Commit Graph

282 Commits

Author SHA1 Message Date
Clément Oudot
b819f75f9e Remove HTTP-Redirect binding for SAML authentication response because not supported in SAML 2.0 conformance document (#144) 2010-08-26 08:05:25 +00:00
Clément Oudot
503fd5d9c3 Correct bug in javascript when action URL has no '?' (#125) 2010-08-20 15:36:06 +00:00
Clément Oudot
4fa2f6318e Build removeOther link with javascript, to get the final redirection URL and method (#125) 2010-08-20 15:07:55 +00:00
Clément Oudot
ead9413dd8 Possibility to control form method of info and confirm screen (references #125) 2010-08-19 16:19:30 +00:00
Clément Oudot
e29a65e92b Disable timer on IDP list (#141) 2010-08-18 15:10:30 +00:00
Xavier Guimard
b09b37566d Update to Jquery 1.4.2 2010-08-18 13:54:50 +00:00
Clément Oudot
33403f3396 Display a link to go back to SP on IDP login page (#140) 2010-08-18 13:39:15 +00:00
Xavier Guimard
7cf902d9e2 Debian packaging requires "/skins" due to symbolic links 2010-08-16 16:29:16 +00:00
Xavier Guimard
d32e31e5bd Perl dependency + typo 2010-08-05 08:21:31 +00:00
Clément Oudot
d475674b4c * Modify some default conf values
* Add missing SAML error codes to portal CGI
2010-07-05 21:09:55 +00:00
Clément Oudot
abfc445f38 SAML Error codes for SP (#40) 2010-07-05 15:38:02 +00:00
Clément Oudot
5c406c5381 Counter is never negative (#124) 2010-07-04 14:05:20 +00:00
Clément Oudot
90debded1d SAML: add Artifact binding in metadata (#32) 2010-07-01 09:58:39 +00:00
Clément Oudot
b32d4e8f52 Remove HttpRedirect and HttpDisableSubmit options in info.tpl, and use hidden fields to store URL parameters, for form GET to work (#115) 2010-06-23 14:03:18 +00:00
Clément Oudot
33699a6d40 SAML: build a SLO termination state (#111) 2010-06-21 16:24:50 +00:00
Clément Oudot
58419de458 Portal: we can have information message for unauthenticated users 2010-06-21 15:20:51 +00:00
Clément Oudot
a2921f9d10 SAML: add encryption key in attribute authority metadata (#96) 2010-06-10 10:06:42 +00:00
Thomas CHEMINEAU
a410b90dc4 SAML #89 - metadata file of the service now use newly defined public keys parameter 2010-06-08 16:20:17 +00:00
Thomas CHEMINEAU
3cef8ecf0a SAML: fix #10 - support certificate into metadata 2010-05-31 14:57:34 +00:00
Clément Oudot
9d3fd0ebd0 SAML:
* Add Attribute Authority metadata (#3)
* Clean existing metadata (remove NameID management, and set NameIDFormat directly in XML)
2010-05-31 10:37:43 +00:00
Clément Oudot
b91cba9f32 SAML: adapt metadata to new Post bindings (#75) 2010-05-28 11:51:53 +00:00
Xavier Guimard
3844ba4192 "make tidy" 2010-05-12 04:04:10 +00:00
Thomas CHEMINEAU
adf7e8158a Add activity timeout on SSO sessions 2010-05-07 10:00:55 +00:00
Thomas CHEMINEAU
f60e65166d adding Lemonldap::NG::Handler::UpdateCookie.pm and associated files 2010-05-05 16:49:26 +00:00
Thomas CHEMINEAU
1ba9f9ecf1 cleaning wsdl file, fix little bug in a wrong function name 2010-05-03 15:45:59 +00:00
Thomas CHEMINEAU
4f979bfe22 SAML: change error name to PE_IMG_OK and PE_IMG_NOK 2010-04-29 13:47:57 +00:00
Thomas CHEMINEAU
423541455b SAML:
- Manage SOAP relay logout request;
- Fix a bug into info.tpl.
