5 Commits

Author	SHA1	Message	Date
Dave Kempe	76c93bc502	Add multi-hop SSH tunnels, VNC sessions, and web session tunnel support ... Multi-hop SSH tunnel chains allow routing any session type through multiple bastion hosts. VNC is now a first-class session type. Web browser sessions can tunnel through jump hosts with automatic URL rewriting. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-11 08:22:34 +11:00
Dave Kempe	d07d79c4f2	Add Kerberos NLA support for RDP and credential prompting ... - Patch guacd with Kerberos NLA support (002-kerberos-nla.patch), based on upstream GUACAMOLE-2057 PR #581, adapted for FreeRDP 3.x - Add per-entry auth_pkg, kdc_url, and prompt_credentials settings to the address book (configurable in admin UI) - Frontend credential prompt for entries without stored credentials or with prompt_credentials enabled (never stored, session-only) - Wire auth-pkg, kdc-url, kerberos-cache params through rustguac to the guacd RDP handshake - Comprehensive Kerberos NLA docs: krb5.conf setup, KDC discovery options, FQDN requirements, troubleshooting guide Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 10:39:18 +11:00
Dave Kempe	466ffd2d44	Upgrade openidconnect v3 -> v4, remove JumpCloud references ... - openidconnect 3.5.0 -> 4.0.1 (oauth2 4 -> 5) - Eliminates duplicate reqwest/hyper/http dependency chains - 386 -> 355 crate dependencies - Resolves rustls-pemfile 1.0.4 unmaintained warning - HTTP client now uses stateful reqwest::Client (no-redirect policy) - exchange_code returns Result for EndpointMaybeSet token URLs - Remove JumpCloud from provider examples, prefer Authentik Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-07 10:39:24 +11:00
Dave Kempe	292db1fa55	Update OIDC docs to prefer Authentik, add setup guide ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-07 09:52:23 +11:00
Dave Kempe	67101e27ce	Initial public release ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-06 14:38:53 +11:00