Commit Graph

904 Commits

Author SHA1 Message Date
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Thomas CHEMINEAU
c2dc15ab6e store IDP values into samlIDPMetaDataXML and samlIDPMetaDataExportedAttributes, as what has been done with virtualhosts 2010-02-19 17:31:25 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML:
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Thomas CHEMINEAU
0e2ab107e8 move nodes into structure of manager, so that saml nodes are directly under the root node 2010-02-17 17:07:15 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Thomas CHEMINEAU
cb62695193 introduce samlmetadata type into manager structure, to display metadata in XML 2010-02-17 14:52:05 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Thomas CHEMINEAU
dab4308998 adding missing types managed by manager 2010-02-17 11:23:34 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Thomas CHEMINEAU
1fb77eab8f introduce sub nodes into IDP nodes (test) 2010-02-16 17:21:38 +00:00
Thomas CHEMINEAU
5ac95df875 first functional step in managing SAML idp in the manager through jquery 2010-02-16 10:44:03 +00:00
Thomas CHEMINEAU
3107f0e44b some reindentations 2010-02-16 09:42:29 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Thomas CHEMINEAU
b89b108164 disallow user to modify SAML2 bindings string (fit XHTML standard) 2010-02-15 13:15:42 +00:00
Thomas CHEMINEAU
774d920c2f disallow user to modify SAML2 bindings string 2010-02-15 10:25:39 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML:
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML:
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata:
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
2010-02-08 15:27:20 +00:00
Clément Oudot
ffa005c974 Manager: adapt help message for SAML private key 2010-02-08 13:53:52 +00:00
Clément Oudot
bdef53f289 Preserve carriage returns and line feeds in configuration values 2010-02-08 12:20:37 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946 LDAP:
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Thomas CHEMINEAU
d480616d06 move metadata configuration structure into manager 2010-02-05 10:20:16 +00:00
Thomas CHEMINEAU
5c3b3ebe8b remove unwanted debug code 2010-02-04 19:17:15 +00:00
Thomas CHEMINEAU
f1fa213487 manage default button in assertion panel 2010-02-04 19:02:59 +00:00
Thomas CHEMINEAU
61f8236140 now able to store SAML metadata in configuration 2010-02-04 16:41:58 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Thomas CHEMINEAU
67c7fb6d0a add tests and default values for SAML parameters 2010-02-04 10:08:27 +00:00
Thomas CHEMINEAU
c8dbf65789 refactoring structure of SAML service into manager 2010-02-04 09:28:51 +00:00
Clément Oudot
39db4807bb Manager: CSS for help messages 2010-02-03 17:12:45 +00:00
Clément Oudot
7f49d2d3ee Manager:
* Add a textarea type
* Move samlServiceMetaData into saml node
* Add samlServicePrivateKey key
2010-02-03 12:07:58 +00:00
Clément Oudot
a15fdcaaae SAML:
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
a9abc60efd SAML: Force :md namespace prefix 2010-02-02 22:15:25 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML:
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests
* "= splice @_" instead of "= @_" avoid memory duplication
2010-01-31 08:25:05 +00:00
Clément Oudot
c0ab13447c Manager: corrections for a good make test 2010-01-29 17:38:17 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Thomas CHEMINEAU
69899bce07 i18n for SAML keys into manager 2010-01-29 16:42:35 +00:00
Thomas CHEMINEAU
8a4b59d324 add a method to build a default configuration structure 2010-01-29 16:04:48 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Thomas CHEMINEAU
3744ce594f SAML metadata could not be in configuration, take care of that 2010-01-29 09:38:10 +00:00
Thomas CHEMINEAU
5b576643ee improve Metadata module to build hashref for Manager structure 2010-01-28 17:58:49 +00:00
Clément Oudot
