dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6,970 Commits 3 Branches 0 Tags 75 MiB
7ec5ba2589
Commit Graph

1454 Commits

Author SHA1 Message Date
Clément OUDOT
0669303baf Display CAS responses in debug logs (#1420) 2018-05-11 21:58:59 +02:00
Christophe Maudoux
6293e1c93b Fix TOTP delete authorization bug 2018-05-07 22:49:39 +02:00
Christophe Maudoux
9307fcdbf1 Merge branch 'master' into llng-2.0-improvements 2018-05-07 19:29:59 +02:00
Christophe Maudoux
3afe82fe30 Modify redirect rule #1417 2018-05-07 17:37:51 +02:00
Xavier Guimard
273e84b342 Clean some Dumper usage (#1416) 2018-05-07 17:17:55 +02:00
Christophe Maudoux
388bd387cf Replace regex by display2fRegisters method 2018-05-01 22:05:06 +02:00
Christophe Maudoux
ed1229800a Display 2fregisters link only if at least a 2f device is registered (#1383) 2018-04-30 23:10:47 +02:00
Xavier Guimard
c673be7cf2 Set some default values in Attributes.pm (#595) 2018-04-30 18:06:15 +02:00
Christophe Maudoux
d1a1dad442 Update pod 2018-04-29 22:02:26 +02:00
Xavier Guimard
57715c8b69 Fix #1413 2018-04-28 09:09:34 +02:00
Xavier Guimard
564b34176b Fix rule if 0 (#1413) 2018-04-27 20:10:31 +02:00
Clément OUDOT
90dc78932e Fix error on undefined object method (#1413) 2018-04-27 15:57:07 +02:00
Xavier Guimard
baf0b90b68 Fix name error in rule (#1413) 2018-04-27 13:54:06 +02:00
Xavier Guimard
0283231dd9 Typo 2018-04-26 12:05:11 +02:00
Xavier Guimard
6557b2105a Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-04-26 12:01:54 +02:00
Xavier Guimard
6f87ae5078 Debug hook (#1413) 2018-04-26 12:01:40 +02:00
Clément OUDOT
d3db202488 forcedSAML is no more a Choice (#1256) 2018-04-26 11:44:03 +02:00
Xavier Guimard
023be4c4eb Bad object (#1413) 2018-04-26 07:46:49 +02:00
Xavier Guimard
6605ea1857 Eval() in init() (#1413) 2018-04-26 07:38:17 +02:00
Clément OUDOT
2d388c174a Condition on Choice tab (#1413) 2018-04-25 15:40:19 +02:00
Christophe Maudoux
98ff9bbc93 Typo (#1386) 2018-04-20 16:35:50 +02:00
Christophe Maudoux
6312ae367f Typo (#1386) 2018-04-20 16:35:38 +02:00
Christophe Maudoux
6ab28b03b0 Propage multi U2F verification (#1386) 2018-04-20 16:15:26 +02:00
Xavier Guimard
904947b43b Propage @maudoux changes to UTOTP (#1391) 2018-04-17 23:01:34 +02:00
Christophe Maudoux
f7f0255a86 Merge branch 'master' into portal-multi-U2F-registration 2018-04-17 22:01:25 +02:00
Christophe Maudoux
5420cb2abb Typo 2018-04-17 21:48:16 +02:00
Christophe Maudoux
bb97e804d2 Typo 2018-04-17 21:36:34 +02:00
Christophe Maudoux
b1dc72452a Multi U2F - Fix errors ;-) - IT WORKS !!! 2018-04-17 20:05:45 +02:00
Christophe Maudoux
06c14f5972 Security: avoid challenge replay (#1148) 2018-04-17 19:09:23 +02:00
Christophe Maudoux
9a96b38435 Apply U2F.patch 2018-04-17 18:09:18 +02:00
Xavier Guimard
797fa5b5c3 Security: avoid challenge replay (#1148) 2018-04-17 17:27:49 +02:00
Xavier Guimard
492ae116f8 Missing debug (#1148) 2018-04-17 12:06:09 +02:00
Christophe Maudoux
944682dbb5 Multi U2F - WIP 2018-04-14 21:09:08 +02:00
Christophe Maudoux
9f6e9e2dd4 Minor improvement & update lang (#1386) 2018-04-12 22:05:36 +02:00
Christophe Maudoux
6e25fa13bd Typo 2018-04-12 17:36:53 +02:00
Christophe Maudoux
51c6c97b03 Catch JSON errors (#1386) 2018-04-12 14:20:28 +02:00
Christophe Maudoux
0987f65804 Rollback 2018-04-11 23:31:57 +02:00
Christophe Maudoux
b5e61fab2e Fix compilation warnings due to undef variable & typo (#1386) 2018-04-11 23:14:58 +02:00
