Commit Graph

1074 Commits

Author SHA1 Message Date
Xavier Guimard
44a6e25851 Improve cryptographic functions (#1823) 2019-06-28 10:30:37 +02:00
Xavier
c8d38d52a6 Merge branch 'crypto-improvements' 2019-06-27 22:15:19 +02:00
Xavier
cbde82bdfc Fix HMAC verif 2019-06-27 22:12:57 +02:00
Xavier
1a1ccd7568 Merge branch 'crypto-improvements' 2019-06-27 22:03:05 +02:00
Xavier
2fcaf52bcf Better random string generation (#1803) 2019-06-27 21:59:18 +02:00
Christophe Maudoux
8ad895c3b8 Merge branch 'v2.0' into 1783 2019-06-27 21:11:56 +02:00
Xavier
b1f12b72e5 Add MAC verification to crypto 2019-06-27 20:48:01 +02:00
Xavier Guimard
cc8c5e057e Use IV for *cryptHex methods 2019-06-27 19:36:01 +02:00
Xavier Guimard
9d5d1f6cd5 Don't use Crypt::URandom inside jail: this import file access libraries 2019-06-27 19:10:51 +02:00
Xavier Guimard
0b1643c294 Add an initialization vector in crypt methods 2019-06-27 18:39:01 +02:00
Clément OUDOT
e53129568a Set some default values for lemonldap-ng-cli info (#1827) 2019-06-27 17:29:56 +02:00
Xavier Guimard
72439d341f Merge branch 'v2.0' 2019-06-27 07:59:37 +02:00
Xavier Guimard
45a0b68c3b Disable external entities in XML parsers (Fixes: #1818) 2019-06-26 11:32:10 +02:00
Christophe Maudoux
0b567d6c15 Merge branch 'v2.0' into 1783 2019-06-25 20:23:48 +02:00
Xavier Guimard
1b4600b15c Merge branch 'v2.0' 2019-06-25 17:14:00 +02:00
Xavier Guimard
390ccb4f5b Fix Apache::Session::REST::get_key_from_all_sessions when using CODE (#1813) 2019-06-25 09:48:15 +02:00
Xavier Guimard
93ccb9fd76 Set Content-Length in Apache::Session::REST requests (#1813) 2019-06-25 09:37:37 +02:00
Xavier Guimard
ddde26fa1c Add searchOn() in Apache::Session::REST (#1813) 2019-06-25 09:18:58 +02:00
Christophe Maudoux
266f2fdf02 Merge branch 'v2.0' into 1783 2019-06-24 23:36:54 +02:00
Xavier
c5d6bc42b6 Add get_key_from_all_sessions in Apache::Session::REST (#1813) 2019-06-24 23:07:34 +02:00
Xavier Guimard
2cb221b4e0 Set cache_depth to 3 in local config cache (Fixes: #1814) 2019-06-24 18:51:15 +02:00
Christophe Maudoux
831a988516 Append conf test (#1783) 2019-06-23 22:55:10 +02:00
Christophe Maudoux
6e029c413f Merge branch 'v2.0' into 1783 2019-06-23 10:19:13 +02:00
Xavier
9e16e2b75c Merge branch 'v2.0' 2019-06-23 07:21:55 +02:00
Christophe Maudoux
b69ffc0ff8 WIP - ContextSwitching (#1783) 2019-06-21 15:23:06 +02:00
Xavier
50ba6e6144 Install nginx* files for all handlers (Fixes: #1811) 2019-06-20 12:51:00 +02:00
Xavier
c325c55e5c Use only Crypt::URandom for session id (#1808) 2019-06-19 19:14:31 +02:00
Christophe Maudoux
a2ebaf31b1 WIP - AdminImpersonation skeleton (#1783) 2019-06-19 18:13:17 +02:00
Xavier
4a58de0b92 Apache::Session::Generate::SHA256 improvements (#1808) 2019-06-19 08:30:38 +02:00
Christophe Maudoux
9ac5834bfe Merge branch 'v2.0' 2019-06-17 22:42:28 +02:00
Christophe Maudoux
9fa11709e6 Append options to use Notifications plugin & set notification reference (#1796) 2019-06-17 22:31:44 +02:00
Christophe Maudoux
c3b3c281ad Hide _2fDevices with REST services 2019-06-16 20:33:34 +02:00
Christophe Maudoux
d6f3dd459a Display message (#1796) 2019-06-16 16:02:48 +02:00
Christophe Maudoux
f514da3c3a Hide _2fDevices with REST services 2019-06-15 22:38:21 +02:00
Xavier
d27e4bcc55 Merge branch 'v2.0' 2019-06-15 09:23:50 +02:00
Christophe Maudoux
fde6ff2cc8 WIP (#1796) 2019-06-14 23:09:32 +02:00
Xavier Guimard
e7bc7b3f4e Add restExportSecretKeys option (#1799) 2019-06-14 08:51:58 +02:00
Xavier
5dc5b88daa Permit to show $_password in REST session server (#1799) 2019-06-14 07:09:55 +02:00
Xavier
a2454ff4cc Merge branch 'v2.0' 2019-06-12 21:44:39 +02:00
Xavier Guimard
ee95ac786f Workaround for #1655 2019-06-12 09:55:06 +02:00
Christophe Maudoux
aabb65629b Merge remote-tracking branch 'origin/v2.0' 2019-06-10 21:07:42 +02:00
Christophe Maudoux
b71f678f80 Filter SSO groups to merge (#1791) 2019-06-08 22:08:58 +02:00
Christophe Maudoux
3015faef0e Share functions with Safe (#1717) 2019-06-07 11:26:07 +02:00
Xavier Guimard
ee661fc61d Merge branch 'v2.0' 2019-06-04 17:59:55 +02:00
Christophe Maudoux
132e57b4b3 Manage CORS headers (#1765) 2019-05-31 17:00:39 +02:00
Christophe Maudoux
59f6106ba6 Merge remote-tracking branch 'origin/v2.0' 2019-05-31 00:16:07 +02:00
Xavier
20ef62e4fb Add restore command to cli (#1770) 2019-05-30 10:18:41 +02:00
Xavier
4970787dd6 update doc 2019-05-30 09:48:43 +02:00
Xavier
a09e299b3d Rename dump command to save (#1770) 2019-05-30 09:43:28 +02:00
Xavier
00852d1a66 Add dump() command in cli
Closes: #1770
2019-05-30 09:39:36 +02:00
Xavier
f75093d433 Merge branch 'v2.0' 2019-05-28 22:12:50 +02:00
Xavier Guimard
8fd3f6be90 Merge branch 'issue1521-appmenu' into 'v2.0'
Preserve applicationList key names (#1521)

See merge request lemonldap-ng/lemonldap-ng!76
2019-05-28 22:10:53 +02:00
Xavier
db2ee96bc8 Update versions (#1777) 2019-05-28 22:04:45 +02:00
Xavier
acd6ba50e8 Fix some missing $req (#1777) 2019-05-28 19:52:08 +02:00
Maxime Besson
b12992755f Preserve applicationList key names (#1521)
Previously, every configuration save from the manager would overwrite
applicationList key names to preserve their ordering.

This commit introduces a new "order" key in the JSON config instead.
2019-05-28 15:38:26 +02:00
Xavier Guimard
2da63b7283 Fix bad cache management on configuration saving
Closes: #1754
2019-05-27 16:34:04 +02:00
Xavier Guimard
1509d44d5f Merge branch 'v2.0' 2019-05-27 12:03:45 +02:00
Christophe Maudoux
535ae3f7be Append ServiceToken TTL option (#1773) 2019-05-26 21:43:13 +02:00
Christophe Maudoux
73fd322e60 Update lemonldap-ng.ini (#1773) 2019-05-26 18:35:03 +02:00
Christophe Maudoux
74c5f50e89 Append option to modify ServiceToken TTL (#1773) 2019-05-26 18:24:08 +02:00
Xavier Guimard
4678649367 Merge branch 'v2.0' 2019-05-24 10:23:40 +02:00
Xavier
8c562c7817 Modularize Display/login (#1652) 2019-05-17 10:26:45 +02:00
Xavier Guimard
5a1c090a18 Merge branch 'v2.0' 2019-05-17 10:26:19 +02:00
Xavier
a2e78c88c3 Set versions 2019-05-16 20:42:31 +02:00
Maxime Besson
3a8b6da81a Add date and PID to default stderr logger
When using Apache or docker, the default Std logger does not write a
timestamp.

This format (poorly) imitates the error_log format so that LLNG messages
will stand out a little less in apache logs. And so that our docker
users can have timestamped messages
2019-05-16 17:39:20 +02:00
Maxime Besson
2f9c7b787e Change default syslog format to include [level]
The default configuration of syslog/journald in pretty much all
environments does not include the log level in the message

This means that it's hard to know which log messages are important and
which aren't at a glance, especially in `debug` level.

This commit should make debugging a lot easier by default.

