mastodon.gamedev.place is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server focused on game development and related topics.

Server stats:

5.1K
active users

#pam

1 post1 participant0 posts today

Just released: #swad 0.5

swad is the "Simple Web Authentication Daemon", meant to add authentication using a #cookie and a #login form to your reverse proxy. It's designed for #nginx' "auth_request" module. It's written in pure #C with very few external dependencies (zlib, and depending on build options OpenSSL/LibreSSL and #PAM).

And with this release, it also allows guest logins using the crypto puzzle you may already know from #Anubis!

Read more in the release notes, grab the .tar.xz and build/install it 😎

github.com/Zirias/swad/release

New features:

New credentials checker "pow", providing a guest login which requires
the browser to solve a cryptographic puzzle, see README.pow.md.
Overridable templates (also per realm) and globa...
GitHubRelease swad 0.5 · Zirias/swadNew features: New credentials checker "pow", providing a guest login which requires the browser to solve a cryptographic puzzle, see README.pow.md. Overridable templates (also per realm) and globa...

Just released: #swad v0.3!

github.com/Zirias/swad/release

swad is the "Simple Web Authentication Daemon", your tiny, efficient and (almost) dependency-free solution to add #cookie + login #form #authentication to whatever your #reverse #proxy offers. It's written in pure #C, portable across #POSIX platforms. It's designed with #nginx' 'auth_request' in mind, example configurations are included.

This release brings a file-based credential checker in addition to the already existing one using #PAM. Also lots of improvements, see details in the release notes.

I finally added complete build instructions to the README.md:

github.com/Zirias/swad

And there's more documentation available: manpages as well as a fully commented example configuration file.

Just released: #swad v0.2

SWAD is the "Simple Web Authentication Daemon", meant to add #cookie #authentication with a simple #login form and configurable credential checker modules to a reverse #proxy supporting to delegate authentication to a backend service, like e.g. #nginx' "auth_request". It's a very small piece of software written in pure #C with as little external dependencies as possible. It requires some #POSIX (or "almost POSIX", like #Linux, #FreeBSD, ...) environment, OpenSSL (or LibreSSL) for TLS and zlib for response compression.

Currently, the only credential checker module available offers #PAM authentication, more modules will come in later releases.

swad 0.2 brings a few bugfixes and improvements, especially helping with security by rate-limiting the creation of new sessions as well as failed login attempts. Read details and grab it here:

github.com/Zirias/swad/release

Continued thread

Trump has been nominating,
and the Senate has been confirming,
one pliant and obsequious instrument of the president’s pleasure after another.

This is nowhere more true than in appointments to the Department of Justice.

To understand Martin’s danger, it is important to understand how the department in which he would serve as a confirmed official has been operating in Trump 2.0.

At Attorney General #Pam #Bondi’s swearing-in ceremony, she pledged to
“not let [Trump] down”
and to “make [him] proud.”

In her introduction of President Trump before his speech in the Great Hall at the Justice Department,
she called Trump
“the greatest president in the history of our country”
and proclaimed that the department was
“so proud to work at [his] directive”
and would “never stop fighting for” Trump.

She has portrayed Justice Department attorneys as the president’s lawyers.

Bondi signaled fierce loyalty to Trump at her confirmation hearing but nonetheless pledged that,
“If confirmed, I will fight every day to restore confidence and integrity to the Department of Justice
and each of its components.

The partisanship, the weaponization, will be gone. America will have one tier of justice for all.”

🔥In office Bondi has done precisely the opposite
—aggressively so.

She has engaged in a range of politicizing actions,
including dropping the Eric Adams prosecution,
withdrawing charges against and pulling back from investigations of other Trump-allied current or former officials, halting prosecution of a Trump family crypto partner,
and firing or demoting career attorneys who worked on cases involving the president.

She established a “Weaponization Working Group”
that is going after the president’s perceived enemies
and must report on its progress to the White House quarterly.

(Martin is a member of the group.)

The weaponization group is implementing the president’s core philosophy:
“If they screw you, screw them back ten times as hard.”

