Ev Kontsevoy
367ba8b91f
Improved tests
2016-12-27 11:38:53 -08:00
Ev Kontsevoy
95912d4292
PR changes
2016-12-27 11:11:53 -08:00
Ev Kontsevoy
2eafad082c
Merge branch 'master' into ev/lock
2016-12-27 00:13:18 -08:00
Ev Kontsevoy
4ed536a2f0
First pass at cleaning up DynamoDB and locks
...
- Added ability to read AWS config from `~/.aws` directory for testing
- Fixed TTL bug in DynamoDB back-end
- Made FS back-end return similar error types as Boltdb does
- Cleaned up buggy tests for DynamoDB
- Removed unnecessary locks everywhere in code
2016-12-27 00:12:59 -08:00
Ev Kontsevoy
24456d95a7
Update README.md
2016-12-26 14:38:04 -08:00
Ev Kontsevoy
21bd8caa4f
Addressed PR comments
...
- Comments
- Error creation
- Moved from Mailgun's frozen time to clockwork
- Made tests more reliable
2016-12-25 23:26:16 -08:00
Ev Kontsevoy
0f3c6ec269
Comments & minor edits
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
f102832f55
Fixed data race in tests
...
Note: had to add my own implementation of TimeSource interface because
it will take some time to get Mailgun team to accept my PR into their
timetools package.
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
600210f511
Code cleanup and live testing of fs backend.
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
43fbeb8337
Finished implementing filesystem-based backend
...
With full test coverage
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
0d02c3be6f
Removed backend.TouchVal()
...
It was never actually used in Teleport
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
79c9f32f38
Removed backend.GetValAndTTL()
...
It was never used anywhere in actual Teleport code.
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
0857d01dd5
Started implemented fs-based backend
2016-12-25 21:58:59 -08:00
Ev Kontsevoy
4ad3072038
Removed some dead code
2016-12-25 21:58:59 -08:00
Alexey Kontsevoy
733b88f8f4
(web) fix unit-tests and clean-up
2016-12-25 21:47:14 -05:00
Alexey Kontsevoy
44fdb226b2
Merge branch 'master' of github.com:gravitational/teleport into clr-dropdown
2016-12-25 13:01:11 -05:00
Ev Kontsevoy
5df0cf03c7
Merge branch 'master' into sasha/dynamic
2016-12-25 00:37:38 -08:00
Sasha Klizhentas
629d837064
pass token TTL, fixes #660
2016-12-24 15:53:56 -08:00
Sasha Klizhentas
03cc9c66e1
Merge branch 'master' into sasha/dynamic
2016-12-24 14:49:33 -08:00
Sasha Klizhentas
8ab3add372
map OIDC scopes to roles, implements #620
2016-12-24 14:42:33 -08:00
Alexey Kontsevoy
ca74e7c4d1
resolving merge conflicts
2016-12-24 15:14:05 -05:00
Alexey Kontsevoy
0d9335a4d8
Merge branch 'master' of github.com:gravitational/teleport into clr-dropdown
2016-12-24 15:08:13 -05:00
Alexey Kontsevoy
a9c4fe7b2e
expand webapi
2016-12-24 14:58:33 -05:00
dmitri
53e059a11a
Add context support to ProxyClient.ConnectToNode to be able to timeout the connection.
...
The method is otherwise blocking and might hang upon establishing a connection if the other side closes the connection.
2016-12-23 20:50:32 +01:00
Sasha Klizhentas
13bbc4bd6f
vendor things and fix U2F console
2016-12-23 09:51:36 -08:00
Sasha Klizhentas
d214f5d5e2
address code review comments
2016-12-22 19:06:07 -08:00
Sasha Klizhentas
0bf50323a9
Merge branch 'master' into sasha/rbac
2016-12-21 15:44:25 -08:00
Sasha Klizhentas
e054fd0fb0
fix more tests
2016-12-21 15:43:59 -08:00
Sasha Klizhentas
c8217f6d35
add missing pieces
2016-12-21 14:58:26 -08:00
Sasha Klizhentas
81c69851e2
tctl add upsert, get
2016-12-20 19:19:44 -08:00
Ev Kontsevoy
91f0492b00
U2F is turned off by default (when teleport.yaml is missing)
2016-12-20 16:39:11 -08:00
Sasha Klizhentas
1c690ea0f4
add tctl
2016-12-20 16:31:40 -08:00
Sasha Klizhentas
aa41f032a3
more fixes
2016-12-20 14:01:46 -08:00
Sasha Klizhentas
4222822a4e
cover lock logic by tests and fix some bugs
2016-12-20 12:27:20 -08:00
Sasha Klizhentas
0793fe1d82
fix possible panic in GetSession
2016-12-20 11:52:15 -08:00
Sasha Klizhentas
41a4d2872c
Merge branch 'sasha/corruption' into sasha/rbac
2016-12-20 11:06:16 -08:00
Sasha Klizhentas
dfd58dccb6
several fixes
2016-12-20 11:04:11 -08:00
Sasha Klizhentas
2e646da7ae
fix data corruption in audit logs
2016-12-20 10:51:28 -08:00
Sasha Klizhentas
b87bef2378
create default namespace on start
2016-12-19 09:48:55 -08:00
Ev Kontsevoy
b834c1020c
Better error handling for connecting via reverse tunnel
...
Prior to this fix Teleport would not relay proxy errors from remote
clusters.
In other words, the following command:
```
$ tsh --cluster=remote ssh non-existing-host
```
Would print an error like:
"Cannot find a remote tunnel connection. ssh subsystem request failed"
Insead, it should say something like:
"dial non-existing-host error: no such host"
This commit fixes it. It works by:
- Sending net.Dial() error from the remote proxy back via stderr over
reverse tunnel.
- Carefully handling this error to distinguish it from tunnel-related
network errors.
2016-12-18 21:30:24 -08:00
Sasha Klizhentas
5abf6d44d5
continue fixing tests and code
2016-12-18 16:58:53 -08:00
Sasha Klizhentas
cb143dab46
ssh server tests recovered
2016-12-18 13:36:02 -08:00
Ev Kontsevoy
316f5f9003
Improved behaviour of --insecure flag
...
`tsh` would sometimes ignore --insecure flag. To reproduce:
- copy `/var/lib/teleport` from machine A to machine B
- start Teleport on B
Try to connect with `tsh --proxy=localhost --insecure`. It will fail
because it would try to use local key pool (on machine B) which is not
the same as on A. Instead, --insecure should ignore local keys and
simply ignore certificate validation errors.
2016-12-18 13:30:54 -08:00
Sasha Klizhentas
13d61781b7
recover auth server tests
2016-12-18 12:00:17 -08:00
Sasha Klizhentas
1fee2980f2
login attempts fix
2016-12-16 19:33:18 -08:00
Sasha Klizhentas
66a52519fc
recovered more tests
2016-12-16 15:22:34 -08:00
Sasha Klizhentas
5755f7f74f
recovering tests
2016-12-16 13:57:13 -08:00
Sasha Klizhentas
a187b37503
Add namespace configuration parameter
2016-12-16 11:48:16 -08:00
Sasha Klizhentas
cedacb92aa
migrate users, add role per user
2016-12-16 11:25:17 -08:00
Sasha Klizhentas
4ce3a7992c
fix OIDC
2016-12-16 09:02:31 -08:00
Ev Kontsevoy