Commit Graph

608 Commits

Author SHA1 Message Date
Clément Oudot
fc542fa6b1 Portal: method to auto submit data through POST 2010-02-22 11:07:48 +00:00
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML:
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML:
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML:
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata:
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
2010-02-08 15:27:20 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946 LDAP:
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Clément Oudot
a15fdcaaae SAML:
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML:
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests
* "= splice @_" instead of "= @_" avoid memory duplication
2010-01-31 08:25:05 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Clément Oudot
cb71f77f4d Portal: move configuration documentation from script to ini file 2010-01-28 17:39:34 +00:00
Clément Oudot
90a08dbbde Portal/Multi:
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
2010-01-28 14:47:51 +00:00
Clément Oudot
48b97ed4d2 Portal: update MANIFEST 2010-01-28 10:39:58 +00:00
Clément Oudot
760f62e534 Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user 2010-01-27 16:30:19 +00:00
Clément Oudot
b904587edd Portal: portalForceAuthn option was unusable with Menu password change 2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20 Portal: possibility to force reauthentication (set portalForceAuthn = 1) 2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6 Portal: allow passwordDBNull in Menu.pm 2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609 Portal: Null modules for authentication and passwordDB 2010-01-25 14:20:51 +00:00
Xavier Guimard
b87c0a520b MANIFEST update + Makefile target 2010-01-23 12:48:18 +00:00
Clément Oudot
95e29fd733 Portal: change _password value in session when user changes its password 2010-01-22 21:54:58 +00:00
Clément Oudot
dc1a90d356 Portal: use button instead anchor to harmonize CSS styles 2010-01-22 21:41:45 +00:00
Clément Oudot
3fa08adfff Manager: add portal configuration parameters 2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897 Portal:
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail:
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
2010-01-21 17:38:55 +00:00
Clément Oudot
4179148476 Portal:
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
2010-01-21 09:51:13 +00:00
Clément Oudot
81f510a6e5 Menu:
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
2010-01-20 17:17:21 +00:00
Clément Oudot
15e77c7d88 Portal SOAP:
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
2010-01-19 16:50:38 +00:00
Thomas CHEMINEAU
bb7881bcec add a WSDL tag to isAuthorizedURI SOAP method 2010-01-18 15:39:01 +00:00
Thomas CHEMINEAU
03efa3fe99 update buildPortalWSDL to add isAuthorizedURI new method 2010-01-18 15:32:10 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Xavier Guimard
40be40dbd9 More comments 2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609 Rewrite index.pl 2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270 PE_CONFIRM stop _Multi::try() 2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494 i18n update 2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8 Link to delete other sessions 2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00
Xavier Guimard
d181da867b * perltidy
* new feature : info can be displayed by portal => used to notify deleted sessions
