dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,199 Commits 3 Branches 0 Tags 75 MiB
1ba9f9ecf1
Commit Graph

608 Commits

Author SHA1 Message Date
Thomas CHEMINEAU
a00a20eb60 skin: add confirm.tpl into impact portal skin 2010-03-22 10:50:28 +00:00
Thomas CHEMINEAU
067c96502f skins: update impact skin (missing confirm.tpl due to bad manipulation during upgrade from trunk) 2010-03-22 09:56:13 +00:00
Xavier Guimard
9001e5f028 Just a "make tidy" 2010-03-20 17:14:28 +00:00
Thomas CHEMINEAU
428c8072d5 skins: update on impact portal skin 2010-03-17 10:46:20 +00:00
Thomas CHEMINEAU
f5d947e47f update portal MANIFEST 2010-03-17 09:48:34 +00:00
Thomas CHEMINEAU
53f83771a9 skins: make impact portal skin functionnal 2010-03-17 09:40:10 +00:00
Thomas CHEMINEAU
85054c3638 skins: add applications list into menu of impact portal skin 2010-03-15 18:26:32 +00:00
Thomas CHEMINEAU
07d64f8c82 skins: add menu.tpl in impact portal skin 2010-03-15 12:54:48 +00:00
Clément Oudot
fa05c16e02 OpenID: warning message for IssuerDBOpenID use 2010-03-15 10:57:17 +00:00
Clément Oudot
df64e375c2 OpenID: do not show form after logout 2010-03-15 10:44:16 +00:00
Clément Oudot
7692cefd95 Portal: all is ready for AuthOpenID 2010-03-15 09:53:56 +00:00
Thomas CHEMINEAU
4e79246c37 skins (impact): fix CSS bugs in login.tpl 2010-03-15 09:51:50 +00:00
Clément Oudot
099c846d42 perltidy + manager bug with node created from special parent nodes 2010-03-13 17:39:50 +00:00
Clément Oudot
5a61c04a2d SAML: use correct IDP name in confirmation message 2010-03-13 16:49:33 +00:00
Clément Oudot
f80620fae4 SAML: No need to force default nameIDFormat value 2010-03-12 16:19:41 +00:00
Clément Oudot
f7cb80321f SAML: no \r \n in metadata text content 2010-03-12 14:31:42 +00:00
Clément Oudot
44aeddbc5c Bug with samlIDPMetaDataOptions upload and use make tidy 2010-03-11 15:00:59 +00:00
Clément Oudot
ce8d8ee84e SAML: correct a bug if no NameIDFormat were given 2010-03-11 12:00:25 +00:00
Xavier Guimard
d439cab42e * Little CSS for abort() 
* Comments for lemonldap-ng.ini
* lemonldap-ng.ini was not well read in Manager
* New target 'unprotect' in rules
* Status update
 2010-03-09 21:42:31 +00:00
Thomas CHEMINEAU
5b77fa66b4 update information template into impact portal skin 2010-03-08 19:23:38 +00:00
Thomas CHEMINEAU
08e423a38d add info.tpl into impact portal skin 2010-03-08 18:57:49 +00:00
Thomas CHEMINEAU
0a943ba5ff update manifest for impact portal skin 2010-03-07 23:41:39 +00:00
Thomas CHEMINEAU
35899de76c add icons into impact portal skin 2010-03-07 23:01:28 +00:00
Thomas CHEMINEAU
0262a3da23 add impact skin in MANIFEST 2010-03-07 21:55:27 +00:00
Thomas CHEMINEAU
5ce35adc2d portal skin: first work on impact skin 2010-03-07 21:54:02 +00:00
Clément Oudot
058ab93a15 SAML: manage HTTP method choice for SLO 2010-03-05 17:11:40 +00:00
Clément Oudot
ae4ff763df SAML: manage HTTP method choice for SSO 2010-03-05 16:57:11 +00:00
Clément Oudot
8564389fa7 SAML: manage IDP resolution rules 2010-03-05 15:37:16 +00:00
Clément Oudot
8d1793b7bc SAML: check OneTimeUse and Issuer (for proxy test) 2010-03-05 15:23:49 +00:00
Clément Oudot
c2b7c07dc1 SAML: use NameIDFormat option 2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28 SAML: use ForceAuthn option 2010-03-05 08:54:01 +00:00
Clément Oudot
71283e3596 SAML: attribute request in UserDBSAML 2010-03-03 16:54:23 +00:00
Xavier Guimard
40d2c70604 New target 'tidy' in Makefile 2010-03-01 20:32:28 +00:00
Clément Oudot
b5e2407728 SAML: get mandatory attributes - work in progress 2010-03-01 17:16:42 +00:00
Clément Oudot
13769b69f2 SAML: stop timer when choosing an IDP 2010-03-01 16:14:13 +00:00
Xavier Guimard
a746a440e6 perltidy 2010-03-01 10:45:04 +00:00
Clément Oudot
923e509226 SAML: split conditions validation between time and auience 2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d SAML: Manage logout redirection URL trough RelayState in SLO 2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7 SAML: 
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
 2010-02-28 19:07:02 +00:00
Xavier Guimard
4634d58f36 AuthTwitter works now 2010-02-27 22:37:59 +00:00
Xavier Guimard
ec35e6c397 Skeleton for AuthTwitter 2010-02-27 16:20:11 +00:00
Xavier Guimard
226a40d5f6 AuthOpenID is ready ! 2010-02-27 14:10:23 +00:00
Xavier Guimard
1043c1fb68 Unused test 2010-02-26 11:10:29 +00:00
Xavier Guimard
58c28c5732 * Inheritance instead of @EXPORT 
* Purge CGI::Session dependency (LA)
 2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f SAML: manage SOAP 2010-02-26 09:12:18 +00:00
Clément Oudot
9c228f7022 SAML: Manage relayState trough session backend 2010-02-25 11:39:55 +00:00
Clément Oudot
cc79d3cfe9 SAML: use the last configuration format for IDP metadata 2010-02-24 17:48:20 +00:00
Clément Oudot
9937568f97 SAML: manage SSO response trough Artifact 2010-02-24 15:24:54 +00:00
Clément Oudot
f0c29c779a SAML: 
* Manage SSO message like SLO message
* Send SLO request trough REDIRECT and POST
* Reponse to SSO request trough REDIRECT, POST and SOAP
* Reponse to SLO request trough REDIRECT, POST and SOAP
 2010-02-24 10:11:01 +00:00
Clément Oudot
38060929fb SAML: 
* Use new configuration keys
* sum up replay protection code
 2010-02-22 17:12:16 +00:00
Clément Oudot
fc542fa6b1 Portal: method to auto submit data through POST 2010-02-22 11:07:48 +00:00
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML: 
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
 2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML: 
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
 2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated 
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
 2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML: 
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
 2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata: 
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
 2010-02-08 15:27:20 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946 LDAP: 
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
 2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Clément Oudot
a15fdcaaae SAML: 
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
 2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML: 
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
 2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests 
* "= splice @_" instead of "= @_" avoid memory duplication
 2010-01-31 08:25:05 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Clément Oudot
cb71f77f4d Portal: move configuration documentation from script to ini file 2010-01-28 17:39:34 +00:00
Clément Oudot
90a08dbbde Portal/Multi: 
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
 2010-01-28 14:47:51 +00:00
Clément Oudot
48b97ed4d2 Portal: update MANIFEST 2010-01-28 10:39:58 +00:00
Clément Oudot
760f62e534 Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user 2010-01-27 16:30:19 +00:00
Clément Oudot
b904587edd Portal: portalForceAuthn option was unusable with Menu password change 2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20 Portal: possibility to force reauthentication (set portalForceAuthn = 1) 2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6 Portal: allow passwordDBNull in Menu.pm 2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609 Portal: Null modules for authentication and passwordDB 2010-01-25 14:20:51 +00:00
Xavier Guimard
b87c0a520b MANIFEST update + Makefile target 2010-01-23 12:48:18 +00:00
Clément Oudot
