Commit Graph

1113 Commits

Author SHA1 Message Date
Maxime Besson
15c3b0bbf8 Add Radius second factor (#1847) 2019-08-02 18:03:10 +02:00
Maxime Besson
c1afdbefac Add labels and logos to all 2F providers (#1873) 2019-08-01 17:27:14 +02:00
Christophe Maudoux
499b16bd07 Merge branch 'v2.0' 2019-07-31 16:34:38 +02:00
Christophe Maudoux
ecb3204d38 Append conf parameters (#1851) 2019-07-25 11:59:00 +02:00
Christophe Maudoux
c82fc0f572 Merge branch 'v2.0' 2019-07-23 16:03:10 +02:00
Maxime Besson
d82f776df8 Allow multi instanciation of 2F modules (#1860)
This commit adds a manager interface to declare multiple instances of a
single 2F module, in a manner similar to Combination.

An additional portal code reads the `sfExtra` variable to load the
declared modules.

An empty rules means the module will be always active.
2019-07-22 19:30:37 +02:00
Christophe Maudoux
8c776c0c27 Update langs (#1851) 2019-07-21 21:56:09 +02:00
Christophe Maudoux
ca7ebe09f7 WIP - REST service to remove notification (#1851) 2019-07-20 22:25:03 +02:00
Christophe Maudoux
15777cc74a Typo 2019-07-20 16:03:38 +02:00
Christophe Maudoux
b81ccf7517 Merge branch 'v2.0' 2019-07-19 10:13:33 +02:00
Christophe Maudoux
27116ca1af Improve unit tests & update version (#1853) 2019-07-19 10:09:07 +02:00
Christophe Maudoux
f515819c61 Fixed for XML request (#1853) 2019-07-19 10:06:23 +02:00
Christophe Maudoux
b705b10da8 Merge branch 'v2.0' 2019-07-17 12:26:55 +02:00
Clément OUDOT
64b091bac1 Do not allow to add a notification with the same reference (#1853) 2019-07-12 18:39:31 +02:00
Xavier Guimard
966eef33ee Fix df96168c error: _example/conf/lmConf-1.json is auto-generated (#1850) 2019-07-10 17:15:40 +02:00
Christophe Maudoux
b7c8d30b3f Merge branch 'v2.0' 2019-07-10 12:16:43 +02:00
Xavier Guimard
ee3d12d02f Fix warning in Logger::_Duplicate (Fixes: #1842) 2019-07-10 10:41:38 +02:00
Clément OUDOT
d45754d507 Update MANIFEST (#1842) 2019-07-08 14:11:53 +02:00
Christophe Maudoux
36c806fa61 make json 2019-07-07 22:30:24 +02:00
Christophe Maudoux
2aee0467b0 Hide _session_id with CheckUser (#1658) 2019-07-06 22:55:31 +02:00
Christophe Maudoux
2016abd2ee Send pdata cookie to cross domain (#1829) 2019-07-04 21:49:28 +02:00
Xavier
81d18516a8 Fix #1842 tests 2019-07-04 21:26:28 +02:00
Xavier
7aad1563c0 Duplicate userLogger into logger->debug (#1842) 2019-07-04 21:22:06 +02:00
Maxime Besson
6f058fb2fa Add manager manpages to deb 2019-07-03 15:17:16 +02:00
Xavier
6f365c9e43 Parallelize common/portal tests 2019-07-02 22:06:37 +02:00
Xavier
3b7a70e0b7 Merge branch 'v2.0' (with new tidy) 2019-07-02 20:12:11 +02:00
Xavier Guimard
c1137edba8 make tidy with perltidy-20181120 2019-07-02 20:03:40 +02:00
Xavier Guimard
af63d55c08 Merge branch 'v2.0' 2019-07-01 20:21:42 +02:00
Christophe Maudoux
