Commit Graph

287 Commits

Author SHA1 Message Date
Xavier Guimard
c673be7cf2 Set some default values in Attributes.pm (#595) 2018-04-30 18:06:15 +02:00
Christophe Maudoux
2134bfd366 Check if user can register one more device - WIP (#1386) 2018-04-05 17:58:42 +02:00
Christophe Maudoux
2185f0ef27 Add Max2FDevices & Max2FDevicesNameLength attributes (#1386) 2018-04-04 23:14:25 +02:00
Christophe Maudoux
dc3336e8b1 Add manager userAuthorizedtoDelete entries (#1386) 2018-04-03 22:57:30 +02:00
Xavier Guimard
0623b4f9fe Add ini-only default values in DefaultValues.pm (#595) 2018-04-03 10:23:31 +02:00
Xavier Guimard
e89db33b5e Remove Auth::Yubikey (#1399) 2018-03-20 18:45:57 +01:00
Xavier Guimard
c6908b87a2 Yubikey 2nd factor (closes: #1399) 2018-03-20 18:19:53 +01:00
Xavier Guimard
05c77feebc Possibility to forbid U2F unregistration (#1148) 2018-03-18 22:20:05 +01:00
Xavier Guimard
30e5d25ed0 No direct self-registration for UTOTP (#1391) 2018-03-18 21:22:19 +01:00
Xavier Guimard
9725a63396 More security options in TOTP (#1359) 2018-03-18 14:26:45 +01:00
Xavier Guimard
799109caca UTOTP manager part (#1391)
ToDo: self-registration + tests
2018-03-18 09:30:08 +01:00
Xavier Guimard
3dcc4af9e7 Add logo 2018-03-15 22:22:20 +01:00
Xavier Guimard
75fb07a627 More doc (#1388) 2018-03-13 17:55:36 +01:00
Xavier Guimard
5f068d4f92 Update prm list 2018-03-09 18:45:05 +01:00
Xavier Guimard
ee3e03eaad Update wiki script 2018-03-09 18:34:59 +01:00
Xavier Guimard
bef0966ac4 Add ini-only parameters (#1148) 2018-03-08 20:43:50 +01:00
Xavier Guimard
06cb8a6e11 2F engine works with 1 2F enabled (#1148) 2018-03-08 20:36:32 +01:00
Xavier Guimard
67a530bc01 Second-Factor-Engine skeleton (#1148) 2018-03-08 16:33:34 +01:00
Xavier Guimard
7c4748b51c Improve tests (#1379) 2018-02-23 12:05:51 +01:00
Xavier Guimard
5ed75e7f50 REST 2F manager part (#1379) 2018-02-23 09:38:33 +01:00
Xavier Guimard
a129081847 Full TOTP (#1359) 2018-02-21 22:07:12 +01:00
Xavier Guimard
2d58b3f9f6 TOTP Manager part (#1359) 2018-02-21 06:48:06 +01:00
Xavier Guimard
dfc28adcc3 Skeleton for "useMail" feature in getUser (#1353) 2018-01-22 21:57:48 +01:00
Clément Oudot
8a07f47e77 Add krbRemoveDomain parameter (#707) 2017-11-06 15:19:06 +00:00
Xavier Guimard
ead6533cd7 Update comments (#595) 2017-11-05 18:57:54 +00:00
Clément Oudot
6823a6e09e Fix default value for registerUrl (#1325) 2017-11-02 17:04:03 +00:00
Xavier Guimard
6ee5509f70 Add registerUrl (fixes: #1325) 2017-11-02 16:16:21 +00:00
Xavier Guimard
081699b29e AutoSignin works now (#1318)
TODO: doc
2017-10-27 13:11:30 +00:00
Xavier Guimard
5d1fa4ef1d Update tests for wildcards (#1317) 2017-10-24 10:56:19 +00:00
Xavier Guimard
bf1cf4c4f5 Display OIDC Consent tab if needed (#826) 2017-09-15 10:34:43 +00:00
Xavier Guimard
5b5e5db123 OpenID Connect consent skeleton (#826) 2017-09-15 10:32:15 +00:00
Clément Oudot
00e7cea00c LinkedIn parameters in Manager for 2.0 (#1243) 2017-06-23 14:47:03 +00:00
David COUTADEUR
80f5d06e82 perl tidy 2017-06-23 09:57:07 +00:00
David COUTADEUR
6533b0a36b first working version of dynamic hash passwords in trunk (LEMONLDAP-1245) 2017-06-23 09:23:29 +00:00
Clément Oudot
318d43e07f Check logout redirect URI (#1233) 2017-05-18 14:52:38 +00:00
Clément Oudot
b001965707 Create an option to display error on mail not found (#1225) 2017-05-11 13:48:50 +00:00
Clément Oudot
56254f1d4f Apply commit 6513 to trunk (#1218) 2017-04-27 10:21:46 +00:00
Xavier Guimard
