Xavier Guimard
c35ea2d689
Password management
2009-04-07 09:27:23 +00:00
Xavier Guimard
e15d136398
LDAP_PP_CHANGE_AFTER_RESET was not intercepted with OpenLDAP since bind() is granted in this case.
2009-04-07 08:26:12 +00:00
Xavier Guimard
740ad09f9f
Safelib + LDAPFilter parameter
2009-04-05 08:12:16 +00:00
Xavier Guimard
2f5af7de52
Documentation update
2009-04-04 15:29:38 +00:00
Xavier Guimard
73fa979c65
'CustomSOAPServices' target in portal
2009-04-04 07:36:42 +00:00
Xavier Guimard
8bc0d20afa
* Portal can now been used as 'proxy' for SOAP session storage.
...
* Session explorer works now with SOAP session storage (very low performances)
2009-04-03 16:17:57 +00:00
Xavier Guimard
b0b971b241
Double session mechanism : 2 cookies are generated, 1 secured, the other not.
...
Handlers detects automatically the cookie to choose.
2009-03-31 10:52:43 +00:00
Xavier Guimard
e5e80709e6
Use Net::LDAP high availability system
...
%ENV was not shared
2009-03-08 17:37:31 +00:00
Xavier Guimard
2b6a1d94a5
Test for Multi module
2009-03-08 16:41:43 +00:00
Xavier Guimard
231f54ddf0
* New authentication and userDB module : 'Multi' to chain authentication modules.
...
* Compilation for ModPerl::Registry by default
2009-03-08 08:50:58 +00:00
Xavier Guimard
6bf8377104
More methods for notification mechanism (to be used by batch that control done notifications)
2009-03-04 08:37:08 +00:00
Xavier Guimard
a4dbbf2ccd
POD
2009-03-03 06:21:52 +00:00
Xavier Guimard
859be3923f
* Doxygen doc update
...
* More tests
* perltidy on tests
2009-02-25 18:10:07 +00:00
Xavier Guimard
6307a00750
Lot of work on Portal SOAP services. Now 5 functions are exported:
...
* getAttributes(cookieValue)
* getConfig()
* getCookies(user,password)
* error(code,language)
* newNotification(xml)
WSDL is up to date but getConfig is not documented since it's a Lemonldap::NG internal service.
2009-02-24 17:53:59 +00:00
Xavier Guimard
2a77ab4066
More tests
2009-02-24 08:03:37 +00:00
Xavier Guimard
20764ad812
New authentication and userDB backend : "Remote" can be used to check authentication from a remote Lemonldap::NG portal using CDA
2009-02-23 17:35:38 +00:00
Xavier Guimard
ace1f67cb6
Error in WSDL
2009-02-20 15:49:03 +00:00
Xavier Guimard
9fdea7384f
make cpan updates META.yml
2009-02-19 08:26:22 +00:00
Xavier Guimard
30d2bd4dd4
More tests
2009-02-19 08:06:59 +00:00
Xavier Guimard
6dd414cb76
XSS tests
2009-02-17 19:37:06 +00:00
Xavier Guimard
018bee1fc6
CDA now included in main portal
2009-02-17 15:39:14 +00:00
Xavier Guimard
553058998f
Doxygen comments update
2009-02-17 15:22:42 +00:00
Xavier Guimard
ffb5ee8e33
Doxygen filter modification to show authentication process methods
2009-02-17 14:56:38 +00:00
Xavier Guimard
dc637c297b
Test more clean
2009-02-16 11:19:05 +00:00
Xavier Guimard
5803952784
* delete log() method from the portal :
...
* user actions are logged by userNotice() and userError()
* other access are logged by HTTP server
* create authenticate() method in Simple.pm used to launch userNotice() for
all authentication method
2009-02-15 17:58:38 +00:00
Xavier Guimard
b6cdee5d2a
Now userNotice and userError are customizable like subs called by _subProcess
2009-02-15 11:30:25 +00:00
Xavier Guimard
415d23b6e4
User actions are now registered with 3 functions :
...
* log : normal access to the portal
* userNotice : authentications, logout,...
* userError : bad password,...
A new parameter 'syslog => "auth"' can be set to log userNotice and userError via syslog
2009-02-15 08:53:44 +00:00
Xavier Guimard
f1dd28c821
LEMONLDAP::NG : more error reporting
2009-02-14 15:21:58 +00:00
Xavier Guimard
0c18700f65
* cleaning code :
...
