ovh/the-bastion issues and pull requests

#496 - release v3.16.99-rc3

Pull Request - State: closed - Opened by speed47 3 days ago

#495 - fix: regression introduced by 932e72e for stealth stdout in ssh

Pull Request - State: closed - Opened by speed47 3 days ago

#494 - release v3.16.99-rc2

Pull Request - State: closed - Opened by speed47 11 days ago

#493 - feat: add --egress-session-multiplexing option to accountModify

Pull Request - State: closed - Opened by speed47 16 days ago
Labels: tests:short

#492 - enh: add lock for group ACL change to avoid race conditions

Pull Request - State: closed - Opened by speed47 29 days ago
Labels: tests:full, tests:freebsd

#491 - Feature Request: auto accept keys

Issue - State: open - Opened by tgeek77 about 2 months ago - 1 comment

#490 - feat: add groupSetServers

Pull Request - State: closed - Opened by speed47 about 2 months ago
Labels: tests:full, tests:freebsd

#489 - Support for OIDC auth method

Issue - State: open - Opened by e-scheer about 2 months ago

#488 - enh: selfPlaySession: remove sqliteLog.ttyrecfile dependency

Pull Request - State: closed - Opened by speed47 2 months ago
Labels: tests:full

#487 - chore: selfMFASetupPassword: clearer message

Pull Request - State: closed - Opened by speed47 2 months ago

#486 - SCP freezes wthen downloading large files:

Issue - State: open - Opened by tgeek77 3 months ago - 4 comments

#485 - feat: add rsync support (fix #301)

Pull Request - State: closed - Opened by speed47 3 months ago
Labels: tests:full, tests:freebsd

#484 - release v3.16.99-rc1

Pull Request - State: closed - Opened by speed47 3 months ago
Labels: tests:full, tests:freebsd

#483 - fix: stealth_stdout/stderr was ignored for plugins (fix #482)

Pull Request - State: closed - Opened by speed47 3 months ago

#482 - [Question] disable ttyrec for SCP

Issue - State: closed - Opened by SherifNagy 3 months ago - 8 comments
Labels: bug

#481 - Distros update

Pull Request - State: closed - Opened by speed47 3 months ago - 1 comment
Labels: tests:full, tests:freebsd

#480 - feat: support wildcards in --user (fix #461)

Pull Request - State: closed - Opened by speed47 3 months ago
Labels: tests:full, tests:freebsd

#479 - fix: selfGenerateProxyPassword: help message was incorrect

Pull Request - State: closed - Opened by speed47 3 months ago

#478 - feat: accountFreeze: terminate running sessions if any

Pull Request - State: closed - Opened by speed47 3 months ago - 1 comment

#477 - enh: autologin: set term to raw noecho when --no-tty is used

Pull Request - State: closed - Opened by speed47 3 months ago

#476 - fix: ignore transient errors during global destruction

Pull Request - State: closed - Opened by speed47 4 months ago

#475 - Feature Request: `*-sk` keys supporting PIV-like policies

Issue - State: open - Opened by codyro 5 months ago - 1 comment
Labels: feature

#474 - Disable MFA verification when using an SK

Issue - State: open - Opened by perrze 5 months ago

#473 - Error when installing with ttyrec

Issue - State: open - Opened by Seyfle 5 months ago - 4 comments

#472 - release v3.16.01

Pull Request - State: closed - Opened by speed47 5 months ago

#471 - chg: bastion-sync-helper.sh: use sh instead of bash

Pull Request - State: closed - Opened by speed47 5 months ago

#470 - enh: info: removed uname dependency, added configuration

Pull Request - State: closed - Opened by speed47 5 months ago
Labels: tests:short, tests:freebsd

#469 - fix: alive: don't mask signals

Pull Request - State: closed - Opened by speed47 6 months ago

#468 - release 3.16.00

Pull Request - State: closed - Opened by speed47 6 months ago

#467 - Added autogenerated doc + removed a :

