adam/steward
Watch
1
0
Fork
You've already forked steward
 0
Code Issues 1 Pull requests Projects Releases 8 Packages 2 Wiki Activity Actions
8 releases 8 tags
  • v0.2.0-rc.2 c7a64773a7

    Steward v0.2.0-rc.2 Pre-release

    adam released this 2026-10-22 18:58:57 +01:00 | -14 commits to main since this release

    Added

    • Failed logins in the journal. A failed login and a refused API
      token are logged as well as audited, with the address first
      (msg="login failed" ip=… user=…, msg="token refused" ip=…), for
      Guard's steward preset or a fail2ban filter to ban such addresses
      (docs/operations.md).

    • Allow and deny lists per subnet (docs/subnets.md): a deny-list
      subnet (the default) answers everyone not denied; an allow-list subnet
      only clients allowed or with a reservation. Entries are MAC addresses,
      prefixes (aa:bb:cc:*) or client IDs. A refused client gets no answer
      (DENIED in the activity log, with an Allow button), or a NAK when it
      next renews. steward access, the subnet's Access tab, access,
      allow and deny in the API.

    • Every option of a DHCP message, in words: ▸ on an Activity row,
      steward activity show N or --details, and GET /events/{id}. What
      the client asked for (its parameter request list, by name), its client
      ID and host name, and what Steward sent back.

    Upgrading from 0.1

    • The database gets a new version (7), applied when stewardd starts; a
      0.1 stewardd can't open it afterwards, so take a backup first (sudo stewardd backup). Every subnet stays a deny-list subnet with empty
      lists, so nothing changes until you add entries.
    Downloads