Jason Ertel
|
a42a406f53
|
Remove extra users file mounts; disable elastic anon access when auth enabled
|
2021-05-29 07:52:08 -04:00 |
|
Jason Ertel
|
47b56e78b3
|
Fix missing endif
|
2021-05-28 20:07:51 -04:00 |
|
Josh Patterson
|
52db7b32ef
|
Merge pull request #4335 from Security-Onion-Solutions/pipeline_userpass
fix logic on password created in pillar and fix how me manage
|
2021-05-28 18:29:59 -04:00 |
|
m0duspwnens
|
3aad5a30e9
|
fix logic on password created in pillar and fix how me manage
|
2021-05-28 18:28:53 -04:00 |
|
Jason Ertel
|
b8a10f2e86
|
Support multiple elastic system users
|
2021-05-28 15:59:51 -04:00 |
|
Josh Patterson
|
4e8dc0e3b9
|
Merge pull request #4334 from Security-Onion-Solutions/pipeline_userpass
Pipeline userpass
|
2021-05-28 15:29:07 -04:00 |
|
m0duspwnens
|
edf60f80f7
|
manager and common states now require elasticsearch.auth state
|
2021-05-28 15:26:26 -04:00 |
|
m0duspwnens
|
68abaa5e3c
|
update auth.map and curl.config to use new elasticsearch:auth pillar format
|
2021-05-28 14:03:21 -04:00 |
|
m0duspwnens
|
63b31de2b8
|
add additional users - manage file if user name isnt returned from grepping the file
|
2021-05-28 13:58:03 -04:00 |
|
Josh Patterson
|
35845440c6
|
Merge pull request #4330 from Security-Onion-Solutions/pipeline_userpass
remove unneeded curl.config template
|
2021-05-28 10:38:43 -04:00 |
|
m0duspwnens
|
18926009d3
|
remove unneeded curl.config template
|
2021-05-28 10:38:06 -04:00 |
|
Josh Patterson
|
f1a6f66d49
|
Merge pull request #4317 from Security-Onion-Solutions/pipeline_userpass
remove vault pg from when i was testing
|
2021-05-27 13:55:01 -04:00 |
|
m0duspwnens
|
423793ecf9
|
remove vault pg from testing
|
2021-05-27 13:50:22 -04:00 |
|
Josh Patterson
|
94cfa3c9d0
|
Merge pull request #4314 from Security-Onion-Solutions/pipeline_userpass
Pipeline userpass
|
2021-05-27 11:34:34 -04:00 |
|
m0duspwnens
|
0134ceef16
|
merge and resolve conflict in elasticsearch state
|
2021-05-27 11:33:44 -04:00 |
|
m0duspwnens
|
dc8520df42
|
user curl.config for curl and elasticscripts
|
2021-05-26 18:04:30 -04:00 |
|
m0duspwnens
|
7263e35a89
|
happy little comment
|
2021-05-26 14:52:59 -04:00 |
|
m0duspwnens
|
4d991d3773
|
propogate users and users_roles
|
2021-05-26 14:52:10 -04:00 |
|
Jason Ertel
|
b43e6c5d6b
|
Salt will handle auto-sync
|
2021-05-26 13:51:24 -04:00 |
|
Jason Ertel
|
c531ef0773
|
Move user sync'd files to saltstack for grid propagation
|
2021-05-26 13:44:30 -04:00 |
|
Jason Ertel
|
a6a4c03029
|
Improve error scenarios for user sync; Ensure user sync runs before Elastic container starts
|
2021-05-26 12:08:10 -04:00 |
|
Jason Ertel
|
ec2f8fe6c8
|
Synchronize SOC passwords with Elastic
|
2021-05-25 17:16:05 -04:00 |
|
m0duspwnens
|
c3b2e1e8b2
|
dont show changes
|
2021-05-25 16:16:57 -04:00 |
|
m0duspwnens
|
e261c197f3
|
