CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Upgrade to Kratos 0.9.0-alpha.3

Browse Source
This commit is contained in:
Jason Ertel
2022-05-18 17:05:21 -04:00
parent 94ca3ddbda
commit c20859f8c3
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/common/tools/sbin/so-user
View File

@@ -44,7 +44,7 @@ operation=$1
email=$2 email=$2
role=$3 role=$3
kratosUrl=${KRATOS_URL:-http://127.0.0.1:4434} kratosUrl=${KRATOS_URL:-http://127.0.0.1:4434/admin}
databasePath=${KRATOS_DB_PATH:-/opt/so/conf/kratos/db/db.sqlite} databasePath=${KRATOS_DB_PATH:-/opt/so/conf/kratos/db/db.sqlite}
databaseTimeout=${KRATOS_DB_TIMEOUT:-5000} databaseTimeout=${KRATOS_DB_TIMEOUT:-5000}
bcryptRounds=${BCRYPT_ROUNDS:-12} bcryptRounds=${BCRYPT_ROUNDS:-12}
@@ -408,7 +408,7 @@ function migrateLockedUsers() {
# This is a migration function to convert locked users from prior to 2.3.90 # This is a migration function to convert locked users from prior to 2.3.90
# to inactive users using the newer Kratos functionality. This should only # to inactive users using the newer Kratos functionality. This should only
# find locked users once. # find locked users once.
lockedEmails=$(curl -s http://localhost:4434/identities | jq -r '.[] | select(.traits.status == "locked") | .traits.email') lockedEmails=$(curl -s ${kratosUrl}/identities | jq -r '.[] | select(.traits.status == "locked") | .traits.email')
if [[ -n "$lockedEmails" ]]; then if [[ -n "$lockedEmails" ]]; then
echo "Disabling locked users..." echo "Disabling locked users..."
for email in $lockedEmails; do for email in $lockedEmails; do

7
salt/kratos/files/kratos.yaml
View File

@@ -37,7 +37,7 @@ selfservice:
ui_url: https://{{ WEBACCESS }}/login/ ui_url: https://{{ WEBACCESS }}/login/
default_browser_return_url: https://{{ WEBACCESS }}/ default_browser_return_url: https://{{ WEBACCESS }}/
whitelisted_return_urls: allowed_return_urls:
- http://127.0.0.1 - http://127.0.0.1
log: log:
@@ -59,7 +59,10 @@ hashers:
cost: 12 cost: 12
identity: identity:
default_schema_url: file:///kratos-conf/schema.json default_schema_id: default
schemas:
- id: default
url: file:///kratos-conf/schema.json
courier: courier:
smtp: smtp: