Skip to content

Introduce NUT "authconf" file support [#3329]#3435

Open
jimklimov wants to merge 39 commits into
networkupstools:masterfrom
jimklimov:issue-3329
Open

Introduce NUT "authconf" file support [#3329]#3435
jimklimov wants to merge 39 commits into
networkupstools:masterfrom
jimklimov:issue-3329

Conversation

@jimklimov
Copy link
Copy Markdown
Member

@jimklimov jimklimov commented May 11, 2026

Starting with a PoC from AI, slightly modified (20%?) in review, following the spec requested in the GitHub issue #3329, as a stepping stone for further work.

Let CI loose on this iteration that passes locally...

TODO:

  • Stacking of config files as proposed in Feature request: more NUT clients should be SSL-capable with proper certificate trust and all #3329
  • Revise what data points we do want populated in upscli_authconf_t
  • libupsclient API (upscli_init variant?) to use upscli_authconf_t struct instances directly. Refactor older methods as wrappers to this one?
    • Consider a method that parses our collection from upscli_get_authconf_list() to upscli_add_host_cert() and set up the one most applicable set of client identity data for that [user@host:port] combo.
  • Add config-file permissions check for sensitive data, like in other cases (upsd.users etc.)
  • Add a conf/... sample and docs/man/... page for nutauth.conf concept

@jimklimov jimklimov added this to the 2.8.6 milestone May 11, 2026
@jimklimov jimklimov added enhancement SSL/NSS Issues and PRs about SSL, TLS and other crypto-related matters AI For good or bad, machine tools are upon us. Humans are still the responsible ones. labels May 11, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 11, 2026

A ZIP file with standard source tarball and another tarball with pre-built docs for commit d47d9df is temporarily available: NUT-tarballs-PR-3435.zip.

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4693-master completed (commit 049a4d4c36 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4694-master completed (commit c8f40b4384 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4696-master completed (commit 25660e3752 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4697-master completed (commit 9be8443368 by @jimklimov)

Comment thread clients/authconf.c Fixed
Comment thread clients/authconf.c Fixed
Comment thread tests/test_authconf.c Dismissed
Comment thread tests/test_authconf.c Dismissed
Comment thread tests/test_authconf.c Fixed
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

…nut.dict on some platforms when checking interactively

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

Comment thread clients/authconf.c Dismissed
Comment thread clients/authconf.c Fixed
Comment thread clients/authconf.c Fixed
jimklimov added 2 commits May 12, 2026 15:54
First PoC from AI, slightly modified in review, following the spec
requested in the GitHub issue. Stepping stone for further work.

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…libcommon" [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@jimklimov jimklimov force-pushed the issue-3329 branch 2 times, most recently from 73a7249 to ed6f549 Compare May 12, 2026 14:05
@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4700-master completed (commit 8a8a16fc63 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4701-master completed (commit 40e1ff94b4 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

jimklimov added 2 commits May 14, 2026 10:11
…man/Makefile.am: rename file/list/item/section methods consistently with their purpose [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…and upscli_merge_authconf_item() functions [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
Comment thread clients/authconf.c Dismissed
Comment thread clients/authconf.c Fixed
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

jimklimov added 4 commits May 14, 2026 17:46
…bal_defaults and zearch in empty list [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…tem(name) and upscli_add_authconf(node) [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…upscli_clone_authconf_item() and upscli_merge_authconf_item() functions vs. cloning of USER name [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…upscli_merge_authconf_item() function vs. cloning of empty strings [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
Comment thread clients/authconf.c Dismissed
jimklimov added 4 commits May 14, 2026 21:43
…s vs population of man pages [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…-merged items [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…or upscli_get_authconf_item() modification of the list [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…y optional debug messages [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4722-master completed (commit 44a858ba5e by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

jimklimov added 4 commits May 15, 2026 09:56
…s/man/nutauth.conf.txt: add CERTHOST field support [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…en we finish parsing a section, upscli_add_host_cert() if applicable [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…dd_host_port_cert() et al [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…HOST with a port number [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4726-master completed (commit 0949531845 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AI For good or bad, machine tools are upon us. Humans are still the responsible ones. enhancement SSL/NSS Issues and PRs about SSL, TLS and other crypto-related matters

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants