Commits
- Commit:
bc2fa30c53ad50aca3d9d9afd34b001d11f18b87
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
free iev_server in login.c
- Commit:
e21ef27f07085784edc3771199682b6352f9bd8c
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
forgot to increment client counter in auth.c
- Commit:
a0a86356fb75f58f574be3f798b8553f30757553
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
run one access.c process per server to avoid it becoming a bottleneck
- Commit:
97e0634664f953267d4dca4b99383e4dfb25b817
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
connect the login.c and access.c processes on startup
- Commit:
91f92cd4202d248899939b44dc3d4414d448a997
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
access.c might receive client sockets from login.c later
- Commit:
9e6d4144ce019af2f5268ad4c9554f3a005c53dc
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
prepare for running access.c as a dedicated child process
- Commit:
e240092c03160c453e59bea3aff1b6ec606b1539
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
partly implement access_check(), but leave it disabled for now
The login process runs in chroot and hence cannot read the password
database. We will need to do verification of cookies in another process.
- Commit:
64eb24873b5b63f89f43071f87f0b68d67ade4e6
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
start putting access checks into login.c; everyone passes, for now
- Commit:
f64cf10ded89231621f05a9b05aabd596a63334a
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
log errors in just one place in login.c process_request()
- Commit:
e112ed1d59eb471c749edac917491dbbcf366784
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
send repositories and per-repository access rules to login and gotweb procs
- Commit:
ba61c78b3aec77e1f1eeb8c70436273d9dad9219
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
send global and per-server access rules to login and gotweb processes
- Commit:
ed02a561a607a7db70edde4e93eb965e7ba7549f
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
initialize new fields in struct server when received in child process
- Commit:
1f1500d02d7af72fec3e47773d106a4650c7f22c
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
send global auth config to children just once
- Commit:
b6f078d8ec4fb6e2634be812086143fd9e43fb27
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
document more precisely what the server name in gotwebd.conf should be set to
- Commit:
df585c592c556cea2c56e95df30370773a115f12
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
verify the login token's hostname
- Commit:
3f214499bfd4dab44c4629a310e7e7b75adf5f82
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
improve hostname check error handling
- Commit:
5d6d834bc1454b42ff277cfd2f39757ec4869a2b
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
fix whitespace in cookie string
- Commit:
25bbf24a4442db753e05bed1d01ecded81615376
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
implement and document gotwebd.conf access permission syntax
- Commit:
6344415e75626d992b2fa13cc510c74d0cec80b5
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
reduce validity time of login tokens to 5 minutes; browsers still get 1 day
- Commit:
c24a6a6b95cf35544c73fd269a982157cd4ff35f
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
log sucessful login attempts with UID and server name
- Commit:
053e042b6deee862dcf67bf28bd8f94d8c7c030c
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
remove stray debug logging
- Commit:
ea7d18f48b143aabec6a2d996609bdd00eff0d8e
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
remove debug prints that have become irrelevant
- Commit:
15abde1eb39f80c8c20c2e246ffb1cdb90f10571
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
pass the client UID to the gotweb process, as well as the www UID
- Commit:
93ef8eb7fa76dd097df0f79a6edbb2edf7c68620
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
do not close client socket too early, let the fcgi cleanup path handle that
- Commit:
f9f6b7e87548ed5dabe44a1a09b50789ad2b0bf0
- From:
- Stefan Sperling <stsp@stsp.name>
- Date:
extract UID and hostname from authentication token