Setup slapd(8) at the beginning of the testsuite
... instead of relying on an external script to configure it.

This way, if OpenLDAP server is installed, `make ct-system` should work.
`TESTING.md` is updated with this new information.

It also means the following resources are now unused:
* The Docker and Vagrant files
* `setup.sh` and `seed.sh` in the `example` directory
2020-03-26 16:07:08 +01:00
Jean-Sébastien Pédron 7eafadead3 rabbit_ldap_seed: Remove trailing whitespace 2020-03-26 14:52:36 +01:00
Jean-Sébastien Pédron 084605ab9d Update copyright (year 2020) 2020-03-10 16:02:56 +01:00
Michael Klishin d9890ad642 (c) bump 2019-12-29 05:50:24 +03:00
Jean-Sébastien Pédron 043fda72b8 system_SUITE: Bump timetrap from 1 to 2 minutes 2019-11-21 16:49:13 +01:00
Spring Operator 2afc58cf87 URL Cleanup
This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener).

# HTTP URLs that Could Not Be Fixed
These URLs were unable to be fixed. Please review them to see if they can be manually resolved.

* http://blog.listincomprehension.com/search/label/procket (200) with 1 occurrences could not be migrated:
   ([https](https://blog.listincomprehension.com/search/label/procket) result ClosedChannelException).
* http://dozzie.jarowit.net/trac/wiki/TOML (200) with 1 occurrences could not be migrated:
   ([https](https://dozzie.jarowit.net/trac/wiki/TOML) result SSLHandshakeException).
* http://dozzie.jarowit.net/trac/wiki/subproc (200) with 1 occurrences could not be migrated:
   ([https](https://dozzie.jarowit.net/trac/wiki/subproc) result SSLHandshakeException).
* http://e2project.org (200) with 1 occurrences could not be migrated:
   ([https](https://e2project.org) result AnnotatedConnectException).
* http://nitrogenproject.com/ (200) with 2 occurrences could not be migrated:
   ([https](https://nitrogenproject.com/) result ConnectTimeoutException).
* http://proper.softlab.ntua.gr (200) with 1 occurrences could not be migrated:
   ([https](https://proper.softlab.ntua.gr) result SSLHandshakeException).
* http://yaws.hyber.org (200) with 1 occurrences could not be migrated:
   ([https](https://yaws.hyber.org) result AnnotatedConnectException).
* http://choven.ca (503) with 1 occurrences could not be migrated:
   ([https](https://choven.ca) result ConnectTimeoutException).

# Fixed URLs

## Fixed But Review Recommended
These URLs were fixed, but the https status was not OK. However, the https status was the same as the http request or http redirected to an https URL, so they were migrated. Your review is recommended.

* http://fixprotocol.org/ (301) with 1 occurrences migrated to:
  https://fixtrading.org ([https](https://fixprotocol.org/) result SSLHandshakeException).
* http://erldb.org (UnknownHostException) with 1 occurrences migrated to:
  https://erldb.org ([https](https://erldb.org) result UnknownHostException).

