dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,044 Commits 3 Branches 0 Tags 75 MiB
aa5b65e697
Commit Graph

1058 Commits

Author SHA1 Message Date
Clément Oudot
a6acf86f4e Generate CAS Service Ticket (#101) 2010-08-25 14:23:45 +00:00
Clément Oudot
c6c8024326 Manage CAS URLs (#101) 2010-08-23 16:41:38 +00:00
Clément Oudot
5877fa95d6 CAS IssuerDB skeleton (#101) 2010-08-23 15:47:53 +00:00
Clément Oudot
dca8b923ac * Add setUserDBValue method for LDAP and DBI userDB 
* Add samlUserDBIdentityKey
* IssuerDBSAML now try to store Lasso identity in UserDB
* References #123
 2010-08-23 14:52:53 +00:00
Clément Oudot
240c2b56eb SAML: 
* Use request path to choose IssuerDB module to load
* Store all used IssuerDB module in user session
* Launch issuerLogout method for all used IssuerDB module
* References #102
 2010-08-23 13:27:16 +00:00
Clément Oudot
503fd5d9c3 Correct bug in javascript when action URL has no '?' (#125) 2010-08-20 15:36:06 +00:00
Clément Oudot
4fa2f6318e Build removeOther link with javascript, to get the final redirection URL and method (#125) 2010-08-20 15:07:55 +00:00
Clément Oudot
a9a2106e89 Add a back URL in removeOther link (#125) 2010-08-20 13:48:09 +00:00
Clément Oudot
a85958f90f Always clear previous hidden form value when PE_INFO is returned by autoRedirect and autoPost (#125) 2010-08-20 10:52:52 +00:00
Clément Oudot
5e6efebab1 Manage info form hidden fields for autoRedirect and autoPost (#125) 2010-08-20 10:31:20 +00:00
Clément Oudot
ead9413dd8 Possibility to control form method of info and confirm screen (references #125) 2010-08-19 16:19:30 +00:00
Clément Oudot
f0af83546a Correct bug for artifact resolution on IDP side (#143) 2010-08-19 14:17:25 +00:00
Clément Oudot
e29a65e92b Disable timer on IDP list (#141) 2010-08-18 15:10:30 +00:00
Clément Oudot
6781054397 Return error when SAML authentication is refused by user (#132) 2010-08-18 14:26:18 +00:00
Xavier Guimard
b09b37566d Update to Jquery 1.4.2 2010-08-18 13:54:50 +00:00
Clément Oudot
33403f3396 Display a link to go back to SP on IDP login page (#140) 2010-08-18 13:39:15 +00:00
Xavier Guimard
45aaa41cee Split extractFormInfo => create getIDP() 2010-08-18 10:07:42 +00:00
Clément Oudot
6c534022f4 Use #PORTAL# macro in SAML URL to ease SAML configuration (#139) 2010-08-18 09:49:55 +00:00
Xavier Guimard
7cf902d9e2 Debian packaging requires "/skins" due to symbolic links 2010-08-16 16:29:16 +00:00
Xavier Guimard
d32e31e5bd Perl dependency + typo 2010-08-05 08:21:31 +00:00
Clément Oudot
1dc1f926e4 Add timeout, version and binary attributes options for LDAP configuration (closes #129) 2010-07-28 10:00:30 +00:00
Clément Oudot
5cc3a3057a Update MailReset doxygen documentation (#7) 2010-07-22 09:06:50 +00:00
Clément Oudot
a32502b8f7 Do use st when browsing backends (authentication, userDB, ...) to prevent from a bug in Perl-LDAP 0.40 (#128) 2010-07-21 12:13:12 +00:00
Clément Oudot
6792a1350c Store replay protection for SAML SLO request sent by IDP 2010-07-05 21:24:34 +00:00
Clément Oudot
d475674b4c * Modify some default conf values 
* Add missing SAML error codes to portal CGI
 2010-07-05 21:09:55 +00:00
Clément Oudot
192dd9c8e1 Preparation for 1.0rc2 release 2010-07-05 16:20:17 +00:00
Clément Oudot
15cb8f6e29 SAML error codes for IDP and UserDBSAML (#40) 2010-07-05 15:58:03 +00:00
Clément Oudot
abfc445f38 SAML Error codes for SP (#40) 2010-07-05 15:38:02 +00:00
Clément Oudot
6fb21c669b Use private key passwords (#97) 2010-07-05 11:50:12 +00:00
Clément Oudot
3ed02a09b8 * Set noInfo flag when updating session 
* Get sessionIndex from SLO request before validating the request
* Use NameID dump in debug message
 2010-07-05 09:36:52 +00:00
Clément Oudot
5c406c5381 Counter is never negative (#124) 2010-07-04 14:05:20 +00:00
Clément Oudot
1c4d8535f7 SAML: Issuer can send SLO requests to SP and IDP when in proxy mode (#31) 2010-07-03 14:38:46 +00:00
Clément Oudot
c0548bab70 Modify XML namespace for Lasso Session empty object 2010-07-03 13:55:43 +00:00
Clément Oudot
0dac2f1374 * authInit should be called before issuerForAuthUser when we catch SLO URL in IDP proxy mode 
* do not 'return' sendSLOErrorMessage
 2010-07-02 15:42:22 +00:00
Clément Oudot
b635d87761 * authInit should be called before issuerForAuthUser when we catch SLO URL in IDP proxy mode 
* do not 'return' sendSLOErrorMessage
 2010-07-02 15:14:54 +00:00
Clément Oudot
f193d0b66d Really exit if sendSLOErrorMessage fail 2010-07-02 14:17:01 +00:00
Clément Oudot
a6c60ec1a7 Keep and restore SAML request for IDP proxy (#31) 2010-07-02 11:29:00 +00:00
Clément Oudot
e0bbb1c9d0 Delete SAML sessions on local logout (#122) 2010-07-02 09:05:46 +00:00
Clément Oudot
1f28b97cd8 Wrong error level in debug message 2010-07-02 08:54:54 +00:00
Clément Oudot