Xavier Guimard
3998054823 Catch JSON errors (#1386) 2018-04-11 09:54:40 +02:00
Christophe Maudoux
87a583dd51 Typo (#1386) 2018-04-10 16:15:14 +02:00
Christophe Maudoux
dae160c5e1 Merge branch 'master' into portal-multi-U2F-registration 2018-04-10 13:06:12 +02:00
Christophe Maudoux
c291cfced9 Enabled new 2F engine (#1386) 2018-04-10 11:06:06 +02:00
Xavier Guimard
e8e1cdf74f Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-04-10 08:48:12 +02:00
Xavier Guimard
d01a453f4e Avoid little warning (#595) 2018-04-09 22:33:59 +02:00
Christophe Maudoux
1bc83a242d New TOTP register engine - WIP 2018-04-09 17:25:22 +02:00
Xavier Guimard
8e81d31bc1 Add Yubico debug (#1148) 
Available with Crypt::U2F::Server >= 0.43
 2018-04-09 14:31:15 +02:00
Christophe Maudoux
59edb9fd56 Remove old 2F conf. parameter 2018-04-08 22:45:28 +02:00
Christophe Maudoux
9430bbae96 Modify 2F activation rules (#1386) 2018-04-08 22:09:16 +02:00
Christophe Maudoux
29834abbe0 Fix typo (#1386) 2018-04-07 13:22:06 +02:00
Christophe Maudoux
6a4c776367 Fix typo (#1386) 2018-04-06 16:38:07 +02:00
Christophe Maudoux
50970d8993 Use new Yubikey engine - WIP (#1386) 2018-04-06 00:10:41 +02:00
Christophe Maudoux
5bd5920b0f Truncate 2F device name (#1386) 2018-04-05 19:43:06 +02:00
Christophe Maudoux
e2effb46a1 Check if user can register one more device (#1386) 2018-04-05 19:08:29 +02:00
Christophe Maudoux
2134bfd366 Check if user can register one more device - WIP (#1386) 2018-04-05 17:58:42 +02:00
Christophe Maudoux
a3ba56aa12 Verify if max 2F devices is not reached (#1386) 2018-04-04 23:50:33 +02:00
Christophe Maudoux
ff9ef7aab3 Typo 2018-04-04 23:16:36 +02:00
Christophe Maudoux
3db93c49fe Modify $list2FDevices to $_2FDevices conf. entry (#1386) 2018-04-04 23:05:27 +02:00
Christophe Maudoux
612e2e37d1 Merge branch 'master' into portal-multi-U2F-registration 2018-04-03 23:04:16 +02:00
Christophe Maudoux
ee380f1f6b Typo 2018-04-03 23:03:29 +02:00
Clément OUDOT
a83c3f738e Fix date in register message (#1404) 2018-04-03 22:59:57 +02:00
Christophe Maudoux
ce08e5c899 Set default name and verify if user is authorized to unregister 2F (#1386) 2018-04-03 21:17:15 +02:00
Christophe Maudoux
40b69bb63f Merge branch 'master' into portal-multi-U2F-registration 2018-04-03 19:04:54 +02:00
Christophe Maudoux
6718cd304c Add epoch as default keyname if empty (#1386 2018-04-03 17:15:38 +02:00
Xavier Guimard
0623b4f9fe Add ini-only default values in DefaultValues.pm (#595) 2018-04-03 10:23:31 +02:00
Christophe Maudoux
0637601d8b Add delete function to TOTP & Yubikey - TODO : Verify if user is authorized to delete (#1386) 2018-04-03 00:01:01 +02:00
Christophe Maudoux
6cfdc20d42 Delete U2F key (#1386) 2018-04-02 23:19:56 +02:00
Christophe Maudoux
79674979c1 #1386 - Fix translation 2018-04-01 16:39:02 +02:00
Christophe Maudoux
0e84c1da3e #1386 - Add translation 2018-04-01 12:53:16 +02:00
Christophe Maudoux
b5fd14886d #1386 - Add tmpl loop and prevent that same key can be registered twice 2018-03-31 00:16:36 +02:00
Christophe Maudoux
53752276e4 #1386 - Fix warnings 2018-03-30 21:24:34 +02:00
Christophe Maudoux
869166cb31 #1386 - Add to list2FDevice name & epoch hash keys 2018-03-29 23:11:46 +02:00
Christophe Maudoux
961aea971a #1386 - Store 2ndF devices in list2FDevices (array of json) 2018-03-29 21:27:35 +02:00
Xavier Guimard
f42763c1de Typo 2018-03-26 10:33:04 +02:00
