Skip to content

Introduce NUT "authconf" file support [#3329]#3435

Open
jimklimov wants to merge 20 commits into
networkupstools:masterfrom
jimklimov:issue-3329
Open

Introduce NUT "authconf" file support [#3329]#3435
jimklimov wants to merge 20 commits into
networkupstools:masterfrom
jimklimov:issue-3329

Conversation

@jimklimov
Copy link
Copy Markdown
Member

@jimklimov jimklimov commented May 11, 2026

Starting with a PoC from AI, slightly modified (20%?) in review, following the spec requested in the GitHub issue #3329, as a stepping stone for further work.

Let CI loose on this iteration that passes locally...

TODO:

  • Stacking of config files as proposed in Feature request: more NUT clients should be SSL-capable with proper certificate trust and all #3329
  • Revise what data points we do want populated in upscli_authconf_t
  • libupsclient API (upscli_init variant?) to use upscli_authconf_t struct instances directly. Refactor older methods as wrappers to this one?
    • Consider a method that parses our collection from upscli_get_authconf_list() to upscli_add_host_cert() and set up the one most applicable set of client identity data for that [user@host:port] combo.
  • Add config-file permissions check for sensitive data, like in other cases (upsd.users etc.)
  • Add a conf/... sample and docs/man/... page for nutauth.conf concept

@jimklimov jimklimov added this to the 2.8.6 milestone May 11, 2026
@jimklimov jimklimov added enhancement SSL/NSS Issues and PRs about SSL, TLS and other crypto-related matters AI For good or bad, machine tools are upon us. Humans are still the responsible ones. labels May 11, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 11, 2026

Preparing a ZIP file with standard source tarball and another tarball with pre-built docs for commit 83cc652 ...

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4693-master completed (commit 049a4d4c36 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4694-master completed (commit c8f40b4384 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4696-master completed (commit 25660e3752 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4697-master completed (commit 9be8443368 by @jimklimov)

Comment thread clients/authconf.c Fixed
Comment thread clients/authconf.c Dismissed
Comment thread tests/test_authconf.c Dismissed
Comment thread tests/test_authconf.c Dismissed
Comment thread tests/test_authconf.c Fixed
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

…nut.dict on some platforms when checking interactively

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

Comment thread clients/authconf.c Dismissed
Comment thread clients/authconf.c Fixed
Comment thread clients/authconf.c Fixed
jimklimov added 3 commits May 12, 2026 15:54
First PoC from AI, slightly modified in review, following the spec
requested in the GitHub issue. Stepping stone for further work.

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…libcommon" [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…st} methods with "for_debug" option [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@jimklimov jimklimov force-pushed the issue-3329 branch 2 times, most recently from 73a7249 to ed6f549 Compare May 12, 2026 14:05
@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4700-master completed (commit 8a8a16fc63 by @jimklimov)

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Build nut 2.8.5.4701-master completed (commit 40e1ff94b4 by @jimklimov)

jimklimov added 10 commits May 12, 2026 17:13
…ith upscli_split_auth_section() [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…e base [networkupstools#3359]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…nit_authconf() [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…ing for default nutauth.conf in user home or NUT_CONFPATH locations [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…uth configs [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…tignore: add example config for nutauth.conf [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…manpages, scripts/obs/nut.spec: know about nutauth.conf samples [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Comment thread clients/authconf.c Fixed
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

jimklimov added 4 commits May 12, 2026 23:25
…ring, try to resolve it in the system naming database [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…me [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
… parsing [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…auth_section_parts() which we can share and expose [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
jimklimov added 2 commits May 13, 2026 00:11
…lize_auth_section_parts) [networkupstools#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
…ls#3329]

Signed-off-by: Jim Klimov <jimklimov+nut@gmail.com>
@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

@AppVeyorBot
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AI For good or bad, machine tools are upon us. Humans are still the responsible ones. enhancement SSL/NSS Issues and PRs about SSL, TLS and other crypto-related matters

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants