dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,076 Commits 3 Branches 0 Tags 75 MiB
3c1db04316
Commit Graph

927 Commits

Author SHA1 Message Date
Xavier Guimard
a746a440e6 perltidy 2010-03-01 10:45:04 +00:00
Clément Oudot
923e509226 SAML: split conditions validation between time and auience 2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d SAML: Manage logout redirection URL trough RelayState in SLO 2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7 SAML: 
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
 2010-02-28 19:07:02 +00:00
Xavier Guimard
4634d58f36 AuthTwitter works now 2010-02-27 22:37:59 +00:00
Xavier Guimard
ec35e6c397 Skeleton for AuthTwitter 2010-02-27 16:20:11 +00:00
Xavier Guimard
226a40d5f6 AuthOpenID is ready ! 2010-02-27 14:10:23 +00:00
Xavier Guimard
1043c1fb68 Unused test 2010-02-26 11:10:29 +00:00
Xavier Guimard
58c28c5732 * Inheritance instead of @EXPORT 
* Purge CGI::Session dependency (LA)
 2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f SAML: manage SOAP 2010-02-26 09:12:18 +00:00
Thomas CHEMINEAU
0c83394430 add a stuff to manage and display exported attributes of SAML metadata 2010-02-25 18:06:11 +00:00
Thomas CHEMINEAU
378ef72f93 fixe bug in displaying XML metadata 2010-02-25 16:01:52 +00:00
Clément Oudot
9c228f7022 SAML: Manage relayState trough session backend 2010-02-25 11:39:55 +00:00
Clément Oudot
cc79d3cfe9 SAML: use the last configuration format for IDP metadata 2010-02-24 17:48:20 +00:00
Thomas CHEMINEAU
5f0dded77e managing samlIDPMetaData node now working, and stored well formated data in configuration backend 2010-02-24 16:24:17 +00:00
Clément Oudot
9937568f97 SAML: manage SSO response trough Artifact 2010-02-24 15:24:54 +00:00
Clément Oudot
f0c29c779a SAML: 
* Manage SSO message like SLO message
* Send SLO request trough REDIRECT and POST
* Reponse to SSO request trough REDIRECT, POST and SOAP
* Reponse to SLO request trough REDIRECT, POST and SOAP
 2010-02-24 10:11:01 +00:00
Clément Oudot
38060929fb SAML: 
* Use new configuration keys
* sum up replay protection code
 2010-02-22 17:12:16 +00:00
Thomas CHEMINEAU
83c7e0ac43 little hack to have something to work with samlIDPMetaData, waiting to have the good solution 2010-02-22 16:41:53 +00:00
Thomas CHEMINEAU
5275040c63 typo of a template variable name into the manager 2010-02-22 15:41:34 +00:00
Thomas CHEMINEAU
1be263d129 defaut values for IDP metadatas informations 2010-02-22 15:35:16 +00:00
Thomas CHEMINEAU
abe78a5408 move metadatas structures of manager into to _Struct and try to generalize display layouts of metadatas in template 2010-02-22 14:38:31 +00:00
Clément Oudot
fc542fa6b1 Portal: method to auto submit data through POST 2010-02-22 11:07:48 +00:00
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Thomas CHEMINEAU
c2dc15ab6e store IDP values into samlIDPMetaDataXML and samlIDPMetaDataExportedAttributes, as what has been done with virtualhosts 2010-02-19 17:31:25 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML: 
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
 2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Thomas CHEMINEAU
0e2ab107e8 move nodes into structure of manager, so that saml nodes are directly under the root node 2010-02-17 17:07:15 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Thomas CHEMINEAU
cb62695193 introduce samlmetadata type into manager structure, to display metadata in XML 2010-02-17 14:52:05 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Thomas CHEMINEAU
dab4308998 adding missing types managed by manager 2010-02-17 11:23:34 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Thomas CHEMINEAU
1fb77eab8f introduce sub nodes into IDP nodes (test) 2010-02-16 17:21:38 +00:00
Thomas CHEMINEAU
5ac95df875 first functional step in managing SAML idp in the manager through jquery 2010-02-16 10:44:03 +00:00
Thomas CHEMINEAU
3107f0e44b some reindentations 2010-02-16 09:42:29 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Thomas CHEMINEAU
b89b108164 disallow user to modify SAML2 bindings string (fit XHTML standard) 2010-02-15 13:15:42 +00:00
