dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,375 Commits 3 Branches 0 Tags 75 MiB
1dc1f926e4
Commit Graph

1206 Commits

Author SHA1 Message Date
Thomas CHEMINEAU
6bfdad2d0b SAML: manage logout into issuerForAuthUser 2010-04-20 15:31:21 +00:00
Thomas CHEMINEAU
005037df8c SAML: first implementation of SLO initiated by a SP 2010-04-20 10:04:34 +00:00
Clément Oudot
70a214b9e0 SAML: 
* Use Lasso method to get OneTimeUse flag
* Use Session _utime to calculate assertion NotOnOrAfter date
 2010-04-16 13:38:43 +00:00
Clément Oudot
95b28956fe SAML: add methods to disable signature verification (tests in progress) 2010-04-16 10:13:20 +00:00
Clément Oudot
a9cfdb9a64 SAML: mandatory attributes are now set in authentication response attribute statement 2010-04-16 08:55:56 +00:00
Clément Oudot
99b4c7fb72 SAML: attributes in authn response (work in progress) 2010-04-15 15:40:07 +00:00
Clément Oudot
4379adc014 SAML: reformate SP list to use EntityID as primary key 2010-04-15 14:42:17 +00:00
Clément Oudot
fbe50de653 * Better log of what is registered in session 
* Control whatToTrace parameter before logging into Apache
 2010-04-15 13:46:45 +00:00
Clément Oudot
656a1d7ff9 Use multiValuesSeparator in sessions explorer 2010-04-15 11:20:42 +00:00
Clément Oudot
d9c4b44c4b Add multiValuesSeparator configuration parameter 2010-04-15 11:15:36 +00:00
Clément Oudot
ebf2deae28 SAML: SSL authentication context is TLSClient and not X509 2010-04-15 09:06:53 +00:00
Clément Oudot
457430f2f7 SAML: map authenticationLevel and authn context 2010-04-14 16:22:55 +00:00
Xavier Guimard
799b643949 $ENV not taken in acount in macros 2010-04-14 16:13:24 +00:00
Clément Oudot
c4e1379452 * make tidy 
* Manage authenticationLevel in all authentication backends
 2010-04-14 15:37:57 +00:00
Clément Oudot
756ca82484 SAML: NameID generation (work in progress) 2010-04-14 11:14:24 +00:00
Thomas CHEMINEAU
19256b0aaa support JSON version 1 and 2 for Red Hat EL and Debian compatibilities 2010-04-13 16:43:32 +00:00
Clément Oudot
bc21f58b46 SAML: correct a bug when trying to update a newly created session (cookie not already set) 2010-04-12 15:42:38 +00:00
Clément Oudot
2406d832e9 SAML: manage Lasso session in artifacts 2010-04-12 15:03:54 +00:00
Clément Oudot
ea24dc314e Portal: updateSession can now take session id as parameter 2010-04-12 13:50:42 +00:00
Clément Oudot
ae66b57881 SAML: load and store Lasso Identity and Session 2010-04-12 13:23:22 +00:00
Clément Oudot
91e1419f57 SAML: artifact resolution response in SP and IDP 2010-04-12 09:09:53 +00:00
Clément Oudot
ce1e5840fb SAML: artifact response is now working 2010-04-12 08:26:18 +00:00
Clément Oudot
0ae2585a97 SAML: manage artifact (work in progess) 2010-04-09 16:42:50 +00:00
Clément Oudot
aa986aa337 purgeCentralCache: 
* Add debug option and debug message
* Manage SAML storage backend
* Read local configuration file
 2010-04-09 15:43:21 +00:00
Clément Oudot