Savvy users who need precise control on the syslog format should
probably use Log4Perl
2019-05-16 14:02:37 +02:00
Xavier Guimard
bdc68d5833 Merge branch 'v2.0' 2019-05-15 14:25:57 +02:00
Clément OUDOT
332fb4f9da Update version in module dependencies 2019-05-12 16:22:50 +02:00
Xavier
224307515f Merge branch 'v2.0' 2019-05-11 20:25:11 +02:00
Xavier
f3c4ea0afb Tydy 2019-05-11 20:18:43 +02:00
Xavier
000db1536b Update versions 2019-05-11 17:37:56 +02:00
Xavier
8897fd49b3 Don't filter on session_kind with REST (#1742)
Same to do with SOAP
2019-05-11 15:29:29 +02:00
Xavier
2351251c49 #1742 in progress... 2019-05-11 09:32:50 +02:00
Xavier Guimard
1cd50bb353 Fix Auth::Remote session kind (#1742) 2019-05-10 18:02:56 +02:00
Xavier Guimard
55eeb303a2 Verify session kind if given (#1742)
This breaks AuthRemote
2019-05-10 17:35:10 +02:00
Xavier
4ed5c282a2 Fix syntax error 2019-05-10 06:19:54 +02:00
Christophe Maudoux
e9b26bb79a Merge remote-tracking branch 'origin/master' into favapps 2019-04-30 21:57:46 +02:00
Xavier
29b71569de Merge branch 'v2.0' 2019-04-30 21:03:14 +02:00
Clément OUDOT
d388461909 Add PKCE option in Manager (#1722) 2019-04-29 17:35:23 +02:00
Clément OUDOT
8e6f678be7 Create a configuration option to allow a Relying Party to be a public client
Allow unauthenticated requests on OAuth2 token endoint

#1725
2019-04-29 10:02:16 +02:00
Maxime Besson
2f9e6aa623 Allow override of username attribute for CAS apps
Global CAS options allows the admistrator to set the session attribute
that gets exported to all CAS application as the main identifier
(cas:user)

This commit adds the ability to override this configuration for a
particular CAS application.

OIDC already allows this

Fixes #1713
2019-04-28 21:06:34 +02:00
Christophe Maudoux
aea313e2e6 Use activation rule (#1689) 2019-04-25 23:02:37 +02:00
Christophe Maudoux
7a2f104ba8 Build struct 2019-04-23 21:59:56 +02:00
Christophe Maudoux
8460e47b49 Merge remote-tracking branch 'origin/master' into favapps 2019-04-23 21:58:09 +02:00
Xavier
c968b39715 Merge branch 'v2.0' 2019-04-22 23:30:12 +02:00
Clément OUDOT
06a7c97fd8 Add OAuth2 vhostType (#1146) 2019-04-22 19:10:50 +02:00
Christophe Maudoux
48d51b1c5e Merge remote-tracking branch 'origin/master' into favapps 2019-04-21 22:34:31 +02:00
Christophe Maudoux
3491adbd3d Upgrade default authentication level (#1699) 2019-04-21 21:30:38 +02:00
Christophe Maudoux
3672d934d9 Set Viewer options by using rules (#1661) 2019-04-21 11:58:13 +02:00
Xavier
2f3f1bd99b Merge branch 'v2.0' 2019-04-17 20:25:04 +02:00
Xavier Guimard
d0e5be2797 Enable Finnish on portal 2019-04-17 17:58:55 +02:00
Xavier Guimard
69fdc95229 Enable german on portal 2019-04-17 17:56:28 +02:00
Xavier Guimard
889c1da46e Enable italian language in default install 2019-04-17 17:16:01 +02:00
Xavier Guimard
bd94c5579d Merge branch 'v2.0' 2019-04-16 13:39:31 +02:00
Xavier Guimard
5fd9e9d422 Fix boolean values for YAML
Closes: #1684
2019-04-15 11:44:11 +02:00
Christophe Maudoux
e490addd2d WIP - favApps skeleton (#1689) 2019-04-14 22:34:58 +02:00
Xavier
27bf1ea3d8 Merge branch 'v2.0' 2019-04-11 22:12:02 +02:00
maudoux
1d08372a8c Sort CAS servers & update langs (#1704) 2019-04-10 21:58:37 +02:00
Antoine ROSIER
f7b296b032 Sorting OIDc (#1704) 2019-04-10 17:06:41 +02:00
Antoine ROSIER
8636da45be Sorting SAML idp (#1704) 2019-04-10 17:06:41 +02:00
Clément OUDOT
ae3a728378 Manage template inclusion when file is not in configured portal theme (#1653) 2019-04-10 15:42:58 +02:00
Xavier
4d7a3b8a33 Merge branch 'v2.0' 2019-04-09 22:30:05 +02:00
Xavier
804a996810 Update versions 2019-04-09 22:04:19 +02:00
Xavier
046585020f Allow hashes in Combination module overload (Closes: #1707) 2019-04-09 21:01:55 +02:00
maudoux
02c473c919 Update ConfTree (#1699) 2019-04-05 22:39:58 +02:00
Xavier Guimard
01b5951b73 Merge branch 'v2.0' 2019-04-05 10:10:40 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
maudoux
5b67f1f743 Use rule to enable OTT (#1694) 2019-04-03 23:28:45 +02:00
maudoux
fe248d194d Typo 2019-04-03 22:13:53 +02:00
Xavier Guimard
ece9b21219 Remove trailing whitespaces 2019-04-03 14:15:16 +02:00
Xavier Guimard
141ba96c92 Update version 2019-04-03 13:53:56 +02:00
Xavier
4798683129 Merge branch 'v2.0' 2019-04-02 06:56:45 +02:00
maudoux
b7a826abfd Make json (#1661) 2019-04-01 14:57:41 +02:00
maudoux
b790949492 Update parameter name (#1661) 2019-04-01 14:52:23 +02:00
maudoux
b6162f5ae9 Hide secret keys in diff.html 2019-04-01 14:42:52 +02:00
Clément OUDOT
b21696185a Typo in error page HTML code 2019-04-01 10:46:26 +02:00
Xavier Guimard
b40f292d8a Merge branch 'v2.0' 2019-03-27 10:31:30 +01:00
Xavier
8144ef9132 Fix boolean display with YAML backend (Fixes: #1684) 2019-03-26 22:55:52 +01:00
Xavier Guimard
6a13b4f40d Update META.* 2019-03-26 09:18:04 +01:00
Xavier
3cea903c79 Merge branch 'v2.0' 2019-03-25 22:14:10 +01:00
Clément OUDOT
93ee1bcfa3 Keep LDAP parameters for AD in Choice/Combination (#1676) 2019-03-21 20:02:21 +01:00
Clément OUDOT
447c09c0a2 Remove old translation file (#1595) 2019-03-19 15:38:36 +01:00
Xavier
4fcf77e721 Merge branch 'v2.0' 2019-03-19 08:32:33 +01:00
Christophe Maudoux
d1ce6384b6 Fix default conf manager rule 2019-03-18 16:43:56 +01:00
Christophe Maudoux
e7f21b2c73 Append Viewer SPA (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
71fc765d01 WIP - Inherits Conf.pm (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
bfa7482a1f WIP - Hidden ConfTree PK (#1661) 2019-03-15 15:40:08 +01:00
Xavier Guimard
b7a78b500e Merge remote-tracking branch 'maxbes/proverc' into v2.0 2019-03-14 17:27:31 +01:00
Maxime Besson
7c16a2f7ad Exclude .proverc from manifests 2019-03-14 16:57:08 +01:00
Xavier Guimard
cd41efa378 Update META 2019-03-14 16:47:09 +01:00
Maxime Besson
f46260204c Provide configuration for manual launching of unit tests
This commit adds a .proverc configuration in lemonldap-* subdirectories

