secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 13:59:40 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
b689c235f6
secubox-deb/packages/secubox-users
History
CyberMind-FR d476346ef4 fix(users): postinst also chowns auth.toml (ref #498) 
After Phase 7.D consolidation, the aggregator runs as user `secubox`.
secubox_core.user_store reads BOTH /etc/secubox/users.json and (as
fallback) /etc/secubox/auth.toml. The secubox-users postinst chowned
users.json to root:secubox 0640, but auth.toml had NEVER been touched
by any postinst — left at the package default 0600 root:root since the
secubox-auth 0.1.0 install in May 2026.

Live symptom : every admin login returned "Identifiants incorrects"
no matter what password was typed. The aggregator log showed :

  user_store: fallback to auth.toml for get_user(admin)
  user_store: auth.toml unreadable ([Errno 13] Permission denied:
              '/etc/secubox/auth.toml')

The fallback path was the only reason auth.toml mattered at all (the
canonical store is users.json) — but with users.json reset to root:root
by an earlier intervention, the fallback became the active path and
its permission denial took down the entire auth chain.

This commit ensures both files are root:secubox 0640 after every
package install / upgrade.
2026-06-08 10:09:50 +02:00
..
api feat(users): disable password policy enforcement (admin opt-out) 2026-05-16 10:45:47 +02:00
debian fix(users): postinst also chowns auth.toml (ref #498) 2026-06-08 10:09:50 +02:00
menu.d feat(navbar): consolidate to 6 charter categories + fix dropped menu entries (closes #306) (#307) 2026-05-21 10:03:05 +02:00
nginx secubox-users v1.1.0: Enhanced unified identity management 2026-03-23 07:16:39 +01:00
sbin fix(auth+users): production-discovered bugs from live deploy on gk2 (ref #120) 2026-05-13 10:14:32 +02:00
schema feat(users): users.json v2 JSON Schema + validation tests (ref #120) 2026-05-13 08:37:03 +02:00
share feat(users): password_policy module + common-passwords seed (ref #120) 2026-05-13 08:40:17 +02:00
tests feat(auth): offline-mode hardening — server-side QR + NTP-aware TOTP window + /auth/health (ref #120) 2026-05-13 10:35:03 +02:00
www/users fix(web): rewrite stale /portal/login.html -> /login.html (closes #222) (#223) 2026-05-19 11:44:43 +02:00
README.md docs: Add Eye Remote Multigadget skill and wiki 2026-05-10 09:12:42 +02:00

README.md

👥 User Management

Unified identity management

Category: Access

Screenshot

User Management

Features

  • User CRUD
  • Groups
  • Service provisioning
  • RBAC

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-users

Configuration

Configuration file: /etc/secubox/users.toml

API Endpoints

  • GET /api/v1/users/status - Module status
  • GET /api/v1/users/health - Health check

License

MIT License - CyberMind © 2024-2026