Xavier Guimard
a018a10fb1 Fix Yubikey errors (#1399) 2018-03-26 10:15:37 +02:00
Xavier Guimard
57708a6b3e Add dysplay2fRegisters() (#1383) 2018-03-22 18:28:36 +01:00
Xavier Guimard
991b1b19b3 Rename private sub (#1383) 2018-03-22 17:23:48 +01:00
Xavier Guimard
3836391adc Fix history bugs (fixes: #1401) 2018-03-21 20:48:31 +01:00
Xavier Guimard
aaaf5cfed4 Restrict CSP form-action to URL scheme (#1384) 2018-03-21 14:52:22 +01:00
Xavier Guimard
e89db33b5e Remove Auth::Yubikey (#1399) 2018-03-20 18:45:57 +01:00
Xavier Guimard
c6908b87a2 Yubikey 2nd factor (closes: #1399) 2018-03-20 18:19:53 +01:00
Xavier Guimard
396fc2362b Missing verification (#595) 2018-03-20 11:03:57 +01:00
Xavier Guimard
99ce15626e Restore challenge in verification (#1148) 2018-03-19 22:35:39 +01:00
Xavier Guimard
1d02a9e443 Fix an error in REST2F (#1398) 2018-03-19 17:34:21 +01:00
Xavier Guimard
d88ef701a8 Fix post form target (#1398) 2018-03-19 17:21:50 +01:00
Xavier Guimard
ee736d0cba Just in case... (#1398) 2018-03-19 16:58:26 +01:00
Xavier Guimard
42d53cec63 Typo (#1148 #1359) 2018-03-18 22:55:28 +01:00
Xavier Guimard
c14289bd72 Update 2F doc (#1148 #1359) 2018-03-18 22:53:41 +01:00
Xavier Guimard
8e1d55aaa9 Add test (#1391) 2018-03-18 22:32:42 +01:00
Xavier Guimard
05c77feebc Possibility to forbid U2F unregistration (#1148) 2018-03-18 22:20:05 +01:00
Xavier Guimard
e0b931191e Fix error on U2F (#1391) 2018-03-18 20:52:50 +01:00
Xavier Guimard
36e5f88316 Same policy change/unregister (#1359) 2018-03-18 14:55:56 +01:00
Xavier Guimard
9725a63396 More security options in TOTP (#1359) 2018-03-18 14:26:45 +01:00
Xavier Guimard
ffcc5dbd3e UTOTP auth part works (#1391) 2018-03-18 09:15:23 +01:00
Xavier Guimard
fc5f7f5a65 Revert U2F change included by error (#1386): work not finished 2018-03-17 20:37:31 +01:00
Xavier Guimard
c9616b6794 Typo (#1391) 2018-03-17 20:33:28 +01:00
Xavier Guimard
090033e24b Mixed TOTP/U2F auth skeleton (#1391) 2018-03-17 13:34:42 +01:00
Xavier Guimard
3f50519c7b Typo (#1148 #1359 #1391) 2018-03-15 22:45:03 +01:00
Xavier Guimard
7b5650d5fb 2F registration menu (#1148 #1359 #1391) 2018-03-15 22:35:59 +01:00
Xavier Guimard
3dcc4af9e7 Add logo 2018-03-15 22:22:20 +01:00
Xavier Guimard
e4b995f6a9 Spelling errors 2018-03-15 21:20:03 +01:00
Xavier Guimard
a1a96f68af Add 2F registration engine (#1148 #1359 #1391) 2018-03-15 07:04:52 +01:00
Xavier Guimard
b24503b636 Don't reuse Kerberos ticket (#1389) 2018-03-13 15:04:19 +01:00
Xavier Guimard
c833a18939 Destroy LDAP object (#595) 2018-03-13 14:43:12 +01:00
Xavier Guimard
3383a68a25 Tidy 2018-03-13 07:14:01 +01:00
Xavier Guimard
e0d83f5268 Fix some errors (#1395) 2018-03-12 06:43:47 +01:00
Xavier Guimard
2cce57991b Merge branch 'manager-u2f-module' into 'master' 
Manager u2f module

See merge request lemonldap-ng/lemonldap-ng!17
 2018-03-10 18:11:38 +01:00
Xavier Guimard
3356afdaa8 Little security (#1385) 2018-03-10 09:42:29 +01:00
Xavier Guimard
33c764855d Don't encode + (may fix: #1385) 2018-03-10 09:33:14 +01:00
Christophe Maudoux
3ec64aca1b Update icons 2018-03-09 23:40:22 +01:00
Christophe Maudoux
983400e0fa Fix some mistakes & Self unregistration both U2F key and TOTP without controle challenge 2018-03-09 22:32:42 +01:00
Xavier Guimard
ac0e35ca38 Update logos (#1148) 2018-03-09 16:51:15 +01:00
Xavier Guimard
8a434cc3f9 Type (#1390) 2018-03-09 16:50:44 +01:00
Xavier Guimard