7fef157210 SAML: possibility to configure a different storage for SAML objects (samlStorage) than sessions storage (globalStorage) 2010-04-09 13:27:54 +00:00
Clément Oudot
46808d3f78 SAML: manage artifact (work in progess) 2010-04-08 16:28:10 +00:00
Clément Oudot
9bb7adb3c3 SAML: catch artefact resolution URL 2010-04-08 11:03:53 +00:00
Clément Oudot
e34c8409b1 SAML: escape URL strings in regexp 2010-04-08 10:16:13 +00:00
Clément Oudot
fb9f964515 SAML: move use POSIX from AuthSAML to _SAML 2010-04-08 09:43:28 +00:00
Clément Oudot
cdaea23ac5 SAML: create methods to convert timestamp and SAML2 dates, and set all dates in assertion created by IDP 2010-04-08 09:39:53 +00:00
Clément Oudot
89bf4a6630 SAML: build assertion 2010-04-07 16:37:23 +00:00
Clément Oudot
ecf5612e4f SAML: 
* Build artifact or complete SSO reponse message
* Send SSO response message
* Correct a bug when loading relayState in POST fields
 2010-04-07 15:14:17 +00:00
Clément Oudot
f9e8ce7092 SAML: validate request message 2010-04-07 12:27:50 +00:00
Clément Oudot
7859ba292a SAML: trust hidden fields when they are present 2010-04-07 10:11:21 +00:00
Thomas CHEMINEAU
341f9f944f SAML: first work on issuerForAuthUser into IssuerDBSAML.pm 2010-04-02 16:19:10 +00:00
Thomas CHEMINEAU
0974c128ec SAML: fix a little bug 2010-04-02 15:34:44 +00:00
Thomas CHEMINEAU
7202a6651f SAML: manage hidden values for SAML authentication request 2010-04-02 15:28:29 +00:00
Clément Oudot
119386dca7 SAML: use checkMessage in AuthSAML 2010-04-02 14:47:17 +00:00
Thomas CHEMINEAU
16a5230e2e SAML: check if parameters are present or not when assigning values 2010-04-02 12:04:18 +00:00
Clément Oudot
e21b4c936a SAML: intercept artefact resolution URL in SP 2010-04-02 11:41:44 +00:00
Thomas CHEMINEAU
fa039d2114 Store hidden informations in forms 
* SAML: store SAMLRequest in IssuerDBSAML, just before to redirect to IDP
  * Simple: add functions to manage hidden values for forms
 2010-04-02 09:17:02 +00:00
Clément Oudot
62330e2d44 SAML: add ArtifactResolutionService in SP Metadata 2010-04-02 08:40:35 +00:00
Clément Oudot
83880118b3 SAML: change SP option 2010-04-02 08:12:59 +00:00
Clément Oudot
f87d6b9b3d SAML: IDP requestedAuthnContext option 2010-04-01 16:32:51 +00:00
Clément Oudot
a11caf800f SAML: IDP isPassive option 2010-04-01 14:40:29 +00:00
Clément Oudot
bb86139ce4 SAML: work on SSO/SLO signature options 2010-04-01 14:18:37 +00:00
Clément Oudot
3ff16331f3 Manager: display configuration datas on page load 2010-04-01 13:10:14 +00:00
Clément Oudot
6d505c9468 SAML: IDP option to validate SSO response signature -not working now 2010-04-01 12:51:32 +00:00
Clément Oudot
70f853e681 SAML: IDP option to sign SSO requests 2010-04-01 09:55:33 +00:00
Clément Oudot
7f91ef3c83 SAML: was set too late 2010-03-26 16:47:17 +00:00
Thomas CHEMINEAU
ba6bb76549 SAML: 
- Move part of the code into _SAML.pm so that it could be reused;
- Create the method checkMessage that check SAML requests and responses.