cb71f77f4d Portal: move configuration documentation from script to ini file 2010-01-28 17:39:34 +00:00
Clément Oudot
90a08dbbde Portal/Multi:
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
2010-01-28 14:47:51 +00:00
Clément Oudot
48b97ed4d2 Portal: update MANIFEST 2010-01-28 10:39:58 +00:00
Clément Oudot
78b756571c Manager: resolve bug on help message language 2010-01-28 10:09:02 +00:00
Clément Oudot
760f62e534 Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user 2010-01-27 16:30:19 +00:00
Clément Oudot
b0749b8877 Manager: main dir value get from {DOCUMENT_ROOT} 2010-01-27 16:01:15 +00:00
Clément Oudot
34ed751578 Manager: remove unused newVh() parameter 2010-01-27 15:49:46 +00:00
Clément Oudot
42a4f62ca0 Manager: prompt virtual host name and use translated strings 2010-01-27 15:46:12 +00:00
Clément Oudot
fb221b35dd Manager: set default help message 2010-01-27 15:16:14 +00:00
Clément Oudot
37fe01a61b Manager: add portalForceAuthn option 2010-01-27 14:06:02 +00:00
Clément Oudot
b904587edd Portal: portalForceAuthn option was unusable with Menu password change 2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20 Portal: possibility to force reauthentication (set portalForceAuthn = 1) 2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6 Portal: allow passwordDBNull in Menu.pm 2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609 Portal: Null modules for authentication and passwordDB 2010-01-25 14:20:51 +00:00
Clément Oudot
86a92b5a32 Handler: add some CSS styles to status page 2010-01-25 10:55:07 +00:00
Xavier Guimard
b87c0a520b MANIFEST update + Makefile target 2010-01-23 12:48:18 +00:00
Clément Oudot
8a4e23f6a5 Manager: hide _password value in sessions explorer 2010-01-22 22:03:18 +00:00
Clément Oudot
95e29fd733 Portal: change _password value in session when user changes its password 2010-01-22 21:54:58 +00:00
Clément Oudot
dc1a90d356 Portal: use button instead anchor to harmonize CSS styles 2010-01-22 21:41:45 +00:00
Thomas CHEMINEAU
7abb65dbac Metadata object is now ready to be stored into LemonLDAP-NG configuration file 2010-01-22 17:38:10 +00:00
Thomas CHEMINEAU
1c4a1b19e7 Metadata object can now be rebuild from configuration data 2010-01-22 17:32:41 +00:00
Thomas CHEMINEAU
80de38cc11 Metadata READ now XML flow, and can be export to global configuration file 2010-01-22 16:32:57 +00:00
Clément Oudot
3fa08adfff Manager: add portal configuration parameters 2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897 Portal:
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail:
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
2010-01-21 17:38:55 +00:00
Thomas CHEMINEAU
26db0f0d42 add perl class to load and manage metadata configuration XML file 2010-01-21 17:27:43 +00:00
Clément Oudot
4179148476 Portal:
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
2010-01-21 09:51:13 +00:00
Clément Oudot
81f510a6e5 Menu:
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
2010-01-20 17:17:21 +00:00
Clément Oudot
1285196c37 Configuration migration script: add help message 2010-01-20 13:53:21 +00:00
Clément Oudot
58453e0622 Configuration migration script:
* perltidy
* Add verbose option
* Migrate apps-list.xml in .ini
* Use Conf constants
* Add comments
2010-01-20 12:42:07 +00:00
Clément Oudot
15e77c7d88 Portal SOAP:
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
2010-01-19 16:50:38 +00:00
Clément Oudot
a5c89df613 Manager:
* Add test rule for 'variables'
* Some tree.js bug correction enhancement
2010-01-18 22:49:22 +00:00
Clément Oudot
55720e486b Manager:
* Add a switch to choose menu style between Tree and Accordion, with choice persistence via cookie
* Set Accordion as the default menu style
2010-01-18 16:04:46 +00:00
Thomas CHEMINEAU
bb7881bcec add a WSDL tag to isAuthorizedURI SOAP method 2010-01-18 15:39:01 +00:00
Thomas CHEMINEAU
03efa3fe99 update buildPortalWSDL to add isAuthorizedURI new method 2010-01-18 15:32:10 +00:00
Clément Oudot
ac3d483cf1 Manager:
* Bug correction: folder was not opening anymore on empty ajax response
* Force folder opening when a new node is inserted
2010-01-18 13:11:01 +00:00
Xavier Guimard
e677c40ae7 Syntax error 2010-01-17 08:58:00 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Clément Oudot
c700c462ef Handler: use cookie parameters with CDA cookies 2010-01-15 21:59:18 +00:00
Thomas CHEMINEAU
9fb358fa2d create 'variables' category in manager 2010-01-15 16:40:47 +00:00
Xavier Guimard
c25fc4177b Missing attributes in WSDL 2010-01-15 16:36:02 +00:00
Clément Oudot
ec5db79f94 Manager: use skin jquery file for sessions explorer 2010-01-13 14:09:32 +00:00
Xavier Guimard
40be40dbd9 More comments 2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609 Rewrite index.pl 2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270 PE_CONFIRM stop _Multi::try() 2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494 i18n update 2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8 Link to delete other sessions 2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00
Clément Oudot
ac6d644744 Manager:
* Add afterSetTrigger trigger in tree.js
* Use jQuery UI icons with managerTreeJQueryCSS option
* Force dark color for doc elements in lightness CSS
2010-01-11 16:29:43 +00:00
Xavier Guimard
d181da867b * perltidy
* new feature : info can be displayed by portal => used to notify deleted sessions
 * notifyDeleted in the manager
2010-01-11 16:04:36 +00:00
Clément Oudot
dc3d9558fe Portal: create a grantSession stage in process() 2010-01-11 14:02:43 +00:00
Clément Oudot
d5830e1832 Manager: create a common CSS imported in default and lightness CSS 2010-01-11 09:40:42 +00:00
Clément Oudot
8055aebc07 Manager: use local configuration file and set default values for Manager customization 2010-01-09 14:48:35 +00:00
Clément Oudot
88dfd0d66f Manager: CSS choice and other skin customization 2010-01-08 21:51:16 +00:00
Clément Oudot
e6e191e362 Conf: allow multiline in ini file (use \ at end of the line) 2010-01-08 14:28:21 +00:00
Clément Oudot
cad747f629 Menu: use configuration instead of XML file - work in progress 2010-01-08 11:51:04 +00:00
Clément Oudot
73fd6ba805 Manager: set CFGNUM in template 2010-01-07 16:03:20 +00:00
Clément Oudot
672ec7acb9 Manager: textfield to edit vhost name, but still not saved in configuration (need Uploader.pm modification) 2010-01-07 15:17:15 +00:00
Thomas CHEMINEAU
72e0247f03 fixes #314372 - introduce isAuthorizedURI SOAP function 2010-01-07 11:07:48 +00:00
Clément Oudot
e418b988d1 Manager skin:
* Add onclick attribute on new virtual host
* Display vhost name in delete confirm message
2010-01-07 10:11:17 +00:00
Clément Oudot
cc02bf3f4e Manager skin : Add afterNewNode trigger 2010-01-07 09:57:10 +00:00
Clément Oudot
78f23c6495 Manager skin:
* Modify tree.js to toggle active class instead of forcing it and add options and triggers
* Apply jQuery UI CSS classes to simpleTree classes
* TODO write a trigger to catch new nodes creations
2010-01-06 17:27:00 +00:00
Clément Oudot
88d237da47 Manager skin:
* Full screen size for menu tree
* Help no more draggable/resizable
* Hide/display box contents with clik on title
* Edited configuration key is displayed in editon box title
2010-01-06 11:26:45 +00:00
Clément Oudot
dc5b0cbed6 Add a favicon to Manager skin 2010-01-05 16:18:27 +00:00
Xavier Guimard
81377639b2 Some little changes... 2010-01-04 13:28:10 +00:00
Xavier Guimard
8102f72d50 POD updates :
* spelling errors found by Lintian
 * encoding utf8
2010-01-03 08:09:59 +00:00
Xavier Guimard
715460b108 DBI module deprecated 2010-01-01 12:04:26 +00:00
Xavier Guimard
5a5d3872fd Update changelog 2009-12-31 13:35:34 +00:00
Xavier Guimard
c9b8b4fc7d New feature: capability to minify CSS and Javascript (ready in debian/rules, just to uncomment) 2009-12-31 11:10:05 +00:00
Xavier Guimard
dacd95ddde Date in readable format 2009-12-31 07:50:07 +00:00
Xavier Guimard
7d83901ffb Configuration datas 2009-12-30 20:00:54 +00:00