 * notifyDeleted in the manager
2010-01-11 16:04:36 +00:00
Clément Oudot
dc3d9558fe Portal: create a grantSession stage in process() 2010-01-11 14:02:43 +00:00
Clément Oudot
cad747f629 Menu: use configuration instead of XML file - work in progress 2010-01-08 11:51:04 +00:00
Thomas CHEMINEAU
72e0247f03 fixes #314372 - introduce isAuthorizedURI SOAP function 2010-01-07 11:07:48 +00:00
Xavier Guimard
8102f72d50 POD updates :
* spelling errors found by Lintian
 * encoding utf8
2010-01-03 08:09:59 +00:00
Xavier Guimard
5a5d3872fd Update changelog 2009-12-31 13:35:34 +00:00
Clément Oudot
ee62c967b9 Reset password by mail for DBI backend 2009-12-30 19:42:17 +00:00
Xavier Guimard
11ed0e260f Little bug: deconnection was made on a new window 2009-12-28 17:01:21 +00:00
Xavier Guimard
23ee91c414 Modify _DBI::checkPassword to make it reuseable by another module than AuthDBI 2009-12-22 08:46:54 +00:00
Clément Oudot
0a618cda34 Refactor DBI code in _DBI.pm and SMTP code in _SMTP.pm 2009-12-21 22:28:38 +00:00
Xavier Guimard
4d47d92749 * Debian upgrade for jquery management
* SQL injection protection for DBI
 * Regexp to control user field
 * Missing parameters in _Struct.pm
 * Bad errors management in Uploader
2009-12-19 08:57:59 +00:00
Clément Oudot
a8601a0e5f portalOpenLinkInNewWindow parameter 2009-12-17 14:10:39 +00:00
Clément Oudot
c667608dac Portal::Error no more exists 2009-12-17 11:41:15 +00:00
Clément Oudot
5b82343808 Reorganize issuer methods in process() 2009-12-16 15:53:49 +00:00
Clément Oudot
578d0a0d59 Add in li classes to enable CSS icon customization in IE 6 2009-12-15 17:21:37 +00:00
Xavier Guimard
dcd4905342 * Update Perl and Debian dependencies, and debian/rules for the new manager
* Add pod skeleton for Manager.pm
 * correct pod for IssuerDB*
2009-12-13 15:40:33 +00:00
Xavier Guimard
5b2363b959 perltidy 2009-12-11 21:17:06 +00:00
Xavier Guimard
b301a5b5c8 New manager 2009-12-11 18:17:00 +00:00
Xavier Guimard
04ed7be634 exported vars are now asked to the LDAP server (instead of *) 2009-12-10 21:48:43 +00:00
Clément Oudot
5499a042ab Replace SAML* methods by IssuerDB* methods, allowing use of other IssuerDB modules 2009-12-10 17:03:57 +00:00
Clément Oudot
1f0b9ed10c First implementation of Auth/UserDB/PasswordDB DBI 2009-12-10 11:30:43 +00:00
Clément Oudot
ad1af9b081 Add test script for UserDBEnv 2009-12-07 11:36:03 +00:00
Clément Oudot
3faa932908 New userDB module: UserDBEnv, allows to collect environment variable as session elements, very usefull with AuthSSL 2009-12-04 17:01:30 +00:00
Clément Oudot
e6425fc7eb Do not display login form if there is an external authentication error 2009-12-04 15:12:40 +00:00
Clément Oudot
0cf5c8eec6 Apply patch for tabindex (close patch #314520) 2009-12-04 10:13:59 +00:00
Clément Oudot
f55416d58d Correct conf values in example files 2009-12-04 09:59:21 +00:00
Clément Oudot
65387caebe Do not use allowempty flag in Config::IniFiles (close bug #314539) 2009-12-04 09:44:37 +00:00
Clément Oudot
6a24eebcc7 Correct a bug if status is configured without localStorage, add a specific ErrorDocument for code 500 2009-12-03 15:45:13 +00:00
Clément Oudot
9d7e1a85c1 Move default values in setDefaultValues 2009-12-03 13:51:55 +00:00
Clément Oudot
36e8868e31 Add parameter cookieExpiration (close feature request #314368) 2009-12-03 11:47:50 +00:00
Xavier Guimard
061994cfcc Debian tests 2009-12-03 10:08:33 +00:00
Clément Oudot
0ea44c2389 Merge storage.conf and localconf.ini in lemonldap-ng.ini 2009-12-02 15:08:35 +00:00