2010-04-29 13:39:26 +00:00
Thomas CHEMINEAU
54afc28e75 SAML: manage logout initiate by IDP 2010-04-27 15:11:53 +00:00
Thomas CHEMINEAU
a0378cd572 SAML: hide submit button when SLO info page is displayed 2010-04-26 13:10:04 +00:00
Thomas CHEMINEAU
9c99b920f0 SAML: perform HTTP redirection in SAML context, when information is displayed to the user, to fix some problem during SAML logout response 2010-04-23 16:57:25 +00:00
Clément Oudot
aa986aa337 purgeCentralCache:
* Add debug option and debug message
* Manage SAML storage backend
* Read local configuration file
2010-04-09 15:43:21 +00:00
Thomas CHEMINEAU
fa039d2114 Store hidden informations in forms
* SAML: store SAMLRequest in IssuerDBSAML, just before to redirect to IDP
  * Simple: add functions to manage hidden values for forms
2010-04-02 09:17:02 +00:00
Clément Oudot
62330e2d44 SAML: add ArtifactResolutionService in SP Metadata 2010-04-02 08:40:35 +00:00
Thomas CHEMINEAU
969b905221 skin: continue to fix mail and notification templates in impact skin 2010-03-24 17:05:10 +00:00
Thomas CHEMINEAU
f4a724b0b9 make manifest on portal 2010-03-22 18:02:16 +00:00
Clément Oudot
a99b604f1a Skin impact: add notification template 2010-03-22 17:02:59 +00:00
Clément Oudot
d3bea6dd47 Skin impact: add mail reset template 2010-03-22 16:59:10 +00:00
Clément Oudot
3c1db04316 Skin impact: logout was not working 2010-03-22 16:47:13 +00:00
Clément Oudot
8c655fe281 Skin impact: correct tab problem 2010-03-22 16:39:25 +00:00
Thomas CHEMINEAU
a09e94a76e skin: update impact portal skin (work in progress) 2010-03-22 16:22:58 +00:00
Thomas CHEMINEAU
42e11743db skin: update impact portal skin (work in progress) 2010-03-22 16:22:31 +00:00
Thomas CHEMINEAU
a00a20eb60 skin: add confirm.tpl into impact portal skin 2010-03-22 10:50:28 +00:00
Thomas CHEMINEAU
067c96502f skins: update impact skin (missing confirm.tpl due to bad manipulation during upgrade from trunk) 2010-03-22 09:56:13 +00:00
Xavier Guimard
9001e5f028 Just a "make tidy" 2010-03-20 17:14:28 +00:00
Thomas CHEMINEAU
428c8072d5 skins: update on impact portal skin 2010-03-17 10:46:20 +00:00
Thomas CHEMINEAU
53f83771a9 skins: make impact portal skin functionnal 2010-03-17 09:40:10 +00:00
Thomas CHEMINEAU
85054c3638 skins: add applications list into menu of impact portal skin 2010-03-15 18:26:32 +00:00
Thomas CHEMINEAU
07d64f8c82 skins: add menu.tpl in impact portal skin 2010-03-15 12:54:48 +00:00
Clément Oudot
df64e375c2 OpenID: do not show form after logout 2010-03-15 10:44:16 +00:00
Clément Oudot
7692cefd95 Portal: all is ready for AuthOpenID 2010-03-15 09:53:56 +00:00
Thomas CHEMINEAU
4e79246c37 skins (impact): fix CSS bugs in login.tpl 2010-03-15 09:51:50 +00:00
Clément Oudot
f7cb80321f SAML: no \r \n in metadata text content 2010-03-12 14:31:42 +00:00
Thomas CHEMINEAU
5b77fa66b4 update information template into impact portal skin 2010-03-08 19:23:38 +00:00
Thomas CHEMINEAU
08e423a38d add info.tpl into impact portal skin 2010-03-08 18:57:49 +00:00
Thomas CHEMINEAU
35899de76c add icons into impact portal skin 2010-03-07 23:01:28 +00:00
Thomas CHEMINEAU
5ce35adc2d portal skin: first work on impact skin 2010-03-07 21:54:02 +00:00
Clément Oudot
13769b69f2 SAML: stop timer when choosing an IDP 2010-03-01 16:14:13 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
98aa9cdfcf Portal: correct image path 2010-02-18 09:58:05 +00:00
Clément Oudot
5411891ff6 Portal: template parameters were not well defined 2010-02-17 11:04:28 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Xavier Guimard
6cc13b1c36 Missing '/' 2010-02-11 08:31:23 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
a7b9076708 Portal: use non relative path for CSS and images in order to call index.pl with different urls trough apache mod_rewrite rules (ex: RewriteRule ^/saml/.* /index.pl) 2010-02-08 17:23:43 +00:00
Clément Oudot
5a34979fb7 SAML Metadata:
* Do not publish private key in metadata!
