WuYunlong
e5166eccee
Fix command help for unexpected options ( #7476 )
2020-07-15 12:38:22 +03:00
antirez
7bb3ef2ec6
Fix handling of special chars in ACL LOAD.
...
Now it is also possible for ACL SETUSER to accept empty strings
as valid operations (doing nothing), so for instance
ACL SETUSER myuser ""
Will have just the effect of creating a user in the default state.
This should fix #7329 .
2020-05-29 11:07:13 +02:00
hujie
66214e3713
fix clear USER_FLAG_ALLCOMMANDS flag in acl
...
in ACLSetUserCommandBit, when the command bit overflows, no operation
is performed, so no need clear the USER_FLAG_ALLCOMMANDS flag.
in ACLSetUser, when adding subcommand, we don't need to call
ACLGetCommandID ahead since subcommand may be empty.
2020-05-19 00:58:58 +08:00
Madelyn Olson
4e8d141cba
Converge hash validation for adding and removing
2020-05-14 11:07:51 -07:00
antirez
8f0c7139b8
ACL: re-enable command execution of disabled users.
...
After all I changed idea again: enabled/disabled should have a more
clear meaning, and it only means: you can't authenticate with such user
with new connections, however old connections continue to work as
expected.
2020-04-23 11:56:39 +02:00
antirez
7cedce1171
ACL GENPASS: take number of bits as argument.
2020-04-23 10:53:21 +02:00
antirez
530a73e8cc
ACL GENPASS: emit 256 bits instead of 128.
2020-04-23 10:39:53 +02:00
antirez
febfd6a304
ACL: deny commands execution of disabled users.
2020-04-22 17:14:15 +02:00
antirez
5e496abef0
Don't allow empty spaces in ACL usernames.
...
Fixes issue #6418 .
2020-04-15 16:40:25 +02:00
antirez
64aac09fc8
Don't allow empty spaces in ACL key patterns.
...
Fixes issue #6418 .
2020-04-15 16:12:07 +02:00
hwware
3a31999ecc
fix spelling in acl.c
2020-04-14 00:16:29 -04:00
antirez
9a604033dd
Fix ACL HELP table missing comma.
2020-04-08 10:56:47 +02:00
antirez
3b5ca2f19f
ACL: Make Redis 6 more backward compatible with requirepass.
...
Note that this as a side effect fixes Sentinel "requirepass" mode.
2020-03-16 16:57:12 +01:00
ShooterIT
7d85577ce1
Avoid compiler warnings
2020-02-29 18:28:41 +08:00
antirez
2700fae0b7
Merge branch 'unstable' of github.com:/antirez/redis into unstable
2020-02-06 11:24:22 +01:00
Oran Agra
7e53f26984
add SAVE subcommand to ACL HELP and top comment
2020-02-06 10:31:43 +02:00
antirez
f1518f63b1
ACL LOG: make max log entries configurable.
2020-02-04 13:19:40 +01:00
antirez
debc5d4ef9
ACL LOG: log failed auth attempts.
2020-02-04 12:55:26 +01:00
antirez
eef1489240
ACL LOG: implement LOG RESET.
2020-01-29 18:51:04 +01:00
antirez
5bcb4e6905
ACL LOG: group similar entries in a given time delta.
2020-01-29 18:40:32 +01:00
antirez
f550dfca47
ACL LOG: actually emit entries.
2020-01-28 18:04:20 +01:00
antirez
99a5b98bf0
ACL LOG: implement ACL LOG subcommadn skeleton.
2020-01-28 17:30:50 +01:00
antirez
800425a319
ACL LOG: data structures and initial functions.
2020-01-27 18:37:52 +01:00
hwware
2a6a01cbf2
typo fix in acl.c
2020-01-07 21:09:44 -05:00
Madelyn Olson
05b7628687
Add module APIs for custom authentication
2019-12-17 06:59:59 +00:00
antirez
6118989790
ACLs: change hashed passwords opcode to also remove them.
...