0ce55136ad Add CAS in Choice/UserDB menu (#1229) 2017-04-27 07:51:55 +00:00
Xavier Guimard
7ea9d5e8c3 Fix bad test (fixes: #1223) 2017-04-26 07:03:33 +00:00
Xavier Guimard
6e38097176 Don't enable SMTP by default 2017-04-13 20:08:54 +00:00
Xavier Guimard
b83374b274 New Issuer::CAS (#1183) 2017-04-13 19:17:29 +00:00
Xavier Guimard
cc5effc5e8 Add missing elements (#1183) 2017-04-13 07:42:12 +00:00
Xavier Guimard
b93d7ff315 Issuer::CAS manager part (#1183) 2017-04-12 20:02:04 +00:00
Xavier Guimard
97e124e997 Auth::CAS manager part (#1183) 2017-04-12 19:49:26 +00:00
Xavier Guimard
9a0a56b5fd Prepare new CAS arch in manager (#1183) 2017-04-12 16:45:55 +00:00
Xavier Guimard
dec57ba3f5 Move CAS Server options to CTrees (#1183) 2017-04-12 16:45:52 +00:00
Xavier Guimard
679911d4d0 Prepare CAS partners managment (#1183) 2017-04-12 16:45:49 +00:00
Xavier Guimard
43ece77749 Remove unused CAS_pgtFile parameter (#1183) 2017-04-12 16:45:45 +00:00
Xavier Guimard
a83a707931 Add Ajax to SSL (closes #1212) 2017-04-11 19:19:59 +00:00
Xavier Guimard
fbbe3aaf9b Unable Auth::Kerberos in Manager (closes: #707) 2017-04-11 13:21:35 +00:00
Xavier Guimard
10f9249961 Update Null level 2017-03-30 05:08:53 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
bb08fc3675 Remove portalForceAuthn plugin (#1204) 2017-03-24 18:11:34 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
4af8a59b5e Handler part of reauthentication (#1204) 2017-03-23 18:22:44 +00:00
Xavier Guimard
581f0e4c93 Portal part of reauthentication (#1204) 2017-03-23 18:22:40 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
0538ad1cee Add External2F plugin (#1015) 2017-03-22 22:18:28 +00:00
Xavier Guimard
0595f729e2 Update manager (#1161) 2017-03-22 20:47:09 +00:00
Xavier Guimard
03339738b7 Remove unsafe authorization (#1184) 2017-03-16 06:30:30 +00:00
Xavier Guimard
a07e92759c Add Auth::PAM (#closes: #1196) 2017-03-14 15:34:10 +00:00
Clément Oudot
f1804db2c7 Allow unsafe-inline styles for portal skin background (#1184 / #LEMONLDAP-1138) 2017-03-14 13:51:30 +00:00
Xavier Guimard
ffbd92745c Set default value to 1 for captcha_mail (#595) 2017-03-14 12:24:45 +00:00
Xavier Guimard
85ad473cd7 Authorize data: images in CSP header (#1138) 2017-03-14 12:08:01 +00:00
Xavier Guimard
b1ce342b2d Remove old skins from menu 2017-03-14 11:28:15 +00:00
Xavier Guimard
568eb70e73 Update macros (#595) 2017-03-13 06:30:59 +00:00
Xavier Guimard
81d3729394 Use local cache by default for tokens (#1140) 2017-03-11 18:11:57 +00:00
Xavier Guimard
7f460429e1 OIDC OP2RP logout in progress (#1194) 2017-03-10 11:39:19 +00:00
Xavier Guimard
2ec0f3ce6f Add OIDC logout parameters (#1032) 2017-03-09 21:56:45 +00:00
Xavier Guimard
9fb80061a0 Additional parameters for custom modules (#1188) 2017-03-08 17:41:42 +00:00
Xavier Guimard
57189c1fb6 StayConnected plugin (#1131)
TODO: - check fingerprint back
      - insert "stayconnected" param in login.tpl
2017-03-07 22:20:51 +00:00
Xavier Guimard
f63e5eaca1 Add version in conf (to be used later with #797) 2017-03-07 17:49:46 +00:00
Xavier Guimard
2fb085b2a6 New "Custom" modules family (closes: #1188) 2017-03-07 17:28:09 +00:00
Xavier Guimard
d5484c28a7 Add u2fAuthnLevel (#1148) 2017-03-06 12:18:04 +00:00
Xavier Guimard
719b72e85e Update help 2017-03-04 15:03:53 +00:00
Xavier Guimard
f6ba42fb3a Add ServiceToken in manager (#971) 2017-03-04 12:27:35 +00:00
Xavier Guimard
98e9e3a9bc Remove ServiceToken entries (#971) 2017-03-03 17:08:11 +00:00