* perltidy
* typo on EntityID template param
2010-02-08 15:27:20 +00:00
Thomas CHEMINEAU
6f46631f81 add files needed by Metadata.pm to export metadata from conf to XML 2010-02-05 15:49:52 +00:00
Clément Oudot
cb71f77f4d Portal: move configuration documentation from script to ini file 2010-01-28 17:39:34 +00:00
Clément Oudot
dc1a90d356 Portal: use button instead anchor to harmonize CSS styles 2010-01-22 21:41:45 +00:00
Clément Oudot
3fa08adfff Manager: add portal configuration parameters 2010-01-22 16:04:15 +00:00
Clément Oudot
3222021897 Portal:
* Use HTML templates to send fancy reset password mail, with translations
* Send the new password by mail instead of diplaying it n the web page
* Remove the need to configure : the value is now set with help of {DOCUMENT_ROOT}
2010-01-22 11:25:37 +00:00
Clément Oudot
f6c250207c Portal - new feature: token to reset password by mail:
* A token is sent when user ask for password reset
* The token is linked to an apache session
* The password is reset if the token is valid
2010-01-21 17:38:55 +00:00
Clément Oudot
4179148476 Portal:
* Resolve a bug: when applications have sub applications, description div of parent application was not shown when leaving sub application menu element
* Move jQuery code in common/portal.js
2010-01-21 09:51:13 +00:00
Clément Oudot
15e77c7d88 Portal SOAP:
* perltidy
* Add process stages in getCookies
* Move _buildSoapHash in private methods parts
* Create getXmlMenu method in /config
* Update buildPortalWSDL script
2010-01-19 16:50:38 +00:00
Thomas CHEMINEAU
03efa3fe99 update buildPortalWSDL to add isAuthorizedURI new method 2010-01-18 15:32:10 +00:00
Clément Oudot
5af1db1c3e Portal: move ppolicy warnings from menu to information page 2010-01-15 22:01:04 +00:00
Xavier Guimard
40be40dbd9 More comments 2010-01-13 12:46:19 +00:00
Xavier Guimard
0d0d6b5609 Rewrite index.pl 2010-01-13 12:19:55 +00:00
Clément Oudot
9477aa69af Portal: confirm template amelioration 2010-01-12 11:19:13 +00:00
Clément Oudot
bea600dff4 Portal: info template amelioration 2010-01-12 11:07:31 +00:00
Xavier Guimard
7d98447f5e PE_CONFIRM target 2010-01-12 11:05:01 +00:00
Xavier Guimard
effa0b9fa6 Notify existing sessions and deleted sessions if wanted 2010-01-12 09:53:49 +00:00
Clément Oudot
dc2556386d Portal: little corrections 2010-01-11 16:58:57 +00:00
Xavier Guimard
d181da867b * perltidy
* new feature : info can be displayed by portal => used to notify deleted sessions
 * notifyDeleted in the manager
2010-01-11 16:04:36 +00:00
Xavier Guimard
11ed0e260f Little bug: deconnection was made on a new window 2009-12-28 17:01:21 +00:00
Clément Oudot
a8601a0e5f portalOpenLinkInNewWindow parameter 2009-12-17 14:10:39 +00:00
Clément Oudot
c667608dac Portal::Error no more exists 2009-12-17 11:41:15 +00:00
Clément Oudot
e6425fc7eb Do not display login form if there is an external authentication error 2009-12-04 15:12:40 +00:00
Clément Oudot
0cf5c8eec6 Apply patch for tabindex (close patch #314520) 2009-12-04 10:13:59 +00:00
Clément Oudot
f55416d58d Correct conf values in example files 2009-12-04 09:59:21 +00:00
Clément Oudot