## Fixed Success
These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended.

* http://cloudi.org/ with 27 occurrences migrated to:
  https://cloudi.org/ ([https](https://cloudi.org/) result 200).
* http://erlware.org/ with 1 occurrences migrated to:
  https://erlware.org/ ([https](https://erlware.org/) result 200).
* http://github.com/rabbitmq/rabbitmq-auth-backend-cache with 1 occurrences migrated to:
  https://github.com/rabbitmq/rabbitmq-auth-backend-cache ([https](https://github.com/rabbitmq/rabbitmq-auth-backend-cache) result 200).
* http://inaka.github.io/cowboy-trails/ with 1 occurrences migrated to:
  https://inaka.github.io/cowboy-trails/ ([https](https://inaka.github.io/cowboy-trails/) result 200).
* http://ninenines.eu with 6 occurrences migrated to:
  https://ninenines.eu ([https](https://ninenines.eu) result 200).
* http://www.actordb.com/ with 2 occurrences migrated to:
  https://www.actordb.com/ ([https](https://www.actordb.com/) result 200).
* http://www.cs.kent.ac.uk/projects/wrangler/Home.html with 1 occurrences migrated to:
  https://www.cs.kent.ac.uk/projects/wrangler/Home.html ([https](https://www.cs.kent.ac.uk/projects/wrangler/Home.html) result 200).
* http://www.rabbitmq.com/ldap.html with 4 occurrences migrated to:
  https://www.rabbitmq.com/ldap.html ([https](https://www.rabbitmq.com/ldap.html) result 200).
* http://www.rabbitmq.com/plugin-development.html with 1 occurrences migrated to:
  https://www.rabbitmq.com/plugin-development.html ([https](https://www.rabbitmq.com/plugin-development.html) result 200).
* http://www.rebar3.org with 1 occurrences migrated to:
  https://www.rebar3.org ([https](https://www.rebar3.org) result 200).
* http://contributor-covenant.org with 1 occurrences migrated to:
  https://contributor-covenant.org ([https](https://contributor-covenant.org) result 301).
* http://contributor-covenant.org/version/1/3/0/ with 1 occurrences migrated to:
  https://contributor-covenant.org/version/1/3/0/ ([https](https://contributor-covenant.org/version/1/3/0/) result 301).
* http://inaka.github.com/apns4erl with 1 occurrences migrated to:
  https://inaka.github.com/apns4erl ([https](https://inaka.github.com/apns4erl) result 301).
* http://inaka.github.com/edis/ with 1 occurrences migrated to:
  https://inaka.github.com/edis/ ([https](https://inaka.github.com/edis/) result 301).
* http://lasp-lang.org/ with 1 occurrences migrated to:
  https://lasp-lang.org/ ([https](https://lasp-lang.org/) result 301).
* http://rabbitmq.com/access-control.html with 1 occurrences migrated to:
  https://rabbitmq.com/access-control.html ([https](https://rabbitmq.com/access-control.html) result 301).
* http://saleyn.github.com/erlexec with 1 occurrences migrated to:
  https://saleyn.github.com/erlexec ([https](https://saleyn.github.com/erlexec) result 301).
* http://www.mozilla.org/MPL/ with 7 occurrences migrated to:
  https://www.mozilla.org/MPL/ ([https](https://www.mozilla.org/MPL/) result 301).
* http://zhongwencool.github.io/observer_cli with 1 occurrences migrated to:
  https://zhongwencool.github.io/observer_cli ([https](https://zhongwencool.github.io/observer_cli) result 301).
2019-03-20 03:11:50 -05:00
Luke Bakken 51e1a16a93 Add failing test for rabbitmq/rabbitmq-auth-backend-ldap#100 2018-11-02 11:59:25 -07:00
Luke Bakken fbb9aa1dd8 Add user_bind_pattern to schema
See #102
2018-10-30 19:34:23 -07:00
Luke Bakken 300004dfc6 Add unit test for ad_domain / ad_user 2018-10-26 12:55:20 -07:00
Michael Klishin e0dda13ef6 Allow auth_ldap.dn_lookup_bind to be set to anon in rabbitmq.conf, closes #94
[#158471902]
2018-06-19 21:45:30 +03:00
Michael Klishin 88f5728649 Make it possible to configure TLS options via auth_ldap.ssl_options
Much like we do for the server.

Closes #88.

[#156159684]
2018-03-22 01:18:58 +03:00
Michael Klishin 229a64f5c2 Make it possible to configure group_lookup_base via new style config file
See #85 for justification. Closes #85.

[#156122704]
2018-03-20 14:56:06 +03:00
Michael Klishin 3ee2352a93 Ninja fix for #86
Closes #86.

[#156123202]
2018-03-20 14:38:09 +03:00
Luke Bakken 1518216c30 Timeouts are in milliseconds 2018-03-14 07:07:35 -07:00
Michael Klishin 682735669c Add missing [single value] LDAP config properties to Cuttlefish schema
Plus tests for some keys that haven't had any.

Fixes #78.

[#154330703]
2018-01-15 23:11:46 +03:00
Arnaud Cogoluègnes 344aba30d5 Handle map when in template arguments
An Erlang map is turned into several arguments. E.g.
{variable_map, #{username => guest, vhost = some-vhost}} is converted
into 2 arguments: variable_map.username=guest and variable_map.vhost=some-vhost.

Fixes #71
2017-06-30 16:38:50 +02:00
Daniil Fedotov 6f487f5f5b Replace dicts with maps for internal structures 2017-04-24 13:49:07 +01:00
Michael Klishin 32d566f362 Merge branch 'stable' 2017-04-22 01:10:06 +02:00
kjnilsson 4f4ff6c13e Fix badmatch exception when purging connections
The exception stops timed out connections from
reconnecting successfully.

