Skip to content

0.1.0

Choose a tag to compare

@dmulder dmulder released this 14 Sep 17:01
· 2050 commits to main since this release
6cde780

First stable release.

This version supports MFA authentication via the DeviceAuthorizationGrant flow.
Himmelblau uses hardware TPM for offline password hash caching.
Communication to Entra ID is performed using Microsoft's stable Python MSAL library. All other code is written in Rust.
Himmelblau utilizes systemd DynamicUser, so the himmelblaud daemon is sandboxed without root access.
The pam_allow_groups config entry restricts authentication strictly to authorized users or groups.