6a24eebcc7 Correct a bug if status is configured without localStorage, add a specific ErrorDocument for code 500 2009-12-03 15:45:13 +00:00
Clément Oudot
b972c10a20 Use configuration parameters for portal customization 2009-11-25 08:44:12 +00:00
Clément Oudot
9ac349e458 Update to jQuery 1.3.2 (Closes: #314394) 2009-11-17 22:37:38 +00:00
Xavier Guimard
6757b945ae svn:executable property 2009-11-08 18:47:09 +00:00
Xavier Guimard
95424e487a * New manager in progress
* Strange problem with Net::LDAP in mpm-worker environment (not fixed)
 * Clean lock files when using Apache::Session::File
2009-10-30 17:27:36 +00:00
Xavier Guimard
a3341bab71 DISPLAY_RESETPASSWORD was not used 2009-10-01 12:49:42 +00:00
Xavier Guimard
444e093004 Bugs :
* Crypto was usable only with 16xn characters
 * Menu was not able to filter embedded <application>
Google page speed :
 * optimize images
 * set size
2009-08-20 14:19:40 +00:00
Clément Oudot
3fef4041bf Add , to avoid syntax errors when removing comments 2009-07-20 15:18:12 +00:00
Clément Oudot
2537e92fe0 Use confFile instead of File in configStorage examples 2009-06-29 11:29:52 +00:00
Clément Oudot
c113f7440e Force skin parameter for error template 2009-06-25 15:43:14 +00:00
Clément Oudot
198bcf70bc Get the timezone of the user and correct checkLogonHours function 2009-06-22 10:01:58 +00:00
Xavier Guimard
36c9aa2409 Change CDA parameter to cda. 2009-06-15 14:13:09 +00:00
Xavier Guimard
7ab3ffa447 Documentation update 2009-06-14 20:58:42 +00:00
Thomas CHEMINEAU
0df6ea67fa adding extended groups functionality 2009-06-04 15:33:53 +00:00
Clément Oudot
84c02a1c17 Mail customization (plain text only) with parameter mailBody 2009-06-03 16:40:41 +00:00
Clément Oudot
aa2d48027f Use _user instead of uid for connected user 2009-06-02 15:46:26 +00:00
Clément Oudot
56f7f8639a LEMONLDAP::NG : add dependencies 2009-05-29 10:18:38 +00:00
Clément Oudot
75c1f0feae LEMONLDAP::NG : Reset password by mail (new functionnality) 2009-05-28 16:31:39 +00:00
Clément Oudot
d2edd78c44 LEMONLDAP::NG : reimport FederID theme 2009-05-26 11:04:56 +00:00
Clément Oudot
0d9eaed6fc LEMONLDAP::NG :
* Correct XSS on user field
* Add "XSS attack detected" log messages
2009-05-19 08:52:27 +00:00
Clément Oudot
565ba83c05 LEMONLDAP::NG :
* Verify old password before modify
* Add the "PE_BADOLDPASSWORD" error
* Minor changes in pastel skin
* Erase old default skins
* Move icons to skins/common
2009-05-18 13:53:51 +00:00
Clément Oudot
0b43906ff4 LEMONLDAP::NG :
* Add AUTH_USER Template parameter
* Document ldapGroupBase in portal constructor
* Correct error call when testing password policy
2009-05-14 08:46:18 +00:00
Xavier Guimard
c35ea2d689 Password management 2009-04-07 09:27:23 +00:00
Xavier Guimard
2f5af7de52 Documentation update 2009-04-04 15:29:38 +00:00
Xavier Guimard
6307a00750 Lot of work on Portal SOAP services. Now 5 functions are exported:
* getAttributes(cookieValue)
 * getConfig()
 * getCookies(user,password)
 * error(code,language)
 * newNotification(xml)

WSDL is up to date but getConfig is not documented since it's a Lemonldap::NG internal service.