* session have not to be recover in Menu since it's done before bu the portal
* accounting in CGIs (ModPerl::Registry context only) :
* used by portal to inform Apache
2009-02-14 08:55:19 +00:00
Xavier Guimard
15e4a17bd8
* Typo in debian/control
...
* Notification/DBI.pm is now running
2009-02-13 09:26:02 +00:00
Xavier Guimard
19e59af4cd
log & debug method lmLog() for CGIs
2009-02-12 19:48:53 +00:00
Clément Oudot
ed55803c04
LEMONLDAP::NG : Abort redirection if ppolicy warnings are present
2009-02-12 17:09:33 +00:00
Xavier Guimard
f8169c1909
Notification system in progress :
...
* File storage is running
* DBI storage has not yet been tested
Documentation update
2009-02-11 16:18:38 +00:00
Xavier Guimard
7c1ff1d938
Versions update
2009-02-10 17:28:27 +00:00
Clément Oudot
33d43ffd75
LEMONLDAP::NG : Apply patch for cronjob (issue #312315 )
2009-02-10 16:32:56 +00:00
Xavier Guimard
ab1b201e71
* AuthBasic now use SOAP request to create the new session
...
* perltidy
2009-02-10 11:10:12 +00:00
Thomas CHEMINEAU
6b821a21dd
LEMONLDAP::NG : Fixe a bug in libertySignOn function, to retrieve correct providerID
2009-02-09 16:06:41 +00:00
Xavier Guimard
c5a5ba909f
Typo in pod
2009-02-08 19:12:08 +00:00
Xavier Guimard
b275ee2ac8
LEMONLDAP::NG : WSDL is now clean
2009-02-08 17:12:42 +00:00
Xavier Guimard
fbdb9ccb22
LEMONLDAP::NG : * Version is missing in SOAPServer.pm
...
* perltidy on Portal/Simple.pm
2009-02-08 07:59:46 +00:00
Xavier Guimard
6494326e1e
LEMONLDAP::NG : typo
2009-02-06 17:41:23 +00:00
Xavier Guimard
2f9e6da6c1
LEMONLDAP::NG : problem with UTF8 in Notification.pm
2009-02-06 17:32:44 +00:00
Xavier Guimard
1800497815
LEMONLDAP::NG : propagation of 0.9.3.4 changes
2009-02-05 17:05:18 +00:00
Xavier Guimard
a25e10b040
LEMONLDAP::NG : * documentation modification
...
* SOAP service to update notification database
2009-02-03 09:36:13 +00:00
Xavier Guimard
1b6f56699a
LEMONLDAP::NG : Missing file Portal/Notification.pm
2009-02-02 08:53:51 +00:00
Xavier Guimard
85d765a002
LEMONLDAP::NG : WSDL for portal + dependency of Crypt::Rijndael in Debian
2009-02-01 15:38:06 +00:00
Xavier Guimard
21f5808cdf
LEMONLDAP::NG : Notification system is running now (for file storage only). TODO: Soapservice to accept notifications
2009-01-30 15:26:34 +00:00
Xavier Guimard
2540bb36f0
LEMONLDAP::NG : * new feature in devel : notification system
...
* now, there is a shared key that can be use to crypt datas
(used in notification to hide cookie value)
2009-01-28 17:37:10 +00:00
Xavier Guimard
ecb8ccbf96
LEMONLDAP::NG : bug with ldap+tls ( Closes : #312418 )
2009-01-17 19:45:21 +00:00
Xavier Guimard
f143719429
LEMONLDAP::NG : Typo
2009-01-03 08:54:49 +00:00
Xavier Guimard
bfab1a6e3b
LEMONLDAP::NG Doxygen in progress
2008-12-31 15:10:02 +00:00
Xavier Guimard
62b02d49fd
LEMONLDAP::NG : Doxygen documentation in progress
2008-12-30 09:37:56 +00:00
Clément Oudot
cef50ff78f
LEMONLDAP::NG : autofocus in login page
2008-12-29 15:58:17 +00:00
Xavier Guimard
41fe04e8b8
LEMONLDAP::NG : Doxygen documentation in progress...
2008-12-29 10:28:31 +00:00
Xavier Guimard
2e5911ac4e
LEMONLDAP::NG : Doxygen in progress.
2008-12-28 08:36:52 +00:00
Clément Oudot
985bdc2509
LEMONLDAP::NG : don't test url if direct access to portal
2008-12-27 11:00:45 +00:00
Xavier Guimard
228288d43c
LEMONLDAP::NG : Doxygen in progress
2008-12-26 19:18:23 +00:00
Xavier Guimard
13a5a1daab
LEMONLDAP::NG : Doxygen documentation in progress
2008-12-26 17:58:48 +00:00
Xavier Guimard
52e22cd675
LEMONLDAP::NG : little more documentation
2008-12-25 20:06:23 +00:00
Xavier Guimard
5483c4451a
LEMONLDAP::NG : * Romanian translation update
...
