Commit Graph

576 Commits

Author SHA1 Message Date
Clément Oudot
a85958f90f Always clear previous hidden form value when PE_INFO is returned by autoRedirect and autoPost (#125) 2010-08-20 10:52:52 +00:00
Clément Oudot
5e6efebab1 Manage info form hidden fields for autoRedirect and autoPost (#125) 2010-08-20 10:31:20 +00:00
Clément Oudot
ead9413dd8 Possibility to control form method of info and confirm screen (references #125) 2010-08-19 16:19:30 +00:00
Clément Oudot
f0af83546a Correct bug for artifact resolution on IDP side (#143) 2010-08-19 14:17:25 +00:00
Clément Oudot
e29a65e92b Disable timer on IDP list (#141) 2010-08-18 15:10:30 +00:00
Clément Oudot
6781054397 Return error when SAML authentication is refused by user (#132) 2010-08-18 14:26:18 +00:00
Clément Oudot
33403f3396 Display a link to go back to SP on IDP login page (#140) 2010-08-18 13:39:15 +00:00
Xavier Guimard
45aaa41cee Split extractFormInfo => create getIDP() 2010-08-18 10:07:42 +00:00
Clément Oudot
6c534022f4 Use #PORTAL# macro in SAML URL to ease SAML configuration (#139) 2010-08-18 09:49:55 +00:00
Clément Oudot
1dc1f926e4 Add timeout, version and binary attributes options for LDAP configuration (closes #129) 2010-07-28 10:00:30 +00:00
Clément Oudot
5cc3a3057a Update MailReset doxygen documentation (#7) 2010-07-22 09:06:50 +00:00
Clément Oudot
a32502b8f7 Do use st when browsing backends (authentication, userDB, ...) to prevent from a bug in Perl-LDAP 0.40 (#128) 2010-07-21 12:13:12 +00:00
Clément Oudot
6792a1350c Store replay protection for SAML SLO request sent by IDP 2010-07-05 21:24:34 +00:00
Clément Oudot
15cb8f6e29 SAML error codes for IDP and UserDBSAML (#40) 2010-07-05 15:58:03 +00:00
Clément Oudot
abfc445f38 SAML Error codes for SP (#40) 2010-07-05 15:38:02 +00:00
Clément Oudot
6fb21c669b Use private key passwords (#97) 2010-07-05 11:50:12 +00:00
Clément Oudot
3ed02a09b8 * Set noInfo flag when updating session
* Get sessionIndex from SLO request before validating the request
* Use NameID dump in debug message
2010-07-05 09:36:52 +00:00
Clément Oudot
1c4d8535f7 SAML: Issuer can send SLO requests to SP and IDP when in proxy mode (#31) 2010-07-03 14:38:46 +00:00
Clément Oudot
c0548bab70 Modify XML namespace for Lasso Session empty object 2010-07-03 13:55:43 +00:00
Clément Oudot
0dac2f1374 * authInit should be called before issuerForAuthUser when we catch SLO URL in IDP proxy mode
* do not 'return' sendSLOErrorMessage
2010-07-02 15:42:22 +00:00
Clément Oudot
b635d87761 * authInit should be called before issuerForAuthUser when we catch SLO URL in IDP proxy mode
* do not 'return' sendSLOErrorMessage
2010-07-02 15:14:54 +00:00
Clément Oudot
f193d0b66d Really exit if sendSLOErrorMessage fail 2010-07-02 14:17:01 +00:00
Clément Oudot
a6c60ec1a7 Keep and restore SAML request for IDP proxy (#31) 2010-07-02 11:29:00 +00:00
Clément Oudot
e0bbb1c9d0 Delete SAML sessions on local logout (#122) 2010-07-02 09:05:46 +00:00
Clément Oudot
1f28b97cd8 Wrong error level in debug message 2010-07-02 08:54:54 +00:00
Clément Oudot
e359e1a7d1 SAML: use correct method to build artifact message (#32) 2010-07-02 08:14:26 +00:00
Clément Oudot
5754d86ff5 * Add a troolean type in Manager
* Sign SAML Message options can accept the default value (#88)
2010-07-01 16:05:57 +00:00
Clément Oudot
2ce4e19a0d SAML: catch SSO artifact URL in IssuerDBSAML (#32) 2010-07-01 11:31:24 +00:00
Clément Oudot
f46c3b4224 SAML: artifact for sending authn request, work in progress (#32) 2010-07-01 09:48:50 +00:00
Clément Oudot
edb345f23c SAML:
* Correct a SLO bug when only one SP in session 
* Check NotOnOrAfter in SLO request (#36)
2010-06-30 08:05:20 +00:00
Clément Oudot
b2381101d7 SAML: use getSamlSession whenever it's possible 2010-06-28 16:22:07 +00:00
Clément Oudot
758c133f81 SAML: encode metadata flag was not honored for attribute authority 2010-06-28 15:04:40 +00:00
Clément Oudot
d07eaab83f SAML: keep SAML request in memory for IDP Proxy management (#31) 2010-06-28 15:00:14 +00:00
Clément Oudot
3ee1e9b393 Add an option to encode Metadata in UTF-8 (#119) 2010-06-28 09:11:59 +00:00
Clément Oudot
f5367d4dc9 * Create sendSLOErrorResponse subroutine
* Send SLO error if REDIRECT or POST SLO request on a closed session (#107)
* Send SLO error instead of empty SOAP message, or local error page
2010-06-28 08:34:15 +00:00
Clément Oudot
dee65a4d00 SAML: cache Lasso::Server object to increase performances (#86) 2010-06-25 15:38:14 +00:00
Clément Oudot
d114827e70 Store metadata in raw format (#104) 2010-06-25 13:51:09 +00:00
Clément Oudot
b32d4e8f52 Remove HttpRedirect and HttpDisableSubmit options in info.tpl, and use hidden fields to store URL parameters, for form GET to work (#115) 2010-06-23 14:03:18 +00:00
Clément Oudot
07f648cd7e SLO termination complete (#111) 2010-06-23 09:58:14 +00:00
Xavier Guimard
0e082b1d8f Closes: #114 : Bad usage of Apache::Session::searchOn() on portal 2010-06-22 16:30:38 +00:00
Clément Oudot
33699a6d40 SAML: build a SLO termination state (#111) 2010-06-21 16:24:50 +00:00
Clément Oudot
174026f44c SAML: validate SLO request before building other SP SLO request (#111) 2010-06-21 15:44:18 +00:00
Xavier Guimard
aa190c7f35 make tidy 2010-06-21 15:29:59 +00:00
Xavier Guimard
8139248c15 Closes: #113 : Lemonldap::NG is not compatible with the use of a LDAP server using a different encoding than UTF-8 for storing passwords 2010-06-21 14:47:27 +00:00
Clément Oudot
8b23a63fb3 SAML: use a SLO status session to store SLO status on IDP side (#111) 2010-06-21 14:28:42 +00:00
Clément Oudot
3b6e0567ee SAML: store SAML Token in session (#110) 2010-06-18 13:07:20 +00:00
Clément Oudot
11761807f4 SAML: do not send empty Attribute Statement (#109) 2010-06-18 07:50:37 +00:00
Clément Oudot
af0f4ef88e SAML: force NameID format if requested format is unspecified (#108) 2010-06-17 13:29:53 +00:00
Clément Oudot
e33f7c2efc SAML:
* Use table instead of list for SP SLO status
* Catch SLO response and display status logo (#106)
2010-06-16 16:17:05 +00:00
Clément Oudot
885966f04b SAML: error in SAML POST field name (#56) 2010-06-16 13:08:18 +00:00