2009-02-24 17:53:59 +00:00
Xavier Guimard
ace1f67cb6 Error in WSDL 2009-02-20 15:49:03 +00:00
Xavier Guimard
b6cdee5d2a Now userNotice and userError are customizable like subs called by _subProcess 2009-02-15 11:30:25 +00:00
Clément Oudot
33d43ffd75 LEMONLDAP::NG : Apply patch for cronjob (issue #312315) 2009-02-10 16:32:56 +00:00
Xavier Guimard
ab1b201e71 * AuthBasic now use SOAP request to create the new session
* perltidy
2009-02-10 11:10:12 +00:00
Xavier Guimard
b275ee2ac8 LEMONLDAP::NG : WSDL is now clean 2009-02-08 17:12:42 +00:00
Xavier Guimard
1800497815 LEMONLDAP::NG : propagation of 0.9.3.4 changes 2009-02-05 17:05:18 +00:00
Xavier Guimard
85d765a002 LEMONLDAP::NG : WSDL for portal + dependency of Crypt::Rijndael in Debian 2009-02-01 15:38:06 +00:00
Xavier Guimard
2540bb36f0 LEMONLDAP::NG : * new feature in devel : notification system
* now, there is a shared key that can be use to crypt datas
                  (used in notification to hide cookie value)
2009-01-28 17:37:10 +00:00
Clément Oudot
cef50ff78f LEMONLDAP::NG : autofocus in login page 2008-12-29 15:58:17 +00:00
Xavier Guimard
52e22cd675 LEMONLDAP::NG : little more documentation 2008-12-25 20:06:23 +00:00
Xavier Guimard
5ba1178057 LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now. 2008-12-22 17:49:36 +00:00
Clément Oudot
d28f3036e3 LEMONLDAP::NG : Add icons in input fields 2008-12-18 16:08:03 +00:00
Xavier Guimard
b9ba2337e4 LEMONLDAP::NG : now the portal can be called by browser or by SOAP 2008-12-07 14:12:36 +00:00
Clément Oudot
35df5dddb8 LEMONLDAP::NG : Enforce XSS protection by deleting bad urls 2008-12-03 16:41:30 +00:00
Xavier Guimard
6dc275710c LEMONLDAP::NG : * avoid a little warning in tests
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
a72eebdd81 LEMONLDAP::NG : Notification system skeleton 2008-11-24 06:57:18 +00:00
Xavier Guimard
cae4cbade0 LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie 2008-11-17 16:59:56 +00:00
Xavier Guimard
d88ae29227 LEMONLDAP::NG : new customFunctions feature (+ perltidy everywhere) 2008-11-17 14:02:50 +00:00
Clément Oudot
e5d13fdf17 LEMONLDAP::NG : Add Sessions Explorer in Application Menu 2008-11-16 12:40:28 +00:00
Xavier Guimard
1aafc1049c LEMONLDAP::NG : Debian installation in progress... 2008-11-12 15:35:27 +00:00
Xavier Guimard
e42f1febef LEMONLDAP::NG : * IP view in Manager/Sessions.pm
* Bug in CGI.pm : local cache was erased each time
                * Bug in purgeCentralCache : timeout was always 7200
2008-11-05 14:55:02 +00:00
Clément Oudot
9e2a494da5 LEMONLDAP::NG : password can now be stored in session 2008-10-16 07:35:42 +00:00
Clément Oudot
7a7ad20ed7 LEMONLDAP::NG : put all configuration in /etc/lemonldap-ng/ 2008-10-13 20:53:06 +00:00
Clément Oudot
9db86c4def LEMONLDAP::NG : Use FAMFAMFAM icons in pastel skin 2008-10-13 20:36:09 +00:00
Clément Oudot
02fb3d966a LEMONLDAP::NG : brand new WebSSO example installation 2008-10-03 16:12:36 +00:00
Clément Oudot
b9b39143db LEMONLDAP::NG : New Portal::Error module and test page 2008-09-28 17:05:17 +00:00
Clément Oudot
6623c149f6 LEMONLDAP::NG : corrections on enhanced menu 2008-09-26 07:36:30 +00:00
Clément Oudot
b14983208c LemonLDAP::NG : W3C standards compliance and password modification module 2008-09-19 15:28:00 +00:00
Clément Oudot
1c15139a3a LemonLDAP::NG : pre-release of new Portal::Menu module 2008-09-18 08:34:17 +00:00
Xavier Guimard
8ae6168826 LEMONLDAP::NG : missing </TMPL_IF> in default login template 2008-09-07 09:21:46 +00:00
Xavier Guimard
4e90f24172 LEMONLDAP::NG : perltidy + template language detection regexp 2008-09-04 06:05:24 +00:00
Clément Oudot
b264d0f8c7 LemonLDAP::NG : HTML::Template translation filter 2008-09-03 16:11:16 +00:00
Clément Oudot
bdbe889e9d LemonLDAP::NG : remove template var PAGE_TITLE 2008-09-03 16:02:17 +00:00
Clément Oudot
9992e07203 IE CSS bugs 2008-09-03 15:59:33 +00:00
Clément Oudot
d893bbdd94 LEMONLDAP::NG New portal skin/template design 2008-09-03 11:04:14 +00:00
Xavier Guimard
7bac798370 LEMONLDAP::NG : * new auth architecture
* environment variables can now be used in exportedVars (usefull to access to SSL variables)
		* UTF-8 in examples
		* Romanian translation of portal
2008-06-06 03:51:39 +00:00