Commit Graph

81 Commits (jsonvalidator)

Author SHA1 Message Date
Stéphane Lesimple 75793d55e2
chore: use proper naming of 'netblock' instead of 'prefix'
1 year ago
Stéphane Lesimple 30aba693ec
feat: IPv6 support
1 year ago
Stéphane Lesimple 7c42c78d80
chg: set ECDSA as default egress key algo for new installs
1 year ago
Stéphane Lesimple 92bc512050 feat: add assetForgetHostKey
1 year ago
Stéphane Lesimple 4ef9c6ddde feat: add --egress-session-multiplexing option to accountModify
1 year ago
Stéphane Lesimple f4de5957a3 feat: add groupSetServers
2 years ago
Stéphane Lesimple 3d2cf21e0b release v3.16.99-rc1
2 years ago
Stéphane Lesimple cccbdc09f3 chg: Debian12, Ubuntu20+: enable sntrup KEX by default
2 years ago
Stéphane Lesimple 914d8b30b4 chg: remove support for EOL CentOS 7
2 years ago
Stéphane Lesimple 47b51c79ee feat: accountFreeze: terminate running sessions if any
2 years ago
Stéphane Lesimple 3c9382a192 enh: use print_accepted_key_algorithms everywhere
2 years ago
Pierre-Elliott Bécue d0ac9eabb9 Implement Ingress Secure Keys
2 years ago
Cody Robertson f51bee273e Adjust etc/pam.d/sshd.rhel configuration
2 years ago
Stéphane Lesimple 7423f6ad63 feat: add dnsSupportLevel option for systems with broken DNS (fixes #397)
2 years ago
Stéphane Lesimple f022bd9ac8 feat: add ttyrecStealthStdoutPattern config
2 years ago
Stéphane Lesimple fd6850c7ef fix: osh-sync-watcher: default to a valid rshcmd (fixes #433)
2 years ago
Stéphane Lesimple b48463076f feat: osh.pl: jit mfa for plugins
2 years ago
Stéphane Lesimple 708efd90ca chore: add RockyLinux 9 support
3 years ago
Stéphane Lesimple 455fd8b8c3 chore: remove deprecated UseRoaming option from ssh_config
3 years ago
Stéphane Lesimple 4cdd52d85f chore: add Debian 12 to tests
3 years ago
Stéphane Lesimple 49dc104dd7 chore: push sandbox and tester images from Deb10 to Deb11
3 years ago
Stéphane Lesimple 036f921c40 feat: add accountFreeze/accountUnfreeze
3 years ago
Stéphane Lesimple 7fafeb3e1d doc: osh-encrypt-rsync.conf: add verbose
4 years ago
Stéphane Lesimple 73b6a625f5 feat: add support and tests for Ubuntu 22.04 LTS
4 years ago
Stéphane Lesimple ee776707c1 chore: standardize doc generation for config files
4 years ago
Stéphane Lesimple a7462c0ac7 enh: use snake_case for system scripts json config files
4 years ago
Stéphane Lesimple e71aa7b975 feat: add osh-cleanup-guest-key-access.pl script
4 years ago
Stéphane Lesimple f43fdaaf82 enh: osh-lingering-sessions-reaper: make it configurable
4 years ago
Stéphane Lesimple 2c2064a484 feat: osh-encrypt-rsync: handle sqlite and user logs along with ttyrec files
4 years ago
Stéphane Lesimple 86c7bf39e6 remove compress-old-logs script, as osh-encrypt-rsync will do the job instead
4 years ago
Stéphane Lesimple 9d371f90a9 doc: add documentation for osh-remove-empty-folders
4 years ago
Stéphane Lesimple 7bb0843de1 feat: add osh-remove-empty-folders.sh
4 years ago
Stéphane Lesimple 415bc9b903 doc: add more info about root 2FA in sshd_config templates
4 years ago
Stéphane Lesimple a68ccb3f8c feat: add new OSes and deprecate old ones
4 years ago
Stéphane Lesimple aaaa173764 feat: add the accountUnlock restricted plugin
4 years ago
Stéphane Lesimple 89ecb2c0d7 feat: add support for Duo PAM auth as MFA (#249)
4 years ago
Christophe Crochet d85298f229 new account option: --pubkey-auth-optional, to allow ingress login with or without pubkey when pam is required
4 years ago
madx ea8ed97a34 new account option: mfa-any, to allow ingress login with pubkey alone or pam alone instead of requiring both
4 years ago
Jean "henyxia" Wasilewski b40a2fd6e3 fix: add superowner group requirement
4 years ago
Stéphane Lesimple b58388a3d9 feat: add --proactive-mfa and mfa/nofa interactive commands
4 years ago
Stéphane Lesimple 99686499b1 feat: osh-backup-acl-keys: add the possibility to sign encrypted backups (#209)
4 years ago
Stéphane Lesimple 710eb2e4cb doc: use autosectionlabel
5 years ago
Stéphane Lesimple 92d4a46ac5 doc: add osh-piv-grace-reaper.pl config reference
5 years ago
Stéphane Lesimple 9f28dfa977 doc: add osh-backup-acl-keys.sh config reference
5 years ago
Stéphane Lesimple 3c6ce52e8e doc: add osh-encrypt-rsync.pl config reference
5 years ago
Stéphane Lesimple 0dc448943a doc: add osh-sync-watcher.sh config reference
5 years ago
Stéphane Lesimple a08f56df9f feat: support pam_faillock for Debian 11 (#163)
5 years ago
Stéphane Lesimple d3f323d0c6 doc: micro fixes
5 years ago
Stéphane Lesimple 458c50eff1 documentation: add a lot of new documentation topics
5 years ago
Stéphane Lesimple 2193ee487d enh: replace 'allowUTF8' (introduced in rc1) by 'fanciness'
5 years ago