Clément Oudot
46764465b2
SAML: SP SLO in progress
2010-02-17 17:37:38 +00:00
Clément Oudot
4c5d286196
SAML: rename keys of samlIDMetaData hash
2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10
SAML: SLO initiated by SP (not achieved)
2010-02-17 15:13:00 +00:00
Clément Oudot
b9a6eb6743
SAML: replay protection was buggy
2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19
SAML: conditions validations corrected in Lasso
2010-02-17 11:51:01 +00:00
Clément Oudot
5411891ff6
Portal: template parameters were not well defined
2010-02-17 11:04:28 +00:00
Clément Oudot
d5d56f7649
SAML: conditions validation
2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa
SAML: assertion replay protection
2010-02-15 13:44:06 +00:00
Clément Oudot
12668e7cc2
SAML: register attributes from SAML authn statement in session
2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f
SAML:
...
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1
SAML: first complete SP cinematic implementation
2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3
* abort instead of log when apps.list is deprecated
...
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36
Missing '/'
2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5
SAML: customize authentication request
2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e
SAML: Lasso can now use ; in query string
2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57
SAML: NameID management
2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3
SAML: use query_string and get name identifier
2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb
SAML:
...
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708
Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl)
2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7
SAML Metadata:
...
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
2010-02-08 15:27:20 +00:00
Xavier Guimard
788f688d78
little thing
2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47
Somes fixes
2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b
Fix some little bugs
2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286
SAML: better organization name management
2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1
SAML: use serviceToXML
2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81
add files needed by Metadata.pm to export metadata from conf to XML
2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6
add method to export metadata from conf to XML, in SAML2 format
2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946
LDAP:
...
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be
Portal: force authentication is now working
2010-02-05 10:21:48 +00:00
Clément Oudot
a1976436b6
SAML: build authentication request
2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9
SAML: IDP choice
2010-02-04 12:30:18 +00:00
Clément Oudot
a15fdcaaae
SAML:
...
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c
SAML: do not force optional parameters in add_provider_from_buffer
2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147
SAML: typo in Lasso method
2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136
SAML: add IDP in Lasso::Server
2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1
SAML: catch Glib messages
2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b
SAML:
...
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792
* "SKIP" in SAML tests
...
* "= splice @_" instead of "= @_" avoid memory duplication
2010-01-31 08:25:05 +00:00
Clément Oudot
ccbb52c13c
SAML: create Lasso Server
2010-01-29 17:33:35 +00:00
Clément Oudot
5dd981fa85
SAML: load Lasso method
2010-01-29 10:44:56 +00:00
Clément Oudot
cb71f77f4d
Portal: move configuration documentation from script to ini file
2010-01-28 17:39:34 +00:00
Clément Oudot
90a08dbbde
Portal/Multi:
...
* Get the correct _auth and _userDB value when using Multi
* Resolve a bug: functions of modules loaded in _Multi were not available for _subProcess
* Use a common loadModule method between Simple.pm and _Multi.pm
* Do not consider PE_FORMEMPTY and PE_FIRSTACCESS as errors in Multi process
2010-01-28 14:47:51 +00:00
Clément Oudot
48b97ed4d2
Portal: update MANIFEST
2010-01-28 10:39:58 +00:00
Clément Oudot
760f62e534
Portal: set _auth, _userDN, _passwordDB and _issuerDB in session, to know which module was used to open the session of the user
2010-01-27 16:30:19 +00:00
Clément Oudot
b904587edd
Portal: portalForceAuthn option was unusable with Menu password change
2010-01-27 14:04:41 +00:00
Clément Oudot
1f243e0a20
Portal: possibility to force reauthentication (set portalForceAuthn = 1)
2010-01-25 17:40:46 +00:00
Clément Oudot
5aa74c08d6
Portal: allow passwordDBNull in Menu.pm
2010-01-25 14:32:22 +00:00
Clément Oudot
86b18ea609
Portal: Null modules for authentication and passwordDB
2010-01-25 14:20:51 +00:00
Xavier Guimard
b87c0a520b
MANIFEST update + Makefile target
2010-01-23 12:48:18 +00:00
Clément Oudot
95e29fd733
Portal: change _password value in session when user changes its password
2010-01-22 21:54:58 +00:00
Clément Oudot
dc1a90d356
Portal: use button instead anchor to harmonize CSS styles
2010-01-22 21:41:45 +00:00
Clément Oudot
3fa08adfff
Manager: add portal configuration parameters
2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897
Portal:
...
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c
Portal - new feature: token to reset password by mail:
...
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
2010-01-21 17:38:55 +00:00
Clément Oudot
4179148476
Portal:
...
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
2010-01-21 09:51:13 +00:00
Clément Oudot
81f510a6e5
Menu:
...
* XML conf is now deprecated, applicationList configuration parameter is used
* Remove all XML related code
* filter applications under applications
* Hide empty categories
2010-01-20 17:17:21 +00:00
Clément Oudot
15e77c7d88
Portal SOAP:
...