[#144015233]
2017-04-20 14:12:24 +01:00
Michael Klishin 2d0afdcf8e Merge branch 'stable' 2017-04-02 21:55:36 +03:00
Michael Klishin 33d51d0a8d (c) year 2017-04-02 21:47:12 +03:00
Daniil Fedotov cff8652d32 Config schema test for plugin
Part of [#141481501]
Moved from rabbitmq-server
2017-03-17 10:59:03 +00:00
Jean-Sébastien Pédron 07a50e7dcf system_SUITE: Use os:getenv/1 instead of os:getenv/2
Only the former is available on Erlang R16B03. We handle the fallback to
a default value manually.

[#140575489]
2017-02-27 17:45:18 +01:00
Arnaud Cogoluègnes 590c738639 Add tests for topic authorisation consumption
Part of rabbitmq/rabbitmq-server#1085
2017-01-20 13:37:51 +01:00
Arnaud Cogoluègnes 7d28a27966 Merge branch 'stable'
Conflicts:
	test/system_SUITE.erl
2017-01-13 13:29:10 +01:00
Arnaud Cogoluègnes 65fa7d6c74 Handle plain string cases in match query
Fixes #56
2017-01-13 10:04:20 +01:00
Arnaud Cogoluègnes b7c2fe7f24 Do not always match bidirectionnaly
Fixes #56
2017-01-12 10:39:20 +01:00
Michael Klishin d77496c9e2 Formatting 2017-01-03 15:17:52 +08:00
Arnaud Cogoluègnes aa1bf987c8 Implement check_topic_access callback
References rabbitmq/rabbitmq-server#505
2016-12-29 08:55:58 +01:00
Arnaud Cogoluègnes c087a5419e Merge branch 'master' into rabbitmq-server-505 2016-12-27 17:25:55 +01:00
Arnaud Cogoluègnes b035ef104d Use ^$ instead of '' in permission regex
'' is now failing (after removal of rabbit_control_main).
2016-12-27 17:24:00 +01:00
Arnaud Cogoluègnes a256f447a0 Merge branch 'master' into rabbitmq-server-505 2016-12-27 17:07:36 +01:00
Arnaud Cogoluègnes ea72800353 Support topic authorisation
Add all the resource options in the candidate variables for string substitutions.
This includes the routing key when publishing to an exchange topic. Let pass
when there is no match in the for clause for a topic resource (for backward
compatibility). This a best effort as some queries could fail when publishing
to a topic exchange, but we cannot know whether it's an omission of
the topic case in the query or the query actually blocks the topic.

Part of rabbitmq/rabbitmq-server#505
2016-12-26 11:28:29 +01:00
Daniil Fedotov 9edf1bed08 Support the new cli in tests 2016-12-23 12:17:00 +00:00
Daniil Fedotov 219ad71c81 Idle connection expiry tests 2016-12-01 18:03:46 +00:00
kjnilsson 416035cc74 configure openldap backend
allow ldap port to be overridden by environment
2016-07-28 15:28:35 +01:00
kjnilsson 9331760d9e Treat noSuchObject responses as 'false` during 'or' and 'and' clause evaluations 2016-06-30 11:06:18 +01:00
Michael Klishin 538f4dd740 ldap_seed => rabbit_ldap_seed 2016-06-29 13:54:35 +03:00
kjnilsson 4e6963baf5 setup openldap as part of vagrant provisioning
seed openldap as part of the test run
2016-06-29 10:33:25 +01:00
kjnilsson 2461f04795 move to common test 2016-06-29 10:18:46 +01:00
Daniil Fedotov a0f0f5f6e7 Testing and refactoring 2016-05-12 13:53:54 +01:00
Ayanda Dube cea5a1b89e Adds logging test for 'network_unsafe' log option. 2016-04-28 17:43:42 +01:00
Ayanda Dube fd71d92db2 Introduces logging tests, and tests for scrubbing
bind request credentials in network traffic logs.
2016-04-28 17:43:42 +01:00
Ayanda Dube 0331b9f98a Updates tag check tests to accept test environment
variables as parameters.
2016-04-27 17:27:23 +01:00
Ayanda Dube b43f2d1d54 Adds tag checks/tests for variable tag queries.
Ref: #13
2016-04-21 17:39:06 +01:00
Ayanda Dube 6638a19261 Adds tests for AMQP direct connections.
Adds tests for variable tag_queries, for direct connections only.

Ref: #13.
2016-04-20 12:27:55 +01:00