dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,018 Commits 3 Branches 0 Tags 75 MiB
2afa512c2f
Commit Graph

368 Commits

Author SHA1 Message Date
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated 
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
 2010-02-11 08:44:57 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML: 
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
 2010-02-08 17:24:45 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Clément Oudot
3606362946 LDAP: 
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
 2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Clément Oudot
a15fdcaaae SAML: 
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
 2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML: 
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
 2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests 
* "= splice @_" instead of "= @_" avoid memory duplication
 2010-01-31 08:25:05 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Clément Oudot
90a08dbbde Portal/Multi: 
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
 2010-01-28 14:47:51 +00:00
Clément Oudot
760f62e534 Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user 2010-01-27 16:30:19 +00:00
Clément Oudot
b904587edd Portal: portalForceAuthn option was unusable with Menu password change 2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20 Portal: possibility to force reauthentication (set portalForceAuthn = 1) 2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6 Portal: allow passwordDBNull in Menu.pm 2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609 Portal: Null modules for authentication and passwordDB 2010-01-25 14:20:51 +00:00
Clément Oudot
95e29fd733 Portal: change _password value in session when user changes its password 2010-01-22 21:54:58 +00:00
Clément Oudot
3222021897 Portal: 
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
 2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail: 
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
 2010-01-21 17:38:55 +00:00
Clément Oudot
81f510a6e5 Menu: 
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
 2010-01-20 17:17:21 +00:00
Clément Oudot
15e77c7d88 Portal SOAP: 
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
 2010-01-19 16:50:38 +00:00
Thomas CHEMINEAU
bb7881bcec add a WSDL tag to isAuthorizedURI SOAP method 2010-01-18 15:39:01 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270 PE_CONFIRM stop _Multi::try() 2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494 i18n update 2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8 Link to delete other sessions 2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00
Xavier Guimard
d181da867b * perltidy 
* new feature : info can be displayed by portal => used to notify deleted sessions
 * notifyDeleted in the manager
 2010-01-11 16:04:36 +00:00
Clément Oudot
dc3d9558fe Portal: create a grantSession stage in process() 2010-01-11 14:02:43 +00:00
Clément Oudot
cad747f629 Menu: use configuration instead of XML file - work in progress 2010-01-08 11:51:04 +00:00
Thomas CHEMINEAU
72e0247f03 fixes #314372 - introduce isAuthorizedURI SOAP function 2010-01-07 11:07:48 +00:00
Xavier Guimard
8102f72d50 POD updates : 
* spelling errors found by Lintian
 * encoding utf8
 2010-01-03 08:09:59 +00:00
Clément Oudot
ee62c967b9 Reset password by mail for DBI backend 2009-12-30 19:42:17 +00:00
Xavier Guimard
23ee91c414 Modify _DBI::checkPassword to make it reuseable by another module than AuthDBI 2009-12-22 08:46:54 +00:00
Clément Oudot
0a618cda34 Refactor DBI code in _DBI.pm and SMTP code in _SMTP.pm 2009-12-21 22:28:38 +00:00
Xavier Guimard
4d47d92749 * Debian upgrade for jquery management 
* SQL injection protection for DBI
 * Regexp to control user field
 * Missing parameters in _Struct.pm
 * Bad errors management in Uploader
 2009-12-19 08:57:59 +00:00
Clément Oudot
a8601a0e5f portalOpenLinkInNewWindow parameter 2009-12-17 14:10:39 +00:00
Clément Oudot
5b82343808 Reorganize issuer methods in process() 2009-12-16 15:53:49 +00:00
Clément Oudot
578d0a0d59 Add in li classes to enable CSS icon customization in IE 6 2009-12-15 17:21:37 +00:00
Xavier Guimard
dcd4905342 * Update Perl and Debian dependencies, and debian/rules for the new manager 
* Add pod skeleton for Manager.pm
 * correct pod for IssuerDB*
 2009-12-13 15:40:33 +00:00
Xavier Guimard
5b2363b959 perltidy 2009-12-11 21:17:06 +00:00
Xavier Guimard
b301a5b5c8 New manager 2009-12-11 18:17:00 +00:00
Xavier Guimard
04ed7be634 exported vars are now asked to the LDAP server (instead of *) 2009-12-10 21:48:43 +00:00
Clément Oudot
5499a042ab Replace SAML* methods by IssuerDB* methods, allowing use of other IssuerDB modules 2009-12-10 17:03:57 +00:00
Clément Oudot
1f0b9ed10c First implementation of Auth/UserDB/PasswordDB DBI 2009-12-10 11:30:43 +00:00
Clément Oudot
3faa932908 New userDB module: UserDBEnv, allows to collect environment variable as session elements, very usefull with AuthSSL 2009-12-04 17:01:30 +00:00
Clément Oudot
65387caebe Do not use allowempty flag in Config::IniFiles (close bug #314539) 2009-12-04 09:44:37 +00:00
Clément Oudot
9d7e1a85c1 Move default values in setDefaultValues 2009-12-03 13:51:55 +00:00
Clément Oudot
36e8868e31 Add parameter cookieExpiration (close feature request #314368) 2009-12-03 11:47:50 +00:00
Xavier Guimard
061994cfcc Debian tests 2009-12-03 10:08:33 +00:00
Clément Oudot
0ea44c2389 Merge storage.conf and localconf.ini in lemonldap-ng.ini 2009-12-02 15:08:35 +00:00
Clément Oudot
70522969f3 Add possibility to use a local configuration file (localconf.ini) to override configuration parameters 2009-11-30 16:46:14 +00:00
Xavier Guimard
7d4a491af3 * Remove class variable in handler (to do later) 
* little bug in _LDAP
* new parameter singleUserByIp + removeOther() try to purge local cache
 2009-11-25 12:38:22 +00:00
Clément Oudot
b972c10a20 Use configuration parameters for portal customization 2009-11-25 08:44:12 +00:00
Clément Oudot
7d255abdef Move AuthCAS loading in authInit 2009-11-17 15:43:05 +00:00
Xavier Guimard
5f73c30706 Bug if trustedDomains contains more than 1 domain 2009-11-09 15:32:27 +00:00
Xavier Guimard
83e33a90ad perltidy and licence update 2009-11-07 13:05:50 +00:00
Thomas CHEMINEAU
e2d47ce982 fixe #314458 - add url parameter in URL of CAS portal redirection 2009-11-05 14:25:55 +00:00
Xavier Guimard
95424e487a * New manager in progress 
* Strange problem with Net::LDAP in mpm-worker environment (not fixed)
 * Clean lock files when using Apache::Session::File
 2009-10-30 17:27:36 +00:00
Xavier Guimard
7a04829a08 New portal parameters : singleIP and singleSession 2009-10-21 12:43:13 +00:00
Xavier Guimard
ec15f539b2 Perl warning 2009-10-18 08:52:12 +00:00
Xavier Guimard
655fd9e526 * perltidy 
* LDAP: loadPP() is called now directly in ldap() to avoid to call it in authInit()
 2009-10-12 16:55:35 +00:00
Xavier Guimard
bf488752b4 Documentation update 2009-10-12 15:03:29 +00:00
Xavier Guimard
def1d50780 Closes #314192 2009-10-11 11:28:25 +00:00
Xavier Guimard
041fcbe05a Closes #314369 2009-10-11 11:21:52 +00:00
Xavier Guimard
bf6230c5ac VERSION 0.9.4.1 2009-10-11 08:13:50 +00:00
Xavier Guimard
49cc593005 '*' for trustedDomains 2009-10-02 16:10:23 +00:00
Xavier Guimard
a8c75750cd Bug in _Multi.pm : eval { require $mod } means "search the file named $mod", but since $mod is a module name, we have to write eval "require $mod" 2009-09-30 10:59:02 +00:00
Xavier Guimard
112cf4c1e6 Rename "Relay" auth mechanism to "Proxy" and add test 2009-09-27 07:54:05 +00:00
Xavier Guimard
947ee7f7c6 Relay in progress... 2009-09-23 13:35:19 +00:00
Xavier Guimard
48ac5bd591 * New authentication scheme : Relay (queries by SOAP another portal) 
* syslog facility was not taken in account
* Missing HTTP::Headers dependency
* lmConfigEditor must not display reVHosts and cipher which are calculated by Conf.pm
* bad Apache security in Debian configuration files
 2009-09-23 12:42:34 +00:00
Xavier Guimard
444e093004 Bugs : 
* Crypto was usable only with 16xn characters
 * Menu was not able to filter embedded <application>
Google page speed :
 * optimize images
 * set size
 2009-08-20 14:19:40 +00:00
Xavier Guimard
bfebb497a1 Closes: #314163 : testUri() unusable 2009-08-20 14:15:16 +00:00
Xavier Guimard
771bf46a5f HTTP code 302 has to be replaced by 303 2009-08-18 13:33:36 +00:00
Clément Oudot
0a1c2c95b8 Bug CAS: redirect function was not valid 2009-07-21 13:52:10 +00:00
Xavier Guimard
6c7558cffd * Better performances for Menu : XML was parsed 2 times 
* Doc for SympaAutoLogin
* Version update
 2009-07-05 11:11:33 +00:00
Xavier Guimard
8965bd6119 * Menu update : application can contains application 
* update trunk from branch
 2009-07-01 08:52:14 +00:00
Clément Oudot
7bd70aec9e Do not use , as separator as it breaks DN 2009-06-25 07:51:39 +00:00
Xavier Guimard
affdc1f5bc SOAP configuration access : 
* Missing SOAP fonction for config access in Portal/_SOAP.pm (lastCfg)
* Common/Conf/SOAP.pm now reports SOAP errors
* Common/Conf.pm reports an error when lastCfg returns 0
* SOAP namespace error in Common/Conf/SOAP.pm

Other :
* error in logout_sso default value (Handler/Simple.pm)
* bad returned value when configuration was missing in Handler/SharedConf.pm
 2009-06-23 20:36:44 +00:00
Clément Oudot
f3536d4634 Bug in Webform: tests always returned PE_FORMEMPTY 2009-06-22 14:04:24 +00:00
Clément Oudot
198bcf70bc Get the timezone of the user and correct checkLogonHours function 2009-06-22 10:01:58 +00:00
Xavier Guimard
36c9aa2409 Change CDA parameter to cda. 2009-06-15 14:13:09 +00:00