Commit Graph

257 Commits

Author SHA1 Message Date
Clément OUDOT
06a7c97fd8 Add OAuth2 vhostType (#1146) 2019-04-22 19:10:50 +02:00
Christophe Maudoux
3491adbd3d Upgrade default authentication level (#1699) 2019-04-21 21:30:38 +02:00
maudoux
02c473c919 Update ConfTree (#1699) 2019-04-05 22:39:58 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
maudoux
b7a826abfd Make json (#1661) 2019-04-01 14:57:41 +02:00
Christophe Maudoux
e7f21b2c73 Append Viewer SPA (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
71fc765d01 WIP - Inherits Conf.pm (#1661) 2019-03-15 15:40:08 +01:00
Christophe Maudoux
bfa7482a1f WIP - Hidden ConfTree PK (#1661) 2019-03-15 15:40:08 +01:00
Clément OUDOT
d620ae2e8b Merge branch 'maxbes/lemonldap-ng-saml-issuer-entityid-override' into v2.0 2019-03-13 10:30:16 +01:00
Christophe Maudoux
be28b60e66 Append identities rule (#1658) 2019-03-09 23:29:10 +01:00
Christophe Maudoux
09281f8d22 Append identities rule and fix error catching (#1664) 2019-03-08 11:39:19 +01:00
Christophe Maudoux
a9fbec3f84 Revert - Allow figures in login (#1667) 2019-03-07 10:39:08 +01:00
Christophe Maudoux
a076459bdd Allow figures in login (#1667) 2019-03-07 09:00:24 +01:00
Christophe Maudoux
7b08a7c442 Rename idSpoofing plugin to Impersonation & all relative parameters (#1664) 2019-03-06 16:30:56 +01:00
Christophe Maudoux
e09c136302 Change fa icon color (#1664) 2019-03-05 15:07:54 +01:00
Maxime Besson
25d1c45fd4 Add new option to override EntityID when acting as IDP 2019-03-04 09:33:10 +01:00
Christophe Maudoux
228a37c0d2 WIP - Append parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
f9db9a0258 WIP - Append conf. parameters (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
3bb7f6e664 WIP - Create session (#1664) 2019-03-03 21:27:27 +01:00
Christophe Maudoux
81a37e5bcc Dispatching attributes (#1658) 2019-03-01 12:36:37 +01:00
Christophe Maudoux
1ea6e92533 WIP - checkUser append translations and parameters (#1658) 2019-02-25 20:10:57 +01:00
Christophe Maudoux
557539805a WIP - checkUser hide secret attributes (#1658) 2019-02-23 23:24:13 +01:00
Christophe Maudoux
30148caf2d WIP - checkUser hide secret attributes (#1658) 2019-02-23 23:02:42 +01:00
Christophe Maudoux
697882bd45 WIP - checkUser plugin skeleton (#1658) 2019-02-23 09:35:43 +01:00
Christophe Maudoux
a0c49a8905 Append parameter (#1632) 2019-02-14 22:10:48 +01:00
Clément OUDOT
8304a48073 Remove trustedProxies option (#1612) 2019-02-08 11:14:22 +01:00
Xavier Guimard
a549e62657 Add Auth::GPG parameters (#1569) 2019-02-05 11:51:39 +01:00
Xavier Guimard
c5a3687040 Merge remote-tracking branch 'max/fix-redir' into v2.0 2019-02-03 22:48:43 +01:00
Christophe Maudoux
e41be10a23 Improve RegExp (#1629) 2019-02-03 21:48:49 +01:00
Maxime Besson
e028088f88 Add the ability to detect HTTPS from web server env
This commit adds a new "Default" option for the global HTTPS setting. In
this mode, the handler will refer to the HTTPS env variable to know if it's
being accessed over HTTPS or not. An administrator is of course still
free to force HTTPS by setting it either globally or per-VHost
2019-02-03 20:12:53 +01:00
Maxime Besson
f35a7c305a Add Mail second factor plugin 2019-02-03 14:46:40 +01:00
Maxime Besson
faa748f68f Add Mail second factor plugin 2019-02-03 14:43:44 +01:00
Christophe Maudoux
96b93a56c1 Partial revert rename parameters (#1605) 2019-01-24 19:45:43 +01:00
Christophe Maudoux
ce809fc80c Improve manager tree (#1616) 2019-01-19 14:27:00 +01:00
Christophe Maudoux
b486735d46 WIP - Split mailReset plugin and SMTP parameters (#1616) 2019-01-16 22:57:35 +01:00