Clément Oudot
70522969f3 Add possibility to use a local configuration file (localconf.ini) to override configuration parameters 2009-11-30 16:46:14 +00:00
Clément Oudot
ca905f3477 Update portal MANIFEST 2009-11-27 17:12:43 +00:00
Xavier Guimard
7d4a491af3 * Remove class variable in handler (to do later)
* little bug in _LDAP
* new parameter singleUserByIp + removeOther() try to purge local cache
2009-11-25 12:38:22 +00:00
Clément Oudot
b972c10a20 Use configuration parameters for portal customization 2009-11-25 08:44:12 +00:00
Clément Oudot
9ac349e458 Update to jQuery 1.3.2 (Closes: #314394) 2009-11-17 22:37:38 +00:00
Clément Oudot
7d255abdef Move AuthCAS loading in authInit 2009-11-17 15:43:05 +00:00
Xavier Guimard
5f73c30706 Bug if trustedDomains contains more than 1 domain 2009-11-09 15:32:27 +00:00
Xavier Guimard
6757b945ae svn:executable property 2009-11-08 18:47:09 +00:00
Xavier Guimard
83e33a90ad perltidy and licence update 2009-11-07 13:05:50 +00:00
Thomas CHEMINEAU
e2d47ce982 fixe #314458 - add url parameter in URL of CAS portal redirection 2009-11-05 14:25:55 +00:00
Xavier Guimard
95424e487a * New manager in progress
* Strange problem with Net::LDAP in mpm-worker environment (not fixed)
 * Clean lock files when using Apache::Session::File
2009-10-30 17:27:36 +00:00
Xavier Guimard
7a04829a08 New portal parameters : singleIP and singleSession 2009-10-21 12:43:13 +00:00
Xavier Guimard
ec15f539b2 Perl warning 2009-10-18 08:52:12 +00:00
Xavier Guimard
6f56bea189 Perl Author update 2009-10-17 08:16:14 +00:00
Xavier Guimard
b5dc7730f2 Perl dependencies update 2009-10-17 08:06:41 +00:00
Xavier Guimard
655fd9e526 * perltidy
* LDAP: loadPP() is called now directly in ldap() to avoid to call it in authInit()
2009-10-12 16:55:35 +00:00
Xavier Guimard
bf488752b4 Documentation update 2009-10-12 15:03:29 +00:00
Xavier Guimard
def1d50780 Closes #314192 2009-10-11 11:28:25 +00:00
Xavier Guimard
041fcbe05a Closes #314369 2009-10-11 11:21:52 +00:00
Xavier Guimard
bf6230c5ac VERSION 0.9.4.1 2009-10-11 08:13:50 +00:00
Xavier Guimard
49cc593005 '*' for trustedDomains 2009-10-02 16:10:23 +00:00
Xavier Guimard
a3341bab71 DISPLAY_RESETPASSWORD was not used 2009-10-01 12:49:42 +00:00
Xavier Guimard
a8c75750cd Bug in _Multi.pm : eval { require $mod } means "search the file named $mod", but since $mod is a module name, we have to write eval "require $mod" 2009-09-30 10:59:02 +00:00
Xavier Guimard
112cf4c1e6 Rename "Relay" auth mechanism to "Proxy" and add test 2009-09-27 07:54:05 +00:00
Xavier Guimard
947ee7f7c6 Relay in progress... 2009-09-23 13:35:19 +00:00
Xavier Guimard
48ac5bd591 * New authentication scheme : Relay (queries by SOAP another portal)
* syslog facility was not taken in account
* Missing HTTP::Headers dependency
* lmConfigEditor must not display reVHosts and cipher which are calculated by Conf.pm
* bad Apache security in Debian configuration files
2009-09-23 12:42:34 +00:00
Xavier Guimard
38d5fabc90 Update changelog + remove bad test for cpan tester 2009-09-15 14:12:03 +00:00
Xavier Guimard
444e093004 Bugs :
* Crypto was usable only with 16xn characters
 * Menu was not able to filter embedded <application>
Google page speed :
 * optimize images
 * set size
2009-08-20 14:19:40 +00:00
Xavier Guimard
bfebb497a1 Closes: #314163 : testUri() unusable 2009-08-20 14:15:16 +00:00
Xavier Guimard
771bf46a5f HTTP code 302 has to be replaced by 303 2009-08-18 13:33:36 +00:00
Clément Oudot
