67 Commits

Author	SHA1	Message	Date
Jason Ertel	eefcc929c2	Update copyright pattern to match other repos	2022-01-24 10:09:23 -05:00
Jason Ertel	7c22f46a55	Update copyright year for 2022	2022-01-24 09:35:29 -05:00
Jason Ertel	b0d36f2ed2	Ensure update timestamp is updated when changing passwords; this ensures the sync will automatically follow	2021-12-21 13:38:35 -05:00
Jason Ertel	83d86aebb1	Perform full email match	2021-12-09 15:04:00 -05:00
Josh Brower	6f391dbe50	Migrate FleetDM user mgt to fleetctl	2021-11-17 13:13:25 -05:00
Jason Ertel	2f8bb5a2a6	Fix Docker-created corruption of SOC user roles file	2021-10-19 16:04:10 -04:00
Jason Ertel	9797a15218	Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use	2021-10-14 17:23:18 -04:00
Jason Ertel	d21dee162d	Add Note field to user traits; Enforce max length restrictions on email, firstname, lastname, and note fields	2021-10-08 12:39:17 -04:00
Jason Ertel	62c3afc81d	Migrate users from locked to inactive during soup	2021-10-06 15:45:35 -04:00
Jason Ertel	7d8c8144b0	Drop obsolete status trait	2021-10-06 12:52:41 -04:00
Jason Ertel	a2c4fce1ef	Switch to use state attribute in identities for enabling/disabling users	2021-10-06 11:53:10 -04:00
Jason Ertel	dae41d279a	Prevent emails addresses from having uppercase characters	2021-09-22 08:25:55 -04:00
Jason Ertel	a9049eccd4	Ensure identity ID parm is quoted now that it doesn't have embedded quotes in the value	2021-09-20 13:30:05 -04:00
Jason Ertel	730503b69c	Ensure highstate migrates user roles	2021-09-18 23:17:49 -04:00
Jason Ertel	3508f3d8c1	Ensure ES user/role files are generated even if the primary admin user isn't yet created, since the system users are necessary for other installation functions	2021-09-18 19:20:43 -04:00
Jason Ertel	5704906b11	Create empty files for Docker to mount while installation continues	2021-09-18 15:49:05 -04:00
Jason Ertel	357c1db445	Recover from situation where roles file is corrupted	2021-09-18 11:08:35 -04:00
Jason Ertel	5377a1a85e	Recover from situation where roles file is corrupted	2021-09-18 11:06:54 -04:00
Jason Ertel	7f2d7eb038	Continue migration of user emails to IDs	2021-09-18 07:20:34 -04:00
Jason Ertel	30e781d076	Use user ID instead of email as role master	2021-09-17 17:54:38 -04:00
Jason Ertel	ff989b1c73	Include wording in so-user relating to optional role parameter	2021-09-14 14:03:00 -04:00
Jason Ertel	649f339934	Correct typo	2021-09-02 20:30:48 -04:00
Jason Ertel	f659079542	Consolidate password validation messaging	2021-09-02 19:12:32 -04:00
Jason Ertel	ce70380f0f	resolve so-user errors from recent auth changes	2021-09-02 17:59:33 -04:00
Jason Ertel	c4d402d8b4	Ensure role file exists before ES state is run	2021-09-02 15:45:47 -04:00
Jason Ertel	10126bb7ef	Auth enhancements	2021-09-02 09:44:57 -04:00
Jason Ertel	258cebda6e	Correct identity update payload to not have unsupported fields	2021-08-12 15:01:45 -04:00
Jason Ertel	dcc9af946a	Avoid logging when sync is unnecessary due to cronjob log output spam	2021-06-22 08:07:52 -04:00
Jason Ertel	f36ef86ccc	Improve algorithm for determining if a user sync is necessary; Apply salt state in foreground to avoid collisions with setup salt states.	2021-06-21 12:38:02 -04:00
Jason Ertel	5e042bf4b8	Improve algorithm for determining if a user sync is necessary; Apply salt state in foreground to avoid collisions with setup salt states.	2021-06-21 12:16:47 -04:00
Jason Ertel	777bece2eb	Fix intermittent 'like' failures; Ensure bash is on first line of load templates script	2021-06-20 22:14:13 -04:00
Jason Ertel	0cb4562254	Lock so-user to avoid two processes from overwriting eachother	2021-06-17 15:19:39 -04:00
Jason Ertel	989f9dce42	Ensure sqlite.db exists before querying it; Execute so-elastic-auth after common state has been applied and redirect output to setup log	2021-06-15 16:57:13 -04:00
Jason Ertel	89a02383b8	Correct cronjob path issue for sysctl; suppress diff outputs from users/roles files; suppress salt state output during user sync	2021-06-09 16:31:32 -04:00
Jason Ertel	a0c65e2333	Ensure elastic minions also update their auth files	2021-06-09 09:38:50 -04:00
Jason Ertel	dd73ad544c	Rename PATH var to avoid collision with OS PATH var; wrapped password var in quotes to support spaces in Fleet/TheHive passwords	2021-06-09 09:06:29 -04:00
Jason Ertel	d2381b0209	Ensure empty/aborted users/roles files do not get copied onto final filenames	2021-06-08 11:03:56 -04:00
Jason Ertel	ba29b5e036	Do not apply salt state if already applying a state	2021-06-04 21:56:41 -04:00
Jason Ertel	e22421ec99	Refactor users/roles management via salt due to Salt's clobbering of the inode which breaks Docker mounts	2021-06-04 20:01:30 -04:00
Jason Ertel	416b38fc71	Use cronjob to ensure user synchronization	2021-06-04 11:24:58 -04:00
Jason Ertel	316035910f	Remove inotify beacon due to it not functioning as documented; Add back so-user changes to sync upon so-user changes	2021-06-03 15:15:35 -04:00
Jason Ertel	7aede4d058	Persist chown/chmod settings on users/roles files	2021-06-02 09:01:16 -04:00
Jason Ertel	2a2247e1da	Additional so-user sync adjustments	2021-06-01 14:45:01 -04:00
Jason Ertel	ed8c85df2b	Only sync web users if teh sqlite db exists	2021-06-01 10:26:33 -04:00
Jason Ertel	b8a10f2e86	Support multiple elastic system users	2021-05-28 15:59:51 -04:00
Jason Ertel	b43e6c5d6b	Salt will handle auto-sync	2021-05-26 13:51:24 -04:00
Jason Ertel	c531ef0773	Move user sync'd files to saltstack for grid propagation	2021-05-26 13:44:30 -04:00
Jason Ertel	a6a4c03029	Improve error scenarios for user sync; Ensure user sync runs before Elastic container starts	2021-05-26 12:08:10 -04:00
Jason Ertel	ec2f8fe6c8	Synchronize SOC passwords with Elastic	2021-05-25 17:16:05 -04:00
Jason Ertel	8c6489a49a	Initial pass at synchronizing users file	2021-05-24 15:48:05 -04:00