b94cbe0144 Fix default value (#1825) 2019-07-01 13:28:01 +02:00
Xavier
7ffca14f5a Improve crypto test 2019-06-30 23:11:39 +02:00
Christophe Maudoux
1be79bce4b make json 2019-06-30 19:01:14 +02:00
Christophe Maudoux
a1f5791e06 Merge branch '1783' into v2.0 2019-06-30 19:00:41 +02:00
Christophe Maudoux
06d4faafe1 Merge branch 'v2.0' into 1825 2019-06-30 18:22:39 +02:00
Christophe Maudoux
0f5030e345 Merge branch 'v2.0' into 1783 2019-06-30 18:22:13 +02:00
Clément OUDOT
3f4ceb94f0 Update CLI help (#1832) 2019-06-30 17:51:30 +02:00
Christophe Maudoux
11d2909b0a WIP - Disable persistent sessions storage (#1825) 2019-06-29 21:10:16 +02:00
Christophe Maudoux
897d04ac93 Merge branch 'v2.0' into 1783 2019-06-28 22:05:48 +02:00
Xavier Guimard
43d5139040 Update versions 2019-06-28 17:04:14 +02:00
Xavier Guimard
8b7ce08587 Merge branch 'v2.0' 2019-06-28 14:35:30 +02:00
Xavier Guimard
44a6e25851 Improve cryptographic functions (#1823) 2019-06-28 10:30:37 +02:00
Xavier
c8d38d52a6 Merge branch 'crypto-improvements' 2019-06-27 22:15:19 +02:00
Xavier
cbde82bdfc Fix HMAC verif 2019-06-27 22:12:57 +02:00
Xavier
1a1ccd7568 Merge branch 'crypto-improvements' 2019-06-27 22:03:05 +02:00
Xavier
2fcaf52bcf Better random string generation (#1803) 2019-06-27 21:59:18 +02:00
Christophe Maudoux
8ad895c3b8 Merge branch 'v2.0' into 1783 2019-06-27 21:11:56 +02:00
Xavier
b1f12b72e5 Add MAC verification to crypto 2019-06-27 20:48:01 +02:00
Xavier Guimard
cc8c5e057e Use IV for *cryptHex methods 2019-06-27 19:36:01 +02:00
Xavier Guimard
9d5d1f6cd5 Don't use Crypt::URandom inside jail: this import file access libraries 2019-06-27 19:10:51 +02:00
Xavier Guimard
0b1643c294 Add an initialization vector in crypt methods 2019-06-27 18:39:01 +02:00
Clément OUDOT
e53129568a Set some default values for lemonldap-ng-cli info (#1827) 2019-06-27 17:29:56 +02:00
Xavier Guimard
72439d341f Merge branch 'v2.0' 2019-06-27 07:59:37 +02:00
Xavier Guimard
45a0b68c3b Disable external entities in XML parsers (Fixes: #1818) 2019-06-26 11:32:10 +02:00
Christophe Maudoux
0b567d6c15 Merge branch 'v2.0' into 1783 2019-06-25 20:23:48 +02:00
Xavier Guimard
1b4600b15c Merge branch 'v2.0' 2019-06-25 17:14:00 +02:00
Xavier Guimard
390ccb4f5b Fix Apache::Session::REST::get_key_from_all_sessions when using CODE (#1813) 2019-06-25 09:48:15 +02:00
Xavier Guimard
93ccb9fd76 Set Content-Length in Apache::Session::REST requests (#1813) 2019-06-25 09:37:37 +02:00
Xavier Guimard
ddde26fa1c Add searchOn() in Apache::Session::REST (#1813) 2019-06-25 09:18:58 +02:00
Christophe Maudoux
266f2fdf02 Merge branch 'v2.0' into 1783 2019-06-24 23:36:54 +02:00
Xavier
c5d6bc42b6 Add get_key_from_all_sessions in Apache::Session::REST (#1813) 2019-06-24 23:07:34 +02:00
Xavier Guimard
