Commit Graph

435 Commits

Author SHA1 Message Date
Xavier Guimard
e4a7734f23 LEMONLDAP::NG : dependencies 2008-12-25 08:21:30 +00:00
Xavier Guimard
03fda7186f LEMONLDAP::NG : little change 2008-12-25 08:06:21 +00:00
Xavier Guimard
0d8ab5ea2b LEMONLDAP::NG : Perl module versions update for CPAN export 2008-12-25 08:04:33 +00:00
Xavier Guimard
78852ac337 LEMONLDAP::NG perltidy 2008-12-24 14:57:23 +00:00
Xavier Guimard
13cdc9b8ec LEMONLDAP::NG : XSS patch not compatible with logout system 2008-12-24 14:55:44 +00:00
Xavier Guimard
44cc396a83 LEMONLDAP::NG : Few things... 2008-12-24 14:35:49 +00:00
Xavier Guimard
9f22962f03 LEMONLDAP::NG : Status test failed 2008-12-24 14:22:02 +00:00
Xavier Guimard
b96cad7a18 LEMONLDAP::NG : Status has been broken by new storage.conf capability 2008-12-24 09:55:09 +00:00
Xavier Guimard
2449e92c2d LEMONLDAP::NG : A site in the protected domain is accepted in $portal->{urldc} even if the site is not declared in the manager 2008-12-24 09:12:53 +00:00
Xavier Guimard
8e6c8de591 LEMONLDAP::NG : I think version 0.9.3 is ready... 2008-12-24 08:32:11 +00:00
Xavier Guimard
aeefee4ec4 LEMONLDAP::NG : Debian installation in progress 2008-12-24 07:22:42 +00:00
Xavier Guimard
5ba1178057 LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now. 2008-12-22 17:49:36 +00:00
Xavier Guimard
cb9c75eb79 LEMONLDAP::NG : typo 2008-12-19 18:02:03 +00:00
Clément Oudot
d28f3036e3 LEMONLDAP::NG : Add icons in input fields 2008-12-18 16:08:03 +00:00
Xavier Guimard
c9adec5db5 LEMONLDAP::NG : Little problem in average count. The current minute has not to be taken in account. 2008-12-18 11:18:41 +00:00
Xavier Guimard
8b0058e546 LEMONLDAP::NG : little bug in Proxy.pm and debconf dependency 2008-12-13 17:12:14 +00:00
Xavier Guimard
cc07eae107 LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules 2008-12-11 17:02:02 +00:00
Xavier Guimard
a77e385730 LEMONLDAP::NG : little bug in SOAP error() 2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa LEMONLDAP::NG : error display in SOAP 2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4 LEMONLDAP::NG : now the portal can be called by browser or by SOAP 2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422 LEMONLDAP::NG : typo 2008-12-07 12:15:40 +00:00
Xavier Guimard
ae392f0276 LEMONLDAP::NG : SOAP Service in progress... 2008-12-07 11:47:38 +00:00
Xavier Guimard
53dc4bbbf4 LEMONLDAP::NG : * To avoid XSS, 3 controls :
1) url must be base64 encoded
                  2) urldc is serialized on 1 line ("s/[\r\n]//sg")
                  3) urldc must not contains '"`\0<
                * Common/CGI can now intercept SOAP requests
2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c LEMONLDAP::NG : XSS prevention 2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416 LEMONLDAP::NG : * branche 0.9.2 is missing
* ' and " are now filtered in url in Portal.pm
2008-12-06 07:27:35 +00:00
Xavier Guimard
789a39df97 LEMONLDAP::NG : * Support for Apache::Session::PHP (for Manager/Session and purgeCentralCache)
* better cache control for Common::CGI.pm::header_public()
                * bug with the manager introduced previously
2008-12-05 16:30:27 +00:00
Xavier Guimard
5bbe35cedc LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible 2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085 LEMONLDAP::NG : minnor things 2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247 LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP 2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8 LEMONLDAP::NG : Enforce XSS protection by deleting bad urls 2008-12-03 16:41:30 +00:00
Xavier Guimard
24a14caeda LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites
* perltidy in Manager/Sessions.pm
                * Doxygen in progress...
