Commit Graph

337 Commits

Author SHA1 Message Date
Christophe Maudoux
873e5084e0 Append "Don t compact conf" option (#1904) 2019-08-31 23:03:17 +02:00
Maxime Besson
d61935ab6e Implement introspection endpoint for access tokens (#1843) 2019-08-29 19:10:51 +02:00
Clément OUDOT
47dc4936ac Replace default LinkedIn scopes (#1890) 2019-08-22 15:08:45 +02:00
Christophe Maudoux
96c5006d9a Fix wrapper (#1885) 2019-08-20 22:36:51 +02:00
Christophe Maudoux
4d583ceb9c Append a custom param to log (#1885) 2019-08-20 22:04:05 +02:00
Christophe Maudoux
b1c637cfca Revert "Append a custom param to be logged (#1885)"
This reverts commit 1e838f0487
2019-08-16 15:28:47 +02:00
Christophe Maudoux
1e838f0487 Append a custom param to be logged (#1885) 2019-08-16 15:25:21 +02:00
Maxime Besson
2e9f57ab6f Better default behavior for oidcServiceMetaDataIssuer (#1882) 2019-08-13 18:09:59 +02:00
Maxime Besson
15c3b0bbf8 Add Radius second factor (#1847) 2019-08-02 18:03:10 +02:00
Maxime Besson
c1afdbefac Add labels and logos to all 2F providers (#1873) 2019-08-01 17:27:14 +02:00
Christophe Maudoux
96ae65e800 Re-order 2FA (#1860) 2019-07-31 16:31:04 +02:00
Christophe Maudoux
ecb3204d38 Append conf parameters (#1851) 2019-07-25 11:59:00 +02:00
Maxime Besson
d82f776df8 Allow multi instanciation of 2F modules (#1860)
This commit adds a manager interface to declare multiple instances of a
single 2F module, in a manner similar to Combination.

An additional portal code reads the `sfExtra` variable to load the
declared modules.

An empty rules means the module will be always active.
2019-07-22 19:30:37 +02:00
Xavier Guimard
966eef33ee Fix df96168c error: _example/conf/lmConf-1.json is auto-generated (#1850) 2019-07-10 17:15:40 +02:00
Christophe Maudoux
36c806fa61 make json 2019-07-07 22:30:24 +02:00
Christophe Maudoux
2aee0467b0 Hide _session_id with CheckUser (#1658) 2019-07-06 22:55:31 +02:00
Christophe Maudoux
b94cbe0144 Fix default value (#1825) 2019-07-01 13:28:01 +02:00
Christophe Maudoux
1be79bce4b make json 2019-06-30 19:01:14 +02:00
Christophe Maudoux
a1f5791e06 Merge branch '1783' into v2.0 2019-06-30 19:00:41 +02:00
Christophe Maudoux
11d2909b0a WIP - Disable persistent sessions storage (#1825) 2019-06-29 21:10:16 +02:00
Christophe Maudoux
831a988516 Append conf test (#1783) 2019-06-23 22:55:10 +02:00
Christophe Maudoux
b69ffc0ff8 WIP - ContextSwitching (#1783) 2019-06-21 15:23:06 +02:00
Christophe Maudoux
9fa11709e6 Append options to use Notifications plugin & set notification reference (#1796) 2019-06-17 22:31:44 +02:00
Christophe Maudoux
c3b3c281ad Hide _2fDevices with REST services 2019-06-16 20:33:34 +02:00
Christophe Maudoux
d6f3dd459a Display message (#1796) 2019-06-16 16:02:48 +02:00
Christophe Maudoux
f514da3c3a Hide _2fDevices with REST services 2019-06-15 22:38:21 +02:00
Christophe Maudoux
5218944bf2 Improve unit tests (#1796) 2019-06-14 23:11:10 +02:00
Christophe Maudoux
fde6ff2cc8 WIP (#1796) 2019-06-14 23:09:32 +02:00