 2010-03-26 16:02:27 +00:00
Clément Oudot
408fe2a82d Manager: display config datas after success upload 2010-03-26 15:32:24 +00:00
Thomas CHEMINEAU
e7103c56c5 SAML: implementing issuerForUnAuthUser 2010-03-26 13:56:37 +00:00
Clément Oudot
48857dc62b SAML: encode metadata in UTF8 after XML export 2010-03-26 11:19:07 +00:00
Clément Oudot
07c528d6fd SAML: update POD 2010-03-26 09:35:31 +00:00
Clément Oudot
53d5212068 SAML: remove HTTP-GET binding since it is not supported by SAML2 (replaced by HTTP-REDIRECT) 2010-03-25 16:43:34 +00:00
Clément Oudot
a7bd4b0f78 Manager: little corrections 2010-03-25 16:36:30 +00:00
Clément Oudot
401ba8a857 Manager: 
* Correct IDP and SP delete functions
* Add select for NameIDFormat and Bindings
 2010-03-25 16:19:10 +00:00
Clément Oudot
9f68350124 Manager: add issuerDB parameter 2010-03-25 15:00:48 +00:00
Thomas CHEMINEAU
b67654d42d SAML: code to load SP metadata 2010-03-25 14:44:38 +00:00
Clément Oudot
3cd3050e9e SAML: add Service Providers node 2010-03-25 14:38:54 +00:00
Thomas CHEMINEAU
dec9d562d8 SAML: work in progress in IssuerDBSAML 2010-03-25 11:24:52 +00:00
Thomas CHEMINEAU
a3a80947bc SAML: move code that load SAML services and IDPs into _SAML 2010-03-25 11:01:32 +00:00
Clément Oudot
409ceb953c SAML: option to adapt session _utime with SessionNotOnOrAfter 2010-03-25 10:02:53 +00:00
Clément Oudot
bc7df7b3bc SAML: correct NAME POD section to prevent lintian warning 2010-03-25 08:55:42 +00:00
Clément Oudot
44f5d27b7a Prepare for 1.0rc1: 
* Update modules main version
* make tidy
* make manifest
* make documentation
 2010-03-24 22:06:43 +00:00
Thomas CHEMINEAU
3510863964 manager: little css enhancement on sessions manager 2010-03-24 17:28:06 +00:00
Thomas CHEMINEAU
969b905221 skin: continue to fix mail and notification templates in impact skin 2010-03-24 17:05:10 +00:00
Clément Oudot
bd9c9d13dc LDAP: change test for Net::LDAP minimal version for ppolicy feature 2010-03-24 15:53:55 +00:00
Clément Oudot
67124c6bff Manager: nice skin change feature 2010-03-24 14:56:38 +00:00
Clément Oudot
953806ed93 SAML: manage SessionNotOnOrAfter but do not adapt session _utime yet 2010-03-24 13:44:24 +00:00
Clément Oudot
aa5831493a SAML: add AllowLoginFromIDP option 2010-03-24 13:01:14 +00:00
Clément Oudot
5c26f07d27 SAML: proxy restriction was not working, now it is set in authn request conditions 2010-03-24 12:33:45 +00:00
Clément Oudot
bac76b680d LDAP: option to change the password as user (and not as managerDn) 2010-03-24 10:00:52 +00:00
Clément Oudot
857d421b1e Handler: correct Proxy bugs 2010-03-23 15:26:33 +00:00
Thomas CHEMINEAU
f4a724b0b9 make manifest on portal 2010-03-22 18:02:16 +00:00
Thomas CHEMINEAU
d434d9f2ec SAML: cleaning/hidding some unused parameters (bindings, index, protocol) 2010-03-22 17:47:59 +00:00
Clément Oudot
a99b604f1a Skin impact: add notification template 2010-03-22 17:02:59 +00:00
Clément Oudot
d3bea6dd47 Skin impact: add mail reset template 2010-03-22 16:59:10 +00:00
Clément Oudot
3c1db04316 Skin impact: logout was not working 2010-03-22 16:47:13 +00:00
Clément Oudot
8c655fe281 Skin impact: correct tab problem 2010-03-22 16:39:25 +00:00
Thomas CHEMINEAU
a09e94a76e skin: update impact portal skin (work in progress) 2010-03-22 16:22:58 +00:00
Thomas CHEMINEAU
42e11743db skin: update impact portal skin (work in progress) 2010-03-22 16:22:31 +00:00
Clément Oudot
4de567dddc Manager: apply configuration on upload success 2010-03-22 16:09:07 +00:00
Clément Oudot
3bb119108d Manager: better integration of sessions explorer 2010-03-22 11:32:28 +00:00
Thomas CHEMINEAU
a00a20eb60 skin: add confirm.tpl into impact portal skin 2010-03-22 10:50:28 +00:00
Thomas CHEMINEAU