2cb221b4e0 Set cache_depth to 3 in local config cache (Fixes: #1814) 2019-06-24 18:51:15 +02:00
Christophe Maudoux
831a988516 Append conf test (#1783) 2019-06-23 22:55:10 +02:00
Christophe Maudoux
6e029c413f Merge branch 'v2.0' into 1783 2019-06-23 10:19:13 +02:00
Xavier
9e16e2b75c Merge branch 'v2.0' 2019-06-23 07:21:55 +02:00
Christophe Maudoux
b69ffc0ff8 WIP - ContextSwitching (#1783) 2019-06-21 15:23:06 +02:00
Xavier
50ba6e6144 Install nginx* files for all handlers (Fixes: #1811) 2019-06-20 12:51:00 +02:00
Xavier
c325c55e5c Use only Crypt::URandom for session id (#1808) 2019-06-19 19:14:31 +02:00
Christophe Maudoux
a2ebaf31b1 WIP - AdminImpersonation skeleton (#1783) 2019-06-19 18:13:17 +02:00
Xavier
4a58de0b92 Apache::Session::Generate::SHA256 improvements (#1808) 2019-06-19 08:30:38 +02:00
Christophe Maudoux
9ac5834bfe Merge branch 'v2.0' 2019-06-17 22:42:28 +02:00
Christophe Maudoux
9fa11709e6 Append options to use Notifications plugin & set notification reference (#1796) 2019-06-17 22:31:44 +02:00
Christophe Maudoux
c3b3c281ad Hide _2fDevices with REST services 2019-06-16 20:33:34 +02:00
Christophe Maudoux
d6f3dd459a Display message (#1796) 2019-06-16 16:02:48 +02:00
Christophe Maudoux
f514da3c3a Hide _2fDevices with REST services 2019-06-15 22:38:21 +02:00
Xavier
d27e4bcc55 Merge branch 'v2.0' 2019-06-15 09:23:50 +02:00
Christophe Maudoux
fde6ff2cc8 WIP (#1796) 2019-06-14 23:09:32 +02:00
Xavier Guimard
e7bc7b3f4e Add restExportSecretKeys option (#1799) 2019-06-14 08:51:58 +02:00
Xavier
5dc5b88daa Permit to show $_password in REST session server (#1799) 2019-06-14 07:09:55 +02:00
Xavier
a2454ff4cc Merge branch 'v2.0' 2019-06-12 21:44:39 +02:00
Xavier Guimard
ee95ac786f Workaround for #1655 2019-06-12 09:55:06 +02:00
Christophe Maudoux
aabb65629b Merge remote-tracking branch 'origin/v2.0' 2019-06-10 21:07:42 +02:00
Christophe Maudoux
b71f678f80 Filter SSO groups to merge (#1791) 2019-06-08 22:08:58 +02:00
Christophe Maudoux
3015faef0e Share functions with Safe (#1717) 2019-06-07 11:26:07 +02:00
Xavier Guimard
ee661fc61d Merge branch 'v2.0' 2019-06-04 17:59:55 +02:00
Christophe Maudoux
132e57b4b3 Manage CORS headers (#1765) 2019-05-31 17:00:39 +02:00
Christophe Maudoux
59f6106ba6 Merge remote-tracking branch 'origin/v2.0' 2019-05-31 00:16:07 +02:00
Xavier
20ef62e4fb Add restore command to cli (#1770) 2019-05-30 10:18:41 +02:00
Xavier
4970787dd6 update doc 2019-05-30 09:48:43 +02:00
Xavier
a09e299b3d Rename dump command to save (#1770) 2019-05-30 09:43:28 +02:00
Xavier
00852d1a66 Add dump() command in cli
Closes: #1770
2019-05-30 09:39:36 +02:00
Xavier
f75093d433 Merge branch 'v2.0' 2019-05-28 22:12:50 +02:00
Xavier Guimard
8fd3f6be90 Merge branch 'issue1521-appmenu' into 'v2.0'
Preserve applicationList key names (#1521)