2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72 LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used 2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2 LEMONLDAP::NG : * security fix => XSS
* Begin Doxygen documentation
2008-12-03 13:27:30 +00:00
Xavier Guimard
e1e67bae80 LEMONLDAP::NG : Javascript typo: little error in Manager 2008-12-02 13:56:45 +00:00
Xavier Guimard
6dc275710c LEMONLDAP::NG : * avoid a little warning in tests
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387 LEMONLDAP::NG : better manner to delete cookie 2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924 LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request 2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0 LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML)
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0 LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML
* Links in Debian examples installation
2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f LEMONLDAP::NG : web form in a distinct file 2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81 LEMONLDAP::NG : Notification system skeleton 2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7 LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test 2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3 LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities
* CGIs now use abort() instead of die
                * debug system in COnf.pm (set "LogLevel debug" in Apache)
2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b LEMONLDAP::NG : die replaced by $self->abort in CGIs 2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e LEMONLDAP::NG : removing old feature : LDAP filter in groups 2008-11-20 18:13:27 +00:00
Xavier Guimard
1e17091abb LEMONLDAP::NG : *security bug* : a blank password was available on AuthBasic 2008-11-20 17:34:35 +00:00
Xavier Guimard
eea294ce3b LEMONLDAP::NG : Manager/Base.pm becomes Common/CGI.pm 2008-11-20 06:53:44 +00:00
Xavier Guimard
c9fc66bbef LEMONLDAP::NG : Conf.pm now can use local cache. If "localStorage" is set in "configStorage" :
* getConf acts as a "must-revalidate" proxy for the configuration (get numConf
                   from globalCache and give local conf if ti's the same number
                 * if "local=>1" is set when calling getConf, globalConfiguration number is not
                   checked and it returns local config

                Handler/SharedConf will so be simplified
2008-11-19 17:49:46 +00:00
Xavier Guimard
64f0192eda LEMONLDAP::NG : an uid can start with a "0" 2008-11-19 15:50:25 +00:00
Xavier Guimard
45670f3d21 LEMONLDAP::NG : bless was not safe in Conf.pm 2008-11-19 11:25:35 +00:00
Xavier Guimard
b5c2abb2a0 LEMONLDAP::NG : customFunctions called "package::function" where not correctly interpreted 2008-11-19 11:19:06 +00:00
Clément Oudot
19b5fa1190 LEMONLDAP::NG : fix bug #311849 2008-11-18 12:47:30 +00:00
Xavier Guimard
cae4cbade0 LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie 2008-11-17 16:59:56 +00:00
Xavier Guimard
dd0c815795 LEMONLDAP::NG : one more bug... 2008-11-17 15:12:17 +00:00
Xavier Guimard
e1ff8a6d46 LEMONLDAP::NG : oups ! bug introduced in the previous commit 2008-11-17 15:09:33 +00:00
Xavier Guimard
e42c8b263f LEMONLDAP::NG : little bugs in customFunctions 2008-11-17 15:06:58 +00:00
Xavier Guimard
d88ae29227 LEMONLDAP::NG : new customFunctions feature (+ perltidy everywhere) 2008-11-17 14:02:50 +00:00
Clément Oudot
e5d13fdf17 LEMONLDAP::NG : Add Sessions Explorer in Application Menu 2008-11-16 12:40:28 +00:00
Clément Oudot
73fa157836 LEMONLDAP::NG : sessions.pl configured with make example 2008-11-16 12:13:26 +00:00
Xavier Guimard
f399324f18 LEMONLDAP::NG : little hook in Menu.pm 2008-11-14 07:16:26 +00:00
Xavier Guimard
a91d61eb99 LEMONLDAP::NG : the manager now can be protected directly (like session explorer) by setting :
* "protection => 'manager'"
		* or "protection => 'rule: $uid eq "admin"'
                * or "protection => 'authenticate'
                It inherits from Lemonldap::NG::Handler::CGI
                -> little bug in this module
2008-11-14 07:03:02 +00:00
Clément Oudot
d4ac528cd1 LEMONLDAP::NG : Fix bug #311795 2008-11-13 13:43:20 +00:00