* perltidy
* test for menu
2008-12-25 14:14:15 +00:00
Xavier Guimard
e4a7734f23
LEMONLDAP::NG : dependencies
2008-12-25 08:21:30 +00:00
Xavier Guimard
0d8ab5ea2b
LEMONLDAP::NG : Perl module versions update for CPAN export
2008-12-25 08:04:33 +00:00
Xavier Guimard
78852ac337
LEMONLDAP::NG perltidy
2008-12-24 14:57:23 +00:00
Xavier Guimard
13cdc9b8ec
LEMONLDAP::NG : XSS patch not compatible with logout system
2008-12-24 14:55:44 +00:00
Xavier Guimard
2449e92c2d
LEMONLDAP::NG : A site in the protected domain is accepted in $portal->{urldc} even if the site is not declared in the manager
2008-12-24 09:12:53 +00:00
Xavier Guimard
8e6c8de591
LEMONLDAP::NG : I think version 0.9.3 is ready...
2008-12-24 08:32:11 +00:00
Xavier Guimard
5ba1178057
LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now.
2008-12-22 17:49:36 +00:00
Clément Oudot
d28f3036e3
LEMONLDAP::NG : Add icons in input fields
2008-12-18 16:08:03 +00:00
Xavier Guimard
cc07eae107
LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules
2008-12-11 17:02:02 +00:00
Xavier Guimard
a77e385730
LEMONLDAP::NG : little bug in SOAP error()
2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa
LEMONLDAP::NG : error display in SOAP
2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4
LEMONLDAP::NG : now the portal can be called by browser or by SOAP
2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422
LEMONLDAP::NG : typo
2008-12-07 12:15:40 +00:00
Xavier Guimard
53dc4bbbf4
LEMONLDAP::NG : * To avoid XSS, 3 controls :
...
1) url must be base64 encoded
2) urldc is serialized on 1 line ("s/[\r\n]//sg")
3) urldc must not contains '"`\0<
* Common/CGI can now intercept SOAP requests
2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c
LEMONLDAP::NG : XSS prevention
2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416
LEMONLDAP::NG : * branche 0.9.2 is missing
...
* ' and " are now filtered in url in Portal.pm
2008-12-06 07:27:35 +00:00
Xavier Guimard
5bbe35cedc
LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible
2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085
LEMONLDAP::NG : minnor things
2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247
LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP
2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8
LEMONLDAP::NG : Enforce XSS protection by deleting bad urls
2008-12-03 16:41:30 +00:00
Xavier Guimard
24a14caeda
LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites
...
* perltidy in Manager/Sessions.pm
* Doxygen in progress...
2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72
LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used
2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2
LEMONLDAP::NG : * security fix => XSS
...
* Begin Doxygen documentation
2008-12-03 13:27:30 +00:00
Xavier Guimard
6dc275710c
LEMONLDAP::NG : * avoid a little warning in tests
...
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387
LEMONLDAP::NG : better manner to delete cookie
2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924
LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE
...
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d
LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request
2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0
LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML)
...
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0
LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML
...
* Links in Debian examples installation
2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f
LEMONLDAP::NG : web form in a distinct file
2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81
LEMONLDAP::NG : Notification system skeleton
2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7
LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test
2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3
LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities
...
* CGIs now use abort() instead of die
* debug system in COnf.pm (set "LogLevel debug" in Apache)
2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b
LEMONLDAP::NG : die replaced by $self->abort in CGIs
2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e
LEMONLDAP::NG : removing old feature : LDAP filter in groups
2008-11-20 18:13:27 +00:00
Xavier Guimard
b5c2abb2a0
LEMONLDAP::NG : customFunctions called "package::function" where not correctly interpreted
2008-11-19 11:19:06 +00:00
Clément Oudot
19b5fa1190
LEMONLDAP::NG : fix bug #311849
2008-11-18 12:47:30 +00:00
Xavier Guimard
cae4cbade0
LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie
2008-11-17 16:59:56 +00:00
Xavier Guimard
dd0c815795
LEMONLDAP::NG : one more bug...
2008-11-17 15:12:17 +00:00
Xavier Guimard
e42c8b263f
LEMONLDAP::NG : little bugs in customFunctions
2008-11-17 15:06:58 +00:00