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
2010-01-19 16:50:38 +00:00
Thomas CHEMINEAU
bb7881bcec
add a WSDL tag to isAuthorizedURI SOAP method
2010-01-18 15:39:01 +00:00
Thomas CHEMINEAU
03efa3fe99
update buildPortalWSDL to add isAuthorizedURI new method
2010-01-18 15:32:10 +00:00
Clément Oudot
5af1db1c3e
Portal: move ppolicy warnings from menu to information page
2010-01-15 22:01:04 +00:00
Xavier Guimard
40be40dbd9
More comments
2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609
Rewrite index.pl
2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af
Portal: confirm template amelioration
2010-01-12 11:19:13 +00:00
Xavier Guimard
e642a1d270
PE_CONFIRM stop _Multi::try()
2010-01-12 11:19:12 +00:00
Xavier Guimard
bdbeda9494
i18n update
2010-01-12 11:12:46 +00:00
Clément Oudot
bea600dff4
Portal: info template amelioration
2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e
PE_CONFIRM target
2010-01-12 11:05:01 +00:00
Xavier Guimard
271c4767a8
Link to delete other sessions
2010-01-12 10:36:04 +00:00
Xavier Guimard
effa0b9fa6
Notify existing sessions and deleted sessions if wanted
2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d
Portal: little corrections
2010-01-11 16:58:57 +00:00
Xavier Guimard
d181da867b
* perltidy
...
* new feature : info can be displayed by portal => used to notify deleted sessions
* notifyDeleted in the manager
2010-01-11 16:04:36 +00:00
Clément Oudot
dc3d9558fe
Portal: create a grantSession stage in process()
2010-01-11 14:02:43 +00:00
Clément Oudot
cad747f629
Menu: use configuration instead of XML file - work in progress
2010-01-08 11:51:04 +00:00
Thomas CHEMINEAU
72e0247f03
fixes #314372 - introduce isAuthorizedURI SOAP function
2010-01-07 11:07:48 +00:00
Xavier Guimard
8102f72d50
POD updates :
...
* spelling errors found by Lintian
* encoding utf8
2010-01-03 08:09:59 +00:00
Xavier Guimard
5a5d3872fd
Update changelog
2009-12-31 13:35:34 +00:00
Clément Oudot
ee62c967b9
Reset password by mail for DBI backend
2009-12-30 19:42:17 +00:00
Xavier Guimard
11ed0e260f
Little bug: deconnection was made on a new window
2009-12-28 17:01:21 +00:00
Xavier Guimard
23ee91c414
Modify _DBI::checkPassword to make it reuseable by another module than AuthDBI
2009-12-22 08:46:54 +00:00
Clément Oudot
0a618cda34
Refactor DBI code in _DBI.pm and SMTP code in _SMTP.pm
2009-12-21 22:28:38 +00:00
Xavier Guimard
4d47d92749
* Debian upgrade for jquery management
...
* SQL injection protection for DBI
* Regexp to control user field
* Missing parameters in _Struct.pm
* Bad errors management in Uploader
2009-12-19 08:57:59 +00:00
Clément Oudot
a8601a0e5f
portalOpenLinkInNewWindow parameter
2009-12-17 14:10:39 +00:00
Clément Oudot
c667608dac
Portal::Error no more exists
2009-12-17 11:41:15 +00:00
Clément Oudot
5b82343808
Reorganize issuer methods in process()
2009-12-16 15:53:49 +00:00
Clément Oudot
578d0a0d59
Add in li classes to enable CSS icon customization in IE 6
2009-12-15 17:21:37 +00:00
Xavier Guimard
dcd4905342
* Update Perl and Debian dependencies, and debian/rules for the new manager
...
* Add pod skeleton for Manager.pm
* correct pod for IssuerDB*
2009-12-13 15:40:33 +00:00
Xavier Guimard
5b2363b959
perltidy
2009-12-11 21:17:06 +00:00
Xavier Guimard
b301a5b5c8
New manager
2009-12-11 18:17:00 +00:00
Xavier Guimard
04ed7be634
exported vars are now asked to the LDAP server (instead of *)
2009-12-10 21:48:43 +00:00
Clément Oudot
5499a042ab
Replace SAML* methods by IssuerDB* methods, allowing use of other IssuerDB modules
2009-12-10 17:03:57 +00:00
Clément Oudot
1f0b9ed10c
First implementation of Auth/UserDB/PasswordDB DBI
2009-12-10 11:30:43 +00:00
Clément Oudot
ad1af9b081
Add test script for UserDBEnv
2009-12-07 11:36:03 +00:00
Clément Oudot
3faa932908
New userDB module: UserDBEnv, allows to collect environment variable as session elements, very usefull with AuthSSL
2009-12-04 17:01:30 +00:00
Clément Oudot
e6425fc7eb
Do not display login form if there is an external authentication error
2009-12-04 15:12:40 +00:00
Clément Oudot
0cf5c8eec6
Apply patch for tabindex (close patch #314520 )
2009-12-04 10:13:59 +00:00
Clément Oudot
f55416d58d
Correct conf values in example files
2009-12-04 09:59:21 +00:00
Clément Oudot
65387caebe
Do not use allowempty flag in Config::IniFiles (close bug #314539 )
2009-12-04 09:44:37 +00:00
Clément Oudot
6a24eebcc7
Correct a bug if status is configured without localStorage, add a specific ErrorDocument for code 500
2009-12-03 15:45:13 +00:00
Clément Oudot
9d7e1a85c1
Move default values in setDefaultValues
2009-12-03 13:51:55 +00:00
Clément Oudot
36e8868e31
Add parameter cookieExpiration (close feature request #314368 )
2009-12-03 11:47:50 +00:00