Thomas CHEMINEAU
774d920c2f disallow user to modify SAML2 bindings string 2010-02-15 10:25:39 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML: 
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
 2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated 
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
 2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML: 
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
 2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata: 
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
 2010-02-08 15:27:20 +00:00
Clément Oudot
ffa005c974 Manager: adapt help message for SAML private key 2010-02-08 13:53:52 +00:00
Clément Oudot
bdef53f289 Preserve carriage returns and line feeds in configuration values 2010-02-08 12:20:37 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946 LDAP: 
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
 2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Thomas CHEMINEAU
d480616d06 move metadata configuration structure into manager 2010-02-05 10:20:16 +00:00
Thomas CHEMINEAU
5c3b3ebe8b remove unwanted debug code 2010-02-04 19:17:15 +00:00
Thomas CHEMINEAU
f1fa213487 manage default button in assertion panel 2010-02-04 19:02:59 +00:00
Thomas CHEMINEAU
61f8236140 now able to store SAML metadata in configuration 2010-02-04 16:41:58 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Thomas CHEMINEAU
67c7fb6d0a add tests and default values for SAML parameters 2010-02-04 10:08:27 +00:00
Thomas CHEMINEAU
c8dbf65789 refactoring structure of SAML service into manager 2010-02-04 09:28:51 +00:00
Clément Oudot
39db4807bb Manager: CSS for help messages 2010-02-03 17:12:45 +00:00
Clément Oudot
7f49d2d3ee Manager: 
* Add a textarea type
* Move samlServiceMetaData into saml node
* Add samlServicePrivateKey key
 2010-02-03 12:07:58 +00:00
Clément Oudot
a15fdcaaae SAML: 
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
 2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
a9abc60efd SAML: Force :md namespace prefix 2010-02-02 22:15:25 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML: 
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
 2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests 
* "= splice @_" instead of "= @_" avoid memory duplication
 2010-01-31 08:25:05 +00:00
Clément Oudot
c0ab13447c Manager: corrections for a good make test 2010-01-29 17:38:17 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Thomas CHEMINEAU
69899bce07 i18n for SAML keys into manager 2010-01-29 16:42:35 +00:00
Thomas CHEMINEAU
8a4b59d324 add a method to build a default configuration structure 2010-01-29 16:04:48 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Thomas CHEMINEAU
3744ce594f SAML metadata could not be in configuration, take care of that 2010-01-29 09:38:10 +00:00
Thomas CHEMINEAU
5b576643ee improve Metadata module to build hashref for Manager structure 2010-01-28 17:58:49 +00:00
Clément Oudot
cb71f77f4d Portal: move configuration documentation from script to ini file 2010-01-28 17:39:34 +00:00
Clément Oudot
90a08dbbde Portal/Multi: 
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
 2010-01-28 14:47:51 +00:00
Clément Oudot
48b97ed4d2 Portal: update MANIFEST 2010-01-28 10:39:58 +00:00
Clément Oudot
78b756571c Manager: resolve bug on help message language 2010-01-28 10:09:02 +00:00
Clément Oudot
760f62e534 Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user 2010-01-27 16:30:19 +00:00
Clément Oudot
b0749b8877 Manager: main dir value get from {DOCUMENT_ROOT} 2010-01-27 16:01:15 +00:00
Clément Oudot
34ed751578 Manager: remove unused newVh() parameter 2010-01-27 15:49:46 +00:00
Clément Oudot
42a4f62ca0 Manager: prompt virtual host name and use translated strings 2010-01-27 15:46:12 +00:00
Clément Oudot
fb221b35dd Manager: set default help message 2010-01-27 15:16:14 +00:00
Clément Oudot
37fe01a61b Manager: add portalForceAuthn option 2010-01-27 14:06:02 +00:00
Clément Oudot
