Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by plivesey: Get rid of `optionalFrom` lyft/mapper#83
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by johndpope: Enhancement - integrate with json2swift lyft/mapper#84
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] keith closed issue Enhancement - integrate with json2swift: lyft/mapper#84
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by darrarski: Additional parameters when creating object with map.from("key") lyft/mapper#93
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by rlam3: How to map and change to different type? lyft/mapper#95
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] keith closed issue How to map and change to different type?: lyft/mapper#95
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by rlam3: How to handle empty string to url transformations lyft/mapper#96
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] keith closed issue How to handle empty string to url transformations: lyft/mapper#96
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by ggitau: Glide and square image lyft/scissors#68
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by litso: DefaultConvertible causing issues for Doubles lyft/mapper#97
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by amardeshbd: Android ProGuard config for lyft scissors lyft/scissors#69
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by Arbaz75: Change View Port Size lyft/scissors#70
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] keith closed issue Get rid of `optionalFrom`: lyft/mapper#83
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by trevor-e: Question: Convertible vs Mappable lyft/mapper#103
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by trevor-e: Better support for deserializing to dictionaries lyft/mapper#104
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/mapper] new issue by jpstuehler: Handling of null values mapped to optional URL property lyft/mapper#105
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by vjgonzalez: Can I use scissors library to crop an image taken with my camera? lyft/scissors#72
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] vjgonzalez closed issue Can I use scissors library to crop an image taken with my camera? <question>: lyft/scissors#72
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by cheukho: How to use CropView with Fresco? lyft/scissors#75
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by ldiqual: GlideBitmapLoader.createUsing uses cropView size lyft/scissors#76
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] ldiqual closed issue GlideBitmapLoader.createUsing uses cropView size: lyft/scissors#76
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by ldiqual: GlideBitmapLoader.createUsing uses cropView's size while it might not be laid out lyft/scissors#77
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Guidelines over the image: lyft/scissors#13
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Add support for double tap drag to zoom: lyft/scissors#1
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Change View Port Size: lyft/scissors#70
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue How to use CropView with Fresco?: lyft/scissors#75
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Android ProGuard config for lyft scissors: lyft/scissors#69
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue White place if crop is max to right: lyft/scissors#60
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue does scissors require READ_EXTERNAL_STORAGE permission?: lyft/scissors#50
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Show grid view around cropped view: lyft/scissors#37
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue How can I make cropView's corners round ?: lyft/scissors#39
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Add callback to image loading?: lyft/scissors#23
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue Getting position and Current scale of the image: lyft/scissors#55
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] tildedave closed issue How can I get coordinates?: lyft/scissors#32
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by boomesh: Question: How come CropViewExtensions pickUsing Fragment, is not using the support fragment? lyft/scissors#78
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by middebugger: Is it possible to remove scaling ? lyft/scissors#79
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] middebugger closed issue Is it possible to remove scaling ?: lyft/scissors#79
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by pablojmuratore: Library fails loading images with Glide v4 and causes exception. lyft/scissors#80
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] artem-zinnatullin closed issue Library fails loading images when using Glide v4 and causes exception.: lyft/scissors#80
    lyftgitter
    @lyftgitter
    [wm-bot, irc.freenode.net] GitHub [lyft/scissors] new issue by mrgcl: Crop to File, cannot access CropViewExtensions lyft/scissors#85
    lyftgitter
    @lyftgitter
    [office.sys.vendhq.com/14.1.34.16, irc.freenode.net] Hello, I've recently discovered Lyft's python-bless client and kms-auth, and am excited to use them.
    [office.sys.vendhq.com/14.1.34.16, irc.freenode.net] I've got a question regarding creating users on the hosts you want to SSH to using SSH Certificates.
    [office.sys.vendhq.com/14.1.34.16, irc.freenode.net] There are a bunch of ways to synchronise users on hosts. But is it a good idea to generate the user on-the-fly? If the host trusts the CA, then it can trust the principals in the certificate. Could the host just create a user if it doesn't exist on first connect?
    Ryan Lane
    @ryan-lane
    hey IRC user (can't see your username)
    I'm not sure how I feel about auto-generating users... maybe it's fine, but the auditing of that could be kind of iffy
    we pre-generate and distribute nsscache files to hosts
    Jeremy Stott
    @stoggi
    Thanks @ryan-lane, that was my question :) We have since created a small utility to synchronise local users with an external directory on the hosts. I since discovered that automatically generating users on-the-fly is rather difficult if you're using OpenSSH. It checks for the user existing very early on in the authentication process, before calling any external modules.
    One way that was too hacky for me, was to tail the failed auth logs and create a user if the certificate checks out. So your very first SSH attempt would fail, but subsequent ones would work.
    Jeremy Stott
    @stoggi

    Hey @ryan-lane, bit of a late follow up, but I put together an interesting way of auto-provisioning users on hosts: https://gist.github.com/stoggi/5bb3fb8696346d3584ced1aada822e07

    As far as I know this is a new idea, so having more eyes checking it out would be much appreciated. There is more info in the gist above, but essentially it boils down to issuing two certificates to users: One for their user eg stoggi, and one for a user provision. The host starts with only one user, the provision user. At first, stoggi won't be able to SSH to the host, because their user doesn't exist, so they SSH with the provision certificate. This certificate has a force-command constraint set by the certificate authority, which is essentially sudo adduser stoggi. So all they can do is create themselves on the host and disconnect. Subsequent connections can now be with their own user. This avoids needing to synchronise nsscache files on hosts in advance, and with a backup SSH key, you could provision a new user completely offline should your directory be unavailable.

    Keen to get your thoughts!