e359e1a7d1 SAML: use correct method to build artifact message (#32) 2010-07-02 08:14:26 +00:00
Clément Oudot
5754d86ff5 * Add a troolean type in Manager 
* Sign SAML Message options can accept the default value (#88)
 2010-07-01 16:05:57 +00:00
Clément Oudot
2ce4e19a0d SAML: catch SSO artifact URL in IssuerDBSAML (#32) 2010-07-01 11:31:24 +00:00
Clément Oudot
90debded1d SAML: add Artifact binding in metadata (#32) 2010-07-01 09:58:39 +00:00
Clément Oudot
f46c3b4224 SAML: artifact for sending authn request, work in progress (#32) 2010-07-01 09:48:50 +00:00
Clément Oudot
edb345f23c SAML: 
* Correct a SLO bug when only one SP in session 
* Check NotOnOrAfter in SLO request (#36)
 2010-06-30 08:05:20 +00:00
Clément Oudot
b2381101d7 SAML: use getSamlSession whenever it's possible 2010-06-28 16:22:07 +00:00
Clément Oudot
758c133f81 SAML: encode metadata flag was not honored for attribute authority 2010-06-28 15:04:40 +00:00
Clément Oudot
d07eaab83f SAML: keep SAML request in memory for IDP Proxy management (#31) 2010-06-28 15:00:14 +00:00
Clément Oudot
3ee1e9b393 Add an option to encode Metadata in UTF-8 (#119) 2010-06-28 09:11:59 +00:00
Clément Oudot
f5367d4dc9 * Create sendSLOErrorResponse subroutine 
* Send SLO error if REDIRECT or POST SLO request on a closed session (#107)
* Send SLO error instead of empty SOAP message, or local error page
 2010-06-28 08:34:15 +00:00
Clément Oudot
dee65a4d00 SAML: cache Lasso::Server object to increase performances (#86) 2010-06-25 15:38:14 +00:00
Clément Oudot
d114827e70 Store metadata in raw format (#104) 2010-06-25 13:51:09 +00:00
Clément Oudot
b32d4e8f52 Remove HttpRedirect and HttpDisableSubmit options in info.tpl, and use hidden fields to store URL parameters, for form GET to work (#115) 2010-06-23 14:03:18 +00:00
Clément Oudot
07f648cd7e SLO termination complete (#111) 2010-06-23 09:58:14 +00:00
Xavier Guimard
0e082b1d8f Closes: #114 : Bad usage of Apache::Session::searchOn() on portal 2010-06-22 16:30:38 +00:00
Clément Oudot
33699a6d40 SAML: build a SLO termination state (#111) 2010-06-21 16:24:50 +00:00
Clément Oudot
174026f44c SAML: validate SLO request before building other SP SLO request (#111) 2010-06-21 15:44:18 +00:00
Xavier Guimard
aa190c7f35 make tidy 2010-06-21 15:29:59 +00:00
Clément Oudot
58419de458 Portal: we can have information message for unauthenticated users 2010-06-21 15:20:51 +00:00
Xavier Guimard
8139248c15 Closes: #113 : Lemonldap::NG is not compatible with the use of a LDAP server using a different encoding than UTF-8 for storing passwords 2010-06-21 14:47:27 +00:00
Clément Oudot
8b23a63fb3 SAML: use a SLO status session to store SLO status on IDP side (#111) 2010-06-21 14:28:42 +00:00
Clément Oudot
3b6e0567ee SAML: store SAML Token in session (#110) 2010-06-18 13:07:20 +00:00
Clément Oudot
11761807f4 SAML: do not send empty Attribute Statement (#109) 2010-06-18 07:50:37 +00:00
Clément Oudot
af0f4ef88e SAML: force NameID format if requested format is unspecified (#108) 2010-06-17 13:29:53 +00:00
Clément Oudot
e33f7c2efc SAML: 
* Use table instead of list for SP SLO status
* Catch SLO response and display status logo (#106)
 2010-06-16 16:17:05 +00:00
Clément Oudot
885966f04b SAML: error in SAML POST field name (#56) 2010-06-16 13:08:18 +00:00
Clément Oudot
1aec1902f5 SAML: create POST relay mechanism to send POST SLO requests (#56) 2010-06-16 10:32:43 +00:00
Clément Oudot
8ffd3e6244 Display status of SLO request in debug level (#78) 2010-06-14 15:42:32 +00:00
Clément Oudot
d1d0accae6 Rebuild logout object before sending SLO response (#78) 2010-06-14 15:29:37 +00:00
Clément Oudot
ebc421d335 Return directly if no local session (#105) 2010-06-14 14:52:52 +00:00
Clément Oudot
021f89d918 Check session before closing it (#105) 2010-06-14 14:18:27 +00:00
Xavier Guimard
22387615fb Permit direct OpenID server side direct authentication 2010-06-14 06:19:34 +00:00
Clément Oudot
6bc5246690 Send SOAP SLO request to other entities when receiving a SOAP SLO request on IDP (#78) 2010-06-11 14:50:28 +00:00
Clément Oudot
98a9b6ef40 SAML: delete secondary SAML sessions (#100) 2010-06-11 14:13:26 +00:00
Clément Oudot
a570447179 SAML: use another method to set NameID in Attribute request (#83) 2010-06-11 13:49:33 +00:00
Clément Oudot
a62484dc91 SAML: manage SOAP SLO request - work in progress (#78) 2010-06-11 10:17:43 +00:00
Clément Oudot
c6ff319439 SAML: add unit test for SAML date with milliseconds 2010-06-11 08:48:00 +00:00
Clément Oudot
2b7cbd4d83 SAML: 
* IDP Option to check conditions (#98)
* Extend SAML date format (add milliseconds)
 2010-06-10 15:01:05 +00:00
Clément Oudot
a2921f9d10 SAML: add encryption key in attribute authority metadata (#96) 2010-06-10 10:06:42 +00:00
Thomas CHEMINEAU
3fb6a0ccd1 SAML #89 - Now use a different private key for encryption when creation Lasso::Server object 2010-06-09 08:42:30 +00:00