6b9584989f Fix #1390 XSS for 2.0 2018-03-09 16:27:33 +01:00
Xavier Guimard
5c5556a865 2F choice works (#1148) 
TODO: logos
 2018-03-09 13:29:39 +01:00
Xavier Guimard
c0123b5a36 2F choice in progress (#1148) 2018-03-09 07:17:25 +01:00
Xavier Guimard
82299131be Typo 2018-03-08 22:25:56 +01:00
Xavier Guimard
d7ff6407a9 2F in progress (#1148) 2018-03-08 22:24:02 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
e9e820ecd1 2F manager in progress (#1148) 2018-03-08 18:51:01 +01:00
Xavier Guimard
67a530bc01 Second-Factor-Engine skeleton (#1148) 2018-03-08 16:33:34 +01:00
Christophe Maudoux
10f640753b Fix some mistakes & display sessions with U2F key registered only 2018-03-07 23:29:42 +01:00
Xavier Guimard
2c8c70470d Improve doc 2018-03-07 09:51:51 +01:00
Xavier Guimard
8de8846cec Update "unregistration" (#1348) 
@maudoux: please verify this commit
 2018-03-06 22:56:16 +01:00
Xavier Guimard
ca9a6ebb49 U2F is working now (#1148) 2018-03-06 22:50:40 +01:00
Xavier Guimard
a944faba47 Use new crypt object for each crypter operation (#1148) 2018-03-06 07:03:42 +01:00
Xavier Guimard
00d176627a Code was missing in REST call (#1379) 2018-02-23 09:51:14 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
f5ef05d320 REST external 2F skeleton (#1379) 2018-02-23 09:11:19 +01:00
Xavier Guimard
3d381edd6c Merge branch 'unregister-my-u2f-key' into 'master' 
Add self unregistration for u2f key (#1148)

See merge request lemonldap-ng/lemonldap-ng!14
 2018-02-22 06:41:01 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Christophe Maudoux
c5a3118541 U2F Self unregister key 2018-02-21 14:20:21 +01:00
Christophe Maudoux
fe28cbe7a0 Self unregister U2F key 2018-02-21 09:23:41 +01:00
Xavier Guimard
344b9db804 Manage rule (#1359) 2018-02-21 06:28:42 +01:00
Xavier Guimard
b9e2e91844 TOTP Portal part seems finished (#1359) 
TODO: Manager attributes
 2018-02-20 22:58:20 +01:00
Xavier Guimard
560341ea51 TOTP self registration in progress (#1359) 2018-02-20 18:36:34 +01:00
Xavier Guimard
09a47d72ba TOTP self registration skeleton (#1359) 2018-02-20 13:19:52 +01:00
Xavier Guimard
d37a384328 Move TOTP verification in Common (#1359) 
This Common module will be used also in admin interface
 2018-02-19 22:34:23 +01:00
Xavier Guimard
99dc9ed87b Bad 2F prefix (#1359) 2018-02-19 22:15:06 +01:00
Xavier Guimard
6a752a1a4b Move Auth::Base to Main::Auth 2018-02-19 22:11:43 +01:00
Xavier Guimard
c47a7c0d4f Update POD 2018-02-19 22:07:20 +01:00
Xavier Guimard
59cb7077fa TOTP verification skeleton (#1359) 2018-02-19 14:23:33 +01:00
Xavier Guimard
705be8f418 Move all second factor plugins in 2F directory 2018-02-19 14:15:29 +01:00
Xavier Guimard
dd87a2b3a7 Remove old menu methods in Lemonldap::NG::Portal::Main::Menu 
Fixes: #1367
 2018-02-12 18:55:42 +01:00
Xavier Guimard
d054288bc4 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-12 10:00:16 +01:00
Clément OUDOT
f95fab0408 Merge branch 'master' of gitlab.ow2.org:lemonldap-ng/lemonldap-ng 2018-02-08 22:40:12 +01:00
Clément OUDOT
a129f1e296 Allow CAS p3 URLs (#1362) 2018-02-08 22:40:06 +01:00
Xavier Guimard
584169d88c Set kerberos=0 in form when using Ajax (#1366) 2018-02-08 22:31:41 +01:00
Xavier Guimard
1251ae42e7 Typo 2018-02-08 15:20:51 +01:00
Xavier Guimard
252ac57692 Send dn when resetting LDAP password 
Fixes: #1353
 2018-01-25 15:53:52 +01:00
Xavier Guimard
057a8afcb2 #1353 in progress 2018-01-24 22:32:08 +01:00