2
0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-05-22 11:42:05 +00:00

26 Commits

Author SHA1 Message Date
Jarrod Johnson
85149c37f4 Have server enforce SSH zone separation
When a client requests a zone's ssh credentials, make sure the
client is consistent with the specified zone.

Per github user salben21
2022-09-09 12:59:37 -04:00
Kurt H Maier
0ed366820c plugins/credentials.pm: add ed25519 host key support 2022-03-25 10:24:23 -07:00
GONG Jie
9aaf518c2b Remove trailing spaces in file xCAT-server/lib/xcat/plugins/credentials.pm 2017-12-31 23:59:59 +00:00
Bin Xu
18c5afc0f4 support secure root method (#5286)
- support xcat_secure_pw:<user> API in credential plugin
 - for diskless, if enabled secure root, packimage will not write root password into image
 - for stateful, if enabled secure root, nodeset will not write root password into config file
 - and 'remoteshell' will update shadow file accordingly
2018-06-15 10:28:51 +08:00
Bin Xu
cb25622331 It is for provision log enhancement and partial address #4582 (#4648)
- clear logs in the key components during provisioning (not only debug mode, but debug mode will have more logs)
 - now only cover rhel7 stateful and stateless
 - make more syslogs into cluster.log (tag = xcat or xcat.*)
 - the changes will not impact other distro
2018-01-23 03:20:42 -06:00
Matt Ezell
5def082bfb Make sure credential files have a trailing newline (#4442) 2017-12-05 20:52:39 -06:00
Mark Gurevich
0a3fbd8d51 perltidy all perl files 2016-07-20 11:40:27 -04:00
zhaoertao
f320262f7c enhance the xcatdockerhost certification transmitting process 2015-07-06 02:34:43 -04:00
GONG Jie
ca4437270a Fix sourceforge bug #4691 Use a consistent log tag for xCAT log 2015-07-01 18:03:36 +08:00
lissav
946664e1a1 defect 4231 2014-07-21 12:44:57 -04:00
lissav
971808efbd support zone root ssh keys 2014-03-03 13:18:53 -05:00
lissav
6d00593449 enhance error reporting 2013-10-17 11:04:01 -04:00
lissav
57f924c50d defect 3811 2013-10-01 08:25:09 -04:00
jbjohnso
cab8191379 Support per-node ssh host keys if detected - Thanks to Frank Schwichtenberg
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@15577 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-03-19 13:22:33 +00:00
jbjohnso
6ad28fa9ae Add ability for xCAT to sign client certificates
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@10414 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2011-08-31 13:33:38 +00:00
jbjohnso
18aadce8ee -Fix credentials plugin
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7180 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2010-08-20 18:14:20 +00:00
jbjohnso
d2e7821be3 -Be more picky about the nature of the https server when thinking about credential authorization
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7111 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2010-08-17 14:01:14 +00:00
jbjohnso
cb0fefce56 -Add capability to check by https server on a callback_https_port
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7110 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2010-08-17 13:57:56 +00:00
mxi1
251f40143e #bug 2788254 for Linux is fixed, and with more comments, hope it helps.
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@3358 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-05-12 12:18:12 +00:00
mxi1
f164c76ca1 Undoing change commited in r3331
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@3342 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-05-11 15:47:34 +00:00
mxi1
79abdf152c -bug 2788254 is fixed; comitted the code change into trunk
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@3331 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-05-11 02:39:34 +00:00
zhanx
4a72a291ea fix defect 'if no file under /etc/xcat/hostkeys, installation hangs': bug id:2788254
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@3301 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-05-07 08:07:24 +00:00
jbjohnso
9664ad0072 -Have xCATd provide what may likely be FQDN as a value in the request
-Implement 'getcredentials' for a krb5 keytab, requires documentation
-Have getcredentials.awk fundamentally capable of requesting multiple credentials in a single request (theoretical scaling)


git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@2908 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-03-15 20:23:48 +00:00
nott
0f50081b3a Set root directory correctly for AIX
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@2852 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-03-07 18:22:31 +00:00
lissav
2ded87c984 These updates move the /install/postscripts/hostkeys private and public keys to reside in /etc/xcat/hostkeys directory. It will leave a copy of the public hostkeys in /install/postscripts/hostkeys
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@2714 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2009-02-10 19:48:29 +00:00
jbjohnso
e68fe9d2db -Move xCAT-server and client to not have 2.0 in name for trunk
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@1561 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2008-06-03 14:56:33 +00:00