Xavier Guimard
e7bc7b3f4e Add restExportSecretKeys option (#1799) 2019-06-14 08:51:58 +02:00
Christophe Maudoux
b71f678f80 Filter SSO groups to merge (#1791) 2019-06-08 22:08:58 +02:00
Christophe Maudoux
e3c2766809 Test 2F TTL (#1782) 2019-06-07 19:51:51 +02:00
Christophe Maudoux
132e57b4b3 Manage CORS headers (#1765) 2019-05-31 17:00:39 +02:00
Christophe Maudoux
3491adbd3d Upgrade default authentication level (#1699) 2019-04-21 21:30:38 +02:00
maudoux
02c473c919 Update ConfTree (#1699) 2019-04-05 22:39:58 +02:00
maudoux
5b67f1f743 Use rule to enable OTT (#1694) 2019-04-03 23:28:45 +02:00
Xavier
27b45d1af8 Add LinkedIn in combination modules (Fixes: #1682) 2019-03-26 07:00:53 +01:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Christophe Maudoux
be28b60e66 Append identities rule (#1658) 2019-03-09 23:29:10 +01:00
Christophe Maudoux
09281f8d22 Append identities rule and fix error catching (#1664) 2019-03-08 11:39:19 +01:00
Christophe Maudoux
a9fbec3f84 Revert - Allow figures in login (#1667) 2019-03-07 10:39:08 +01:00
Christophe Maudoux
a076459bdd Allow figures in login (#1667) 2019-03-07 09:00:24 +01:00
Christophe Maudoux
7b08a7c442 Rename idSpoofing plugin to Impersonation & all relative parameters (#1664) 2019-03-06 16:30:56 +01:00
Christophe Maudoux
7a31052d33 Fix lang (#1664) 2019-03-05 15:07:27 +01:00
Christophe Maudoux
ff05a8f797 Modify parameters (#1664) 2019-03-05 14:50:01 +01:00
Maxime Besson
25d1c45fd4 Add new option to override EntityID when acting as IDP 2019-03-04 09:33:10 +01:00
Christophe Maudoux
2005e27edb WIP - Append parameter translations (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
81a37e5bcc Dispatching attributes (#1658) 2019-03-01 12:36:37 +01:00
Christophe Maudoux
1ea6e92533 WIP - checkUser append translations and parameters (#1658) 2019-02-25 20:10:57 +01:00
Christophe Maudoux
fdaa0fb424 Modify parameter type (#1632) 2019-02-14 22:41:18 +01:00
Christophe Maudoux
24d5fe7aa7 Improve langs (#1632) 2019-02-14 22:11:14 +01:00
Clément OUDOT
8304a48073 Remove trustedProxies option (#1612) 2019-02-08 11:14:22 +01:00
Xavier Guimard
74ab16a3cb Remove old Auth::Google parameters 2019-02-05 12:08:53 +01:00
Xavier Guimard
a549e62657 Add Auth::GPG parameters (#1569) 2019-02-05 11:51:39 +01:00
Xavier Guimard
c5a3687040 Merge remote-tracking branch 'max/fix-redir' into v2.0 2019-02-03 22:48:43 +01:00
Christophe Maudoux
e41be10a23 Improve RegExp (#1629) 2019-02-03 21:48:49 +01:00
Maxime Besson
e028088f88 Add the ability to detect HTTPS from web server env
This commit adds a new "Default" option for the global HTTPS setting. In
this mode, the handler will refer to the HTTPS env variable to know if it's
being accessed over HTTPS or not. An administrator is of course still
free to force HTTPS by setting it either globally or per-VHost
2019-02-03 20:12:53 +01:00
Maxime Besson
f35a7c305a Add Mail second factor plugin 2019-02-03 14:46:40 +01:00
Maxime Besson