Xavier Guimard
64756142e1 Service token server (#971) 2017-03-01 06:41:42 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
7be468841b Add conditional SSLVar (closes: #803) 2017-02-24 06:29:50 +00:00
Xavier Guimard
d7025a2251 Add REST Auth/UserDB/Password backend (closes: #1174) 2017-02-23 21:46:00 +00:00
Xavier Guimard
b60bc5c851 Add DevOps in manager (#1091)
... Even if it is not really usable using this feature (dynamic vhost)
2017-02-22 22:55:33 +00:00
Xavier Guimard
09f13b1b00 Notification server SOAP/REST (#595) 2017-02-19 17:04:49 +00:00
Xavier Guimard
697ebfdf8e Move default mail subjects in JSON (may close #1033) 2017-02-19 08:07:21 +00:00
Xavier Guimard
ed748080d1 Split CDA (#1067) 2017-02-16 10:42:22 +00:00
Xavier Guimard
1e7b2c4a39 Add LWP options (closes: #1065) 2017-02-15 15:08:23 +00:00
Xavier Guimard
88dd1201ef Remove local-only parameters (#1160) 2017-02-13 16:48:39 +00:00
Xavier Guimard
40b7535ff3 Reorganize handler (closes: #1160) 2017-02-11 07:47:22 +00:00
Xavier Guimard
4b8db05b88 Hide undefined sub from tests (#1160) 2017-02-10 16:46:19 +00:00
Xavier Guimard
57330851f8 Avoid compiling methods in rules verification (#1160)
This cause customFunctions to return 1 after conf save with Nginx
2017-02-10 14:21:52 +00:00
Xavier Guimard
820691df33 Start handler reorganization (#1160) 2017-02-08 22:18:52 +00:00
Xavier Guimard
2982abb589 Combination in progress (#1151) 2017-02-06 12:36:29 +00:00
Xavier Guimard
1780092b0c Combination in progress (#1151) 2017-02-06 06:42:22 +00:00
Xavier Guimard
8a3bb7b0f9 Combination override conf (#1151)
TODO: lot of job in the manager...
2017-02-05 23:04:28 +00:00
Xavier Guimard
099063994e Remove also WebDI for userDB (see ^) 2017-02-05 09:18:57 +00:00
Xavier Guimard
7d27259e64 Create a "Same" value for userDB and remove some other 2017-02-05 09:13:20 +00:00
Xavier Guimard
41da50b8ca U2F registration works (#1148) 2017-02-03 17:14:13 +00:00
Xavier Guimard
a14d718351 U2F skeleton (#1148) 2017-02-02 21:48:32 +00:00
Xavier Guimard
a08d2f6433 Remove BrowserID parameters (see #602) 2017-02-01 10:32:03 +00:00
Xavier Guimard
61fd463f45 Split notifications (XML vs JSON) [#868] 2017-01-31 19:11:59 +00:00
Xavier Guimard
7a3725db9d Pwd reset in progress (#595) 2017-01-29 09:11:27 +00:00
Xavier Guimard
f7df1db206 Hide some warnings 2017-01-27 09:39:58 +00:00
Xavier Guimard
234551387f Captcha and token in progress (#1140) 2017-01-24 22:05:07 +00:00
Xavier Guimard
b70dac9f3a CSP in progress (#1138) 2017-01-19 06:09:20 +00:00
Xavier Guimard
04585cf188 Prepare Content-Security-Policy for portal (#1138) 2017-01-18 22:36:03 +00:00
Xavier Guimard
6b2dbd6482 Add portal status plugin (#595) 2017-01-16 21:00:50 +00:00
Xavier Guimard
6e3cb623ac Remove registerUrl: fixed to /register (#595) 2017-01-14 08:17:35 +00:00
Xavier Guimard
1b88459c31 Remove samlIDPSSODescriptorSingleSignOnServiceSOAP from everywhere 2017-01-13 08:17:20 +00:00
Xavier Guimard
52b2c8f90e Remove unimplemented SAML methods 2017-01-12 11:55:28 +00:00
Xavier Guimard
3c5cb018ef Compact conf 2017-01-11 21:10:13 +00:00
Xavier Guimard
62e3ba159d REST in progress (#970) 2017-01-10 12:25:30 +00:00
Xavier Guimard
10509e2a52 REST in progress (#970) 2017-01-09 06:11:30 +00:00
Xavier Guimard
d1646392a9 Split soap/rest server in config/sessions (#970) 2017-01-08 08:42:16 +00:00
Xavier Guimard
1983842f79 SOAP server (#970) 2017-01-07 20:37:07 +00:00
Xavier Guimard