Thomas CHEMINEAU
a410b90dc4 SAML #89 - metadata file of the service now use newly defined public keys parameter 2010-06-08 16:20:17 +00:00
Clément Oudot
2ab40fea15 Soap is not required for SAML (#91) 2010-06-08 13:19:00 +00:00
Xavier Guimard
11dd597a41 Some Lintian tips 2010-06-08 10:39:34 +00:00
Clément Oudot
7e031e199a SAML: minor corrections for forceAuthn flag management (#34) 2010-06-07 15:36:45 +00:00
Clément Oudot
783d88eabb SAML: manage ForceAuthn flag from SP (#34) 2010-06-07 14:48:59 +00:00
Clément Oudot
05637bf0c4 SAML: set encryption mode on providers (none, nameid or assertion) (#49) 2010-06-04 15:54:52 +00:00
Clément Oudot
dd615d0678 SAML: 
* Check values of requested attributes (#85)
* Refactor some code in _SAML (createAttribute and createAttributeValue)
 2010-06-04 14:23:41 +00:00
Xavier Guimard
208a4f34d2 Closes #82 : CDA always use secured cookie even if requested site is a http one 2010-06-04 08:43:42 +00:00
Xavier Guimard
47d38c7e3f New debconf translation (Closes: #584453 / bugs.debian.org) 2010-06-04 08:35:53 +00:00
Thomas CHEMINEAU
160c5f670a fix #35 - include more checks to test contents on identity dump 2010-06-03 14:02:15 +00:00
Clément Oudot
cc1eb344a7 SAML: get attributes in attribute response 2010-06-02 15:21:39 +00:00
Clément Oudot
101442179d Check format and friendly name from attribute (#84) 2010-06-02 14:51:39 +00:00
Clément Oudot
e928b770f7 SAML: browse SP authorized attributes and build attribute response (#2) 2010-06-02 13:45:37 +00:00
Clément Oudot
5ded22db86 Do not return errors in POST or SOAP response process, just quit if something is wrong 2010-06-02 09:12:35 +00:00
Clément Oudot
82b350a397 SAML: check NameID before extracting content 2010-06-02 09:08:33 +00:00
Clément Oudot
5444a9d3b4 SAML: 
* Grab NameID from attribute request and find corresponding session (#2)
* create a getSamlSession subroutine
 2010-06-02 09:04:07 +00:00
Clément Oudot
a27464e277 SAML: process and validate attribute request (#2) 2010-06-02 08:09:59 +00:00
Clément Oudot
67e3e0ee6b was not set 2010-06-01 15:42:35 +00:00
Clément Oudot
608e5e6b0a Little corrections for make test 2010-06-01 15:39:18 +00:00
Clément Oudot
8fe3e749a3 SAML: catch attribute service URL (#2) 2010-06-01 15:34:08 +00:00
Clément Oudot
e8c514f794 SAML: set NameID in attribute query (#2) 2010-06-01 14:43:49 +00:00
Clément Oudot
8c14ba24bf SAML: keep NameID in a SAML session to answer later attribute queries (#2) 2010-06-01 13:27:02 +00:00
Clément Oudot
00a952a372 SAML: create a new Lasso::Server object to manage attribute queries (#2) 2010-06-01 12:23:11 +00:00
Clément Oudot
d7cee9a4f9 Use redirection message in page title (#80) 2010-06-01 10:11:35 +00:00
Clément Oudot
bb9c7435cc POST fields are now hidden (#80) 2010-06-01 09:59:37 +00:00
Clément Oudot
6c1dc91ff0 SAML: set SessionNotOnOrAfter (#81) 2010-06-01 08:03:24 +00:00
Clément Oudot
ffeb9e3134 SAML: adjust HTTP-POST artifact binding (#75) 2010-05-31 15:46:41 +00:00
Xavier Guimard
aa06d53bcf New dependency not inserted in control files (Crypt::OpenSSL::X509) 2010-05-31 15:44:40 +00:00
Thomas CHEMINEAU
3cef8ecf0a SAML: fix #10 - support certificate into metadata 2010-05-31 14:57:34 +00:00
Clément Oudot
ec8892ef7f SAML: 
* Identity is no more required in attribute query
* Mandatory attributes are requested if not defined in SSO assertion (#79)
 2010-05-31 14:54:24 +00:00
Clément Oudot
b678ab454f SAML: test SessionNotOnOrAfter before converting it (#77) 2010-05-31 13:50:26 +00:00
Clément Oudot
9d3fd0ebd0 SAML: 
* Add Attribute Authority metadata (#3)
* Clean existing metadata (remove NameID management, and set NameIDFormat directly in XML)
 2010-05-31 10:37:43 +00:00
Clément Oudot
c0edd943db SAML: add an IDP option to force attribute value in UTF-8 (#72) 2010-05-28 15:31:20 +00:00
Clément Oudot
6964b09eb2 SAML: use HTTP method string in debug messages 2010-05-28 12:17:05 +00:00
Clément Oudot
b91cba9f32 SAML: adapt metadata to new Post bindings (#75) 2010-05-28 11:51:53 +00:00
Clément Oudot
82ff667d57 SAML: add POST binding to SAML services (#75) 2010-05-28 10:35:24 +00:00
Clément Oudot
b8c3f5e6ff SAML: transport url parameter in IDP choice screens (closes #73) 2010-05-28 08:03:13 +00:00
Clément Oudot
cfec37d111 SAML: 
* Error message when no artifact resolution URL in profile
* Manage XML boolean values in metadata
 2010-05-27 12:39:32 +00:00
Clément Oudot
8789b5d131 SAML: do not throw error if no SP or no IDP configured (closes #70) 2010-05-26 15:32:09 +00:00
Clément Oudot
a2cd83aea9 * - in domain (closes #69) 
* securedCookie select box
* bad abort arguments number
* manager/index.pl comments
 2010-05-26 15:17:51 +00:00
Clément Oudot
d1b4541a4d SAML: check Destination attribute (closes #33) 2010-05-21 13:44:16 +00:00
Clément Oudot
