17 Commits

Author	SHA1	Message	Date
Max Erenberg	dc412ef5cb	implement renewal reminders (#61) ... Closes #55. Once this is merged and deployed, a cron job will be used to automatically run `ceo members remindexpire` at the beginning of every term. Reviewed-on: #61	2022-06-30 20:02:06 -04:00
Max Erenberg	539de01c4d	use admin GSSAPI creds for some API endpoints (#45) ... Office staff currently can't sign up new members because ceod uses their GSSAPI credentials to authenticate to LDAP, and those credentials are insufficient. This PR uses the ceod/admin credentials instead for signing up new members and for renewing existing memberships. Reviewed-on: #45	2022-03-12 15:19:14 -05:00
Max Erenberg	88b40b79cc	Don't expire syscom members (#43) ... Closes #37. Co-authored-by: Max Erenberg <> Reviewed-on: #43 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2022-01-01 12:15:32 -05:00
Rio Liu	b4110d887d	Expire member cli and api (#33) ... Closes #23 Co-authored-by: Rio Liu <rio.liu@r26.me> Co-authored-by: Max Erenberg <> Reviewed-on: #33 Co-authored-by: Rio <r345liu@localhost> Co-committed-by: Rio <r345liu@localhost>	2021-12-11 16:30:18 -05:00
Max Erenberg	ac573039da	add mailLocalAddress to each record (#30) ... Closes #26. Co-authored-by: Max Erenberg <> Reviewed-on: #30 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-25 07:36:25 -04:00
Max Erenberg	23f40c74f9	Use inetOrgPerson instead of account (#29) ... Closes #25. Co-authored-by: Max Erenberg <> Reviewed-on: #29 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-23 23:21:09 -04:00
Max Erenberg	e3c50d867a	Add isClubRep attribute (#27) ... Closes #24. Co-authored-by: Max Erenberg <> Reviewed-on: #27 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-23 10:23:43 -04:00
Max Erenberg	3cba9680f5	test that email is sent when user is created	2021-09-25 13:56:23 -04:00
Max Erenberg	e011e98026	use GSSAPI delegation	2021-08-26 02:19:18 +00:00
Max Erenberg	6917247fdd	add members CLI	2021-08-23 13:59:01 +00:00
Max Erenberg	0783588323	announce new user to ceo mailing list	2021-08-22 05:44:41 +00:00
Max Erenberg	583fcded9b	add test for API request without KRB-CRED	2021-08-19 23:53:13 +00:00
Max Erenberg	490abb302c	add simple authz tests	2021-08-19 20:33:44 +00:00
Max Erenberg	ecf089c261	Implement Groups API (#6) ... This PR implements the /api/groups endpoints. Closes #2. Reviewed-on: #6 Co-authored-by: Max Erenberg <merenber@localhost> Co-committed-by: Max Erenberg <merenber@localhost>	2021-08-19 12:58:59 -04:00
Max Erenberg	12a83ce4c0	remove create_sync_response	2021-08-19 05:11:22 +00:00
Max Erenberg	d78d31eec0	add Kerberos delegation (#5) ... This PR adds unconstrained Kerberos delegation to the API. The client obtains a forwarded TGT and sends it, base64-encoded, in an HTTP header named 'X-KRB5-CRED'. The server reads this credential, creates a new credentials cache for the user, and stores the credential into the new cache. The server can now authenticate to other services (e.g. LDAP) over GSSAPI using the forwarded client's credentials. Reviewed-on: #5 Co-authored-by: Max Erenberg <merenber@localhost> Co-committed-by: Max Erenberg <merenber@localhost>	2021-08-18 15:39:14 -04:00
Max Erenberg	6cdb41d47b	move all tests to top-level folder	2021-08-14 00:11:56 +00:00