summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Added options for certificate and key filesSam Chudnick2022-07-041-14/+26
| | | | | Added command line arguments and config file options to specify TLS certificate and TLS private key files.
* Implemented TLS encrypted connectionsSam Chudnick2022-07-043-27/+73
| | | | | | Implemented TLS encrypted connections. Added command line argument and configuration file option to accept invalid (self-signed) certificates. Fixed a couple of unrelated issues.
* Properly implemented pam_sm_setcredSam Chudnick2022-07-031-23/+43
| | | | | | Properly implemented pam_sm_setcred and handle any flags that may be passed. Split running of python script and getting status into a separate function.
* Fixed issue caused by non-static database locationSam Chudnick2022-07-031-25/+34
| | | | | Pass database location as argument where needed now that location is not static.
* Better error handling if server disconnectsSam Chudnick2022-07-031-1/+8
|
* Renamed PAM python script. Slightly improved error handlingSam Chudnick2022-07-031-2/+9
|
* Add simple MakefileSam Chudnick2022-07-021-0/+14
|
* More robust error handling. Updated pam_sm_setcred.Sam Chudnick2022-07-021-4/+11
| | | | | Handle issues with getting data from PAM more robustly. Change pam_sm_setcred to return PAM_SUCCESS for now.
* Read options from config file and moreSam Chudnick2022-07-021-41/+151
| | | | | | | | | | | | Read options from standardized configuration file but still prioritize command line options. Added several more commands: --get-app - list provisioned applications, can be filtered by additionally specifying any of --user,--host,--service,--alias --delete-client - delete a provisioned client --delete-app - delete a provisioned application, works the same way as --get-app so calling just --delete-app would request to delete all applications (confirmation is always requested first) Modified --add-client to accept arguments directly. Multiple aliases can be specified for bulk provisioning (--delete-client works the same way). Change --get-client so that no additional options lists all clients. Do not show TOTP secret by default and require --show-secret to do so.
* Read options from config fileSam Chudnick2022-07-023-34/+143
| | | | | | | Set a standardized configuration file location and read options from there. Allow for specifiying alternate location on command line. Options can still be specified on the command line, and any command line options take priority over those given in the configuration file.
* Added support for TOTPSam Chudnick2022-06-304-92/+180
| | | | | | Added TOTP as an MFA option. Also made a couple of of minor changes. Changed all database connections to use with statement. Read some options from a config file.
* Initial commitSam Chudnick2022-06-276-0/+1283