Commits · 7f2ca82ae1ba3934c4313850b1f178c82c71b3d0 · Projects / White Rabbit Switch

07 Jun, 2019 2 commits

wr_date: Fix issue accessing the timing mode · 7f2ca82a
Jean-Claude BAU authored Jun 07, 2019

7f2ca82a

patches/buildroot: set change date to 1 if passwd on 1st Jan 1970 · 00e214e2

Adam Wujek authored Jun 07, 2019

When the passwd is called on a system with a date set to 1st Jan
1970, the change date is set to 0, which has a special meaning:
"The value 0 has a special meaning, which is that the user should change
her pasword the next time she will log in the system."
Thanks to this patch, when the password is changed on 1st on Jun 1970 the
change date is set to 1.
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

00e214e2

06 Jun, 2019 2 commits
- configs/wrs_release_defconfig: use empty password by default · 78798762
  Adam Wujek authored Jun 06, 2019
```
Revert part of a commit:
f14e28c9 Setup default config for the switch (WR profile by default)
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  78798762
- wr_mon: bug fixes and improved readability · a8ab379f
  Jean-Claude BAU authored Jun 06, 2019
  
  a8ab379f
05 Jun, 2019 3 commits

ppsi: uplift to get clean builds · 3b86b40e
Adam Wujek authored Jun 05, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
3b86b40e

userspace/dot-config: remove Kconfig_sfp_fiber.in · 58b6656d

Adam Wujek authored Jun 05, 2019

partly revert the commit:
70c80659 Add Kconfig-sfp-fiber.in in dot-config

The file Kconfig_sfp_fiber.in is copied during the build from the repo's
root.
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>

58b6656d

Update PPSi · f4860c43

Jean-Claude BAU authored Jun 05, 2019

- Include missing in wr-constants.h
- Get Hw specification from halshmem instead of define
- Some modifications to access to FPGA

f4860c43

04 Jun, 2019 2 commits
- Improve behavior when link up->down->up not detected. · 56eee90a
  Jean-Claude BAU authored Jun 04, 2019
```
- update PPSi submodule
- Adapt the display of wr_mon to PPSi changes
```
  56eee90a
- assembly_ppsi_conf.sh: Fix issue vlan parameter missing · 4ca6e473
  Jean-Claude BAU authored Jun 04, 2019
  
  4ca6e473
03 Jun, 2019 31 commits
- Merge branch adam_ldap · 83c3a764
  Adam Wujek authored Jun 03, 2019
```
Add LDAP+kerberos support
This changes the used standard C library (due to lack of /etc/nsswitch.conf support)
and uses openssh instead of dropbear (due to lack of LDAP/kerberos
support in the dropbear)
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  83c3a764
- doc/wrs-user-manual: update with LDAP+Kerberos · d69d55dc
  Adam Wujek authored Feb 06, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  d69d55dc
- rootfs/etc/nslcd.conf: fix long LDAP queries · 37e53d87
  Adam Wujek authored Feb 01, 2019
```
Since nss-pam-ldapd 0.8.4 the uniqueMember attribute was replaced by
using the member attribute by default. This means that you should use

map group member sAMAccountName

https://lists.arthurdejong.org/nss-pam-ldapd-users/2017/msg00012.htmlSigned-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  37e53d87
- build/scripts/wrs_build_wraprootfs: preserve mode when copy from output/target · 58f4deac
  Adam Wujek authored Feb 01, 2019
```
This will keep the suid bit for:
--sudo
--screen
--ssh-keysign
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  58f4deac
- configs/buildroot: remove gesftpserver · c7bb0aeb
  Adam Wujek authored Feb 01, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  c7bb0aeb
- configs/buildroot: copy back config · c7a833d4
  Adam Wujek authored Jan 31, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  c7a833d4
- userspace/snmpd: update for LDAP/nslcd · ebffa319
  Adam Wujek authored Jan 31, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  ebffa319
- remove dropbear · 7e8d4617
  Adam Wujek authored Jan 31, 2019
```
dropbear was replaced, because it does not support correctly LDAP+kerberos.

It was almost working. With LDAP+Kerberos over PAM dropbear was prompting once
more for a password when the correct was given.
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  7e8d4617
- rootfs: add files for LDAP+kerberos · 0b7f5058
  Adam Wujek authored Jan 31, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  0b7f5058
- rootfs: add scripts for sshd · 3b84ed46
  Adam Wujek authored Jan 31, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  3b84ed46
- Kconfig: add items for LDAP, kerberos and disable root login · eff064e6
  Adam Wujek authored Jan 31, 2019
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  eff064e6
- rootfs/etc/sudoers: give sudo access to all users that can log in · 8b44ae65
  Adam Wujek authored Jan 30, 2019
```
It is assumed that authorization is done via LDAP

No need to give extra password when using sudo
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  8b44ae65
- rootfs/etc: limit users that can login to a switch to a group white-rabbit-switch-root · 0ada3ba1
  Adam Wujek authored Sep 10, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  0ada3ba1
- rootfs/etc/pam.d: allow all users that can log in as root · 591b5685
  Adam Wujek authored Sep 07, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  591b5685
- rootfs/etc/pam.d: add file for sudo · 02d9bed0
  Adam Wujek authored Sep 07, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  02d9bed0
- configs/buildroot: enable sudo · 65b445c9
  Adam Wujek authored Sep 07, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  65b445c9
- rootfs/etc: add openssh's config · c9beaf98
  Adam Wujek authored Sep 07, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  c9beaf98
- rootfs/etc: fix a last change day of the root password · 3c29e0f6
  Adam Wujek authored Sep 07, 2018
```
otherwise openssh complains at the root login
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  3c29e0f6
- configs/buildroot: add openssh · 44e21d02
  Adam Wujek authored Sep 07, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  44e21d02
- rootfs/etc: adapt nslcd.conf · b13ed067
  Adam Wujek authored Sep 07, 2018
```
--nslcd does not support uniqueMember, comment it out:
map    group  uniqueMember     member
--run nslcd as root, remove gid and uid
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  b13ed067
- configs/buildroot: enable libpam-krb5 · ab9776e3
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  ab9776e3
- configs/buildroot: add glibc+few more packages · 5779de80
  Adam Wujek authored Sep 05, 2018
```
add:
--glibc
--libkrb5
--nss-pam-ldapd
--openldap
--linux-pam
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  5779de80
- patches/buildroot: add libpam-krb5 · 22a05f4c
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  22a05f4c
- patches/buildroot: backport libkrb5 · 09dfdcef
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  09dfdcef
- rootfs/etc: add krb5.conf · 03d64bcb
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  03d64bcb
- rootfs/etc: add nsswitch.conf · 7f011d79
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  7f011d79
- rootfs/etc: create home directory for LDAP users · 2ac4f422
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  2ac4f422
- rootfs/etc/pam.d: add libpam-krb5 · 595c789b
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  595c789b
- rootfs/etc: add pam file for sshd · 5e850ab2
  Adam Wujek authored Sep 05, 2018
```
Signed-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  5e850ab2
- rootfs/etc: add nslcd.conf · 507028e6
  Adam Wujek authored Sep 05, 2018
```
Downloaded from:
https://linux.web.cern.ch/linux/docs/nslcd.conf.exampleSigned-off-by: Adam Wujek <adam.wujek@cern.ch>
```
  507028e6
- Add Kconfig-sfp-fiber.in in dot-config · 70c80659
  Jean-Claude BAU authored May 29, 2019
  
  70c80659