##// END OF EJS Templates
u » pc » rhodecode-enterprise-ce-fork-pc
RSS

Fork of rhodecode-enterprise-ce

auth: don't break hashing in case of user with empty password....
auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.
marcink - - Load All Authors

File last commit:

r2186:32d56a2c default
r2203:8a18c3c3 default
Show More
__init__.py
66 lines | 2.6 KiB | text/x-python | PythonLexer
/ rhodecode / apps / ssh_support / __init__.py
History | Source | Raw |Copy content |Copy permalink
marcink
ssh: added support for auto generating authorized_keys from stored ssh keys.
 r1994 # -*- coding: utf-8 -*-
# Copyright (C) 2016-2017 RhodeCode GmbH
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License, version 3
# (only), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
# This program is dual-licensed. If you wish to learn more about the
# RhodeCode Enterprise Edition, including its added features, Support services,
# and proprietary license terms, please see https://rhodecode.com/licenses/
import logging
from . import config_keys
from .events import SshKeyFileChangeEvent
from .subscribers import generate_ssh_authorized_keys_file_subscriber
from rhodecode.config.middleware import _bool_setting, _string_setting
log = logging.getLogger(__name__)
def _sanitize_settings_and_apply_defaults(settings):
"""
Set defaults, convert to python types and validate settings.
"""
_bool_setting(settings, config_keys.generate_authorized_keyfile, 'false')
_bool_setting(settings, config_keys.wrapper_allow_shell, 'false')
marcink
ssh: embedded ssh support...
 r2043 _bool_setting(settings, config_keys.enable_debug_logging, 'false')
marcink
ssh: added support for auto generating authorized_keys from stored ssh keys.
 r1994
marcink
ssh: embedded ssh support...
 r2043 _string_setting(settings, config_keys.authorized_keys_file_path,
'~/.ssh/authorized_keys_rhodecode',
marcink
ssh: added support for auto generating authorized_keys from stored ssh keys.
 r1994 lower=False)
_string_setting(settings, config_keys.wrapper_cmd, '',
lower=False)
_string_setting(settings, config_keys.authorized_keys_line_ssh_opts, '',
lower=False)
marcink
ssh: embedded ssh support...
 r2043 _string_setting(settings, config_keys.ssh_hg_bin,
'~/.rccontrol/vcsserver-1/profile/bin/hg',
lower=False)
_string_setting(settings, config_keys.ssh_git_bin,
'~/.rccontrol/vcsserver-1/profile/bin/git',
lower=False)
_string_setting(settings, config_keys.ssh_svn_bin,
'~/.rccontrol/vcsserver-1/profile/bin/svnserve',
lower=False)
marcink
ssh: added support for auto generating authorized_keys from stored ssh keys.
 r1994
def includeme(config):
settings = config.registry.settings
_sanitize_settings_and_apply_defaults(settings)
# if we have enable generation of file, subscribe to event
if settings[config_keys.generate_authorized_keyfile]:
config.add_subscriber(
generate_ssh_authorized_keys_file_subscriber, SshKeyFileChangeEvent)