58bec95435 SAML: map NameID formats to local session keys (closes #67) 2010-05-21 09:03:29 +00:00
Clément Oudot
0817e9918f SAML: Option to configure default NameID format for a SP (#67) 2010-05-20 15:57:51 +00:00
Clément Oudot
f187851ba6 SAML: signatures on SSO/SLO messages issued from IDP (#66) 2010-05-20 13:08:07 +00:00
Clément Oudot
bc618ce075 SAML: check SSO/SLO messages signature in IDP (#66) 2010-05-20 10:25:00 +00:00
Clément Oudot
fdc84aac52 SAML: get SessionIndex before validating SLO request (closes #64) 2010-05-20 08:59:59 +00:00
Clément Oudot
ef3faf7d3e SAML: eval SessionIndex call to prevent server error (#64) 2010-05-19 15:54:20 +00:00
Clément Oudot
4d0a5a651d SAML: IssuerDB Activation Rule (#52) 2010-05-19 14:59:43 +00:00
Clément Oudot
df4198399f * Add a new process step (authFinish) run after session store 
* Create SAML session linked to real session to store NameID and SessionIndex, in order to use searchOn on them (will not force globalStorage to be compatible with searchOn)
* Control SessionIndex sent by IDP on a SLO request is now managed in SP to get the correct local session
* This solves issue #51
 2010-05-17 16:02:21 +00:00
Clément Oudot
18bda4be2e SAML: SLO request without SessionIndex are rejected (#51) 2010-05-17 12:44:26 +00:00
Clément Oudot
6f0dde1bac SAML: correct unit test if no Lasso available 2010-05-17 09:36:03 +00:00
Clément Oudot
a3cc63ac90 SAML: skip all tests if Lasso no available 2010-05-17 07:43:37 +00:00
Clément Oudot
be742cfac6 SAML: use encrypt/decrypt to match session_index and session_id (#51) 2010-05-12 15:56:27 +00:00
Clément Oudot
c6dd158903 SAML: map SAML authentication context and authentication level (#47) 2010-05-12 15:14:07 +00:00
Clément Oudot
7f427610fe SAML: typo in #53 correction 2010-05-12 12:56:16 +00:00
Clément Oudot
01f928504d SAML: correct date to timestamp conversion (#62) and add unit test 2010-05-12 12:46:47 +00:00
Thomas CHEMINEAU
14c23cea6d fix #53 - use sendLogoutResponseToServiceProvider in IssuerDBSAML 2010-05-12 09:41:54 +00:00
Xavier Guimard
3844ba4192 "make tidy" 2010-05-12 04:04:10 +00:00
Clément Oudot
0ae986296a Clean all UserDBEnv related files 2010-05-08 15:55:27 +00:00
Clément Oudot
2d88be8222 Portal: catch ENV exportedVars for all UserDB modules (#58) 2010-05-07 21:33:57 +00:00
Thomas CHEMINEAU
adf7e8158a Add activity timeout on SSO sessions 2010-05-07 10:00:55 +00:00
Thomas CHEMINEAU
f60e65166d adding Lemonldap::NG::Handler::UpdateCookie.pm and associated files 2010-05-05 16:49:26 +00:00
Xavier Guimard
810505b1cb (Closes: #46) 2010-05-05 16:42:22 +00:00
Clément Oudot
bec0831f2d Zimbra preAuth is now an independent Handler (#12) 2010-05-05 08:13:44 +00:00
Clément Oudot
a04ff6e964 SAML: 
* OneTimeUse is no more used in SP (#50)
* Compile regexp for SAML URLs
* Move sendLogoutRequestToServiceProviders in _SAML
* In AuthSAML, do not predefined variables outside loops
 2010-05-05 07:10:13 +00:00
Thomas CHEMINEAU
c935584300 informations is correctly stored into session but not well displayed by manager (add _utime, remove useless code) 2010-05-04 15:55:48 +00:00
Clément Oudot
5eb7895dac SAML: manage SP conf key 2010-05-04 10:10:34 +00:00
Clément Oudot
1b81ccd96f SAML: use get_signature_status from Lasso::Profile 2010-05-03 21:12:14 +00:00
Thomas CHEMINEAU
c4ea39fae4 UserDB* modules should store user in sessionInfo 2010-05-03 17:42:42 +00:00
Thomas CHEMINEAU
a963e83dc2 add optional session identifier to update existing session with a valid user via SOAP 2010-05-03 16:49:57 +00:00
Thomas CHEMINEAU
1ba9f9ecf1 cleaning wsdl file, fix little bug in a wrong function name 2010-05-03 15:45:59 +00:00
Clément Oudot
cbf1401f1e Declare Zimbra preauth in other grant subroutines 2010-05-03 14:18:40 +00:00
Xavier Guimard
408365bc5f strftime is defined in POSIX 2010-05-02 17:40:21 +00:00
Xavier Guimard
5ceb94e612 Correct errors 2010-05-02 13:41:12 +00:00
Xavier Guimard
c53bdf0edc Little error 2010-05-02 13:30:04 +00:00
Xavier Guimard
cf0ece9aa2 Reformating 2010-05-02 11:37:25 +00:00
Xavier Guimard
5d2b50e905 Modif for XSS: for logout URL, we test now Referer field 2010-05-01 13:12:28 +00:00
Clément Oudot
2523fc5cf5 SAML: check IDP value from IDP cookie (LEMONLDAP-44) 2010-04-30 15:21:10 +00:00
Clément Oudot
a9c5d000fd SAML: 
* IDP list key is now entityID
* Do not trust IDP cookie to find current IDP (use SAML message remote provider ID)
* Ignore signature before processing SAML message, and check it after (work in progress)
 2010-04-30 14:55:40 +00:00
Xavier Guimard
c37033b81a $self->{id} was not well managed in portal 2010-04-30 05:27:06 +00:00
Thomas CHEMINEAU
4f979bfe22 SAML: change error name to PE_IMG_OK and PE_IMG_NOK 2010-04-29 13:47:57 +00:00
Thomas CHEMINEAU
423541455b SAML: 
- Manage SOAP relay logout request;
- Fix a bug into info.tpl.