Pull Request - State: closed - Opened by perrze 6 months ago

#466 - feat: implement ingress secure keys (FIDO2)

Pull Request - State: closed - Opened by speed47 6 months ago
Labels: tests:full, tests:freebsd

#465 - enh: remove nc dependency

Pull Request - State: closed - Opened by speed47 6 months ago
Labels: tests:full, tests:freebsd

#464 - Adjust etc/pam.d/sshd.rhel configuration

Pull Request - State: closed - Opened by codyro 6 months ago - 2 comments

#463 - pam-u2f in code or a configuration to do ?

Issue - State: closed - Opened by perrze 6 months ago - 3 comments

#462 - feat: add option to wait for a specific port open

Pull Request - State: closed - Opened by louisLaporte 6 months ago
Labels: tests:full, tests:freebsd

#461 - User suffix for device/network

Issue - State: closed - Opened by killsudo 6 months ago - 3 comments
Labels: feature

#460 - fix: adding run command in code to match doc

Pull Request - State: closed - Opened by perrze 6 months ago - 1 comment

#459 - Upgrade errors: [ERR.] <x> doesn't seem to be a valid bastion group

Issue - State: closed - Opened by KarlAustin 6 months ago - 1 comment

#458 - release v3.15.00

Pull Request - State: closed - Opened by speed47 6 months ago
Labels: tests:full, tests:freebsd

#457 - fix: avoid a warn() when an non-resolvable host is specified with scp…

Pull Request - State: closed - Opened by speed47 6 months ago

#456 - Accepting [email protected] for ingress key

Issue - State: closed - Opened by perrze 6 months ago - 1 comment

#455 - interactive mode: a few autocomplete fixes

Pull Request - State: closed - Opened by speed47 6 months ago
Labels: tests:long, tests:freebsd

#454 - feat: add dnsSupportLevel for systems with broken DNS (fixes #397)

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:long, tests:freebsd

#453 - enh: allow @ as a valid remote user char (fixes #437)

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:short, tests:freebsd

#452 - fix: connect.pl: don't look for error messages when sysret==0

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:short, tests:freebsd

#451 - chg: jailify: update params name to match minijail0

Pull Request - State: closed - Opened by speed47 7 months ago

#450 - fix: scp/sftp: correctly bypass JIT MFA if asked to, when old helpers…

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:full

#449 - chore: devenv: enhance perltidy/shellcheck pre-commit logic

Pull Request - State: closed - Opened by speed47 7 months ago

#448 - release v3.14.16

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:full, tests:freebsd

#447 - chore: silence tr on secret generation

Pull Request - State: closed - Opened by speed47 7 months ago

#446 - fix: osh-sync-watcher: default to a valid rshcmd (fixes #433)

Pull Request - State: closed - Opened by speed47 7 months ago
Labels: tests:short

#445 - fix: accountInfo: return always_active=1 for globally-always-active accounts

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:short

#444 - enh: batch: openhandle() is overkill and doesn't work on EOF

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:short

#443 - enh: plugins: better signal handling to avoid dangling children processes

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:full

#442 - fix: fixrights.sh: add +x run-tool.sh

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:short

#441 - enh: osh-lingering-sessions-reaper.sh: handle dangling plugins

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:short

#440 - feat: add ttyrecStealthStdoutPattern config

Pull Request - State: closed - Opened by speed47 9 months ago
Labels: tests:short

#439 - enh: osh-orphaned-homedir.sh: also cleanup /run/faillock

Pull Request - State: closed - Opened by speed47 9 months ago

#438 - feat: add osh-cleanup-tmp-files.sh

Pull Request - State: closed - Opened by speed47 9 months ago

#437 - Login with user@domain

Issue - State: closed - Opened by hanunes 9 months ago - 2 comments

#436 - SFTP plugin instead of SCP on recent OpenSSH versions

Issue - State: closed - Opened by CorentinDeBoisset 10 months ago - 2 comments

#435 - fix: don't exit with fping host is unreachable

Pull Request - State: closed - Opened by speed47 10 months ago
Labels: tests:full