faa748f68f Add Mail second factor plugin 2019-02-03 14:43:44 +01:00
Clément OUDOT
bdfc905a59 Use make json to rebuild Manager files (#1601) 2019-02-02 15:55:55 +01:00
Christophe Maudoux
08647bb96a Improve unit test (#1636) 2019-02-02 15:34:24 +01:00
Christophe Maudoux
f33697de06 Fix default value display 2019-02-01 19:55:10 +01:00
Christophe Maudoux
e388892feb Merge branch 'v2.0' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng into v2.0 2019-01-24 19:49:31 +01:00
Christophe Maudoux
96b93a56c1 Partial revert rename parameters (#1605) 2019-01-24 19:45:43 +01:00
Maxime Besson
d8a6bf6e3a Fix CAS documentation links
The CAS documentation links were missing or incorrect, this commit
points them back to the correct page and section
2019-01-24 17:43:06 +01:00
Christophe Maudoux
65d3e92108 Improve Manager tree (#1623) 2019-01-22 22:35:57 +01:00
Christophe Maudoux
87d8e4c1ad Improve manger tree (#1616) 2019-01-19 16:04:03 +01:00
Christophe Maudoux
ce809fc80c Improve manager tree (#1616) 2019-01-19 14:27:00 +01:00
Christophe Maudoux
6e5fe91459 Improve manager tree (#1616) 2019-01-18 23:33:47 +01:00
Christophe Maudoux
4557c6f7b5 Create SMTP server entry in Conf. tree (#1616) 2019-01-17 21:44:27 +01:00
Christophe Maudoux
b7df16a9d9 Create SMTP server entry in Conf. tree (#1616) 2019-01-17 21:43:25 +01:00
Christophe Maudoux
b486735d46 WIP - Split mailReset plugin and SMTP parameters (#1616) 2019-01-16 22:57:35 +01:00
Christophe Maudoux
b493fac7be Disable safe warnings (#1561) 2018-11-30 21:45:54 +01:00
Christophe Maudoux
e3999aad6b WIP - Comment safe 2018-11-30 20:36:45 +01:00
Christophe Maudoux
2d8f2d402e Change Manager conf params order 2018-11-29 23:06:10 +01:00
Christophe Maudoux
6cd1f7e8db Change advanced params order 2018-11-28 22:24:43 +01:00
Christophe Maudoux
f02c4d8dbe Change servers order 2018-11-28 22:16:14 +01:00
Christophe Maudoux
43d361829a Set default value to fix manager display 2018-11-28 22:12:50 +01:00
Christophe Maudoux
043292fce4 Improve contextual help pages 2018-11-26 21:38:46 +01:00
Clément OUDOT
58ca2d255e Help page for configuration reload (#1553) 2018-11-26 14:18:12 +01:00
Clément OUDOT
9cb56173db Configure timeout for configuration reload (#1553) 2018-11-26 08:21:00 +01:00
Christophe Maudoux
54d73bc110 Fix GUI error (#1550) 2018-11-21 21:07:46 +01:00
Christophe Maudoux
694c214f92 Improve Manager GUI 2018-11-20 22:36:38 +01:00
Christophe Maudoux
fdfeb9331b make json 2018-11-15 22:39:05 +01:00
Christophe Maudoux
32affcc0f3 make json 2018-11-15 22:38:43 +01:00
Christophe Maudoux
72b42a516f Append reset password retries number parameter (#1508) 2018-11-15 21:16:46 +01:00
Xavier Guimard
1979ac092a Move "registerDB" to authParams (#1529) 2018-11-14 07:06:53 +01:00
Christophe Maudoux
4f78736340 Improve Manager tree display - Partial revert 2018-11-07 22:09:22 +01:00
Christophe Maudoux
3e543a614c Improve Manager tree display 2018-11-07 21:58:21 +01:00
Christophe Maudoux