The goal may be to eliminate future weaponization against Trump interests;
but the tactics are weaponization on a scale never before imagined.

At the same time, Bondi, the chief legal officer of the executive branch after Trump,
is stewarding the rule of law in a disastrous fashion.

She has facilitated the elimination of DOJ independence from the White House,
despite pledges to the contrary.

Her lawyers have been unprepared in court and shown courts unprecedented disrespect.

They have sought to defend the president’s plainly lawless extortionate actions against law firms,
among other lawless executive actions.

Bondi and her lawyers are not restoring confidence and integrity in the department
—they are weakening them.

Bondi had signaled a pro-Trump agenda during her confirmation process,
but now we know the scale on which she is using the department to do the president’s political and personal bidding.

The Senate’s enabling of these actions in confirming Bondi is the proper background to assess Martin’s nomination

Released: #swad v0.1 🥳

Looking for a simple way to add #authentication to your #nginx reverse proxy? Then swad *could* be for you!

swad is the "Simple Web Authentication Daemon", written in pure #C (+ #POSIX) with almost no external dependencies. #TLS support requires #OpenSSL (or #LibreSSL). It's designed to work with nginx' "auth_request" module and offers authentication using a #cookie and a login form.

Well, this is a first release and you can tell by the version number it isn't "complete" yet. Most notably, only one single credentials checker is implemented: #PAM. But as pam already allows pretty flexible configuration, I already consider this pretty useful 🙈

If you want to know more, read here:
github.com/Zirias/swad

GitHubGitHub - Zirias/swad: Simple Web Authentication DaemonSimple Web Authentication Daemon. Contribute to Zirias/swad development by creating an account on GitHub.
Replied in thread

First "production test" successful 💪 ... after band-aid "deployment" (IOW, scp binaries to the prod jail).

#swad integrates with #nginx exactly as I planned it. And #PAM authentication using a child process running as root also just works (while the main process dropped privileges). 🥳

So, I guess I can say goodbye to #AI #bots hammering my poor DSL connection just to download poudriere build logs.

Still a lot to do for #swad: Make it nicer. So many ideas. Best start would probably be to implement more credentials checking modules besides PAM.

Replied in thread

This, btw, was yet another reminder of the horrible can of worms #stdio's #buffering is.

I created a little tool running as a child process to do the *actual* #PAM authentication, so it will be possible to have this run as root while the real service drops all privileges. This little tool uses a simple line-based protocol for communication on stdin/stdout. It worked well when testing directly on the terminal.

On the first real test though, my service just went hanging. 🙄 I suspected a deadlock caused by pthread mutexes. Wasted quite some time looking into that. Then I finally realized communication over the pipes was stalled.

Ok, just set buffering mode to "line buffering" after fdopen'ing the #pipe. Turned out that didn't help either. I *assume* that even in the child process, the stdio streams automatically created on the pipes were somehow fully buffered. But at that point, I was really fed up with trial and error and rewrote the whole mess to do I/O using plain #POSIX APIs (read, write), sidestepping any buffering. Worked like a charm. 🙈

Continued thread

To bolster his efforts to control elections,
Trump has stacked the Department of Justice ( #DOJ ) with officials who have supported his baseless claims of rampant voter fraud in the 2020 presidential election
and who may have worked to overturn state election results on behalf of his campaign.

These include top officials like Attorney General #Pam #Bondi and FBI Director #Kash #Patel
— both of whom would not say who won the 2020 election during their confirmation hearings.

But it also includes those selected to lead offices that enforce federal laws protecting the right to vote.

Trump nominated #Harmeet #Dhillon, one of his loyal allies who has been involved in dozens of lawsuits challenging voting rights laws, redistricting and election processes,
to lead the Civil Rights Division.

Often referred to as the “crown jewel” of the DOJ, the division is core to protecting civil rights and liberties.

Dhillon has yet to be confirmed,
but the Civil Rights Division has already abruptly shifted away from defending voting rights.

So far, it’s dropped voting rights lawsuits against Texas, Virginia and Alabama.

It also retracted a previous request to participate in a lawsuit over unfair voting maps in Louisiana that’s set to be heard by the Supreme Court.