Xavier Guimard
d8d2951015 LEMONLDAP::NG : possible overload of safe shared functions 2008-11-12 17:32:58 +00:00
Xavier Guimard
7d6989a4a6 LEMONLDAP::NG : * uri in Menu.pm can now contains user datas
* protection documentation in Sessions.pm example file
2008-11-12 16:09:35 +00:00
Xavier Guimard
1aafc1049c LEMONLDAP::NG : Debian installation in progress... 2008-11-12 15:35:27 +00:00
Xavier Guimard
701c342268 LEMONLDAP::NG : Debian installation update since Makefile changes 2008-11-11 19:06:46 +00:00
Xavier Guimard
aedf90d531 LEMONLDAP::NG : * protection system of Manager/Sessions.pm is now included in Handler/CGI.pm
* Handler depends now from CGI (Handler/CGI.pm)
                * Lintian says that postinst must include "set -e"
2008-11-11 15:21:31 +00:00
Xavier Guimard
521a44669e LEMONLDAP::NG : mrtg script example 2008-11-06 16:57:37 +00:00
Xavier Guimard
54d163a88f LEMONLDAP::NG : accounting in CGI.pm when using ModPerl::Registry 2008-11-06 09:06:51 +00:00
Clément Oudot
5c7468b6e5 LEMONLDAP::NG : correct bug on anonymous manager authentication and no ppolicy authentication 2008-11-05 21:26:37 +00:00
Xavier Guimard
e42f1febef LEMONLDAP::NG : * IP view in Manager/Sessions.pm
* Bug in CGI.pm : local cache was erased each time
                * Bug in purgeCentralCache : timeout was always 7200
2008-11-05 14:55:02 +00:00
Xavier Guimard
a75e882741 LEMONLDAP::NG : New module Sessions.pm to manage sessions 2008-11-04 16:35:16 +00:00
Clément Oudot
9e2a494da5 LEMONLDAP::NG : password can now be stored in session 2008-10-16 07:35:42 +00:00
Clément Oudot
7a7ad20ed7 LEMONLDAP::NG : put all configuration in /etc/lemonldap-ng/ 2008-10-13 20:53:06 +00:00
Clément Oudot
9db86c4def LEMONLDAP::NG : Use FAMFAMFAM icons in pastel skin 2008-10-13 20:36:09 +00:00
Clément Oudot
73f531fb43 LEMONLDAP::NG : minor bugs in _LDAP.pm 2008-10-08 09:40:24 +00:00
Xavier Guimard
c007a2382c LEMONLDAP::NG : _LDAP inherits now from Net::LDAP 2008-10-08 08:45:15 +00:00
Xavier Guimard
26c944caa7 LEMONLDAP::NG : UserDB system updated + general perltidy 2008-10-07 20:15:48 +00:00
Xavier Guimard
edb22bc8f8 LEMONLDAP::NG : little mistake 2008-10-05 18:43:47 +00:00
Xavier Guimard
80f199fbc7 LEMONLDAP::NG : LDAP User database module 2008-10-05 18:42:50 +00:00
Clément Oudot
02fb3d966a LEMONLDAP::NG : brand new WebSSO example installation 2008-10-03 16:12:36 +00:00
Xavier Guimard
7baf8c6b64 LEMONLDAP::NG : bad version number 2008-09-29 14:51:43 +00:00
Clément Oudot
b9b39143db LEMONLDAP::NG : New Portal::Error module and test page 2008-09-28 17:05:17 +00:00
Clément Oudot
6623c149f6 LEMONLDAP::NG : corrections on enhanced menu 2008-09-26 07:36:30 +00:00
Xavier Guimard
7fdab965d5 LEMONLDAP::NG : grant system in Menu.pm (not yet tested) 2008-09-21 09:50:32 +00:00
Clément Oudot
b14983208c LemonLDAP::NG : W3C standards compliance and password modification module 2008-09-19 15:28:00 +00:00
Clément Oudot
1c15139a3a LemonLDAP::NG : pre-release of new Portal::Menu module 2008-09-18 08:34:17 +00:00
Xavier Guimard
7c9bb1621d LEMONLDAP::NG : bug in doc 2008-09-10 10:40:01 +00:00
Xavier Guimard
8ae6168826 LEMONLDAP::NG : missing </TMPL_IF> in default login template 2008-09-07 09:21:46 +00:00
Xavier Guimard
4e90f24172 LEMONLDAP::NG : perltidy + template language detection regexp 2008-09-04 06:05:24 +00:00
Clément Oudot
b264d0f8c7 LemonLDAP::NG : HTML::Template translation filter 2008-09-03 16:11:16 +00:00
Clément Oudot
bdbe889e9d LemonLDAP::NG : remove template var PAGE_TITLE 2008-09-03 16:02:17 +00:00
Clément Oudot
9992e07203 IE CSS bugs 2008-09-03 15:59:33 +00:00
Clément Oudot
d893bbdd94 LEMONLDAP::NG New portal skin/template design 2008-09-03 11:04:14 +00:00
Xavier Guimard
d7817c8b6a LEMONLDAP::NG : Changelogs update 2008-08-25 20:10:54 +00:00
Xavier Guimard
8364a0e78d LEMONLDAP::NG : CPAN versions update and little doc update 2008-08-25 19:54:24 +00:00
Xavier Guimard
f5f3e6506a LEMONLDAP::NG : Big bug : if default rule is not 'accept', then it's always deny 2008-08-22 16:06:48 +00:00
Xavier Guimard
cf3420943c LEMONLDAP::NG : Dynamic menu example 2008-08-22 15:21:39 +00:00
Xavier Guimard
7853475b6e LEMONLDAP::NG : (Manager) invalid path in Debian inst and default graphics settings change 2008-08-11 14:45:35 +00:00