38fe768 Ticket 48707 - ldapssotoken for authentication

28 files Authored by firstyear 4 years ago, Committed by firstyear 4 years ago,
    Ticket 48707 - ldapssotoken for authentication
    
    Bug Description: This implements LDAP ssotokens, a simple
    but cryptographically strong method of providing "cookies" to clients
    on request so that they can re-bind to a session at a later time. This
    is required for the web portal so that the portal may remain "isolated"
    without a strict security audit as the 389-ds server provides all
    security features.
    
    Fix Description: This adds the features for cookies with time limits up
    to one day to be generated from a rust library. These can be "revoked"
    globally by regeneration of the fernet key. Multiple DS servers can
    accept the tokens if they all have the same key configured. The TTL
    is adjustable based on site preferences. Additionally, sites that do
    not compile rust features will not have the feature enabled.
    
    https://pagure.io/389-ds-base/issue/48707
    
    Author: William Brown <william@blackhats.net.au>
    
    Review by: mreynolds
    
        
file modified
+35 -4
file modified
+3 -0
empty file added
file modified
+26 -4
file modified
+88 -1
file modified
+379 -227
file modified
+17 -2
file modified
+3 -6
file added
+8
file modified
+10 -0
file modified
+2 -1
file modified
+49 -5
file added
+10