Xavier Guimard
2ab385e2df Update versions 2019-01-09 13:42:30 +01:00
Xavier Guimard
9ebc18ca5d Update version 2018-12-18 13:13:15 +01:00
Christophe Maudoux
aa45cf148a Append bruteForce Protection number of allowed failed Login parameter (#1506) 2018-12-12 23:51:33 +01:00
Clément OUDOT
9cb56173db Configure timeout for configuration reload (#1553) 2018-11-26 08:21:00 +01:00
Christophe Maudoux
fdfeb9331b make json 2018-11-15 22:39:05 +01:00
Christophe Maudoux
32affcc0f3 make json 2018-11-15 22:38:43 +01:00
Christophe Maudoux
72b42a516f Append reset password retries number parameter (#1508) 2018-11-15 21:16:46 +01:00
Christophe Maudoux
c3ee16ec28 Append handler internal cache timeout parameter (#1535) 2018-11-09 21:35:51 +01:00
Christophe Maudoux
87c85c5b01 Append manager option to enable langs display (#1539) 2018-11-07 20:10:31 +01:00
Christophe Maudoux
3211236904 Set default formAction CSP (#1499) 2018-10-30 20:32:20 +01:00
Christophe Maudoux
4df8ce2c0e Set formAction CSP from Manager (#1499) 2018-10-18 19:51:50 +02:00
Christophe Maudoux
c2da030b95 BruteForceProtection plugin disable by default 2018-10-10 23:12:38 +02:00
Christophe Maudoux
7a1117d4c4 Append Portal main logo option in Manager (#1515) 2018-10-08 23:02:59 +02:00
Christophe Maudoux
8d7afa75a3 Append portalForceAuthn option in Tree (#1507) 2018-10-03 22:32:37 +02:00
Christophe Maudoux
a6c461f7b6 WIP - Rename plugin PortalForceAuthn (#1507) 2018-10-03 21:27:09 +02:00
Christophe Maudoux
85c6ad2498 WIP - Append PortalForceReAuthn (#1507) 2018-10-03 21:07:10 +02:00
Christophe Maudoux
d4eb025de3 Append BruteForceProtection (#1506) 2018-09-28 19:50:01 +02:00
Christophe Maudoux
31a689340d Rename BruteForceProtection plugin (#1506) 2018-09-23 11:09:04 +02:00
Christophe Maudoux
312e152bcc Append brutForceProtection plugin (#1506) 2018-09-22 19:26:21 +02:00
Xavier Guimard
bf7d85532d Replace bool by boolOrExpr for sfRequired + partial revert (#1487) 2018-08-15 20:42:08 +02:00
Christophe Maudoux
1bebba42c3 WIP - Partial revert and debug messages appended to test (#1480) 2018-08-08 09:51:06 +02:00
Christophe Maudoux
6619e56714 WIP - Add CSP form-action attribute in LLNG conf. Need more tests (#1480) 2018-08-07 23:54:42 +02:00
Christophe Maudoux
3e85f1f68f Fix conf options (#1482 & #1483) 2018-07-22 22:35:30 +02:00
Clément OUDOT
8a4adfd384 Configure Facebook user field (#1322) 2018-06-22 18:16:24 +02:00
Clément OUDOT
7eb24abe3c Configure Twitter user field (#1322) 2018-06-22 17:44:41 +02:00
Xavier Guimard
ff0c8029db Change oidc content key for removal (#1431) 2018-06-20 21:38:26 +02:00
Xavier Guimard
f5971ad98d Set configuration checkTime (#1454) 2018-06-15 19:00:14 +02:00
Clément OUDOT
ea8817f3ff Use SHA1 as default value (#1247) 2018-06-12 22:35:00 +02:00
Clément OUDOT
28c4429b75 Configuration for SAML signature method (#1247) 2018-06-12 18:22:21 +02:00
Xavier Guimard
c673be7cf2 Set some default values in Attributes.pm (#595) 2018-04-30 18:06:15 +02:00
Christophe Maudoux
2185f0ef27 Add Max2FDevices & Max2FDevicesNameLength attributes (#1386) 2018-04-04 23:14:25 +02:00
Christophe Maudoux
dc3336e8b1 Add manager userAuthorizedtoDelete entries (#1386) 2018-04-03 22:57:30 +02:00
Xavier Guimard
0623b4f9fe Add ini-only default values in DefaultValues.pm (#595) 2018-04-03 10:23:31 +02:00
Xavier Guimard
e89db33b5e Remove Auth::Yubikey (#1399) 2018-03-20 18:45:57 +01:00
Xavier Guimard
c6908b87a2 Yubikey 2nd factor (closes: #1399) 2018-03-20 18:19:53 +01:00
Xavier Guimard
05c77feebc Possibility to forbid U2F unregistration (#1148) 2018-03-18 22:20:05 +01:00