 2010-04-29 13:39:26 +00:00
Xavier Guimard
1380d89865 New session explorer (not finished but useable) + some little tips 2010-04-28 19:57:16 +00:00
Thomas CHEMINEAU
f351ab97f6 SAML: work in progress to manage asynchronous SOAP logout requests 2010-04-28 17:16:38 +00:00
Clément Oudot
a1d41fbdda SAML: 
* authLogout should return an error code (as it is catched in Simple.pm)
* For SLO final redirection, match the trailing / of portal URL
 2010-04-28 16:29:27 +00:00
Clément Oudot
37afeeaeb5 SAML: force attribute values in UTF-8 (JIRA #21) 2010-04-28 14:56:36 +00:00
Thomas CHEMINEAU
c236505f45 SAML: manage SOAP logout request send by IDP to SP 2010-04-28 14:29:52 +00:00
Thomas CHEMINEAU
d9db773996 SAML: now use get_first_http_method when sending logout request on SP 2010-04-28 10:28:21 +00:00
Thomas CHEMINEAU
54afc28e75 SAML: manage logout initiate by IDP 2010-04-27 15:11:53 +00:00
Thomas CHEMINEAU
873aa0c32e SAML: generalizing and moving some functions to _SAML.pm 2010-04-26 17:06:49 +00:00
Clément Oudot
844a8807b0 SAML: set sessionIndex in assertion, to be compliant with simpleSAMLphp logout 2010-04-26 15:47:09 +00:00
Thomas CHEMINEAU
6ef67cc5ea SAML: manage internationalization 2010-04-26 15:39:38 +00:00
Clément Oudot
975a585a51 SAML: create NameIdentifier only if it does not already exists 2010-04-26 14:30:54 +00:00
Thomas CHEMINEAU
a0378cd572 SAML: hide submit button when SLO info page is displayed 2010-04-26 13:10:04 +00:00
Clément Oudot
3441a05d2b perltidy + better nameIdentifier construction in SSO phase (bug with latest Lasso verion and simpleSAMLphp) 2010-04-26 10:02:26 +00:00
Thomas CHEMINEAU
9c99b920f0 SAML: perform HTTP redirection in SAML context, when information is displayed to the user, to fix some problem during SAML logout response 2010-04-23 16:57:25 +00:00
Thomas CHEMINEAU
aac04dabdc SAML: print information to user if many SP to logout throught HTTP-Redirect or HTTP-Post 2010-04-23 16:26:23 +00:00
Thomas CHEMINEAU
c2b642f172 SAML: continue work on sending logout request for all SP when an SP initiate a logout request 2010-04-23 15:18:08 +00:00
Thomas CHEMINEAU
cd8b59998b SAML: first work on dispatching logout requests to SP during IDP SLO process 2010-04-22 17:01:37 +00:00
Thomas CHEMINEAU
c387e47e4f SAML: retrieve session to be deleted then during a SLO initiate by a SP (maj lasso) 2010-04-22 13:00:32 +00:00
Thomas CHEMINEAU
8e08663576 SAML: no need to search for a valid session, when we are into issuerForAuthUser, we already have a valid one 2010-04-21 16:54:05 +00:00
Thomas CHEMINEAU
0eba588385 SAML: now delete session when logout request for authenticated user is correct 2010-04-20 15:49:48 +00:00
Thomas CHEMINEAU
6bfdad2d0b SAML: manage logout into issuerForAuthUser 2010-04-20 15:31:21 +00:00
Thomas CHEMINEAU
005037df8c SAML: first implementation of SLO initiated by a SP 2010-04-20 10:04:34 +00:00
Clément Oudot
70a214b9e0 SAML: 
* Use Lasso method to get OneTimeUse flag
* Use Session _utime to calculate assertion NotOnOrAfter date
 2010-04-16 13:38:43 +00:00
Clément Oudot
95b28956fe SAML: add methods to disable signature verification (tests in progress) 2010-04-16 10:13:20 +00:00
Clément Oudot
a9cfdb9a64 SAML: mandatory attributes are now set in authentication response attribute statement 2010-04-16 08:55:56 +00:00
Clément Oudot
99b4c7fb72 SAML: attributes in authn response (work in progress) 2010-04-15 15:40:07 +00:00
Clément Oudot
4379adc014 SAML: reformate SP list to use EntityID as primary key 2010-04-15 14:42:17 +00:00
Clément Oudot
fbe50de653 * Better log of what is registered in session 
* Control whatToTrace parameter before logging into Apache
 2010-04-15 13:46:45 +00:00
Clément Oudot
d9c4b44c4b Add multiValuesSeparator configuration parameter 2010-04-15 11:15:36 +00:00
Clément Oudot
ebf2deae28 SAML: SSL authentication context is TLSClient and not X509 2010-04-15 09:06:53 +00:00
Clément Oudot
