Update GetUserInfo to return TOTPSecretkeyRequired

This commit updates GetUserInfo to return TOTPSecretkeyRequired

Change-Id: I6a37e65a9746b16947ad16f69d1bf459b8b8eeac
Signed-off-by: Ravi Teja <rav

Update GetUserInfo to return TOTPSecretkeyRequired

This commit updates GetUserInfo to return TOTPSecretkeyRequired

Change-Id: I6a37e65a9746b16947ad16f69d1bf459b8b8eeac
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

Add SecretKeyRequired D-bus method

This commit adds SecretKeyRequired D-bus method to Manager
interface.
bmcweb codes needs to query generate secret key required for a given
user, local users on BMC

Add SecretKeyRequired D-bus method

This commit adds SecretKeyRequired D-bus method to Manager
interface.
bmcweb codes needs to query generate secret key required for a given
user, local users on BMC have d-bus objects for each user but LDAP
users does not have D-bus objects, so this d-bus method helps identify
whether generate secret key required for user local and remote LDAP
users

Change-Id: Ib522802c395d61f0c3e9fbf84fc6a399a66a3afa
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

TOTP: Add D-bus errors

This commit adds D-bus errors for CreateSecretKey and VerifyOTP methods

Change-Id: I9cb1202ec1544d1c22be30248e42b4f36fc0cdfe
Signed-off-by: Ravi Teja <raviteja28031990@gmail.

TOTP: Add D-bus errors

This commit adds D-bus errors for CreateSecretKey and VerifyOTP methods

Change-Id: I9cb1202ec1544d1c22be30248e42b4f36fc0cdfe
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

TOTP: Add ClearSecretKey D-bus method

This method clears Time-based One-time Password authenticator secret
key for the given user.

Change-Id: I0d880c7faff28232304afd3253a861a49f5a3375
Signed-off-by

TOTP: Add ClearSecretKey D-bus method

This method clears Time-based One-time Password authenticator secret
key for the given user.

Change-Id: I0d880c7faff28232304afd3253a861a49f5a3375
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

Add SecretKeyGenerationRequired D-bus property

This commit adds SecretKeyGenerationRequired D-bus property
This D-bus property indicates whether TOTP secret key setup required for
a given user.

Cha

Add SecretKeyGenerationRequired D-bus property

This commit adds SecretKeyGenerationRequired D-bus property
This D-bus property indicates whether TOTP secret key setup required for
a given user.

Change-Id: I5dbc5d2091b8d8f97295ffceec1b29cc94b85aed
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

Add TOTP MFA Authenticator D-bus interfaces

Time-based One-time Password (TOTP) authenticator provides TOTP based
two factor user authentication.

This commit adds TOTP authenticator D-bus interface

Add TOTP MFA Authenticator D-bus interfaces

Time-based One-time Password (TOTP) authenticator provides TOTP based
two factor user authentication.

This commit adds TOTP authenticator D-bus interfaces

Change-Id: I20959c5c28d590e48804d4344a31795f424c3869
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

Add Multi-factor authentication D-bus config

This commit defines D-bus interfaces for multi-factor authentication
configuration to enable/disable various MFA authentication methods

These D-bus inte

Add Multi-factor authentication D-bus config

This commit defines D-bus interfaces for multi-factor authentication
configuration to enable/disable various MFA authentication methods

These D-bus interfaces defined as per standard redfish interfaces
https://redfish.dmtf.org/schemas/v1/AccountService.v1_15_1.json

Change-Id: I52dcf3df95fb60b9f5ea384553b472b71f2be923
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>

show more ...

User.Attributes: add user password expiration date

Add the date before user password will expire. Date should be specified
in EpochTime format. Properties are made according to the "Redfish
Resource

User.Attributes: add user password expiration date

Add the date before user password will expire. Date should be specified
in EpochTime format. Properties are made according to the "Redfish
Resource and Schema Guide"(v. 2022.3) document.