87c85c5b01 Append manager option to enable langs display (#1539) 2018-11-07 20:10:31 +01:00
Christophe Maudoux
3211236904 Set default formAction CSP (#1499) 2018-10-30 20:32:20 +01:00
Christophe Maudoux
376e49b83d Set formAction CSP from Manager (#1499) 2018-10-18 22:26:12 +02:00
Christophe Maudoux
4df8ce2c0e Set formAction CSP from Manager (#1499) 2018-10-18 19:51:50 +02:00
Christophe Maudoux
d9bcd74b08 Fix typo & Manager Forms menu display 2018-10-17 23:06:50 +02:00
Christophe Maudoux
be183a8d12 Set default value to avoid Manager "waiting data" message 2018-10-17 22:57:59 +02:00
Christophe Maudoux
7e81d3b5d4 Append history custom values in session explorer (#1501) 2018-10-12 22:48:05 +02:00
Christophe Maudoux
c9c9ee2733 Append contextual help pages 2018-10-12 22:31:12 +02:00
Christophe Maudoux
60f25e5ec4 Fix lang 2018-10-11 22:06:09 +02:00
Christophe Maudoux
c2da030b95 BruteForceProtection plugin disable by default 2018-10-10 23:12:38 +02:00
Christophe Maudoux
7a1117d4c4 Append Portal main logo option in Manager (#1515) 2018-10-08 23:02:59 +02:00
Christophe Maudoux
8d7afa75a3 Append portalForceAuthn option in Tree (#1507) 2018-10-03 22:32:37 +02:00
Xavier Guimard
86b2a89912 Enable WSDL server (fixes: #8) 2018-09-26 20:51:53 +02:00
Christophe Maudoux
31a689340d Rename BruteForceProtection plugin (#1506) 2018-09-23 11:09:04 +02:00
Christophe Maudoux
312e152bcc Append brutForceProtection plugin (#1506) 2018-09-22 19:26:21 +02:00
Clément OUDOT
5c8f42bda4 Configuration for SAML Discovery Protocol (#1478) 2018-09-04 15:24:18 +02:00
Christophe Maudoux
1bdad607fc Add contextual help 2018-08-26 13:42:02 +02:00
Xavier Guimard
bf7d85532d Replace bool by boolOrExpr for sfRequired + partial revert (#1487) 2018-08-15 20:42:08 +02:00
Christophe Maudoux
26114051cd Fix display error (waiting for datas) - Set default option (#1487) 2018-08-09 09:56:28 +02:00
Xavier Guimard
4ef9fa374a Add sfRequired option (#1487) 2018-08-09 08:21:09 +02:00
Christophe Maudoux
1bebba42c3 WIP - Partial revert and debug messages appended to test (#1480) 2018-08-08 09:51:06 +02:00
Christophe Maudoux
6619e56714 WIP - Add CSP form-action attribute in LLNG conf. Need more tests (#1480) 2018-08-07 23:54:42 +02:00
Christophe Maudoux
9c5997486f Modify test & cookieExpiration value type (#1485) 2018-07-30 19:18:06 +02:00
Christophe Maudoux
593f128f99 Fix manager conf display 2018-07-22 23:43:06 +02:00
Christophe Maudoux
3e85f1f68f Fix conf options (#1482 & #1483) 2018-07-22 22:35:30 +02:00
Christophe Maudoux
77c36cc98e Fix contextual help (#1481) 2018-07-20 23:09:07 +02:00
Christophe Maudoux
b95b5da0a4 Fix AngularJS display error 2018-07-13 20:55:50 +02:00
Christophe Maudoux
a983a7ba30 Modify 2f order in conf tree 2018-07-10 23:02:47 +02:00
Christophe Maudoux
6580f34e46 Fix contextual help & complex nodes display (#1473) 2018-07-09 22:31:07 +02:00
Clément OUDOT
151088559f Move CAS options in CAS service (#1161) 2018-06-23 09:21:09 +02:00
Clément OUDOT