457430f2f7 SAML: map authenticationLevel and authn context 2010-04-14 16:22:55 +00:00
Xavier Guimard
799b643949 $ENV not taken in acount in macros 2010-04-14 16:13:24 +00:00
Clément Oudot
c4e1379452 * make tidy 
* Manage authenticationLevel in all authentication backends
 2010-04-14 15:37:57 +00:00
Clément Oudot
756ca82484 SAML: NameID generation (work in progress) 2010-04-14 11:14:24 +00:00
Clément Oudot
bc21f58b46 SAML: correct a bug when trying to update a newly created session (cookie not already set) 2010-04-12 15:42:38 +00:00
Clément Oudot
2406d832e9 SAML: manage Lasso session in artifacts 2010-04-12 15:03:54 +00:00
Clément Oudot
ea24dc314e Portal: updateSession can now take session id as parameter 2010-04-12 13:50:42 +00:00
Clément Oudot
ae66b57881 SAML: load and store Lasso Identity and Session 2010-04-12 13:23:22 +00:00
Clément Oudot
91e1419f57 SAML: artifact resolution response in SP and IDP 2010-04-12 09:09:53 +00:00
Clément Oudot
ce1e5840fb SAML: artifact response is now working 2010-04-12 08:26:18 +00:00
Clément Oudot
0ae2585a97 SAML: manage artifact (work in progess) 2010-04-09 16:42:50 +00:00
Clément Oudot
aa986aa337 purgeCentralCache: 
* Add debug option and debug message
* Manage SAML storage backend
* Read local configuration file
 2010-04-09 15:43:21 +00:00
Clément Oudot
7fef157210 SAML: possibility to configure a different storage for SAML objects (samlStorage) than sessions storage (globalStorage) 2010-04-09 13:27:54 +00:00
Clément Oudot
46808d3f78 SAML: manage artifact (work in progess) 2010-04-08 16:28:10 +00:00
Clément Oudot
9bb7adb3c3 SAML: catch artefact resolution URL 2010-04-08 11:03:53 +00:00
Clément Oudot
e34c8409b1 SAML: escape URL strings in regexp 2010-04-08 10:16:13 +00:00
Clément Oudot
fb9f964515 SAML: move use POSIX from AuthSAML to _SAML 2010-04-08 09:43:28 +00:00
Clément Oudot
cdaea23ac5 SAML: create methods to convert timestamp and SAML2 dates, and set all dates in assertion created by IDP 2010-04-08 09:39:53 +00:00
Clément Oudot
89bf4a6630 SAML: build assertion 2010-04-07 16:37:23 +00:00
Clément Oudot
ecf5612e4f SAML: 
* Build artifact or complete SSO reponse message
* Send SSO response message
* Correct a bug when loading relayState in POST fields
 2010-04-07 15:14:17 +00:00
Clément Oudot
f9e8ce7092 SAML: validate request message 2010-04-07 12:27:50 +00:00
Clément Oudot
7859ba292a SAML: trust hidden fields when they are present 2010-04-07 10:11:21 +00:00
Thomas CHEMINEAU
341f9f944f SAML: first work on issuerForAuthUser into IssuerDBSAML.pm 2010-04-02 16:19:10 +00:00
Thomas CHEMINEAU
0974c128ec SAML: fix a little bug 2010-04-02 15:34:44 +00:00
Thomas CHEMINEAU
7202a6651f SAML: manage hidden values for SAML authentication request 2010-04-02 15:28:29 +00:00
Clément Oudot
119386dca7 SAML: use checkMessage in AuthSAML 2010-04-02 14:47:17 +00:00
Clément Oudot
e21b4c936a SAML: intercept artefact resolution URL in SP 2010-04-02 11:41:44 +00:00
Thomas CHEMINEAU
fa039d2114 Store hidden informations in forms 
* SAML: store SAMLRequest in IssuerDBSAML, just before to redirect to IDP
  * Simple: add functions to manage hidden values for forms
 2010-04-02 09:17:02 +00:00
Clément Oudot
62330e2d44 SAML: add ArtifactResolutionService in SP Metadata 2010-04-02 08:40:35 +00:00
Clément Oudot
f87d6b9b3d SAML: IDP requestedAuthnContext option 2010-04-01 16:32:51 +00:00
Clément Oudot
a11caf800f SAML: IDP isPassive option 2010-04-01 14:40:29 +00:00
Clément Oudot
bb86139ce4 SAML: work on SSO/SLO signature options 2010-04-01 14:18:37 +00:00
Clément Oudot
6d505c9468 SAML: IDP option to validate SSO response signature -not working now 2010-04-01 12:51:32 +00:00
Clément Oudot
70f853e681 SAML: IDP option to sign SSO requests 2010-04-01 09:55:33 +00:00
Clément Oudot
7f91ef3c83 SAML: was set too late 2010-03-26 16:47:17 +00:00
Thomas CHEMINEAU
ba6bb76549 SAML: 
- Move part of the code into _SAML.pm so that it could be reused;
- Create the method checkMessage that check SAML requests and responses.