See merge request lemonldap-ng/lemonldap-ng!76
2019-05-28 22:10:53 +02:00
Xavier
db2ee96bc8 Update versions (#1777) 2019-05-28 22:04:45 +02:00
Xavier
acd6ba50e8 Fix some missing $req (#1777) 2019-05-28 19:52:08 +02:00
Maxime Besson
b12992755f Preserve applicationList key names (#1521)
Previously, every configuration save from the manager would overwrite
applicationList key names to preserve their ordering.

This commit introduces a new "order" key in the JSON config instead.
2019-05-28 15:38:26 +02:00
Xavier Guimard
2da63b7283 Fix bad cache management on configuration saving
Closes: #1754
2019-05-27 16:34:04 +02:00
Xavier Guimard
1509d44d5f Merge branch 'v2.0' 2019-05-27 12:03:45 +02:00
Christophe Maudoux
535ae3f7be Append ServiceToken TTL option (#1773) 2019-05-26 21:43:13 +02:00
Christophe Maudoux
73fd322e60 Update lemonldap-ng.ini (#1773) 2019-05-26 18:35:03 +02:00
Christophe Maudoux
74c5f50e89 Append option to modify ServiceToken TTL (#1773) 2019-05-26 18:24:08 +02:00
Xavier Guimard
4678649367 Merge branch 'v2.0' 2019-05-24 10:23:40 +02:00
Xavier
8c562c7817 Modularize Display/login (#1652) 2019-05-17 10:26:45 +02:00
Xavier Guimard
5a1c090a18 Merge branch 'v2.0' 2019-05-17 10:26:19 +02:00
Xavier
a2e78c88c3 Set versions 2019-05-16 20:42:31 +02:00
Maxime Besson
3a8b6da81a Add date and PID to default stderr logger
When using Apache or docker, the default Std logger does not write a
timestamp.

This format (poorly) imitates the error_log format so that LLNG messages
will stand out a little less in apache logs. And so that our docker
users can have timestamped messages
2019-05-16 17:39:20 +02:00
Maxime Besson
2f9c7b787e Change default syslog format to include [level]
The default configuration of syslog/journald in pretty much all
environments does not include the log level in the message

This means that it's hard to know which log messages are important and
which aren't at a glance, especially in `debug` level.

This commit should make debugging a lot easier by default.

Savvy users who need precise control on the syslog format should
probably use Log4Perl
2019-05-16 14:02:37 +02:00
Xavier Guimard
bdc68d5833 Merge branch 'v2.0' 2019-05-15 14:25:57 +02:00
Clément OUDOT
332fb4f9da Update version in module dependencies 2019-05-12 16:22:50 +02:00
Xavier
224307515f Merge branch 'v2.0' 2019-05-11 20:25:11 +02:00
Xavier
f3c4ea0afb Tydy 2019-05-11 20:18:43 +02:00
Xavier
000db1536b Update versions 2019-05-11 17:37:56 +02:00
Xavier
8897fd49b3 Don't filter on session_kind with REST (#1742)
Same to do with SOAP
2019-05-11 15:29:29 +02:00
Xavier
2351251c49 #1742 in progress... 2019-05-11 09:32:50 +02:00
Xavier Guimard
1cd50bb353 Fix Auth::Remote session kind (#1742) 2019-05-10 18:02:56 +02:00
Xavier Guimard
55eeb303a2 Verify session kind if given (#1742)
This breaks AuthRemote
2019-05-10 17:35:10 +02:00
Xavier
4ed5c282a2 Fix syntax error 2019-05-10 06:19:54 +02:00
Christophe Maudoux
e9b26bb79a Merge remote-tracking branch 'origin/master' into favapps 2019-04-30 21:57:46 +02:00
Xavier
29b71569de Merge branch 'v2.0' 2019-04-30 21:03:14 +02:00
Clément OUDOT
d388461909 Add PKCE option in Manager (#1722) 2019-04-29 17:35:23 +02:00
Clément OUDOT
8e6f678be7 Create a configuration option to allow a Relying Party to be a public client
Allow unauthenticated requests on OAuth2 token endoint

#1725
2019-04-29 10:02:16 +02:00
Maxime Besson
2f9e6aa623 Allow override of username attribute for CAS apps
Global CAS options allows the admistrator to set the session attribute
that gets exported to all CAS application as the main identifier
(cas:user)

This commit adds the ability to override this configuration for a
particular CAS application.

