From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <l.wagner@proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by lists.proxmox.com (Postfix) with ESMTPS id B2C4F9515B
for <pbs-devel@lists.proxmox.com>; Tue, 17 Jan 2023 15:20:52 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
by firstgate.proxmox.com (Proxmox) with ESMTP id 91E25CAA2
for <pbs-devel@lists.proxmox.com>; Tue, 17 Jan 2023 15:20:52 +0100 (CET)
Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com
[94.136.29.106])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by firstgate.proxmox.com (Proxmox) with ESMTPS
for <pbs-devel@lists.proxmox.com>; Tue, 17 Jan 2023 15:20:50 +0100 (CET)
Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1])
by proxmox-new.maurer-it.com (Proxmox) with ESMTP id AA0E444D0F
for <pbs-devel@lists.proxmox.com>; Tue, 17 Jan 2023 15:20:50 +0100 (CET)
From: Lukas Wagner <l.wagner@proxmox.com>
To: pbs-devel@lists.proxmox.com
Date: Tue, 17 Jan 2023 15:20:31 +0100
Message-Id: <20230117142037.847150-1-l.wagner@proxmox.com>
X-Mailer: git-send-email 2.30.2
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-SPAM-LEVEL: Spam detection results: 0
AWL 0.166 Adjusted score from AWL reputation of From: address
BAYES_00 -1.9 Bayes spam probability is 0 to 1%
KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more
information. [ldap.rs, proxmox.com]
Subject: [pbs-devel] [PATCH proxmox-ldap 0/6] introduce proxmox-ldap crate
X-BeenThere: pbs-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox Backup Server development discussion
<pbs-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pbs-devel>,
<mailto:pbs-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pbs-devel/>
List-Post: <mailto:pbs-devel@lists.proxmox.com>
List-Help: <mailto:pbs-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel>,
<mailto:pbs-devel-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Tue, 17 Jan 2023 14:20:52 -0000
This patch series adds the new `proxmox-ldap` crate. The crate is mostly based on
`src/server/ldap.rs` from [1].
The main reason for breaking this out into a separate crate/repo is to make it easily
reusable from PVE/PMG via perlmod -- at some point in the future, all
products could use the same LDAP implemenation.
This is sent as a separete patch series, as the original [1] was already
quite large with 17 commits, affecting multiple repositories.
Changes from [1]@v1:
* Change how custom TLS-certificates work:
Pass certificate paths instead of strings containing the
certificate.
Now, users of this crate can pass additional root certs that
are to be trusted. Alternatively, and this was added with PVE
compatibility in mind, one can add whole certificate store
directories, replacing the system's default at `/etc/ssl/certs`.
* Add integration tests, testing the implementation against a real
LDAP server (`glauth`). The test can be executed via the
`run_integratin_tests.sh` helper and require the `glauth` binary to
be available. The integration tests are #[ignored] by default, so they
don't interfere with regular unit-test execution.
[1] https://lists.proxmox.com/pipermail/pbs-devel/2023-January/005788.html
Lukas Wagner (6):
initial commit
add basic user auth functionality
add helpers for constructing LDAP filters
allow searching for LDAP entities
tests: add LDAP integration tests
add debian packaging
--
2.30.2