#434 - Use a global folder for ttyrec sessions

Issue - State: open - Opened by AMBachiri 10 months ago - 1 comment

#433 - Synchronization between master and slave

Issue - State: closed - Opened by ElGigi 11 months ago - 6 comments

#432 - enh: 35% faster is_valid_ip

Pull Request - State: open - Opened by speed47 11 months ago - 1 comment
Labels: tests:full, tests:freebsd

#431 - doc: more details about upgrade to 3.14.15

Pull Request - State: closed - Opened by speed47 11 months ago

#430 - release v3.14.15

Pull Request - State: closed - Opened by speed47 11 months ago

#429 - feat: add admin-configurable lock/kill timeout per plugin

Pull Request - State: closed - Opened by speed47 11 months ago
Labels: tests:short

#428 - chore: fix FreeBSD GitHub Action

Pull Request - State: closed - Opened by speed47 11 months ago
Labels: tests:freebsd

#427 - An alternative method to log into bastion.

Issue - State: open - Opened by thelittlerocket 11 months ago

#426 - enh: orphaned homedirs: adjust behavior on master instances

Pull Request - State: closed - Opened by speed47 12 months ago

#425 - doc: add documentation on how to write integration tests

Pull Request - State: closed - Opened by speed47 12 months ago

#424 - meta: dev: add devenv docker and pre-commit sample

Pull Request - State: closed - Opened by speed47 12 months ago

#423 - report empty ttyrec as ttyrec_empty instead of ttyrec_error

Pull Request - State: closed - Opened by speed47 12 months ago
Labels: tests:full

#422 - Check collisions

Pull Request - State: closed - Opened by speed47 12 months ago

#421 - Allow setup-gpg.sh --import to receive, trust, and add to configure multiple public keys at once

Pull Request - State: closed - Opened by P-EB 12 months ago - 3 comments
Labels: tests:full

#420 - Implement Ingress Secure Keys

Pull Request - State: closed - Opened by P-EB about 1 year ago - 8 comments

#419 - Arista - Add ssh key on a switch with "from" pattern

Issue - State: closed - Opened by gotakasan about 1 year ago - 1 comment

#418 - fix: when no command-line is passed, a warn could be emitted in some …

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:short

#417 - fix: setup-gpg.sh: in some cases, an invalid configuration file could…

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:short

#416 - release v3.14.00

Pull Request - State: closed - Opened by speed47 about 1 year ago

#415 - chore: upgrade sandbox and tester dockerfiles to bookworm

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:full

#414 - enh: enable stealth_stdout mode for sftp

Pull Request - State: closed - Opened by speed47 about 1 year ago

#413 - feat: add stealth_stderr/stdout ttyrec support, enable it for scp

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:full

#412 - feat: add type8 and type9 password hashes

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:full

#411 - master can't sync with slave

Issue - State: closed - Opened by ksourdrille about 1 year ago - 1 comment

#410 - release v3.13.01

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:full

#409 - enh: setup-gpg.sh: create additional backup signing config with --generate

Pull Request - State: closed - Opened by docwalter about 1 year ago - 1 comment

#408 - fix: clush: restore default handlers for SIGHUP/PIPE

Pull Request - State: closed - Opened by speed47 about 1 year ago

#407 - doc: add JSON API and MFA documentations

Pull Request - State: closed - Opened by speed47 about 1 year ago

#406 - release v3.13.00

Pull Request - State: closed - Opened by speed47 about 1 year ago

#405 - fix: selfMFASetupPassword: restore default sighandlers to avoid being zombified

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:short

#403 - chore: tests: ensure test modules don't pollute the caller's env

Pull Request - State: closed - Opened by speed47 about 1 year ago
Labels: tests:full

GitHub / ovh/the-bastion issues and pull requests