GitLab

It wasn't updated after the config refactoring.

Avoid implementing our own version of asp/userenckey/u2f serialization
and deserialization.

Requires Go from stretch-backports.

Last login

See merge request !3

Add filter to report last login information for a service to usermetadb.

The filter is active when the `enable_last_login_reporting` option is
set.
Signed-off-by: shammash <shammash@autistici.org>

Signed-off-by: shammash <shammash@autistici.org>

Signed-off-by: shammash <shammash@autistici.org>

Allows us to use rc.d-style setup where later files override contents
from previous ones, useful in a configuration management context.

Refactor internal interfaces for clarity

See merge request !2

Move from Config-objects-with-private-members to a full separation of
configuration and runtime types, which simplifies a lot of interface
boundaries between different parts of the code.

More specifically, the Server is a lot leaner and its functionality is
clearer. Backends also have a slightly improved interface.

With proper DN escaping.

Meant to integrate well with DNS-based service discovery: the client
will constantly monitor the DNS results for changes, and dynamically
modify the list of memcache backends.

Replay protection

Closes #4

See merge request !1

This makes it possible to run the auth-server more easily for smaller
projects.

Add the related documentation to the README. Include a nullU2FStorage
handler to prevent nil pointer dereferences in U2F code.

Backed by memcache, like the U2F challenge storage. The code has been
refactored to abstract the common replicated memcache client away.