 2010-03-26 16:02:27 +00:00
Thomas CHEMINEAU
e7103c56c5 SAML: implementing issuerForUnAuthUser 2010-03-26 13:56:37 +00:00
Clément Oudot
07c528d6fd SAML: update POD 2010-03-26 09:35:31 +00:00
Clément Oudot
53d5212068 SAML: remove HTTP-GET binding since it is not supported by SAML2 (replaced by HTTP-REDIRECT) 2010-03-25 16:43:34 +00:00
Thomas CHEMINEAU
b67654d42d SAML: code to load SP metadata 2010-03-25 14:44:38 +00:00
Thomas CHEMINEAU
dec9d562d8 SAML: work in progress in IssuerDBSAML 2010-03-25 11:24:52 +00:00
Thomas CHEMINEAU
a3a80947bc SAML: move code that load SAML services and IDPs into _SAML 2010-03-25 11:01:32 +00:00
Clément Oudot
409ceb953c SAML: option to adapt session _utime with SessionNotOnOrAfter 2010-03-25 10:02:53 +00:00
Clément Oudot
bc7df7b3bc SAML: correct NAME POD section to prevent lintian warning 2010-03-25 08:55:42 +00:00
Clément Oudot
44f5d27b7a Prepare for 1.0rc1: 
* Update modules main version
* make tidy
* make manifest
* make documentation
 2010-03-24 22:06:43 +00:00
Thomas CHEMINEAU
969b905221 skin: continue to fix mail and notification templates in impact skin 2010-03-24 17:05:10 +00:00
Clément Oudot
bd9c9d13dc LDAP: change test for Net::LDAP minimal version for ppolicy feature 2010-03-24 15:53:55 +00:00
Clément Oudot
953806ed93 SAML: manage SessionNotOnOrAfter but do not adapt session _utime yet 2010-03-24 13:44:24 +00:00
Clément Oudot
aa5831493a SAML: add AllowLoginFromIDP option 2010-03-24 13:01:14 +00:00
Clément Oudot
5c26f07d27 SAML: proxy restriction was not working, now it is set in authn request conditions 2010-03-24 12:33:45 +00:00
Clément Oudot
bac76b680d LDAP: option to change the password as user (and not as managerDn) 2010-03-24 10:00:52 +00:00
Thomas CHEMINEAU
f4a724b0b9 make manifest on portal 2010-03-22 18:02:16 +00:00
Clément Oudot
a99b604f1a Skin impact: add notification template 2010-03-22 17:02:59 +00:00
Clément Oudot
d3bea6dd47 Skin impact: add mail reset template 2010-03-22 16:59:10 +00:00
Clément Oudot
3c1db04316 Skin impact: logout was not working 2010-03-22 16:47:13 +00:00
Clément Oudot
8c655fe281 Skin impact: correct tab problem 2010-03-22 16:39:25 +00:00
Thomas CHEMINEAU
a09e94a76e skin: update impact portal skin (work in progress) 2010-03-22 16:22:58 +00:00
Thomas CHEMINEAU
42e11743db skin: update impact portal skin (work in progress) 2010-03-22 16:22:31 +00:00
Thomas CHEMINEAU
a00a20eb60 skin: add confirm.tpl into impact portal skin 2010-03-22 10:50:28 +00:00
Thomas CHEMINEAU
067c96502f skins: update impact skin (missing confirm.tpl due to bad manipulation during upgrade from trunk) 2010-03-22 09:56:13 +00:00
Xavier Guimard
9001e5f028 Just a "make tidy" 2010-03-20 17:14:28 +00:00
Thomas CHEMINEAU
428c8072d5 skins: update on impact portal skin 2010-03-17 10:46:20 +00:00
Thomas CHEMINEAU
f5d947e47f update portal MANIFEST 2010-03-17 09:48:34 +00:00
Thomas CHEMINEAU
53f83771a9 skins: make impact portal skin functionnal 2010-03-17 09:40:10 +00:00
Thomas CHEMINEAU
85054c3638 skins: add applications list into menu of impact portal skin 2010-03-15 18:26:32 +00:00
Thomas CHEMINEAU
07d64f8c82 skins: add menu.tpl in impact portal skin 2010-03-15 12:54:48 +00:00
Clément Oudot
fa05c16e02 OpenID: warning message for IssuerDBOpenID use 2010-03-15 10:57:17 +00:00
Clément Oudot
df64e375c2 OpenID: do not show form after logout 2010-03-15 10:44:16 +00:00
Clément Oudot
7692cefd95 Portal: all is ready for AuthOpenID 2010-03-15 09:53:56 +00:00
Thomas CHEMINEAU
4e79246c37 skins (impact): fix CSS bugs in login.tpl 2010-03-15 09:51:50 +00:00
Clément Oudot
099c846d42 perltidy + manager bug with node created from special parent nodes 2010-03-13 17:39:50 +00:00
Clément Oudot
5a61c04a2d SAML: use correct IDP name in confirmation message 2010-03-13 16:49:33 +00:00
Clément Oudot
f80620fae4 SAML: No need to force default nameIDFormat value 2010-03-12 16:19:41 +00:00
Clément Oudot
f7cb80321f SAML: no \r \n in metadata text content 2010-03-12 14:31:42 +00:00
Clément Oudot
44aeddbc5c Bug with samlIDPMetaDataOptions upload and use make tidy 2010-03-11 15:00:59 +00:00
Clément Oudot
ce8d8ee84e SAML: correct a bug if no NameIDFormat were given 2010-03-11 12:00:25 +00:00
Xavier Guimard
d439cab42e * Little CSS for abort() 
* Comments for lemonldap-ng.ini
* lemonldap-ng.ini was not well read in Manager
* New target 'unprotect' in rules
* Status update
 2010-03-09 21:42:31 +00:00
Thomas CHEMINEAU
5b77fa66b4 update information template into impact portal skin 2010-03-08 19:23:38 +00:00
Thomas CHEMINEAU
08e423a38d add info.tpl into impact portal skin 2010-03-08 18:57:49 +00:00
Thomas CHEMINEAU
0a943ba5ff update manifest for impact portal skin 2010-03-07 23:41:39 +00:00
Thomas CHEMINEAU
35899de76c add icons into impact portal skin 2010-03-07 23:01:28 +00:00
Thomas CHEMINEAU
0262a3da23 add impact skin in MANIFEST 2010-03-07 21:55:27 +00:00
Thomas CHEMINEAU
5ce35adc2d portal skin: first work on impact skin 2010-03-07 21:54:02 +00:00
Clément Oudot
058ab93a15 SAML: manage HTTP method choice for SLO 2010-03-05 17:11:40 +00:00
Clément Oudot
ae4ff763df SAML: manage HTTP method choice for SSO 2010-03-05 16:57:11 +00:00