Weiner, the Brennan Center director, said that the country,
even in Trump’s first term,
never had a DOJ so readily turned into “the president’s personal law firm.”

“Which is just not what the DOJ is.
It’s just not what anyone has understood the DOJ to be,” Weiner said.

“But it is incredibly risky.”

In future elections, such officials may be more willing to not act if voting rights are threatened,
or could oppose efforts to protect voting rights.

They may also be more likely to pursue criminal investigations, and even prosecutions, against voters and election administrators over spurious allegations of fraud.

The US deported more than 250 mainly Venezuelan alleged gang members to El Salvador
👉 despite a US judge’s ruling to halt the flights on Saturday
after Donald Trump controversially invoked the "Alien Enemies Act",
a 1798 law meant only to be used in wartime.

El Salvador’s president, Nayib Bukele, said 238 members of the Venezuelan gang "Tren de Aragua" and 23 members of the Salvadoran gang "MS-13" had arrived and were in custody as part of a deal under which the US will pay the Central American country to hold them in its 40,000-person capacity “terrorism confinement centre”.

The confirmation came hours AFTER a US federal judge expanded his ruling temporarily blocking the Trump administration from invoking the "Alien Enemies Act",
a wartime authority that allows the president broad leeway on policy and executive action to speed up mass deportations.

The US district judge #James #Boasberg had attempted to halt the deportations for all individuals deemed eligible for removal under Trump’s proclamation, which was issued on Friday.
Boasberg also ordered deportation flights already in the air to return to the US.
❌“Oopsie … Too late,” Bukele posted online, followed by a laughing emoji.👹
Soon after Bukele’s statement, the US secretary of state, Marco Rubio, thanked El Salvador’s leader.

The Alien Enemies Act has only ever been used three times before,
most recently during the second world war, when it was used to incarcerate Germans and Italians as well as for the mass internment of Japanese-American civilians.

It was originally passed by Congress in preparation for what the US believed would be an impending war with France.

It was also used during the war of 1812 and during the first world war.

The US attorney general, #Pam #Bondi, slammed Judge Boasberg’s stay on deportations.
“This order disregards well-established authority regarding President Trump’s power, and it puts the public and law enforcement at risk,” Bondi said in a statement on Saturday night.

But lawyers for the American Civil Liberties Union contend that the Trump does not have the authority to use the law against a criminal gang, rather than a recognized state.

On Sunday, the Republican senator Mike Rounds questioned
💥whether the deportation flights had ignored Judge Boasberg’s order to turn around.

“We’ll find out whether or not that actually occurred or not,” Rounds told CNN.
“I don’t know about the timing on it. I do know that we will follow the law.”
theguardian.com/us-news/2025/m

The Guardian · US deports 250 alleged gang members to El Salvador despite court ruling to halt flightsBy Edward Helmore

Wait, does this pam module actually need to be C. I'm mean it's just passing stuff to a Unix socket, which could just be lightweight enough that Go and sshd will work. Doing full-blown http does get you a large bunch of goroutines. Also setting gomaxprocs might help? #pam #golang

#KaupanLiitto onnistuu koko ajan näyttämään huonommalta.

#Kryhmä on maailman kannattavin kauppaketju (ruokakaupassa). Myös #Sryhmä ja #Lidl Suomi nousevat maailman kärkeen kannattavuutta mitattaessa.

Niin, koska #ruokakauppa on Suomessa keskittynyt.

Maailman huipun kannattavuudesta huolimatta ovat #PAM:n #palkankorotus, #irtisanomissuoja ja #osaaikaiset aseman parantaminen peräämiset näille ylivoimaista.

HUH!

#KaupanAla #KaupanLakko #lakko #lakot #AYliike #työ

yle.fi/a/74-20144979

Yle Uutiset · Suomalaiset ruokakaupat ovat maailman kannattavimpia, sanoo asiaa tutkinut työelämäprofessoriKeskon ja S-ryhmän kannattavuus on ruokakaupassa maailman huippua. PAM ja Kaupan liitto ovat täysin eri mieltä siitä, onko se peruste nostaa palkkoja.