Commit Graph

8815 Commits

Author SHA1 Message Date
Michael Friedrich f5ea90859c Fix missing anchors in CLI commands chapter
refs #6227
2018-04-16 15:46:47 +02:00
Jan Beich e3ecf83bfb Explicitly use long with boost::posix_time 2018-04-16 15:39:57 +02:00
Noah Hilverling 8b488eb00f Remove init.conf from icinga.cpp 2018-04-04 13:53:18 +02:00
Michael Insel 55dc00d496 Doc: Fix typo in API user creation example
This fixes a typo in the API user creation example inside the documentation.

refs #6177
2018-03-23 12:37:00 +01:00
Maurice Meyer c6299bc545 hashed_password -> password_hash. Fixes #6175
Signed-off-by: Maurice Meyer <morre@mor.re>

refs #6176
2018-03-23 12:36:41 +01:00
Michael Friedrich 857842d7f0
Merge pull request #6179 from Icinga/fix/api-user-crash-2.8.2
Fix crash in api user command
2018-03-23 12:31:19 +01:00
Jean Flach 08eb3ef991 Fix crash in api user command
Missing backport in support/2.8

fixes #6178
2018-03-23 12:13:41 +01:00
Jean Flach ada573dcf0 Release version 2.8.2 2018-03-22 11:26:19 +01:00
Jean Flach e5539073c1 Update mailmap 2018-03-22 10:35:02 +01:00
Michael Friedrich 4f12142d52 Docs: Add a note to only query the NSClient++ API from the local Icinga 2 client
refs #6172
2018-03-21 16:05:17 +01:00
Michael Friedrich 1969a9071a Improve error handling for empty packages in /v1/config/packages
- If there is no package main directory, assume "empty packages".
- Catch exceptions thrown through GlobRecursive() and present a better http 500
to the user.

The packages directory tree is automatically created with the first
package creation, either from the user, or by the `_api` package.

fixes #6129
2018-03-13 11:03:02 +01:00
Gunnar Beutner ddab94feb3 Build fix 2018-03-07 09:57:08 +01:00
Jean Flach f357439485 Code style 2018-03-07 09:57:08 +01:00
Gunnar Beutner 9886f3914c Fix ApiUser unit test 2018-03-06 09:37:23 +01:00
Gunnar Beutner 6670024f62 Ensure that SetCorked() works properly 2018-03-06 09:35:57 +01:00
Gunnar Beutner 0b9869917f Fix incorrect argument type for JsonRpc::SendMessage 2018-03-06 09:02:05 +01:00
Jean Flach fda4faac06 Limit anonymous connections to 25 2018-03-06 08:53:52 +01:00
Noah Hilverling fdf2dc43d5 Limit JSON-RPC message size 2018-03-06 08:53:14 +01:00
Gunnar Beutner 622127276b Fix incorrect HTTP content length limits 2018-02-28 14:17:17 +01:00
Gunnar Beutner 85858e6a36 Add SetCorked() calls to the JsonRpcConnection class 2018-02-28 12:57:22 +01:00
Jean Flach 8b334fe259 Use cork in tlsstream and HTTP connection 2018-02-28 12:57:22 +01:00
Jean Flach 419103b407 Add cork 2018-02-28 12:50:49 +01:00
Gunnar Beutner 6e7421eab0 Fix null ptr dereference in HttpServerConnection::ProcessMessageAsync 2018-02-28 11:54:48 +01:00
Gunnar Beutner 6400a300cd Fix incorrect return value 2018-02-28 11:53:49 +01:00
Jean Flach 952e3616e5 Fix incorrect size of request limits
refs #6103
2018-02-23 14:44:44 +01:00
Jean Flach 360d109211 Fix typo in prepare-dirs
refs #5850
2018-02-23 14:44:07 +01:00
Jean Flach 3970662bf4 Remove need for init.conf 2018-02-23 14:19:21 +01:00
Jean Flach d4b336ad20 Remove need for RunAsUser/Group
They are now read form the sysconfig file which is owned by root
2018-02-23 14:01:43 +01:00
Jean Flach c6b86680a0 Add cli tool to send signals as Icinga user
fixes #5991
2018-02-23 14:01:09 +01:00
Jean Flach 73dcebe25b Get ICINGA2_USER and GROUP from sysconfig 2018-02-23 13:59:30 +01:00
Jean Flach 5aafc7eda5 Fix prepare-dirs permission exploit
refs #5793
2018-02-23 13:59:30 +01:00
Jean Flach f282b68fbd Add clarification on sysconfig location 2018-02-23 13:09:48 +01:00
Jean Flach 40e89c4184 Add Upgrading to Icinga 2.8.2 chapter 2018-02-23 13:09:46 +01:00
Gunnar Beutner 492b590a29 Remove debug output in ApiUserCommand::Run 2018-02-23 13:07:56 +01:00
Gunnar Beutner ed1dd36f09 Properly escape strings in ApiUserCommand::Run 2018-02-23 13:07:56 +01:00
Jean Flach aad44dfbb2 Improve api user command
--oneline can now be used to print out only the password hash string.
This can be used to update ApiUser passwords through the API. There is
also now a validation to make use salt does not contain a '$' which
would break verification.
2018-02-23 13:07:56 +01:00
Jean Flach 2e5aedd28a Fix crash when using incorrectly formatted password hash 2018-02-23 13:07:55 +01:00
Jean Flach 6387f5442e Move new password functions into tlsutility 2018-02-23 13:06:22 +01:00
Jean Flach 6504606e23 Hash API password and comparison
fixes #4920
2018-02-23 11:23:19 +01:00
Jean Flach adc054097d Build/Merge fixes 2018-02-23 10:27:55 +01:00
Jean Flach c5b92defec Minor codestyle and doc changes 2018-02-23 10:09:28 +01:00
Noah Hilverling 4b77afedcd Limit HTTP body size 2018-02-23 10:09:28 +01:00
Noah Hilverling 3fe818b44b Fix requests not being closed correctly 2018-02-23 10:09:28 +01:00
Jean Flach 70c81734c5 Add timeout for TLS handshakes 2018-02-23 10:09:26 +01:00
Jean Flach aa1ccd7ada Authenticate API user before parsing body 2018-02-23 10:08:24 +01:00
Jean Flach a46dc64e6a Only read body from authenticated connections
This means we are not allowing unauthenticated requests anymore
2018-02-23 09:52:54 +01:00
Jean Flach e1c46cedd1 Fix nullptr deref 2018-02-23 08:34:10 +01:00
Gunnar Beutner f5f8b90ec8 Add HTTP Header size limits 2018-02-23 08:31:28 +01:00
Gunnar Beutner 0339a2b827 Add validation for HTTP connection sizes 2018-02-23 08:31:28 +01:00
Dirk Goetz 3cb7d2dbd0 SELinux: Allows icinga2_t to send sigkill to all domains it transitions to
Fixes #5916
2018-02-22 15:09:25 +01:00