It allows you to run unit tests easily during development

    make clean && make
    cd lemonldap-ng-portal
    prove t/my-unit-test.t
    prove -v t/my-unit-test.t
    prove t/*.t

You'll get a nice colored output, plenty of details with '-v' (great is
you set logLevel to "debug" in the test), etc.
2019-03-14 16:38:40 +01:00
Xavier Guimard
8941ee4dd5 Merge branch 'v2.0' 2019-03-14 14:57:39 +01:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Christophe Maudoux
be28b60e66 Append identities rule (#1658) 2019-03-09 23:29:10 +01:00
Christophe Maudoux
09281f8d22 Append identities rule and fix error catching (#1664) 2019-03-08 11:39:19 +01:00
Xavier Guimard
77301e70ca Merge branch 'v2.0' 2019-03-07 22:29:34 +01:00
Xavier Guimard
bc2bef4ff4 Please use our .perltidyrc 2019-03-07 18:22:58 +01:00
Christophe Maudoux
a9fbec3f84 Revert - Allow figures in login (#1667) 2019-03-07 10:39:08 +01:00
Christophe Maudoux
a076459bdd Allow figures in login (#1667) 2019-03-07 09:00:24 +01:00
Christophe Maudoux
7b08a7c442 Rename idSpoofing plugin to Impersonation & all relative parameters (#1664) 2019-03-06 16:30:56 +01:00
Christophe Maudoux
e09c136302 Change fa icon color (#1664) 2019-03-05 15:07:54 +01:00
Xavier Guimard
a167a4b3ba Fix path 2019-03-05 10:43:28 +01:00
Maxime Besson
25d1c45fd4 Add new option to override EntityID when acting as IDP 2019-03-04 09:33:10 +01:00
Christophe Maudoux
228a37c0d2 WIP - Append parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
f9db9a0258 WIP - Append conf. parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
3bb7f6e664 WIP - Create session (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
1f5c7a83a9 Dispatching attributes (#1658) 2019-03-03 09:20:12 +01:00
Christophe Maudoux
81a37e5bcc Dispatching attributes (#1658) 2019-03-01 12:36:37 +01:00
Clément OUDOT
59d163c663 Merge branch 'v2.0' 2019-02-28 08:52:48 +01:00
Clément OUDOT
7ad2e0e694 Remove warning in unit tests (\!61) 2019-02-28 08:47:33 +01:00