summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Removed some debug statements and better error handlingHEADmasterSam Chudnick2023-06-112-27/+12
|
* Wrap client loop in try catch blockSam Chudnick2023-06-111-14/+21
|
* Add installation scriptsSam Chudnick2023-06-112-0/+14
|
* Add MakefileSam Chudnick2023-06-111-0/+14
|
* Created sample configuration fileSam Chudnick2022-07-041-0/+23
|
* Support both TLS encrypted sessions and plaintext sessionsSam Chudnick2022-07-043-27/+137
| | | | | | | | | | | | | Added support for both TLS and plaintext connections. Server can accept both types of connection simultaneously or in different combinations (i.e encrypted client and plaintext PAM). Added options for specifying dedicated TLS ports on server. Added --plain options for client and PAM to force plaintext connections, default is to use encrypted connections. Configuring encrypted client and PAM connections and plaintext server connections allows for use of a reverse proxy setup with something like nginx. This will avoid having to expose the MFA server directly in setups that traverse the internet.
* Added option to specify TLS ciphersSam Chudnick2022-07-041-13/+37
| | | | | | Added a command line argument and config file option to set the TLS ciphers that the server will use. Set to Mozilla intermediate compatibility by default.
* Added options for certificate and key filesSam Chudnick2022-07-041-14/+26
| | | | | Added command line arguments and config file options to specify TLS certificate and TLS private key files.
* Implemented TLS encrypted connectionsSam Chudnick2022-07-043-27/+73
| | | | | | Implemented TLS encrypted connections. Added command line argument and configuration file option to accept invalid (self-signed) certificates. Fixed a couple of unrelated issues.
* Properly implemented pam_sm_setcredSam Chudnick2022-07-031-23/+43
| | | | | | Properly implemented pam_sm_setcred and handle any flags that may be passed. Split running of python script and getting status into a separate function.
* Fixed issue caused by non-static database locationSam Chudnick2022-07-031-25/+34
| | | | | Pass database location as argument where needed now that location is not static.
* Better error handling if server disconnectsSam Chudnick2022-07-031-1/+8
|
* Renamed PAM python script. Slightly improved error handlingSam Chudnick2022-07-031-2/+9
|
* Add simple MakefileSam Chudnick2022-07-021-0/+14
|
* More robust error handling. Updated pam_sm_setcred.Sam Chudnick2022-07-021-4/+11
| | | | | Handle issues with getting data from PAM more robustly. Change pam_sm_setcred to return PAM_SUCCESS for now.
* Read options from config file and moreSam Chudnick2022-07-021-41/+151
| | | | | | | | | | | | Read options from standardized configuration file but still prioritize command line options. Added several more commands: --get-app - list provisioned applications, can be filtered by additionally specifying any of --user,--host,--service,--alias --delete-client - delete a provisioned client --delete-app - delete a provisioned application, works the same way as --get-app so calling just --delete-app would request to delete all applications (confirmation is always requested first) Modified --add-client to accept arguments directly. Multiple aliases can be specified for bulk provisioning (--delete-client works the same way). Change --get-client so that no additional options lists all clients. Do not show TOTP secret by default and require --show-secret to do so.
* Read options from config fileSam Chudnick2022-07-023-34/+143
| | | | | | | Set a standardized configuration file location and read options from there. Allow for specifiying alternate location on command line. Options can still be specified on the command line, and any command line options take priority over those given in the configuration file.
* Added support for TOTPSam Chudnick2022-06-304-92/+180
| | | | | | Added TOTP as an MFA option. Also made a couple of of minor changes. Changed all database connections to use with statement. Read some options from a config file.
* Initial commitSam Chudnick2022-06-276-0/+1283