95e29fd733 Portal: change _password value in session when user changes its password 2010-01-22 21:54:58 +00:00
Clément Oudot
dc1a90d356 Portal: use button instead anchor to harmonize CSS styles 2010-01-22 21:41:45 +00:00
Clément Oudot
3fa08adfff Manager: add portal configuration parameters 2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897 Portal: 
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
 2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail: 
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
 2010-01-21 17:38:55 +00:00
Clément Oudot
4179148476 Portal: 
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
 2010-01-21 09:51:13 +00:00
Clément Oudot
81f510a6e5 Menu: 
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
 2010-01-20 17:17:21 +00:00
Clément Oudot
15e77c7d88 Portal SOAP: 
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
 2010-01-19 16:50:38 +00:00
Thomas CHEMINEAU
bb7881bcec add a WSDL tag to isAuthorizedURI SOAP method 2010-01-18 15:39:01 +00:00
Thomas CHEMINEAU
03efa3fe99 update buildPortalWSDL to add isAuthorizedURI new method 2010-01-18 15:32:10 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Xavier Guimard
40be40dbd9 More comments 2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609 Rewrite index.pl 2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270 PE_CONFIRM stop _Multi::try() 2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494 i18n update 2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8 Link to delete other sessions 2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00
Xavier Guimard
d181da867b * perltidy 
* new feature : info can be displayed by portal => used to notify deleted sessions
 * notifyDeleted in the manager
 2010-01-11 16:04:36 +00:00
Clément Oudot
dc3d9558fe Portal: create a grantSession stage in process() 2010-01-11 14:02:43 +00:00
Clément Oudot
cad747f629 Menu: use configuration instead of XML file - work in progress 2010-01-08 11:51:04 +00:00
Thomas CHEMINEAU
72e0247f03 fixes #314372 - introduce isAuthorizedURI SOAP function 2010-01-07 11:07:48 +00:00
Xavier Guimard
8102f72d50 POD updates : 
* spelling errors found by Lintian
 * encoding utf8
 2010-01-03 08:09:59 +00:00
Xavier Guimard
5a5d3872fd Update changelog 2009-12-31 13:35:34 +00:00
Clément Oudot
ee62c967b9 Reset password by mail for DBI backend 2009-12-30 19:42:17 +00:00
Xavier Guimard
11ed0e260f Little bug: deconnection was made on a new window 2009-12-28 17:01:21 +00:00
Xavier Guimard
23ee91c414 Modify _DBI::checkPassword to make it reuseable by another module than AuthDBI 2009-12-22 08:46:54 +00:00
Clément Oudot
0a618cda34 Refactor DBI code in _DBI.pm and SMTP code in _SMTP.pm 2009-12-21 22:28:38 +00:00
Xavier Guimard
4d47d92749 * Debian upgrade for jquery management 
* SQL injection protection for DBI
 * Regexp to control user field
 * Missing parameters in _Struct.pm
 * Bad errors management in Uploader
 2009-12-19 08:57:59 +00:00
Clément Oudot
a8601a0e5f portalOpenLinkInNewWindow parameter 2009-12-17 14:10:39 +00:00
Clément Oudot
c667608dac Portal::Error no more exists 2009-12-17 11:41:15 +00:00
Clément Oudot
5b82343808 Reorganize issuer methods in process() 2009-12-16 15:53:49 +00:00
Clément Oudot
578d0a0d59 Add in li classes to enable CSS icon customization in IE 6 2009-12-15 17:21:37 +00:00
Xavier Guimard
dcd4905342 * Update Perl and Debian dependencies, and debian/rules for the new manager 
* Add pod skeleton for Manager.pm
 * correct pod for IssuerDB*
 2009-12-13 15:40:33 +00:00
Xavier Guimard
5b2363b959 perltidy 2009-12-11 21:17:06 +00:00
Xavier Guimard
b301a5b5c8 New manager 2009-12-11 18:17:00 +00:00
Xavier Guimard
04ed7be634 exported vars are now asked to the LDAP server (instead of *) 2009-12-10 21:48:43 +00:00