b1575b552c Manager: fix CSS style into the HTML header of the sessions manager 2010-03-22 10:42:17 +00:00
Clément Oudot
3d7e43df5e Manager: help messages correction 2010-03-22 10:38:37 +00:00
Thomas CHEMINEAU
37773df261 add the html header into sessions manager 2010-03-22 10:08:39 +00:00
Thomas CHEMINEAU
067c96502f skins: update impact skin (missing confirm.tpl due to bad manipulation during upgrade from trunk) 2010-03-22 09:56:13 +00:00
Clément Oudot
1e6dc91fdb Manager: update some help messages 2010-03-21 12:00:04 +00:00
Xavier Guimard
9001e5f028 Just a "make tidy" 2010-03-20 17:14:28 +00:00
Clément Oudot
273abab2bb Manager: CSS on form elements 2010-03-19 10:01:23 +00:00
Clément Oudot
39809cae6e Manager: add DBI params 2010-03-18 21:46:38 +00:00
Thomas CHEMINEAU
713914c81b sessions manager: add header to switch between managers 2010-03-18 17:44:19 +00:00
Thomas CHEMINEAU
d9afdee0eb MANAGER: update some icons 2010-03-18 16:51:26 +00:00
Thomas CHEMINEAU
415cf5a167 MANAGER: 
- Generalize the select element
- Options in select area are displayed with their descriptions
- SecuredCookie parameter is displayed within the select element
 2010-03-18 15:22:10 +00:00
Thomas CHEMINEAU
3bf4c14d1c MANAGER: 
- Add icons to hide/show contents, boutons and help
- Help layer should now be auto hidden when there is no place to display it
 2010-03-18 14:08:34 +00:00
Thomas CHEMINEAU
44cb9657a8 SAML: Only samlIDPMetaDataXML element could be loaded from URL 2010-03-18 10:18:25 +00:00
Thomas CHEMINEAU
f05ed59e46 Online documentation indicates that the default passwordDB is LDAP 2010-03-17 15:50:44 +00:00
Thomas CHEMINEAU
8521c6e9f6 Global: 
- Modules for authentication, userdb and passworddb are now displayed in a select box;
- Multi authentication modules could be completed with options.
SAML:
- Default URL are now prebuild with portal URL.
 2010-03-17 15:45:53 +00:00
Thomas CHEMINEAU
0558b4b202 SAML: bindings are now displayed inside a select box 2010-03-17 13:16:55 +00:00
Thomas CHEMINEAU
428c8072d5 skins: update on impact portal skin 2010-03-17 10:46:20 +00:00
Thomas CHEMINEAU
f5d947e47f update portal MANIFEST 2010-03-17 09:48:34 +00:00
Thomas CHEMINEAU
53f83771a9 skins: make impact portal skin functionnal 2010-03-17 09:40:10 +00:00
Clément Oudot
8538f65d04 * Add customFunctions and port in Manager 
* Correct a bug in Handler for default values
 2010-03-17 08:23:20 +00:00
Clément Oudot
207116b21e Manager: add an apply button for each field type 2010-03-15 20:52:45 +00:00
Clément Oudot
96519790ab Manager: restore last changes... 2010-03-15 20:24:02 +00:00
Thomas CHEMINEAU
85054c3638 skins: add applications list into menu of impact portal skin 2010-03-15 18:26:32 +00:00
Thomas CHEMINEAU
95a6d98627 SAML: private and public keys are now displayed by the filearea form into the manager 2010-03-15 17:05:30 +00:00
Thomas CHEMINEAU
bcd6bb6d3a SAML: updates on LemonLDAP::NG::Common::Conf::SAML::Metadata 
- Add new dependency on use Crypt::OpenSSL::RSA;
- Public keys into exported metadata of lemonldap-ng is now well formed
 2010-03-15 16:59:13 +00:00
Clément Oudot
600ef4e614 Manager: Remote and Proxy parameters 2010-03-15 16:47:50 +00:00
Clément Oudot
0cd44258c3 Manager: join passwordDB to auth/userDB modules management 2010-03-15 15:49:51 +00:00
Clément Oudot
87c96539b9 Manager: CAS parameters 2010-03-15 15:23:03 +00:00
Clément Oudot
825c8d05f0 Manager: SSL parameters 2010-03-15 15:07:19 +00:00
Clément Oudot
8242602cd9 Manager: reorganize sessions parameters 2010-03-15 14:48:22 +00:00
Thomas CHEMINEAU
53d12684c7 filearea: filename is now asked to the user before saving it 2010-03-15 14:42:36 +00:00
Clément Oudot
8628817c86 Manager: add Twitter parameters 2010-03-15 13:47:36 +00:00
Thomas CHEMINEAU
