RatticWeb

Build Status on netmarkjp/RatticWeb :

---

RatticWeb is the website part of the Rattic password management solution, which allows you to easily manage your users and passwords.

If you decide to use RatticWeb you should take the following into account:

• The webpage should be served over HTTPS only, apart from a redirect from normal HTTP.
• The filesystem in which the database is stored should be protected with encryption.
• The access logs should be protected.
• The machine which serves RatticWeb should be protected from access.
• Tools like OSSEC are your friend.

Support and Known Issues:

• Through twitter or Github Issues
• Apache config needs to have "WSGIPassAuthorization On" for the API keys to work

Dev Setup: https://github.com/tildaslash/RatticWeb/wiki/Development

---

Difference from original RatticWeb

• Drop Python 2.6 support => Only Python 2.7
• Update django to 1.11 and also update some modules.
• UserProfile: New fature RatticWeb can use as Two Factor Auth Device
  • Read QR Image, and show 6 numbers
  • Cannot share between users
• Credential: New fature RatticWeb can use as Two Factor Auth Device
  • Read QR Image, and show 6 numbers
  • Can share between users
• Credential: Change Cred.title max length 64 => 255

Note: When you use MySQL, python manage.py migrate auth must run before python manage.py migrate

Supported QR Image format

It depends on PIL(Pillow).

If you support JPEG, you may have to install libjpeg-devel before pip install .

CentOS7 example:

sudo yum install libjpeg-turbo-devel

How to use with MySQL

Do migrate auth before migrate .

$ mysql -u root -h 127.0.0.1 -P 3306 -e 'create database rattic character set utf8 collate utf8_unicode_ci;'
$ python manage.py makemigrations account cred help ratticweb staff
$ python manage.py migrate auth
$ python manage.py migrate
$ python manage.py createsuperuser --username rattic --email rattic@example.com

Special setup topics on MacOSX

Segmentation fault will occure caused by zbar.

To avoid problem, use npinchot/zbar .

pip uninstall zbar
pip install git+https://github.com/npinchot/zbar.git

Major changes

Django 1.6 to 1.8

• forget the details... many changes.

Django 1.8 to 1.11

• django-social-auth => social-auth-app-django
  • do test
• remove south
  • django-database-files => django-database-files-3000
• django.core.context_processors => django.template.context_processors
• remove {% load url from future %}
• remove django.utils.unittest, use django.test.utils
• remove django.conf.urls.patterns
• regurate url/namespace/name mappings.
  • social login url namespace has changed. moved to /account/...
• apply django.utils.safestring.mark_safe to renderd markdown, icons (custom tag)
• remove test_initial_password in account/tests/test_{profile,middleware}.py
  • when set_unusable_password called, user looks logout?
  • I cannot find the scenario to use this testcase