Commit Graph

405 Commits

Author SHA1 Message Date
Clément Oudot
9bb7adb3c3 SAML: catch artefact resolution URL 2010-04-08 11:03:53 +00:00
Clément Oudot
e34c8409b1 SAML: escape URL strings in regexp 2010-04-08 10:16:13 +00:00
Clément Oudot
fb9f964515 SAML: move use POSIX from AuthSAML to _SAML 2010-04-08 09:43:28 +00:00
Clément Oudot
cdaea23ac5 SAML: create methods to convert timestamp and SAML2 dates, and set all dates in assertion created by IDP 2010-04-08 09:39:53 +00:00
Clément Oudot
89bf4a6630 SAML: build assertion 2010-04-07 16:37:23 +00:00
Clément Oudot
ecf5612e4f SAML:
* Build artifact or complete SSO reponse message
* Send SSO response message
* Correct a bug when loading relayState in POST fields
2010-04-07 15:14:17 +00:00
Clément Oudot
f9e8ce7092 SAML: validate request message 2010-04-07 12:27:50 +00:00
Clément Oudot
7859ba292a SAML: trust hidden fields when they are present 2010-04-07 10:11:21 +00:00
Thomas CHEMINEAU
341f9f944f SAML: first work on issuerForAuthUser into IssuerDBSAML.pm 2010-04-02 16:19:10 +00:00
Thomas CHEMINEAU
0974c128ec SAML: fix a little bug 2010-04-02 15:34:44 +00:00
Thomas CHEMINEAU
7202a6651f SAML: manage hidden values for SAML authentication request 2010-04-02 15:28:29 +00:00
Clément Oudot
119386dca7 SAML: use checkMessage in AuthSAML 2010-04-02 14:47:17 +00:00
Clément Oudot
e21b4c936a SAML: intercept artefact resolution URL in SP 2010-04-02 11:41:44 +00:00
Thomas CHEMINEAU
fa039d2114 Store hidden informations in forms
* SAML: store SAMLRequest in IssuerDBSAML, just before to redirect to IDP
  * Simple: add functions to manage hidden values for forms
2010-04-02 09:17:02 +00:00
Clément Oudot
f87d6b9b3d SAML: IDP requestedAuthnContext option 2010-04-01 16:32:51 +00:00
Clément Oudot
a11caf800f SAML: IDP isPassive option 2010-04-01 14:40:29 +00:00
Clément Oudot
bb86139ce4 SAML: work on SSO/SLO signature options 2010-04-01 14:18:37 +00:00
Clément Oudot
6d505c9468 SAML: IDP option to validate SSO response signature -not working now 2010-04-01 12:51:32 +00:00
Clément Oudot
70f853e681 SAML: IDP option to sign SSO requests 2010-04-01 09:55:33 +00:00
Clément Oudot
7f91ef3c83 SAML: was set too late 2010-03-26 16:47:17 +00:00
Thomas CHEMINEAU
ba6bb76549 SAML:
- Move part of the code into _SAML.pm so that it could be reused;
- Create the method checkMessage that check SAML requests and responses.
2010-03-26 16:02:27 +00:00
Thomas CHEMINEAU
e7103c56c5 SAML: implementing issuerForUnAuthUser 2010-03-26 13:56:37 +00:00
Clément Oudot
07c528d6fd SAML: update POD 2010-03-26 09:35:31 +00:00
Clément Oudot
53d5212068 SAML: remove HTTP-GET binding since it is not supported by SAML2 (replaced by HTTP-REDIRECT) 2010-03-25 16:43:34 +00:00
Thomas CHEMINEAU
b67654d42d SAML: code to load SP metadata 2010-03-25 14:44:38 +00:00
Thomas CHEMINEAU
dec9d562d8 SAML: work in progress in IssuerDBSAML 2010-03-25 11:24:52 +00:00
Thomas CHEMINEAU
a3a80947bc SAML: move code that load SAML services and IDPs into _SAML 2010-03-25 11:01:32 +00:00
Clément Oudot
409ceb953c SAML: option to adapt session _utime with SessionNotOnOrAfter 2010-03-25 10:02:53 +00:00
Clément Oudot
bc7df7b3bc SAML: correct NAME POD section to prevent lintian warning 2010-03-25 08:55:42 +00:00
Clément Oudot
44f5d27b7a Prepare for 1.0rc1:
* Update modules main version
* make tidy
* make manifest
* make documentation
2010-03-24 22:06:43 +00:00
Clément Oudot
bd9c9d13dc LDAP: change test for Net::LDAP minimal version for ppolicy feature 2010-03-24 15:53:55 +00:00
Clément Oudot
953806ed93 SAML: manage SessionNotOnOrAfter but do not adapt session _utime yet 2010-03-24 13:44:24 +00:00
Clément Oudot
aa5831493a SAML: add AllowLoginFromIDP option 2010-03-24 13:01:14 +00:00
Clément Oudot
5c26f07d27 SAML: proxy restriction was not working, now it is set in authn request conditions 2010-03-24 12:33:45 +00:00
Clément Oudot
bac76b680d LDAP: option to change the password as user (and not as managerDn) 2010-03-24 10:00:52 +00:00
Clément Oudot
fa05c16e02 OpenID: warning message for IssuerDBOpenID use 2010-03-15 10:57:17 +00:00
Clément Oudot
7692cefd95 Portal: all is ready for AuthOpenID 2010-03-15 09:53:56 +00:00
Clément Oudot
099c846d42 perltidy + manager bug with node created from special parent nodes 2010-03-13 17:39:50 +00:00
Clément Oudot
5a61c04a2d SAML: use correct IDP name in confirmation message 2010-03-13 16:49:33 +00:00
Clément Oudot
f80620fae4 SAML: No need to force default nameIDFormat value 2010-03-12 16:19:41 +00:00
Clément Oudot
44aeddbc5c Bug with samlIDPMetaDataOptions upload and use make tidy 2010-03-11 15:00:59 +00:00
Clément Oudot
ce8d8ee84e SAML: correct a bug if no NameIDFormat were given 2010-03-11 12:00:25 +00:00
Xavier Guimard
d439cab42e * Little CSS for abort()
* Comments for lemonldap-ng.ini
* lemonldap-ng.ini was not well read in Manager
* New target 'unprotect' in rules
* Status update
2010-03-09 21:42:31 +00:00
Clément Oudot
058ab93a15 SAML: manage HTTP method choice for SLO 2010-03-05 17:11:40 +00:00
Clément Oudot
ae4ff763df SAML: manage HTTP method choice for SSO 2010-03-05 16:57:11 +00:00
Clément Oudot
8564389fa7 SAML: manage IDP resolution rules 2010-03-05 15:37:16 +00:00
Clément Oudot
8d1793b7bc SAML: check OneTimeUse and Issuer (for proxy test) 2010-03-05 15:23:49 +00:00
Clément Oudot
c2b7c07dc1 SAML: use NameIDFormat option 2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28 SAML: use ForceAuthn option 2010-03-05 08:54:01 +00:00
Clément Oudot
71283e3596 SAML: attribute request in UserDBSAML 2010-03-03 16:54:23 +00:00