Related to PR #6405
2019-09-30 18:28:45 +02:00
Madelyn Olson
364c8601e3
Allowed passing in of password hash and fixed config rewrite
2019-09-30 17:57:49 +02:00
antirez
fa2ed64ba1
ACL: store hashed passwords in memory.
...
Note that this breaks API compatibility with Redis < 6:
CONFIG GET requirepass
Will no longer return a cleartext password as well, but the SHA256 hash
of the password set.
2019-09-12 12:54:57 +02:00
antirez
036c83d8ec
ACL: SHA256 based password hashing function implemented.
2019-09-12 12:33:22 +02:00
Madelyn Olson
67a4bcac1b
Fixed some spelling issues in ACL codepath including user facing error
2019-06-07 13:25:22 -07:00
antirez
1a505a3ba9
ACL: Fix memory leak in ACLResetSubcommandsForCommand().
...
This commit fixes bug reported at #5998 . Thanks to @tomcat1102.
2019-04-08 18:08:37 +02:00
antirez
42ce3e2fd5
ACL: GENPASS subcommand.
2019-03-05 15:51:37 +01:00
antirez
2136c71a88
Make PR #5872 more compatible with Redis coding style.
2019-02-27 09:34:50 +01:00
Salvatore Sanfilippo
407c5942b8
Merge pull request #5872 from madolson/dev-unstable-acl-setuser-fix
...
Updated acl setuser to be all or nothing
2019-02-27 09:31:57 +01:00
Madelyn Olson
b6b1d56474
Updated acl setuser to be all or nothing
2019-02-26 02:04:29 +00:00
antirez
79209f1367
ACL: authCommand() refactored into ACLAuthenticateUser().
2019-02-25 16:39:44 +01:00
antirez
dec44d23d3
ACL: move AUTH implementation in acl.c.
2019-02-25 16:33:38 +01:00
antirez
73ae256e3f
ACL: fix ACLSaveToFile() return value.
2019-02-22 12:45:13 +01:00
antirez
fde40f1050
ACL: less error prone error handling in ACLSaveToFile().
2019-02-22 12:43:08 +01:00
Salvatore Sanfilippo
3994e59268
Merge pull request #5858 from madolson/dev-unstable-acl-deluser
...
Making deleting users better defined and update documentation
2019-02-22 10:27:37 +01:00
Madelyn Olson
691b8871d2
Making deleting users better defined and update documentation
2019-02-21 21:34:14 +00:00
antirez
c528f436e6
ACL: remove leak in ACLLoadFromFile().
2019-02-21 17:03:06 +01:00
antirez
c3425bc0ae
ACL: implement ACL SAVE.
2019-02-21 17:01:08 +01:00
antirez
c80b647d03
ACL: ACLSaveToFile() implemented.
2019-02-21 16:50:28 +01:00
antirez
cb6f5c4d0a
ACL: add LOAD subcommand to ACL HELP.
2019-02-21 16:31:33 +01:00
zhaozhao.zz
3eb2f4ca14
ACL: show categories in COMMAND reply
...
Adding another new filed categories at the end of
command reply, it's easy to read and distinguish
flags and categories, also compatible with old format.
2019-02-14 00:13:01 +08:00
zhaozhao.zz
0eee72b620
ACL: fix cat type format warning
2019-02-13 11:47:10 +08:00
antirez
d78a6fdcbd
ACL: CAT subcommand implemented.
2019-02-12 17:02:45 +01:00
antirez
7983f6e884
ACL: return error when removing a non existing password.
...
Otherwise it's very simple for an human mistake to think a password is
removed because of a typo in the ACL SETUSER myuser <somepass command
line.
2019-02-11 17:01:58 +01:00
antirez
3822a465f2
ACL: ACLFreeUserAndKillClients(): free user later.
...
Soon or later we may have code in freeClient() that may have to deal
with ACLs. Imagine for instance the command proposed multiple times (not
sure if this will ever be accepted but still...):
ONCLOSE DEL mykey
Accumulating commands to run when a client is disconnected. Now the
function is compatible with such use cases.
Related to #5829 .
2019-02-11 16:28:31 +01:00