8a4adfd384 Configure Facebook user field (#1322) 2018-06-22 18:16:24 +02:00
Clément OUDOT
7eb24abe3c Configure Twitter user field (#1322) 2018-06-22 17:44:41 +02:00
Clément OUDOT
ea8817f3ff Use SHA1 as default value (#1247) 2018-06-12 22:35:00 +02:00
Clément OUDOT
28c4429b75 Configuration for SAML signature method (#1247) 2018-06-12 18:22:21 +02:00
Xavier Guimard
ebc0b48be4 Move skipRenewConfirmation to "portal redirections" 2018-05-16 13:25:05 +02:00
Xavier Guimard
3b92271e9d Set "skipRenewConfirmation" in advanced params (#1422) 2018-05-16 10:54:57 +02:00
Xavier Guimard
e40d8ccc1e CheckState plugin (fixes: #1400) 2018-05-15 21:20:31 +02:00
Xavier Guimard
c673be7cf2 Set some default values in Attributes.pm (#595) 2018-04-30 18:06:15 +02:00
Christophe Maudoux
dc3336e8b1 Add manager userAuthorizedtoDelete entries (#1386) 2018-04-03 22:57:30 +02:00
Xavier Guimard
e89db33b5e Remove Auth::Yubikey (#1399) 2018-03-20 18:45:57 +01:00
Xavier Guimard
c6908b87a2 Yubikey 2nd factor (closes: #1399) 2018-03-20 18:19:53 +01:00
Xavier Guimard
05c77feebc Possibility to forbid U2F unregistration (#1148) 2018-03-18 22:20:05 +01:00
Xavier Guimard
30e5d25ed0 No direct self-registration for UTOTP (#1391) 2018-03-18 21:22:19 +01:00
Xavier Guimard
9725a63396 More security options in TOTP (#1359) 2018-03-18 14:26:45 +01:00
Xavier Guimard
799109caca UTOTP manager part (#1391)
ToDo: self-registration + tests
2018-03-18 09:30:08 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Xavier Guimard
10c06332fd Update help link (#1359) 2018-02-21 06:57:51 +01:00
Xavier Guimard
2d58b3f9f6 TOTP Manager part (#1359) 2018-02-21 06:48:06 +01:00
Clément Oudot
8a07f47e77 Add krbRemoveDomain parameter (#707) 2017-11-06 15:19:06 +00:00
Clément Oudot
6823a6e09e Fix default value for registerUrl (#1325) 2017-11-02 17:04:03 +00:00
Xavier Guimard
6ee5509f70 Add registerUrl (fixes: #1325) 2017-11-02 16:16:21 +00:00
Xavier Guimard
081699b29e AutoSignin works now (#1318)
TODO: doc
2017-10-27 13:11:30 +00:00
Xavier Guimard
bf1cf4c4f5 Display OIDC Consent tab if needed (#826) 2017-09-15 10:34:43 +00:00
Xavier Guimard
5b5e5db123 OpenID Connect consent skeleton (#826) 2017-09-15 10:32:15 +00:00
Clément Oudot
6af7c08918 Portal servers doc in Manager (#1278) 2017-08-30 16:47:28 +00:00
Xavier Guimard
b881108852 Perl update 2017-07-17 14:03:04 +00:00
Clément Oudot
00e7cea00c LinkedIn parameters in Manager for 2.0 (#1243) 2017-06-23 14:47:03 +00:00
David COUTADEUR
80f5d06e82 perl tidy 2017-06-23 09:57:07 +00:00
David COUTADEUR
6533b0a36b first working version of dynamic hash passwords in trunk (LEMONLDAP-1245) 2017-06-23 09:23:29 +00:00
Clément Oudot
b001965707 Create an option to display error on mail not found (#1225) 2017-05-11 13:48:50 +00:00
Clément Oudot
56254f1d4f Apply commit 6513 to trunk (#1218) 2017-04-27 10:21:46 +00:00
Xavier Guimard
0ce55136ad Add CAS in Choice/UserDB menu (#1229) 2017-04-27 07:51:55 +00:00
Xavier Guimard