07d64f8c82 skins: add menu.tpl in impact portal skin 2010-03-15 12:54:48 +00:00
Thomas CHEMINEAU
433b1f9180 SAML: fix bug when file or url is empty into metadata form 2010-03-15 12:11:11 +00:00
Thomas CHEMINEAU
23dd944f0d SAML: fix metadata downloads and updates from URL into manager 2010-03-15 11:21:12 +00:00
Clément Oudot
fa05c16e02 OpenID: warning message for IssuerDBOpenID use 2010-03-15 10:57:17 +00:00
Clément Oudot
d9f324b9f4 Set jquery classes after authParams reload 2010-03-15 10:47:18 +00:00
Clément Oudot
8de7259e01 Manager: add OpenID parameters 2010-03-15 10:44:44 +00:00
Clément Oudot
df64e375c2 OpenID: do not show form after logout 2010-03-15 10:44:16 +00:00
Clément Oudot
7692cefd95 Portal: all is ready for AuthOpenID 2010-03-15 09:53:56 +00:00
Thomas CHEMINEAU
4e79246c37 skins (impact): fix CSS bugs in login.tpl 2010-03-15 09:51:50 +00:00
Clément Oudot
2bccbdd4f4 Manager: add missing tests 2010-03-15 09:03:24 +00:00
Clément Oudot
45589a6e41 Manager: add and reorganize LDAP parameters 2010-03-14 21:45:49 +00:00
Xavier Guimard
dc20a3a99d Little fault in i18n 2010-03-14 19:06:41 +00:00
Clément Oudot
f52a6bebb2 Manager: add cda parameter 2010-03-14 14:38:39 +00:00
Clément Oudot
2afa512c2f Manager: add and reorganize parameters 2010-03-14 14:29:15 +00:00
Clément Oudot
01cb9f20ce Manager: get current vhost and IDP name to save vhost and IDP configuration 2010-03-14 13:36:20 +00:00
Clément Oudot
099c846d42 perltidy + manager bug with node created from special parent nodes 2010-03-13 17:39:50 +00:00
Clément Oudot
5a61c04a2d SAML: use correct IDP name in confirmation message 2010-03-13 16:49:33 +00:00
Clément Oudot
79376f4b44 Manager: 
* Change test for SAML attributes value
* Remove unused Apply button
* Use js to always display New Vhost or New Metadata on Vhost or IDP node
 2010-03-13 16:21:55 +00:00
Xavier Guimard
384ef05b2e Use " instead of ' in JSON: avoid some JSON errors on Firefox 2010-03-13 14:31:22 +00:00
Thomas CHEMINEAU
26a3241b96 SAML: work on metadata download link for client (update MANIFEST) 2010-03-12 17:54:40 +00:00
Thomas CHEMINEAU
e0843ccb98 SAML: work on metadata download link for client 2010-03-12 17:54:16 +00:00
Clément Oudot
f80620fae4 SAML: No need to force default nameIDFormat value 2010-03-12 16:19:41 +00:00
Clément Oudot
f7cb80321f SAML: no \r \n in metadata text content 2010-03-12 14:31:42 +00:00
Thomas CHEMINEAU
91e911a6df SAML: delete unused image 2010-03-12 14:09:05 +00:00
Clément Oudot
d8ef0bef30 Documentation for upgrade process 2010-03-12 13:49:41 +00:00
Thomas CHEMINEAU
a8865ee094 SAML: metadata could be now loaded through URL 2010-03-12 12:56:14 +00:00
Thomas CHEMINEAU
03fb551475 SAML: some style adjustement on the filearea form into the manager 2010-03-12 09:39:46 +00:00
Thomas CHEMINEAU
0c2fd9f063 SAML: metadata are now loaded from file given by the adminitrator (update manifest) 2010-03-12 09:18:23 +00:00
Thomas CHEMINEAU
f3d3851503 SAML: metadata are now loaded from file given by the adminitrator (add missing javascript library) 2010-03-12 09:16:27 +00:00
Thomas CHEMINEAU
073aeb74db SAML: file upload task is visible by a waiting image 2010-03-11 18:11:12 +00:00
Thomas CHEMINEAU
6807028824 SAML: file upload task is visible by a waiting image 2010-03-11 18:10:57 +00:00
Thomas CHEMINEAU
591cc277d5 SAML: metadata are now loaded from file given by the adminitrator 2010-03-11 16:43:21 +00:00
Clément Oudot
44aeddbc5c Bug with samlIDPMetaDataOptions upload and use make tidy 2010-03-11 15:00:59 +00:00
Clément Oudot
ce8d8ee84e SAML: correct a bug if no NameIDFormat were given 2010-03-11 12:00:25 +00:00
Clément Oudot
bf5c2616c3 Hanlder: remove ALL cookies and not just the first that match 2010-03-11 11:05:41 +00:00