Clément Oudot
8564389fa7 SAML: manage IDP resolution rules 2010-03-05 15:37:16 +00:00
Clément Oudot
8d1793b7bc SAML: check OneTimeUse and Issuer (for proxy test) 2010-03-05 15:23:49 +00:00
Clément Oudot
c2b7c07dc1 SAML: use NameIDFormat option 2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28 SAML: use ForceAuthn option 2010-03-05 08:54:01 +00:00
Clément Oudot
71283e3596 SAML: attribute request in UserDBSAML 2010-03-03 16:54:23 +00:00
Xavier Guimard
40d2c70604 New target 'tidy' in Makefile 2010-03-01 20:32:28 +00:00
Clément Oudot
b5e2407728 SAML: get mandatory attributes - work in progress 2010-03-01 17:16:42 +00:00
Clément Oudot
13769b69f2 SAML: stop timer when choosing an IDP 2010-03-01 16:14:13 +00:00
Xavier Guimard
a746a440e6 perltidy 2010-03-01 10:45:04 +00:00
Clément Oudot
923e509226 SAML: split conditions validation between time and auience 2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d SAML: Manage logout redirection URL trough RelayState in SLO 2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7 SAML: 
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
 2010-02-28 19:07:02 +00:00
Xavier Guimard
4634d58f36 AuthTwitter works now 2010-02-27 22:37:59 +00:00
Xavier Guimard
ec35e6c397 Skeleton for AuthTwitter 2010-02-27 16:20:11 +00:00
Xavier Guimard
226a40d5f6 AuthOpenID is ready ! 2010-02-27 14:10:23 +00:00
Xavier Guimard
1043c1fb68 Unused test 2010-02-26 11:10:29 +00:00
Xavier Guimard
58c28c5732 * Inheritance instead of @EXPORT 
* Purge CGI::Session dependency (LA)
 2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f SAML: manage SOAP 2010-02-26 09:12:18 +00:00
Clément Oudot
9c228f7022 SAML: Manage relayState trough session backend 2010-02-25 11:39:55 +00:00
Clément Oudot
cc79d3cfe9 SAML: use the last configuration format for IDP metadata 2010-02-24 17:48:20 +00:00
Clément Oudot
9937568f97 SAML: manage SSO response trough Artifact 2010-02-24 15:24:54 +00:00
Clément Oudot
f0c29c779a SAML: 
* Manage SSO message like SLO message
* Send SLO request trough REDIRECT and POST
* Reponse to SSO request trough REDIRECT, POST and SOAP
* Reponse to SLO request trough REDIRECT, POST and SOAP
 2010-02-24 10:11:01 +00:00
Clément Oudot
38060929fb SAML: 
* Use new configuration keys
* sum up replay protection code
 2010-02-22 17:12:16 +00:00
Clément Oudot
fc542fa6b1 Portal: method to auto submit data through POST 2010-02-22 11:07:48 +00:00
Clément Oudot
7444d9802c Portal: set content-type to application/xml for SOAP response 2010-02-22 10:08:14 +00:00
Xavier Guimard
d0cd16172c IssuerOpenID skeleton 2010-02-21 20:17:13 +00:00
Xavier Guimard
fd40d830c8 AuthOpenID in progress 2010-02-21 14:47:16 +00:00
Xavier Guimard
6a2270b73d OpenID authentication skeleton 2010-02-21 14:00:53 +00:00
Clément Oudot
3eac5ce288 Portal: display logout status to user 2010-02-20 11:44:05 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML: 
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
 2010-02-18 09:58:59 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Clément Oudot
4c5d286196 SAML: rename keys of samlIDMetaData hash 2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Clément Oudot
b9a6eb6743 SAML: replay protection was buggy 2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa SAML: assertion replay protection 2010-02-15 13:44:06 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML: 
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
 2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
27769948f3 * abort instead of log when apps.list is deprecated 
* lmMigrateConfFiles2ini does not quit if storage.conf is missing so it can be launched more than one time
 2010-02-11 08:44:57 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
be4198a31e SAML: Lasso can now use ; in query string 2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML: 
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
 2010-02-08 17:24:45 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata: 
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
 2010-02-08 15:27:20 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Thomas CHEMINEAU
a8e43eddd6 add method to export metadata from conf to XML, in SAML2 format 2010-02-05 15:48:53 +00:00
Clément Oudot
3606362946 LDAP: 
* Add ldapGroupRecursive to enable recursive group search
* Create searchGroup method in _LDAP
* Create getLdapValue method in _LDAP to manage DN and multi-valued attributes
 2010-02-05 14:17:55 +00:00
Clément Oudot
dae6b880be Portal: force authentication is now working 2010-02-05 10:21:48 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
3a3ec647e9 SAML: IDP choice 2010-02-04 12:30:18 +00:00
Clément Oudot
a15fdcaaae SAML: 
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
 2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML: 
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
 2010-02-01 14:01:28 +00:00
Xavier Guimard
01785de792 * "SKIP" in SAML tests 
* "= splice @_" instead of "= @_" avoid memory duplication
 2010-01-31 08:25:05 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00