mrcharles
35bd13de8b
glpi: REST auth recipe (app_token + encrypted-at-rest trap), SSO script known-issue
...
GLPI 11 encrypts api/app tokens at rest and decrypts before comparing;
the DB ciphertext never authenticates. Document the working
initSession?user_token+app_token recipe, per-user token minting via
GLPIKey, REST account provisioning, and the singlesignon plugin
callback breakage.
https://projects.knownelement.com/issues/947#note-5519
2026-09-09 22:43:28 -05:00
mrcharles
f7d54a30ae
incident-log: pwvault web-vault EncString crash case (2026-09-09)
...
Full symptom/root-cause/repair record for the InvalidTypeSymm
web-vault crash so it is never re-derived.
https://projects.knownelement.com/issues/942
2026-09-09 18:59:11 -05:00
mrcharles
5b6baa7ff7
SKILL: fleet-proven procedure — per-app SSO scripts, admin key minting, access restrictions, vault fallbacks
...
Absorbs the 2026-09-09 fleet-wide rollout learnings: per-app SSO entry
points and quirks (discourse /auth/oidc + CSRF + confirm, redmine
oauth_provider=1, gitea username normalization), Cloudron app
accessRestriction management, central admin-lever key minting for
gitea/redmine/discourse (GLPI deferred on #947 ), and the
setfield-verify-recreate seed-storage pattern.
https://projects.knownelement.com/issues/942
2026-09-09 15:02:25 -05:00
mrcharles
0076b4f941
docs: reachableceo wording sweep per 2026-09-09 direct order
...
House style: the principal identity is named (reachableceo), never
'the founder'. No behavior change.
https://projects.knownelement.com/issues/942
2026-09-09 12:43:23 -05:00
TSYS Group COO
1a1a7ca581
skills: cloudron.md records pointer
2026-09-08 06:03:06 -05:00
TSYS Group COO
bde7845490
skills: agent-provisioning - codified identity stand-up workflow
...
Policy rulings (#942 ): unique passwords, Cloudron-only SSO accounts,
no reachableceo credentials, TOTP seeds MUST be captured to the vault.
Cloudron admin API wrapper, cookie-jar OIDC login, RFC-6238-tested
TOTP helper, per-system SSO/API references, incident log.
2026-09-08 04:07:14 -05:00
mrcharles
TSYS Group COO