0a1c2c95b8 Bug CAS: redirect function was not valid 2009-07-21 13:52:10 +00:00
Clément Oudot
3fef4041bf Add , to avoid syntax errors when removing comments 2009-07-20 15:18:12 +00:00
Xavier Guimard
6c7558cffd * Better performances for Menu : XML was parsed 2 times
* Doc for SympaAutoLogin
* Version update
2009-07-05 11:11:33 +00:00
Xavier Guimard
8965bd6119 * Menu update : application can contains application
* update trunk from branch
2009-07-01 08:52:14 +00:00
Clément Oudot
2537e92fe0 Use confFile instead of File in configStorage examples 2009-06-29 11:29:52 +00:00
Xavier Guimard
e5f83c5ba0 * Perl documentation update
* Makefiles update
2009-06-29 10:12:29 +00:00
Xavier Guimard
bfed9a789c Documentation update 2009-06-29 09:42:44 +00:00
Clément Oudot
c113f7440e Force skin parameter for error template 2009-06-25 15:43:14 +00:00
Clément Oudot
7bd70aec9e Do not use , as separator as it breaks DN 2009-06-25 07:51:39 +00:00
Xavier Guimard
affdc1f5bc SOAP configuration access :
* Missing SOAP fonction for config access in Portal/_SOAP.pm (lastCfg)
* Common/Conf/SOAP.pm now reports SOAP errors
* Common/Conf.pm reports an error when lastCfg returns 0
* SOAP namespace error in Common/Conf/SOAP.pm

Other :
* error in logout_sso default value (Handler/Simple.pm)
* bad returned value when configuration was missing in Handler/SharedConf.pm
2009-06-23 20:36:44 +00:00
Clément Oudot
f3536d4634 Bug in Webform: tests always returned PE_FORMEMPTY 2009-06-22 14:04:24 +00:00
Clément Oudot
198bcf70bc Get the timezone of the user and correct checkLogonHours function 2009-06-22 10:01:58 +00:00
Xavier Guimard
36c9aa2409 Change CDA parameter to cda. 2009-06-15 14:13:09 +00:00
Xavier Guimard
7ab3ffa447 Documentation update 2009-06-14 20:58:42 +00:00
Xavier Guimard
0ac63904e7 * New parameter for XSS protection : trustedDomains
* parameters test to avoid warnings
* debian/control : missing dependencies
* perltidy
* tests update
2009-06-14 16:43:02 +00:00
Xavier Guimard
e55a4868d3 Beginning 0.9.4 publication works : version update 2009-06-08 16:29:13 +00:00
Clément Oudot
81950e0b52 Remove local groups from UserDBLDAP 2009-06-04 15:37:36 +00:00
Thomas CHEMINEAU
0df6ea67fa adding extended groups functionality 2009-06-04 15:33:53 +00:00
Clément Oudot
9a129352e8 Add HTML::Template to dependencies 2009-06-04 15:19:14 +00:00
Clément Oudot
f52b609d0e Correct errors seen in make test 2009-06-04 14:27:36 +00:00
Clément Oudot
8f423fd276 Move setGroups in UserDB 2009-06-04 09:13:03 +00:00
Clément Oudot
84c02a1c17 Mail customization (plain text only) with parameter mailBody 2009-06-03 16:40:41 +00:00
Clément Oudot
50e88a68a7 Manage X-FORWARDED-FOR with multiple IP 2009-06-03 14:52:22 +00:00
Xavier Guimard
5698b101db Missing files 2009-06-02 16:39:51 +00:00
Clément Oudot
aa2d48027f Use _user instead of uid for connected user 2009-06-02 15:46:26 +00:00
Clément Oudot
9d87ad8532 Use PasswordDBLDAP in Menu 2009-06-02 15:34:13 +00:00
Clément Oudot
56f7f8639a LEMONLDAP::NG : add dependencies 2009-05-29 10:18:38 +00:00
Clément Oudot
15dadc06d0 LEMONLDAP::NG: bugs found with make test 2009-05-29 09:53:07 +00:00
Clément Oudot
75c1f0feae LEMONLDAP::NG : Reset password by mail (new functionnality) 2009-05-28 16:31:39 +00:00
Clément Oudot
68975eaa40 LEMONLDAP::NG : correct some little bugs seen in 'make test' 2009-05-26 12:24:03 +00:00
Clément Oudot
d2edd78c44 LEMONLDAP::NG : reimport FederID theme 2009-05-26 11:04:56 +00:00
Clément Oudot
a38bd3e6c7 LEMONLDAP::NG :