c8b33af881 Fix display error (#867) 2017-04-19 10:52:18 +00:00
Xavier Guimard
00423fc223 Fix proxied services in CAS (#1183) 2017-04-15 13:21:33 +00:00
Xavier Guimard
6e38097176 Don't enable SMTP by default 2017-04-13 20:08:54 +00:00
Xavier Guimard
9a0a56b5fd Prepare new CAS arch in manager (#1183) 2017-04-12 16:45:55 +00:00
Xavier Guimard
dec57ba3f5 Move CAS Server options to CTrees (#1183) 2017-04-12 16:45:52 +00:00
Xavier Guimard
679911d4d0 Prepare CAS partners managment (#1183) 2017-04-12 16:45:49 +00:00
Xavier Guimard
43ece77749 Remove unused CAS_pgtFile parameter (#1183) 2017-04-12 16:45:45 +00:00
Xavier Guimard
a83a707931 Add Ajax to SSL (closes #1212) 2017-04-11 19:19:59 +00:00
Xavier Guimard
fbbe3aaf9b Unable Auth::Kerberos in Manager (closes: #707) 2017-04-11 13:21:35 +00:00
Xavier Guimard
388e313250 Update Null level 2017-03-30 05:11:02 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
bb08fc3675 Remove portalForceAuthn plugin (#1204) 2017-03-24 18:11:34 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
581f0e4c93 Portal part of reauthentication (#1204) 2017-03-23 18:22:40 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
0538ad1cee Add External2F plugin (#1015) 2017-03-22 22:18:28 +00:00
Xavier Guimard
03339738b7 Remove unsafe authorization (#1184) 2017-03-16 06:30:30 +00:00
Xavier Guimard
a07e92759c Add Auth::PAM (#closes: #1196) 2017-03-14 15:34:10 +00:00
Clément Oudot
f1804db2c7 Allow unsafe-inline styles for portal skin background (#1184 / #LEMONLDAP-1138) 2017-03-14 13:51:30 +00:00
Xavier Guimard
ffbd92745c Set default value to 1 for captcha_mail (#595) 2017-03-14 12:24:45 +00:00
Xavier Guimard
85ad473cd7 Authorize data: images in CSP header (#1138) 2017-03-14 12:08:01 +00:00
Xavier Guimard
b1ce342b2d Remove old skins from menu 2017-03-14 11:28:15 +00:00
Xavier Guimard
81d3729394 Use local cache by default for tokens (#1140) 2017-03-11 18:11:57 +00:00
Xavier Guimard
7f460429e1 OIDC OP2RP logout in progress (#1194) 2017-03-10 11:39:19 +00:00
Xavier Guimard
9fb80061a0 Additional parameters for custom modules (#1188) 2017-03-08 17:41:42 +00:00
Xavier Guimard
57189c1fb6 StayConnected plugin (#1131)
TODO: - check fingerprint back
      - insert "stayconnected" param in login.tpl
2017-03-07 22:20:51 +00:00
Xavier Guimard
2fb085b2a6 New "Custom" modules family (closes: #1188) 2017-03-07 17:28:09 +00:00
Xavier Guimard
d5484c28a7 Add u2fAuthnLevel (#1148) 2017-03-06 12:18:04 +00:00
Xavier Guimard
719b72e85e Update help 2017-03-04 15:03:53 +00:00
Xavier Guimard
96263e0e65 Clean repo 2017-03-03 17:25:03 +00:00
Xavier Guimard
64756142e1 Service token server (#971) 2017-03-01 06:41:42 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
7be468841b Add conditional SSLVar (closes: #803) 2017-02-24 06:29:50 +00:00
Xavier Guimard
d7025a2251 Add REST Auth/UserDB/Password backend (closes: #1174) 2017-02-23 21:46:00 +00:00
Xavier Guimard
d3766ff37a Harmonize manager to portal (dir htdocs) 2017-02-22 21:48:52 +00:00