Clément Oudot
3737e3f67f Handler: correct a bug with portal() 2010-03-10 10:44:25 +00:00
Clément Oudot
27cb64b247 Common: typo in test 01 2010-03-10 07:59:31 +00:00
Xavier Guimard
d439cab42e * Little CSS for abort() 
* Comments for lemonldap-ng.ini
* lemonldap-ng.ini was not well read in Manager
* New target 'unprotect' in rules
* Status update
 2010-03-09 21:42:31 +00:00
Thomas CHEMINEAU
5b77fa66b4 update information template into impact portal skin 2010-03-08 19:23:38 +00:00
Thomas CHEMINEAU
08e423a38d add info.tpl into impact portal skin 2010-03-08 18:57:49 +00:00
Clément Oudot
d9f2af49bf Set application list in ini file 2010-03-08 17:06:03 +00:00
Thomas CHEMINEAU
0a943ba5ff update manifest for impact portal skin 2010-03-07 23:41:39 +00:00
Thomas CHEMINEAU
35899de76c add icons into impact portal skin 2010-03-07 23:01:28 +00:00
Thomas CHEMINEAU
0262a3da23 add impact skin in MANIFEST 2010-03-07 21:55:27 +00:00
Thomas CHEMINEAU
5ce35adc2d portal skin: first work on impact skin 2010-03-07 21:54:02 +00:00
Clément Oudot
058ab93a15 SAML: manage HTTP method choice for SLO 2010-03-05 17:11:40 +00:00
Clément Oudot
ae4ff763df SAML: manage HTTP method choice for SSO 2010-03-05 16:57:11 +00:00
Clément Oudot
8564389fa7 SAML: manage IDP resolution rules 2010-03-05 15:37:16 +00:00
Clément Oudot
8d1793b7bc SAML: check OneTimeUse and Issuer (for proxy test) 2010-03-05 15:23:49 +00:00
Clément Oudot
c2b7c07dc1 SAML: use NameIDFormat option 2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28 SAML: use ForceAuthn option 2010-03-05 08:54:01 +00:00
Clément Oudot
e57cafaf15 Manager: IDP options are now fully described 2010-03-04 16:51:28 +00:00
Clément Oudot
cfd54cdf23 Manager: add subnode to store IDP options 2010-03-04 15:44:03 +00:00
Clément Oudot
75ed02bd4c Manager: 
* Correct bug for groups
* Do not transform " in ' for values (special chars already escaped in uri_escape)
* Add some debug messages in upload process
* Modify hashRoot js method
 2010-03-04 13:41:59 +00:00
Clément Oudot
71283e3596 SAML: attribute request in UserDBSAML 2010-03-03 16:54:23 +00:00
Clément Oudot
8a27aa0ec4 Manager: handle vhost buttons 2010-03-03 10:48:11 +00:00
Clément Oudot
c00345cfc6 Manager: handle SAML buttons 2010-03-03 10:26:42 +00:00
Clément Oudot
d5431376e4 Manager: correct a bug for SAML assertions 2010-03-03 09:57:23 +00:00
Xavier Guimard
40d2c70604 New target 'tidy' in Makefile 2010-03-01 20:32:28 +00:00
Clément Oudot
b5e2407728 SAML: get mandatory attributes - work in progress 2010-03-01 17:16:42 +00:00
Clément Oudot
13769b69f2 SAML: stop timer when choosing an IDP 2010-03-01 16:14:13 +00:00
Xavier Guimard
a746a440e6 perltidy 2010-03-01 10:45:04 +00:00
Clément Oudot
923e509226 SAML: split conditions validation between time and auience 2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d SAML: Manage logout redirection URL trough RelayState in SLO 2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7 SAML: 
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
 2010-02-28 19:07:02 +00:00
Xavier Guimard
4634d58f36 AuthTwitter works now 2010-02-27 22:37:59 +00:00
Xavier Guimard
ec35e6c397 Skeleton for AuthTwitter 2010-02-27 16:20:11 +00:00
Xavier Guimard
226a40d5f6 AuthOpenID is ready ! 2010-02-27 14:10:23 +00:00
Xavier Guimard
1043c1fb68 Unused test 2010-02-26 11:10:29 +00:00
Xavier Guimard
58c28c5732 * Inheritance instead of @EXPORT 
* Purge CGI::Session dependency (LA)
 2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f SAML: manage SOAP 2010-02-26 09:12:18 +00:00
Thomas CHEMINEAU
0c83394430 add a stuff to manage and display exported attributes of SAML metadata 2010-02-25 18:06:11 +00:00
Thomas CHEMINEAU