b904587edd Portal: portalForceAuthn option was unusable with Menu password change 2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20 Portal: possibility to force reauthentication (set portalForceAuthn = 1) 2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6 Portal: allow passwordDBNull in Menu.pm 2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609 Portal: Null modules for authentication and passwordDB 2010-01-25 14:20:51 +00:00
Clément Oudot
86a92b5a32 Handler: add some CSS styles to status page 2010-01-25 10:55:07 +00:00
Xavier Guimard
b87c0a520b MANIFEST update + Makefile target 2010-01-23 12:48:18 +00:00
Clément Oudot
8a4e23f6a5 Manager: hide _password value in sessions explorer 2010-01-22 22:03:18 +00:00
Clément Oudot
95e29fd733 Portal: change _password value in session when user changes its password 2010-01-22 21:54:58 +00:00
Clément Oudot
dc1a90d356 Portal: use button instead anchor to harmonize CSS styles 2010-01-22 21:41:45 +00:00
Thomas CHEMINEAU
7abb65dbac Metadata object is now ready to be stored into LemonLDAP-NG configuration file 2010-01-22 17:38:10 +00:00
Thomas CHEMINEAU
1c4a1b19e7 Metadata object can now be rebuild from configuration data 2010-01-22 17:32:41 +00:00
Thomas CHEMINEAU
80de38cc11 Metadata READ now XML flow, and can be export to global configuration file 2010-01-22 16:32:57 +00:00
Clément Oudot
3fa08adfff Manager: add portal configuration parameters 2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897 Portal: 
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
 2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail: 
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
 2010-01-21 17:38:55 +00:00
Thomas CHEMINEAU
26db0f0d42 add perl class to load and manage metadata configuration XML file 2010-01-21 17:27:43 +00:00
Clément Oudot
4179148476 Portal: 
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
 2010-01-21 09:51:13 +00:00
Clément Oudot
81f510a6e5 Menu: 
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
 2010-01-20 17:17:21 +00:00
Clément Oudot
1285196c37 Configuration migration script: add help message 2010-01-20 13:53:21 +00:00
Clément Oudot
58453e0622 Configuration migration script: 
* perltidy
* Add verbose option
* Migrate apps-list.xml in .ini
* Use Conf constants
* Add comments
 2010-01-20 12:42:07 +00:00
Clément Oudot
15e77c7d88 Portal SOAP: 
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
 2010-01-19 16:50:38 +00:00
Clément Oudot
a5c89df613 Manager: 
* Add test rule for 'variables'
* Some tree.js bug correction enhancement
 2010-01-18 22:49:22 +00:00
Clément Oudot
55720e486b Manager: 
* Add a switch to choose menu style between Tree and Accordion, with choice persistence via cookie
* Set Accordion as the default menu style
 2010-01-18 16:04:46 +00:00
Thomas CHEMINEAU
bb7881bcec add a WSDL tag to isAuthorizedURI SOAP method 2010-01-18 15:39:01 +00:00
Thomas CHEMINEAU
03efa3fe99 update buildPortalWSDL to add isAuthorizedURI new method 2010-01-18 15:32:10 +00:00
Clément Oudot
ac3d483cf1 Manager: 
* Bug correction: folder was not opening anymore on empty ajax response
* Force folder opening when a new node is inserted
 2010-01-18 13:11:01 +00:00
Xavier Guimard
e677c40ae7 Syntax error 2010-01-17 08:58:00 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Clément Oudot
c700c462ef Handler: use cookie parameters with CDA cookies 2010-01-15 21:59:18 +00:00
Thomas CHEMINEAU
9fb358fa2d create 'variables' category in manager 2010-01-15 16:40:47 +00:00
Xavier Guimard
c25fc4177b Missing attributes in WSDL 2010-01-15 16:36:02 +00:00
Clément Oudot
ec5db79f94 Manager: use skin jquery file for sessions explorer 2010-01-13 14:09:32 +00:00
Xavier Guimard
40be40dbd9 More comments 2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609 Rewrite index.pl 2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270 PE_CONFIRM stop _Multi::try() 2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494 i18n update 2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8 Link to delete other sessions 2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00