* Create UserDBNull to use only Auth module
* Store submitted login (user field) in AuthSessionInfos
* Store password if needed in AuthRemote
2009-05-25 12:59:57 +00:00
Xavier Guimard
db4982564b Update portal manifest 2009-05-21 11:52:57 +00:00
Clément Oudot
43988469c7 LEMONLDAP::NG : Manage X-FORWARDED-FOR header for IP (close bug #312340) 2009-05-20 09:29:52 +00:00
Clément Oudot
0d9eaed6fc LEMONLDAP::NG :
* Correct XSS on user field
* Add "XSS attack detected" log messages
2009-05-19 08:52:27 +00:00
Clément Oudot
565ba83c05 LEMONLDAP::NG :
* Verify old password before modify
* Add the "PE_BADOLDPASSWORD" error
* Minor changes in pastel skin
* Erase old default skins
* Move icons to skins/common
2009-05-18 13:53:51 +00:00
Xavier Guimard
9ee1775253 Missing file in MANIFEST 2009-05-16 10:17:19 +00:00
Clément Oudot
cae5e6ed98 LemonLDAP::NG :
* Create PasswordDBLDAP
* Force password modification when password is reset with ppolicy
* new parameter ldapSetPassword: set to 1 if you want to use the LDAP extended operation rather than LDAP modify
* TODO: update HTML templates
2009-05-14 16:19:49 +00:00
Clément Oudot
0b43906ff4 LEMONLDAP::NG :
* Add AUTH_USER Template parameter
* Document ldapGroupBase in portal constructor
* Correct error call when testing password policy
2009-05-14 08:46:18 +00:00
Xavier Guimard
cb494c36d5 Logs as PerlLogHandler in handler and little things 2009-05-06 05:38:20 +00:00
Clément Oudot
eebac0ee3e LEMONLDAP::NG : checkLogonHours and checkDate in Safelib, and correct bug #313624 2009-04-21 13:24:38 +00:00
Xavier Guimard
7ac6d25eaf * NoCache option for getConf()
* sort problem + perltidy in Conf/LDAP
2009-04-18 07:04:07 +00:00
Xavier Guimard
051f61b288 Since CGI stores now parameters at the root of the object, param is now redefined in Common/CGI.pm to secure those parameters 2009-04-11 11:16:44 +00:00
Xavier Guimard
294e35cbeb Error with PPolicy + CleanupHandler not launched 2009-04-11 06:13:28 +00:00
Xavier Guimard
c40c13734e SAML skeleton in progress... 2009-04-08 16:31:13 +00:00
Xavier Guimard
3ad76f30b2 PPolicy management is now in _LDAP.pm instead of AuthLDAP to be reused by Menu.pm 2009-04-08 10:32:33 +00:00
Xavier Guimard
a98e3ac8bb SAML skeleton 2009-04-07 20:38:24 +00:00
Xavier Guimard
c35ea2d689 Password management 2009-04-07 09:27:23 +00:00
Xavier Guimard
e15d136398 LDAP_PP_CHANGE_AFTER_RESET was not intercepted with OpenLDAP since bind() is granted in this case. 2009-04-07 08:26:12 +00:00
Xavier Guimard
740ad09f9f Safelib + LDAPFilter parameter 2009-04-05 08:12:16 +00:00
Xavier Guimard
2f5af7de52 Documentation update 2009-04-04 15:29:38 +00:00
Xavier Guimard
73fa979c65 'CustomSOAPServices' target in portal 2009-04-04 07:36:42 +00:00
Xavier Guimard
8bc0d20afa * Portal can now been used as 'proxy' for SOAP session storage.
* Session explorer works now with SOAP session storage (very low performances)
2009-04-03 16:17:57 +00:00
Xavier Guimard
b0b971b241 Double session mechanism : 2 cookies are generated, 1 secured, the other not.
Handlers detects automatically the cookie to choose.
2009-03-31 10:52:43 +00:00
Xavier Guimard
e5e80709e6 Use Net::LDAP high availability system
%ENV was not shared
2009-03-08 17:37:31 +00:00
Xavier Guimard
2b6a1d94a5 Test for Multi module 2009-03-08 16:41:43 +00:00
Xavier Guimard
231f54ddf0 * New authentication and userDB module : 'Multi' to chain authentication modules.
* Compilation for ModPerl::Registry by default
2009-03-08 08:50:58 +00:00