Xavier Guimard
799109caca UTOTP manager part (#1391)
ToDo: self-registration + tests
2018-03-18 09:30:08 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Xavier Guimard
2d58b3f9f6 TOTP Manager part (#1359) 2018-02-21 06:48:06 +01:00
Clément Oudot
8a07f47e77 Add krbRemoveDomain parameter (#707) 2017-11-06 15:19:06 +00:00
Clément Oudot
6823a6e09e Fix default value for registerUrl (#1325) 2017-11-02 17:04:03 +00:00
Xavier Guimard
6ee5509f70 Add registerUrl (fixes: #1325) 2017-11-02 16:16:21 +00:00
Xavier Guimard
bf1cf4c4f5 Display OIDC Consent tab if needed (#826) 2017-09-15 10:34:43 +00:00
Xavier Guimard
5b5e5db123 OpenID Connect consent skeleton (#826) 2017-09-15 10:32:15 +00:00
Clément Oudot
00e7cea00c LinkedIn parameters in Manager for 2.0 (#1243) 2017-06-23 14:47:03 +00:00
David COUTADEUR
80f5d06e82 perl tidy 2017-06-23 09:57:07 +00:00
David COUTADEUR
6533b0a36b first working version of dynamic hash passwords in trunk (LEMONLDAP-1245) 2017-06-23 09:23:29 +00:00
Clément Oudot
56254f1d4f Apply commit 6513 to trunk (#1218) 2017-04-27 10:21:46 +00:00
Xavier Guimard
6e38097176 Don't enable SMTP by default 2017-04-13 20:08:54 +00:00
Xavier Guimard
dec57ba3f5 Move CAS Server options to CTrees (#1183) 2017-04-12 16:45:52 +00:00
Xavier Guimard
43ece77749 Remove unused CAS_pgtFile parameter (#1183) 2017-04-12 16:45:45 +00:00
Xavier Guimard
fbbe3aaf9b Unable Auth::Kerberos in Manager (closes: #707) 2017-04-11 13:21:35 +00:00
Xavier Guimard
388e313250 Update Null level 2017-03-30 05:11:02 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
03339738b7 Remove unsafe authorization (#1184) 2017-03-16 06:30:30 +00:00
Xavier Guimard
a07e92759c Add Auth::PAM (#closes: #1196) 2017-03-14 15:34:10 +00:00
Clément Oudot
f1804db2c7 Allow unsafe-inline styles for portal skin background (#1184 / #LEMONLDAP-1138) 2017-03-14 13:51:30 +00:00
Xavier Guimard
ffbd92745c Set default value to 1 for captcha_mail (#595) 2017-03-14 12:24:45 +00:00
Xavier Guimard
85ad473cd7 Authorize data: images in CSP header (#1138) 2017-03-14 12:08:01 +00:00
Xavier Guimard
7f460429e1 OIDC OP2RP logout in progress (#1194) 2017-03-10 11:39:19 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
09f13b1b00 Notification server SOAP/REST (#595) 2017-02-19 17:04:49 +00:00
Xavier Guimard
697ebfdf8e Move default mail subjects in JSON (may close #1033) 2017-02-19 08:07:21 +00:00
Xavier Guimard
88dd1201ef Remove local-only parameters (#1160) 2017-02-13 16:48:39 +00:00
Xavier Guimard
7d27259e64 Create a "Same" value for userDB and remove some other 2017-02-05 09:13:20 +00:00
Xavier Guimard
41da50b8ca U2F registration works (#1148) 2017-02-03 17:14:13 +00:00
Xavier Guimard
a14d718351 U2F skeleton (#1148) 2017-02-02 21:48:32 +00:00
Xavier Guimard
a08d2f6433 Remove BrowserID parameters (see #602) 2017-02-01 10:32:03 +00:00
Xavier Guimard
7a3725db9d Pwd reset in progress (#595) 2017-01-29 09:11:27 +00:00
Xavier Guimard
234551387f Captcha and token in progress (#1140) 2017-01-24 22:05:07 +00:00
Xavier Guimard
a9e8dcf276 Don't store 'false' values in default 2017-01-24 21:02:04 +00:00
Xavier Guimard
b70dac9f3a CSP in progress (#1138) 2017-01-19 06:09:20 +00:00
Xavier Guimard
04585cf188 Prepare Content-Security-Policy for portal (#1138) 2017-01-18 22:36:03 +00:00
Xavier Guimard
6b2dbd6482 Add portal status plugin (#595) 2017-01-16 21:00:50 +00:00
Xavier Guimard
c5309a6e35 Remove registerUrl: fixed to /register (#595) 2017-01-14 08:17:38 +00:00
Xavier Guimard
1b88459c31 Remove samlIDPSSODescriptorSingleSignOnServiceSOAP from everywhere 2017-01-13 08:17:20 +00:00
