114324f513
Add CA to self signed cert constraints
...
Some applications require this be set for it to work
as an enrolled certificate. Notably UEFI
requires this.
2020-02-24 15:34:55 -05:00
f6d4fef5e6
Improve error message for collective
...
When trying to not run as root, give a
better error message explaining the
situation more clearly.
2020-02-18 16:16:40 -05:00
3bc366bef4
Fix mistake in the cert util
2020-02-03 15:37:20 -05:00
c666b11138
Add ability to foreground exec confluent
...
This allows easier debug and option for unit file
in systemd to run foreground if it makes sense.
2020-01-31 08:10:01 -05:00
8cab591a8b
Add collective member deletion
...
This allows deletion of a dead member, down to deleting down to non-collective
mode.
2019-10-10 11:30:03 -04:00
c1953bdad3
Another set of python 3 compatibility
...
Numerous issues arose, particularly
when participating in a mixed
collective.
2019-10-08 10:45:43 -04:00
578ba06aa3
Fix python3 problem with octal
2019-10-08 09:06:15 -04:00
90e546bcac
Implement a number of py3 compatible adjustments
2019-10-02 08:58:39 -04:00
44d6bde3ff
Make /usr/bin/env python point to python2
...
Same as before, more RHEL8 compatibility changes
2019-09-23 11:04:52 -04:00
4dab5fc527
Adapt to RHEL or Debian openssl config locations
2019-08-05 16:16:42 -04:00
5d572f17f9
Enhance collective usage output
...
Collective usage output provided no hints as to how to access more detailed
help. Amend the wording to make this more clear/obvious.
2019-04-03 14:23:30 -04:00
8a03bc48de
Tentatively store certutil
...
Commit to repository, even though not yet used. It is likely to
be renamed. The purpose is to help generate an appropriate self signed
cert for https including all the ip addresses as subject alternative
names so that names or addresses may be used with installers that
have had the cert injected.
2018-12-11 13:51:46 -05:00
d5c093a30d
Provide fallback for unexpected reply in collective show
2018-10-10 09:46:01 -04:00
cf9d2a43e8
Revert "Provide fallback for unexpected reply in collective show"
...
This reverts commit 2f566fb81d
2018-10-10 09:44:06 -04:00
2f566fb81d
Provide fallback for unexpected reply in collective show
2018-10-10 09:41:25 -04:00
73c06fd25e
Fix display of error on join of collective
2018-10-08 09:54:03 -04:00
f0edbbad39
Have collective show present some info when not in quorum
2018-07-20 14:11:38 -04:00
96671ace4e
Correct collective show behavior
2018-07-19 16:48:30 -04:00
bcff3fc962
Improve collective show readability
2018-07-19 16:39:13 -04:00
67d6e9a6c7
Add collective show
...
Provide a harmless way to look at collective state
2018-07-09 15:07:24 -04:00
a4edf9afb8
Rename confluentutil to collective
...
Also adjust output to be a bit more automation friendly.
2018-07-09 13:33:56 -04:00
401352998c
Correctly show the error on non-leader
...
When non-leader tries to invite, print the error rather than unhelpful
exception with no helpful data.
2018-06-26 14:35:23 -04:00
38898ca921
Auto-make certificate if missing
...
Automatically fix a missing certificate if this is the case.
2018-06-19 11:05:38 -04:00
f2500d9d27
Add general confluentutil command
...
This provides util commands to manage certificates and collective
membership.
2018-06-13 16:23:49 -04:00
0507e89da8
Add ability to skip key backup and interactive password
...
Backups should carefully protect keys.json, but that's only feasible
interactively. However keys don't change, so have a way to combine
protected keys.json with password with relatively safe non-interactive
incremental backups.
2018-06-13 16:22:40 -04:00
8515d43dad
A shell script to illustrate generating ECDSA key
...
For now put down the openssl commands required to get the key and
certificate available.
2018-06-12 16:57:36 -04:00
39e9bf0be5
Cleaner handling of invalid names in restore attempt
...
Detect problems ahead af time and more cleanly print a message.
2018-05-17 14:40:19 -04:00
04781e0ece
Actually hook up the redact feature
2017-02-15 10:46:27 -05:00
9bd0b7af9d
Make confluentdbutil executable
2017-02-15 10:46:27 -05:00
ae806e55b0
Add a utility to frontend DB dump/restore
...
This exposes the library functions as a utility
2017-02-15 10:46:26 -05:00
ad20193309
Make confluent and confluentsrv.py identical
...
The two files should be identical. confluentsrv.py exists
only because PyInstaller struggles unless the target is a
'py' file and does not have some namespace conflict with a
module.
2015-09-23 11:58:48 -04:00
0bd9b08be2
Remove extraneous print statements
...
Some debug output was in place, remove it.
2015-09-23 11:54:35 -04:00
765c15ed5b
Revert 'confluentd' change
...
After further investigation, the rename to confluentd was not
needed (after massaging pathex and using pip to install rather
than distutils).
2015-09-23 11:48:27 -04:00
29417d935c
Phase 2 of Windows compatibility
...
More work to try to enable confluent to be frozen by
pyinstaller
2015-09-23 11:48:20 -04:00
b48cd8b685
Implement basic functionality under windows
...
Windows support by removing pid file, daemonizing, locking,
and other features. Goal is to have a freezeable payload.
2015-09-23 11:48:17 -04:00
c70f365cd2
Add support for RPM builds
...
add supportfor pam authentication
2014-07-14 14:54:12 -04:00
c5cb5649d5
Begin reorganizing content for packaging
2014-05-06 13:37:31 -04:00
Jarrod Johnson
Jarrod Johnson