378ef72f93 fixe bug in displaying XML metadata 2010-02-25 16:01:52 +00:00
Clément Oudot
9c228f7022 SAML: Manage relayState trough session backend 2010-02-25 11:39:55 +00:00
Clément Oudot
cc79d3cfe9 SAML: use the last configuration format for IDP metadata 2010-02-24 17:48:20 +00:00
Thomas CHEMINEAU
5f0dded77e managing samlIDPMetaData node now working, and stored well formated data in configuration backend 2010-02-24 16:24:17 +00:00
Clément Oudot
9937568f97 SAML: manage SSO response trough Artifact 2010-02-24 15:24:54 +00:00
Clément Oudot
f0c29c779a SAML: 
* Manage SSO message like SLO message
* Send SLO request trough REDIRECT and POST
* Reponse to SSO request trough REDIRECT, POST and SOAP
* Reponse to SLO request trough REDIRECT, POST and SOAP
 2010-02-24 10:11:01 +00:00
Clément Oudot
38060929fb SAML: 
* Use new configuration keys
* sum up replay protection code
 2010-02-22 17:12:16 +00:00
Thomas CHEMINEAU
83c7e0ac43 little hack to have something to work with samlIDPMetaData, waiting to have the good solution 2010-02-22 16:41:53 +00:00
Thomas CHEMINEAU
5275040c63 typo of a template variable name into the manager 2010-02-22 15:41:34 +00:00
Thomas CHEMINEAU
1be263d129 defaut values for IDP metadatas informations 2010-02-22 15:35:16 +00:00
Thomas CHEMINEAU
abe78a5408 move metadatas structures of manager into to _Struct and try to generalize display layouts of metadatas in template 2010-02-22 14:38:31 +00:00
Clément Oudot
fc542fa6b1 Portal: method to auto submit data through POST 2010-02-22 11:07:48 +00:00
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Thomas CHEMINEAU
c2dc15ab6e store IDP values into samlIDPMetaDataXML and samlIDPMetaDataExportedAttributes, as what has been done with virtualhosts 2010-02-19 17:31:25 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML: 
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
 2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Thomas CHEMINEAU
0e2ab107e8 move nodes into structure of manager, so that saml nodes are directly under the root node 2010-02-17 17:07:15 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Thomas CHEMINEAU
cb62695193 introduce samlmetadata type into manager structure, to display metadata in XML 2010-02-17 14:52:05 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Thomas CHEMINEAU
dab4308998 adding missing types managed by manager 2010-02-17 11:23:34 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Thomas CHEMINEAU
1fb77eab8f introduce sub nodes into IDP nodes (test) 2010-02-16 17:21:38 +00:00
Thomas CHEMINEAU
5ac95df875 first functional step in managing SAML idp in the manager through jquery 2010-02-16 10:44:03 +00:00
Thomas CHEMINEAU
3107f0e44b some reindentations 2010-02-16 09:42:29 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Thomas CHEMINEAU
b89b108164 disallow user to modify SAML2 bindings string (fit XHTML standard) 2010-02-15 13:15:42 +00:00
Thomas CHEMINEAU
774d920c2f disallow user to modify SAML2 bindings string 2010-02-15 10:25:39 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML: 
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
 2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated 
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
 2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML: 
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
 2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata: 
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
 2010-02-08 15:27:20 +00:00
Clément Oudot
ffa005c974 Manager: adapt help message for SAML private key 2010-02-08 13:53:52 +00:00
Clément Oudot
bdef53f289 Preserve carriage returns and line feeds in configuration values 2010-02-08 12:20:37 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00