Michael Friedrich
f5ea90859c
Fix missing anchors in CLI commands chapter
...
refs #6227
2018-04-16 15:46:47 +02:00
Jan Beich
e3ecf83bfb
Explicitly use long with boost::posix_time
2018-04-16 15:39:57 +02:00
Noah Hilverling
8b488eb00f
Remove init.conf from icinga.cpp
2018-04-04 13:53:18 +02:00
Michael Insel
55dc00d496
Doc: Fix typo in API user creation example
...
This fixes a typo in the API user creation example inside the documentation.
refs #6177
2018-03-23 12:37:00 +01:00
Maurice Meyer
c6299bc545
hashed_password -> password_hash. Fixes #6175
...
Signed-off-by: Maurice Meyer <morre@mor.re>
refs #6176
2018-03-23 12:36:41 +01:00
Michael Friedrich
857842d7f0
Merge pull request #6179 from Icinga/fix/api-user-crash-2.8.2
...
Fix crash in api user command
2018-03-23 12:31:19 +01:00
Jean Flach
08eb3ef991
Fix crash in api user command
...
Missing backport in support/2.8
fixes #6178
2018-03-23 12:13:41 +01:00
Jean Flach
ada573dcf0
Release version 2.8.2
2018-03-22 11:26:19 +01:00
Jean Flach
e5539073c1
Update mailmap
2018-03-22 10:35:02 +01:00
Michael Friedrich
4f12142d52
Docs: Add a note to only query the NSClient++ API from the local Icinga 2 client
...
refs #6172
2018-03-21 16:05:17 +01:00
Michael Friedrich
1969a9071a
Improve error handling for empty packages in /v1/config/packages
...
- If there is no package main directory, assume "empty packages".
- Catch exceptions thrown through GlobRecursive() and present a better http 500
to the user.
The packages directory tree is automatically created with the first
package creation, either from the user, or by the `_api` package.
fixes #6129
2018-03-13 11:03:02 +01:00
Gunnar Beutner
ddab94feb3
Build fix
2018-03-07 09:57:08 +01:00
Jean Flach
f357439485
Code style
2018-03-07 09:57:08 +01:00
Gunnar Beutner
9886f3914c
Fix ApiUser unit test
2018-03-06 09:37:23 +01:00
Gunnar Beutner
6670024f62
Ensure that SetCorked() works properly
2018-03-06 09:35:57 +01:00
Gunnar Beutner
0b9869917f
Fix incorrect argument type for JsonRpc::SendMessage
2018-03-06 09:02:05 +01:00
Jean Flach
fda4faac06
Limit anonymous connections to 25
2018-03-06 08:53:52 +01:00
Noah Hilverling
fdf2dc43d5
Limit JSON-RPC message size
2018-03-06 08:53:14 +01:00
Gunnar Beutner
622127276b
Fix incorrect HTTP content length limits
2018-02-28 14:17:17 +01:00
Gunnar Beutner
85858e6a36
Add SetCorked() calls to the JsonRpcConnection class
2018-02-28 12:57:22 +01:00
Jean Flach
8b334fe259
Use cork in tlsstream and HTTP connection
2018-02-28 12:57:22 +01:00
Jean Flach
419103b407
Add cork
2018-02-28 12:50:49 +01:00
Gunnar Beutner
6e7421eab0
Fix null ptr dereference in HttpServerConnection::ProcessMessageAsync
2018-02-28 11:54:48 +01:00
Gunnar Beutner
6400a300cd
Fix incorrect return value
2018-02-28 11:53:49 +01:00
Jean Flach
952e3616e5
Fix incorrect size of request limits
...
refs #6103
2018-02-23 14:44:44 +01:00
Jean Flach
360d109211
Fix typo in prepare-dirs
...
refs #5850
2018-02-23 14:44:07 +01:00
Jean Flach
3970662bf4
Remove need for init.conf
2018-02-23 14:19:21 +01:00
Jean Flach
d4b336ad20
Remove need for RunAsUser/Group
...
They are now read form the sysconfig file which is owned by root
2018-02-23 14:01:43 +01:00
Jean Flach
c6b86680a0
Add cli tool to send signals as Icinga user
...
fixes #5991
2018-02-23 14:01:09 +01:00
Jean Flach
73dcebe25b
Get ICINGA2_USER and GROUP from sysconfig
2018-02-23 13:59:30 +01:00
Jean Flach
5aafc7eda5
Fix prepare-dirs permission exploit
...
refs #5793
2018-02-23 13:59:30 +01:00
Jean Flach
f282b68fbd
Add clarification on sysconfig location
2018-02-23 13:09:48 +01:00
Jean Flach
40e89c4184
Add Upgrading to Icinga 2.8.2 chapter
2018-02-23 13:09:46 +01:00
Gunnar Beutner
492b590a29
Remove debug output in ApiUserCommand::Run
2018-02-23 13:07:56 +01:00
Gunnar Beutner
ed1dd36f09
Properly escape strings in ApiUserCommand::Run
2018-02-23 13:07:56 +01:00
Jean Flach
aad44dfbb2
Improve api user command
...
--oneline can now be used to print out only the password hash string.
This can be used to update ApiUser passwords through the API. There is
also now a validation to make use salt does not contain a '$' which
would break verification.
2018-02-23 13:07:56 +01:00
Jean Flach
2e5aedd28a
Fix crash when using incorrectly formatted password hash
2018-02-23 13:07:55 +01:00
Jean Flach
6387f5442e
Move new password functions into tlsutility
2018-02-23 13:06:22 +01:00
Jean Flach
6504606e23
Hash API password and comparison
...
fixes #4920
2018-02-23 11:23:19 +01:00
Jean Flach
adc054097d
Build/Merge fixes
2018-02-23 10:27:55 +01:00
Jean Flach
c5b92defec
Minor codestyle and doc changes
2018-02-23 10:09:28 +01:00
Noah Hilverling
4b77afedcd
Limit HTTP body size
2018-02-23 10:09:28 +01:00
Noah Hilverling
3fe818b44b
Fix requests not being closed correctly
2018-02-23 10:09:28 +01:00
Jean Flach
70c81734c5
Add timeout for TLS handshakes
2018-02-23 10:09:26 +01:00
Jean Flach
aa1ccd7ada
Authenticate API user before parsing body
2018-02-23 10:08:24 +01:00
Jean Flach
a46dc64e6a
Only read body from authenticated connections
...
This means we are not allowing unauthenticated requests anymore
2018-02-23 09:52:54 +01:00
Jean Flach
e1c46cedd1
Fix nullptr deref
2018-02-23 08:34:10 +01:00
Gunnar Beutner
f5f8b90ec8
Add HTTP Header size limits
2018-02-23 08:31:28 +01:00
Gunnar Beutner
0339a2b827
Add validation for HTTP connection sizes
2018-02-23 08:31:28 +01:00
Dirk Goetz
3cb7d2dbd0
SELinux: Allows icinga2_t to send sigkill to all domains it transitions to
...
Fixes #5916
2018-02-22 15:09:25 +01:00