Xavier Guimard
10509e2a52 REST in progress (#970) 2017-01-09 06:11:30 +00:00
Xavier Guimard
d1646392a9 Split soap/rest server in config/sessions (#970) 2017-01-08 08:42:16 +00:00
Xavier Guimard
b28fbd23aa Add "rest" parameter (#970) 2017-01-06 16:18:43 +00:00
Xavier Guimard
b94a337a05 Optimize checksession endpoint (#595) 2017-01-04 22:19:17 +00:00
Xavier Guimard
d35e24703e Remove old Google auth (#595)
Google OpenId endpoints now points to OpenId-Connect configuration
2017-01-03 06:09:29 +00:00
Xavier Guimard
c14bd95d92 Import some 1.9.7 changes 2016-12-29 06:25:07 +00:00
Xavier Guimard
310896e6a1 Don't store default values for sub parameters 2016-12-03 18:26:56 +00:00
Clément Oudot
c48ee9d3e3 Apply modification for oidcRPMetaDataOptionsExtraClaims to trunk (#1105) 2016-11-15 16:04:43 +00:00
Clément Oudot
fdf74d2f3a Apply patch on Manager in trunk (#1088) 2016-10-04 09:07:55 +00:00
Clément Oudot
fc878c0545 Apply patch on Manager in trunk (#1087) 2016-09-29 19:24:58 +00:00
Clément Oudot
91b7ac93b1 Apply bypass consent option to trunk (#1089) 2016-09-27 13:23:29 +00:00
Clément Oudot
47c227246b Port option to store ID token in trunk (#1083) 2016-09-13 13:40:02 +00:00
Clément Oudot
5d2be9a418 Port SAML Token options in trunk (#1083) 2016-09-13 12:04:30 +00:00
Clément Oudot
7b4e3e4904 Port timeoutActivityInterval to trunk (#1001) 2016-09-12 09:49:40 +00:00
Clément Oudot
cfff6103a7 Change default values for SAML security parameters (#1079) 2016-09-06 09:49:45 +00:00
Clément Oudot
e141c2482a Add IDP resolution rule in Manager (#1076) 2016-08-31 08:32:32 +00:00
Clément Oudot
3a6978dad8 Add option to decode UTF8 SAML attributes (#1045) 2016-07-08 14:14:37 +00:00
Clément Oudot
35eb674b33 Manage values for samlIDPMetaDataOptionsSLOBinding (#1046) 2016-06-21 12:40:43 +00:00
Xavier Guimard
e370416bc1 Add issuerDBGet parameters (#1025) 2016-06-03 11:34:14 +00:00
Xavier Guimard
4cde65c825 Set default values for BrowserID parameters (#595) 2016-05-23 21:52:26 +00:00
Clément Oudot
085ac82587 Add ldapAllowResetExpiredPassword parameter in trunk Manager (#1011) 2016-05-11 13:12:17 +00:00
Xavier Guimard
ce0f0d09c4 s/CAS_/CAS/ 2016-03-31 20:08:40 +00:00
Xavier Guimard
2d2edb61ac Merge experimental branch (#960)
Also update version to 2.0
2016-03-17 22:19:44 +00:00
Xavier Guimard
7ac07074ae Update versions 2016-03-03 20:25:16 +00:00
Clément Oudot
607641dcfd Possibility to use certificate in SAML response (#836) 2016-02-01 16:42:15 +00:00
Xavier Guimard
4f3a42ba48 Manage Ajax requests redirection with 401 (new parameter noAjaxHook) 2016-01-28 06:43:46 +00:00
Clément Oudot
3d1a70ad0e Add default attributes for an RP (#892) 2016-01-21 17:17:44 +00:00
Clément Oudot
ee105c4ead Add default attributes for an OP (#892) 2016-01-21 17:17:43 +00:00
Clément Oudot
ac722bdbbf Do not set default value for prompt (#820) 2016-01-21 14:19:31 +00:00
Xavier Guimard
d877623f6d Default value must not be a scalar for hash containers (#882) 2016-01-12 09:34:02 +00:00
Clément Oudot
1dc99ce818 Improve OpenID Connect configuration (#820) 2016-01-11 16:59:44 +00:00
Clément Oudot
94612f1eb3 Modify oidcServiceMetadataIssuer attribute (#820) 2016-01-11 15:12:49 +00:00
Clément Oudot
58a5f51d93 Change default value for portalForceAuthnInterval (#820) 2016-01-06 15:58:40 +00:00
Xavier Guimard
93b3522e12 Restore subs (were transformed in "DUMMY") + doc 2015-12-30 20:16:15 +00:00
Xavier Guimard
ae675692c4 +Attribute to change LDAP alias dereference (Closes: #787) 2015-12-28 11:58:53 +00:00
Xavier Guimard
452d9207ee Little things 2015-12-28 05:29:34 +00:00