add elasticsearch.auth state to statnalone node
|
2021-05-25 13:46:18 -04:00 |
|
m0duspwnens
|
747dc77c92
|
comment out the hackery
|
2021-05-25 13:23:26 -04:00 |
|
m0duspwnens
|
35cc7b27e9
|
remove extra quote
|
2021-05-25 13:12:30 -04:00 |
|
m0duspwnens
|
58ec31d6c7
|
pass ELASTICAUTH to script
|
2021-05-25 12:02:41 -04:00 |
|
m0duspwnens
|
6da0b57ce1
|
fix file.file_exists
|
2021-05-25 11:55:22 -04:00 |
|
m0duspwnens
|
8d9d5a267a
|
generate elasticsearch.auth pillar if it doesnt exist
|
2021-05-25 11:52:58 -04:00 |
|
m0duspwnens
|
5a1e8d9fe9
|
update kibana scripts for elastic auth
|
2021-05-25 08:50:55 -04:00 |
|
m0duspwnens
|
bd301880ad
|
define the default
|
2021-05-24 16:32:30 -04:00 |
|
m0duspwnens
|
2deb703272
|
map users_roles and users conf into docker container
|
2021-05-24 16:30:55 -04:00 |
|
Jason Ertel
|
8c6489a49a
|
Initial pass at synchronizing users file
|
2021-05-24 15:48:05 -04:00 |
|
m0duspwnens
|
87609ba5d1
|
fix elasticcurl if auth is enabled
|
2021-05-24 15:44:01 -04:00 |
|
m0duspwnens
|
ba3a51387c
|
set default to False
|
2021-05-24 15:31:46 -04:00 |
|
m0duspwnens
|
a4226cc39a
|
use elastic map file
|
2021-05-24 15:14:05 -04:00 |
|
Jason Ertel
|
409eea677d
|
Continue removal of argon hashing
|
2021-05-24 11:50:53 -04:00 |
|
Jason Ertel
|
915b7aa2df
|
Switch Kratos config from argon2 to bcrypt12
|
2021-05-24 10:52:54 -04:00 |
|
m0duspwnens
|
e2d5102a0e
|
changes for script to auth to elastic
|
2021-05-24 10:13:29 -04:00 |
|
Jason Ertel
|
0572ea4095
|
Fail curl command if a failing status code is returned by the remote server
|
2021-05-21 17:27:11 -04:00 |
|
Jason Ertel
|
71032150c5
|
Add secure HTTP headers to all SO application responses to reduce exposure to browser and other HTTP-related vulnerabilities
|
2021-05-21 17:27:00 -04:00 |
|
Jason Ertel
|
36d13dd414
|
Merge branch 'dev' into kilo
|
2021-05-21 17:26:50 -04:00 |
|
Mike Reeves
|
18922ed6f5
|
Merge pull request #4263 from Security-Onion-Solutions/feature/merge-2.3.51
Merge 2.3.51 into dev
|
2021-05-21 12:47:15 -04:00 |
|
William Wernert
|
c1dd4dafe4
|
Fix influx state
|
2021-05-21 12:41:10 -04:00 |
|
William Wernert
|
fe3aec173f
|
Merge branch 'master' into feature/merge-2.3.51
# Conflicts:
# VERSION
# salt/influxdb/init.sls
|
2021-05-21 12:31:54 -04:00 |
|
Mike Reeves
|
c5d0286e24
|
Merge pull request #4254 from Security-Onion-Solutions/2.3.51
2.3.51
2.3.51
|
2021-05-21 12:15:04 -04:00 |
|
Mike Reeves
|
7aed01658f
|
Sig file for 2.3.51
|
2021-05-20 22:10:36 -04:00 |
|
Mike Reeves
|
de4fde4ee3
|
Merge pull request #4248 from Masaya-A/MAC-Address
Showing Mac Address to select suitable NICs (Discussions #4214)
|
2021-05-19 21:18:15 -04:00 |
|
Masaya-A
|
3450219bc7
|
Drop error to /dev/null
|
2021-05-20 09:33:14 +09:00 |
|
Jason Ertel
|
b440f73336
|
Truncate wait_for_web_response.log before each wait invocation
|
2021-05-19 18:37:08 -04:00 |
|