Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | anchor rules regexes at both ends to avoid bogus matches | Chris St. Pierre | 2011-08-31 | 2 | -7/+7 |
| | |||||
* | fixed logic with selecting correct rule from previous commit | Chris St. Pierre | 2011-08-31 | 1 | -2/+2 |
| | |||||
* | added regex support to Rules | Chris St. Pierre | 2011-08-31 | 3 | -53/+122 |
| | |||||
* | debian: Add modified bcfg2-server README from #788 | Sol Jerome | 2011-08-31 | 1 | -0/+21 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Metadata: Add missing sys import (Resolves #1032) | Sol Jerome | 2011-08-28 | 1 | -0/+2 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Cfg: Fix traceback in bcfg2-admin pull | Sol Jerome | 2011-08-27 | 1 | -3/+3 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | POSIX: Unset umask (Resolves #1031) | Sol Jerome | 2011-08-26 | 1 | -0/+7 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | fixed comparisons for probe data | Chris St. Pierre | 2011-08-26 | 1 | -0/+18 |
| | |||||
* | SSHbase: Create only requested key types | Holger Weiß | 2011-08-26 | 1 | -38/+41 |
| | | | | | | | | | | Instead of always creating DSA, RSA, and RSA1 key pairs when any of them is missing, create only the key pair currently requested via Bcfg2. That is, the abstract configuration entries now determine which key types are generated (and therefore included in the ssh_known_hosts files). The rationale is that many sites don't use RSA1 keys anymore. | ||||
* | doc: Minor cleanups | Holger Weiß | 2011-08-23 | 1 | -5/+3 |
| | |||||
* | debian: Add patch to Recommends (See Debian bug 638826) | Sol Jerome | 2011-08-22 | 1 | -1/+1 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Cfg: Fix traceback caused by previous commit | Sol Jerome | 2011-08-22 | 1 | -1/+1 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Cfg: Log error when base file missing (reported by Ana Guerrero) | Sol Jerome | 2011-08-21 | 1 | -5/+8 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Decisions: Add missing import (reported by Rob Lemley) | Sol Jerome | 2011-08-20 | 1 | -0/+2 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | set path in Ohai probe | Chris St. Pierre | 2011-08-19 | 1 | -0/+2 |
| | |||||
* | fixed bug in previous commit | Chris St. Pierre | 2011-08-18 | 1 | -0/+1 |
| | |||||
* | added --altsrc flag to bcfg2-info buildfile | Chris St. Pierre | 2011-08-18 | 4 | -16/+29 |
| | |||||
* | Fixed GroupPatterns schema to allow multiple NameRange or NamePattern tags ↵ | Chris St. Pierre | 2011-08-17 | 1 | -12/+5 |
| | | | | (which was already supported by the code) | ||||
* | APT: Add type='ignore' support (patch from tie on IRC) | Sol Jerome | 2011-08-17 | 2 | -3/+12 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Plugin.py: Deal with more vim temporary files | Sol Jerome | 2011-08-17 | 1 | -1/+1 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Filter for ignored files earlier to eliminate traceback. | Mike McCallister | 2011-08-17 | 1 | -5/+5 |
| | | | | | | | | Ignored files (like Vim swap files) were being picked up by the File Monitor and were causing tracebacks because they are invalid XML. Now check for such ignored file patterns before doing any other processing. (cherry picked from commit c266631eb36e117bad0f297506dc301ee9cc0487) | ||||
* | doc: Fix more old broken trac wiki links | Sol Jerome | 2011-08-16 | 3 | -9/+4 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | doc: Fix broken link to trac wiki | Sol Jerome | 2011-08-16 | 1 | -4/+2 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | doc: Add note clarifying linked blog post | Sol Jerome | 2011-08-16 | 1 | -0/+5 |
| | | | | Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Action: Fix decision mode installation (resolves #1029) | mkd | 2011-08-16 | 1 | -5/+21 |
| | | | | | | | This fix is more complete than 8059a36 and also fixes issues relating to the use of wildcards in Decisions. Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Merge branch 'reports-plusminus' of https://github.com/mkdfh/bcfg2 | Sol Jerome | 2011-08-12 | 5 | -14/+20 |
|\ | |||||
| * | Reports: | unknown | 2011-08-12 | 5 | -14/+20 |
| | | | | | | | | | | toggle "[+]" to "[-]" and back on expanding/collapsing lists make the whole header bar clickable | ||||
* | | Metadata: Better handling of floating cert-authenticated clients (Ticket #1030) | Sol Jerome | 2011-08-11 | 2 | -3/+19 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the ticket: A floating, cert-authenticated client can be not recognized properly by hostname if it resolves to an arbitrary name in reverse DNS. Background: Metadata.resolve_client, called from @exposed Core's methods, falls back to reverse DNS lookup for client's name, because the name is not preserved thanks to bailing off early from Metadata.AuthenticateConnection. (This issue can be related to #936.) This patch enables caching of client names for cert-based floating clients. Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | | fix chmod in "bcfg2-admin init" | Joe Digilio | 2011-08-10 | 1 | -1/+1 |
|/ | |||||
* | Action: Fix whitelist mode (Resolves #1029) | Sol Jerome | 2011-08-10 | 1 | -1/+5 |
| | | | | | | Don't run 'post' Action entries if they are unlisted in whitelist mode. Signed-off-by: Sol Jerome <sol.jerome@gmail.com> | ||||
* | Be more patient for notifications about generated SSHkeys. | Mike McCallister | 2011-08-09 | 1 | -8/+13 |
| | | | | | | | Previously, we wanted one second for the FileMonitor to notify us about newly generated SSHkeys. Now, we wait up to ten seconds before logging a warning and giving up. (cherry picked from commit 204ddcddea55b1f8eed5f6dfe4dd2967bac5bad7) | ||||
* | Be a little more conservative in handling "changed" events. | Mike McCallister | 2011-08-09 | 1 | -17/+44 |
| | | | | | | | | | Previously, if we got a "changed" event for a path we weren't monitoring, we would log a warning and ignore it. Now, we log the warning, but treat it like a "created" event so we know about the file/directory going forward. This situation shouldn't occur, but this new logic will handle it a little better. (cherry picked from commit 29701f299632ea343d7b58af4d3b7a143ced0078) | ||||
* | Fix typo in "bcfg2-info buildbundle" usage output | Holger Weiß | 2011-08-09 | 1 | -1/+1 |
| | |||||
* | Document "bcfg2-info buildbundle" in the manpage | Holger Weiß | 2011-08-09 | 1 | -0/+5 |
| | | | | Mention the "buildbundle" command in the bcfg2-info(8) manpage. | ||||
* | fixed stupid typo | Chris St. Pierre | 2011-08-08 | 1 | -1/+1 |
| | |||||
* | invoke dot in a way that works on all systems | Chris St. Pierre | 2011-08-08 | 1 | -4/+14 |
| | |||||
* | fixed attribute form of genshi keywords | Chris St. Pierre | 2011-08-08 | 1 | -12/+12 |
| | |||||
* | do not start/stop services with "-s disabled" | Chris St. Pierre | 2011-08-08 | 1 | -3/+4 |
| | |||||
* | got rid of blank line output when using bcfg2-admin viz with the -o option | Chris St. Pierre | 2011-08-08 | 1 | -1/+2 |
| | |||||
* | fixed backtrace if Packages downloads a bogus GPG key | Chris St. Pierre | 2011-08-05 | 1 | -6/+13 |
| | |||||
* | don't try to wrap bcfg2-lint output if it's not connected to a tty | Chris St. Pierre | 2011-08-05 | 1 | -6/+15 |
| | |||||
* | fixed typos in RequiredAttrs.check_packages() | Chris St. Pierre | 2011-08-05 | 1 | -2/+2 |
| | |||||
* | fixed more unescaped shell commands | Chris St. Pierre | 2011-08-05 | 2 | -13/+24 |
| | |||||
* | Merge branch 'work' | Chris St. Pierre | 2011-08-05 | 1 | -4/+5 |
|\ | |||||
| * | fixed bcfg2-admin viz bug introduced by Popen fixes | Chris St. Pierre | 2011-08-05 | 1 | -4/+5 |
| | | |||||
| * | made packages.conf optional | Chris St. Pierre | 2011-08-05 | 1 | -1/+5 |
| | | |||||
* | | made packages.conf optional | Chris St. Pierre | 2011-08-05 | 1 | -1/+5 |
| | | |||||
* | | Removed the explicit calls to AddEntry from SSHbase.py in favor of | Mike McCallister | 2011-08-05 | 1 | -3/+7 |
|/ | | | | | | | | | | | | | | | allowing the normal FileMonitor events to populate the data structures. We now call the File Monitor's handle_events_in_interval() method after generating new host keys, so that the normal code paths can populate the data structures used for binding to file data. We need the explicit call because we can't wait for the server's normal event queue processing to discover the changes; we need the newly-generated keys available immediately for binding during the current connection with the client. (cherry picked from commit 74a6e4707725710f6629b292902f2312710e4980) | ||||
* | fixed security bugs with unescaped input to the shell | Chris St. Pierre | 2011-08-05 | 5 | -28/+21 |
| | |||||
* | fixed regex in reports_client_history view; made all reports hostname ↵ | Chris St. Pierre | 2011-08-05 | 1 | -3/+3 |
| | | | | regexes consistent |