Change-Id: I6e38a094d923102d03f8a30658c411d83dcec331
Signed-off-by: Denis Zlobin <zlobin.d.al@gmail.com>
Signed-off-by: Ivan Mikhaylov <fr0st61te@gmail.com>

show more ...

Fix spelling mistakes using codespell

This commit corrects various spelling mistakes throughout the
repository. The corrections were made automatically using `codespell`[1]
tool.

[1]: https://githu

Fix spelling mistakes using codespell

This commit corrects various spelling mistakes throughout the
repository. The corrections were made automatically using `codespell`[1]
tool.

[1]: https://github.com/codespell-project/codespell

Change-Id: I965f52f9eae78bcad39a8d711f99bef7be4cbde0
Signed-off-by: Manojkiran Eda <manojkiran.eda@gmail.com>

show more ...

reformat with latest settings

Reformat with the latest settings from openbmc-build-scripts (and
copy latest config files where appropriate). Fix a few minor
markdownlint issues.

Signed-off-by: Pat

reformat with latest settings

Reformat with the latest settings from openbmc-build-scripts (and
copy latest config files where appropriate). Fix a few minor
markdownlint issues.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I55205817c29dc3f182a165ddf9cd5d4e07b90063

show more ...

User: add interfaces and errors for groups

As proposed in the following design,
[1] https://github.com/openbmc/docs/blob/master/designs/redfish-authorization.md

The UserManager interface needs to e

User: add interfaces and errors for groups

As proposed in the following design,
[1] https://github.com/openbmc/docs/blob/master/designs/redfish-authorization.md

The UserManager interface needs to expose new interfaces to add/delete
secondary groups, which are then used to model Redfish roles and
privileges.

An implementation is in the follow code review,
[1] https://gerrit.openbmc.org/c/openbmc/phosphor-user-manager/+/58143.

Signed-off-by: Nan Zhou <nanzhoumails@gmail.com>
Change-Id: I252e56dc03e694e3aedf3ae6fdda64edc947fc06

show more ...

treewide: use more specific object_path type

The sdbus++ tool allows the YAML to specify either "path" or
"object_path". Switch to "object_path" everywhere for consistency
and clarity.

Signed-off-

treewide: use more specific object_path type

The sdbus++ tool allows the YAML to specify either "path" or
"object_path". Switch to "object_path" everywhere for consistency
and clarity.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I60c51b2ece5fc4cb23d05ce5151301db3dcddf3a

show more ...

prettier: reformat YAML

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Ib7050ca82a9826efbd5ef356f546f3c33d7a2186

doc: format with markdownlint

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Id1efc27791e219e5fbfe08023143be2f59037307

yaml: format with prettier

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I193f690f3612fe72ec69030f81f4d5096a761601

AccountPolicy: InvalidArgument for min password

Values less than the pre-defined lower limit are not allowed so trying
to set them should result in a distinct error; add InvalidArgument for
that cas

AccountPolicy: InvalidArgument for min password

Values less than the pre-defined lower limit are not allowed so trying
to set them should result in a distinct error; add InvalidArgument for
that case.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Change-Id: I1c589e2ce8a2823564034eb370f571a9663650f6

show more ...

various: fix error metadata for systemd rules

systemd-journald requires that log statements are "KEYWORD=%printf"
and any spaces would cause the journal metadata to be dropped.
Fix a few of them I s

various: fix error metadata for systemd rules

systemd-journald requires that log statements are "KEYWORD=%printf"
and any spaces would cause the journal metadata to be dropped.
Fix a few of them I see in the repo.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I8c7f84bed0a919d5042e083bf3bd87001b10aaf9

show more ...

treewide: Create yaml directory

This allows the propagated yamldir paramter to work correctly in
subproject style builds. We don't want other files in the project
conflicting with tools that scan th

treewide: Create yaml directory

This allows the propagated yamldir paramter to work correctly in
subproject style builds. We don't want other files in the project
conflicting with tools that scan the yamldir.

Change-Id: Ie2759c7f3baf399392cdda0e507055ceb262d2e1
Signed-off-by: William A. Kennington III <wak@google.com>

show more ...