OIDC already allows this

Fixes #1713
2019-04-28 21:06:34 +02:00
Christophe Maudoux
aea313e2e6 Use activation rule (#1689) 2019-04-25 23:02:37 +02:00
Christophe Maudoux
7a2f104ba8 Build struct 2019-04-23 21:59:56 +02:00
Christophe Maudoux
8460e47b49 Merge remote-tracking branch 'origin/master' into favapps 2019-04-23 21:58:09 +02:00
Xavier
c968b39715 Merge branch 'v2.0' 2019-04-22 23:30:12 +02:00
Clément OUDOT
06a7c97fd8 Add OAuth2 vhostType (#1146) 2019-04-22 19:10:50 +02:00
Christophe Maudoux
48d51b1c5e Merge remote-tracking branch 'origin/master' into favapps 2019-04-21 22:34:31 +02:00
Christophe Maudoux
3491adbd3d Upgrade default authentication level (#1699) 2019-04-21 21:30:38 +02:00
Christophe Maudoux
3672d934d9 Set Viewer options by using rules (#1661) 2019-04-21 11:58:13 +02:00
Xavier
2f3f1bd99b Merge branch 'v2.0' 2019-04-17 20:25:04 +02:00
Xavier Guimard
d0e5be2797 Enable Finnish on portal 2019-04-17 17:58:55 +02:00
Xavier Guimard
69fdc95229 Enable german on portal 2019-04-17 17:56:28 +02:00
Xavier Guimard
889c1da46e Enable italian language in default install 2019-04-17 17:16:01 +02:00
Xavier Guimard
bd94c5579d Merge branch 'v2.0' 2019-04-16 13:39:31 +02:00
Xavier Guimard
5fd9e9d422 Fix boolean values for YAML
Closes: #1684
2019-04-15 11:44:11 +02:00
Christophe Maudoux
e490addd2d WIP - favApps skeleton (#1689) 2019-04-14 22:34:58 +02:00
Xavier
27bf1ea3d8 Merge branch 'v2.0' 2019-04-11 22:12:02 +02:00
maudoux
1d08372a8c Sort CAS servers & update langs (#1704) 2019-04-10 21:58:37 +02:00
Antoine ROSIER
f7b296b032 Sorting OIDc (#1704) 2019-04-10 17:06:41 +02:00
Antoine ROSIER
8636da45be Sorting SAML idp (#1704) 2019-04-10 17:06:41 +02:00
Clément OUDOT
ae3a728378 Manage template inclusion when file is not in configured portal theme (#1653) 2019-04-10 15:42:58 +02:00
Xavier
4d7a3b8a33 Merge branch 'v2.0' 2019-04-09 22:30:05 +02:00
Xavier
804a996810 Update versions 2019-04-09 22:04:19 +02:00
Xavier
046585020f Allow hashes in Combination module overload (Closes: #1707) 2019-04-09 21:01:55 +02:00
maudoux
02c473c919 Update ConfTree (#1699) 2019-04-05 22:39:58 +02:00
Xavier Guimard
01b5951b73 Merge branch 'v2.0' 2019-04-05 10:10:40 +02:00
Xavier Guimard
2159957c34 Update versions 2019-04-05 09:54:43 +02:00
maudoux
5b67f1f743 Use rule to enable OTT (#1694) 2019-04-03 23:28:45 +02:00
maudoux
fe248d194d Typo 2019-04-03 22:13:53 +02:00
Xavier Guimard
ece9b21219 Remove trailing whitespaces 2019-04-03 14:15:16 +02:00
Xavier Guimard
141ba96c92 Update version 2019-04-03 13:53:56 +02:00