b28fbd23aa Add "rest" parameter (#970) 2017-01-06 16:18:43 +00:00
Xavier Guimard
b94a337a05 Optimize checksession endpoint (#595) 2017-01-04 22:19:17 +00:00
Xavier Guimard
d35e24703e Remove old Google auth (#595)
Google OpenId endpoints now points to OpenId-Connect configuration
2017-01-03 06:09:29 +00:00
Xavier Guimard
c14bd95d92 Import some 1.9.7 changes 2016-12-29 06:25:07 +00:00
Clément Oudot
c48ee9d3e3 Apply modification for oidcRPMetaDataOptionsExtraClaims to trunk (#1105) 2016-11-15 16:04:43 +00:00
Clément Oudot
fdf74d2f3a Apply patch on Manager in trunk (#1088) 2016-10-04 09:07:55 +00:00
Clément Oudot
fc878c0545 Apply patch on Manager in trunk (#1087) 2016-09-29 19:24:58 +00:00
Clément Oudot
91b7ac93b1 Apply bypass consent option to trunk (#1089) 2016-09-27 13:23:29 +00:00
Clément Oudot
47c227246b Port option to store ID token in trunk (#1083) 2016-09-13 13:40:02 +00:00
Clément Oudot
5d2be9a418 Port SAML Token options in trunk (#1083) 2016-09-13 12:04:30 +00:00
Clément Oudot
7b4e3e4904 Port timeoutActivityInterval to trunk (#1001) 2016-09-12 09:49:40 +00:00
Clément Oudot
cfff6103a7 Change default values for SAML security parameters (#1079) 2016-09-06 09:49:45 +00:00
Clément Oudot
e141c2482a Add IDP resolution rule in Manager (#1076) 2016-08-31 08:32:32 +00:00
Clément Oudot
3a6978dad8 Add option to decode UTF8 SAML attributes (#1045) 2016-07-08 14:14:37 +00:00
Clément Oudot
35eb674b33 Manage values for samlIDPMetaDataOptionsSLOBinding (#1046) 2016-06-21 12:40:43 +00:00
Xavier Guimard
b9efa8cbf8 Use attribute or macro for issuerDBGetParameters (#LEMONLDAP=1025) 2016-06-03 16:02:58 +00:00
Xavier Guimard
e370416bc1 Add issuerDBGet parameters (#1025) 2016-06-03 11:34:14 +00:00
Xavier Guimard
4cde65c825 Set default values for BrowserID parameters (#595) 2016-05-23 21:52:26 +00:00
Xavier Guimard
40acd8d0fb Fix SMTPServer test (closes: #1019) 2016-05-18 15:23:51 +00:00
Xavier Guimard
a39c45b46c Remove dbiUserChain, dbiUserPassword and dbiUserUser parameters 2016-05-16 07:08:02 +00:00
Clément Oudot
085ac82587 Add ldapAllowResetExpiredPassword parameter in trunk Manager (#1011) 2016-05-11 13:12:17 +00:00
Xavier Guimard
f89152d225 #996 2016-04-21 20:19:20 +00:00
Xavier Guimard
b8181f2ecf Optimize some regexps 2016-04-14 16:55:36 +00:00
Xavier Guimard
ce0f0d09c4 s/CAS_/CAS/ 2016-03-31 20:08:40 +00:00
Xavier Guimard
5a04d1ff61 Import encrypt in header functions (closes: #983) 2016-03-23 12:55:09 +00:00
Xavier Guimard
2d2edb61ac Merge experimental branch (#960)
Also update version to 2.0
2016-03-17 22:19:44 +00:00
Xavier Guimard
ac3ee4f6a2 Update attributes and macros test (#967) 2016-03-15 20:30:33 +00:00
Xavier Guimard
580d5a4bcc More translations in errors 2016-03-09 06:06:46 +00:00
Xavier Guimard
9cbbdda0b1 _timezone is a valid macro name (#967) 2016-03-08 18:06:40 +00:00
Xavier Guimard
57ac1c4a2e Add tests for exportedHeaders (closes: #972) 2016-03-08 12:38:13 +00:00
Xavier Guimard
5d4877ddc5 Replace error by warning on RSA keys (closes: #965) 2016-03-05 18:57:37 +00:00
Xavier Guimard
7ac07074ae Update versions 2016-03-03 20:25:16 +00:00
Xavier Guimard
c3c77cbfd5 Forgotten keywords 2016-03-02 14:28:12 +00:00
Clément Oudot
c3346131a0 zimbraUrl and zimbraSsoUrl are not standard URLs (#943) 2016-02-25 10:38:36 +00:00
Xavier Guimard
178cef3eee Include customFunctions in all Perl expr (#820) 2016-02-17 19:09:51 +00:00
Xavier Guimard
7653c2d3d3 Better test for customFunction (#820) 2016-02-17 18:40:36 +00:00