Commit Graph

287 Commits

Author SHA1 Message Date
Xavier Guimard
10f9249961 Update Null level 2017-03-30 05:08:53 +00:00
Xavier Guimard
6efec8525f Install new SMTP options (#1206) 2017-03-27 07:02:19 +00:00
Xavier Guimard
bb08fc3675 Remove portalForceAuthn plugin (#1204) 2017-03-24 18:11:34 +00:00
Xavier Guimard
6a651b5bee Try to implement SAML reauth (#595) 2017-03-23 20:49:52 +00:00
Xavier Guimard
4af8a59b5e Handler part of reauthentication (#1204) 2017-03-23 18:22:44 +00:00
Xavier Guimard
581f0e4c93 Portal part of reauthentication (#1204) 2017-03-23 18:22:40 +00:00
Xavier Guimard
e33a741acf Add rules for 2f (#1015) 2017-03-23 06:20:06 +00:00
Xavier Guimard
0538ad1cee Add External2F plugin (#1015) 2017-03-22 22:18:28 +00:00
Xavier Guimard
0595f729e2 Update manager (#1161) 2017-03-22 20:47:09 +00:00
Xavier Guimard
03339738b7 Remove unsafe authorization (#1184) 2017-03-16 06:30:30 +00:00
Xavier Guimard
a07e92759c Add Auth::PAM (#closes: #1196) 2017-03-14 15:34:10 +00:00
Clément Oudot
f1804db2c7 Allow unsafe-inline styles for portal skin background (#1184 / #LEMONLDAP-1138) 2017-03-14 13:51:30 +00:00
Xavier Guimard
ffbd92745c Set default value to 1 for captcha_mail (#595) 2017-03-14 12:24:45 +00:00
Xavier Guimard
85ad473cd7 Authorize data: images in CSP header (#1138) 2017-03-14 12:08:01 +00:00
Xavier Guimard
b1ce342b2d Remove old skins from menu 2017-03-14 11:28:15 +00:00
Xavier Guimard
568eb70e73 Update macros (#595) 2017-03-13 06:30:59 +00:00
Xavier Guimard
81d3729394 Use local cache by default for tokens (#1140) 2017-03-11 18:11:57 +00:00
Xavier Guimard
7f460429e1 OIDC OP2RP logout in progress (#1194) 2017-03-10 11:39:19 +00:00
Xavier Guimard
2ec0f3ce6f Add OIDC logout parameters (#1032) 2017-03-09 21:56:45 +00:00
Xavier Guimard
9fb80061a0 Additional parameters for custom modules (#1188) 2017-03-08 17:41:42 +00:00
Xavier Guimard
57189c1fb6 StayConnected plugin (#1131)
TODO: - check fingerprint back
      - insert "stayconnected" param in login.tpl
2017-03-07 22:20:51 +00:00
Xavier Guimard
f63e5eaca1 Add version in conf (to be used later with #797) 2017-03-07 17:49:46 +00:00
Xavier Guimard
2fb085b2a6 New "Custom" modules family (closes: #1188) 2017-03-07 17:28:09 +00:00
Xavier Guimard
d5484c28a7 Add u2fAuthnLevel (#1148) 2017-03-06 12:18:04 +00:00
Xavier Guimard
719b72e85e Update help 2017-03-04 15:03:53 +00:00
Xavier Guimard
f6ba42fb3a Add ServiceToken in manager (#971) 2017-03-04 12:27:35 +00:00
Xavier Guimard
98e9e3a9bc Remove ServiceToken entries (#971) 2017-03-03 17:08:11 +00:00
Xavier Guimard
64756142e1 Service token server (#971) 2017-03-01 06:41:42 +00:00
Xavier Guimard
c0c67fd0bd Minimize persistentSession tie/untie (#713, #LEMONLDAP-1173) 2017-02-27 20:48:00 +00:00
Xavier Guimard
7be468841b Add conditional SSLVar (closes: #803) 2017-02-24 06:29:50 +00:00
Xavier Guimard
d7025a2251 Add REST Auth/UserDB/Password backend (closes: #1174) 2017-02-23 21:46:00 +00:00
Xavier Guimard
b60bc5c851 Add DevOps in manager (#1091)
... Even if it is not really usable using this feature (dynamic vhost)
2017-02-22 22:55:33 +00:00
Xavier Guimard
09f13b1b00 Notification server SOAP/REST (#595) 2017-02-19 17:04:49 +00:00
Xavier Guimard
697ebfdf8e Move default mail subjects in JSON (may close #1033) 2017-02-19 08:07:21 +00:00
Xavier Guimard
ed748080d1 Split CDA (#1067) 2017-02-16 10:42:22 +00:00
Xavier Guimard
1e7b2c4a39 Add LWP options (closes: #1065) 2017-02-15 15:08:23 +00:00
Xavier Guimard
88dd1201ef Remove local-only parameters (#1160) 2017-02-13 16:48:39 +00:00
Xavier Guimard
40b7535ff3 Reorganize handler (closes: #1160) 2017-02-11 07:47:22 +00:00
Xavier Guimard
4b8db05b88 Hide undefined sub from tests (#1160) 2017-02-10 16:46:19 +00:00
Xavier Guimard
57330851f8 Avoid compiling methods in rules verification (#1160)
This cause customFunctions to return 1 after conf save with Nginx
2017-02-10 14:21:52 +00:00
Xavier Guimard
820691df33 Start handler reorganization (#1160) 2017-02-08 22:18:52 +00:00
Xavier Guimard
2982abb589 Combination in progress (#1151) 2017-02-06 12:36:29 +00:00
Xavier Guimard
1780092b0c Combination in progress (#1151) 2017-02-06 06:42:22 +00:00
Xavier Guimard
8a3bb7b0f9 Combination override conf (#1151)
TODO: lot of job in the manager...
2017-02-05 23:04:28 +00:00
Xavier Guimard
099063994e Remove also WebDI for userDB (see ^) 2017-02-05 09:18:57 +00:00
Xavier Guimard
7d27259e64 Create a "Same" value for userDB and remove some other 2017-02-05 09:13:20 +00:00
Xavier Guimard
41da50b8ca U2F registration works (#1148) 2017-02-03 17:14:13 +00:00
Xavier Guimard
a14d718351 U2F skeleton (#1148) 2017-02-02 21:48:32 +00:00
Xavier Guimard
a08d2f6433 Remove BrowserID parameters (see #602) 2017-02-01 10:32:03 +00:00
Xavier Guimard
61fd463f45 Split notifications (XML vs JSON) [#868] 2017-01-31 19:11:59 +00:00
Xavier Guimard
7a3725db9d Pwd reset in progress (#595) 2017-01-29 09:11:27 +00:00
Xavier Guimard
f7df1db206 Hide some warnings 2017-01-27 09:39:58 +00:00
Xavier Guimard
234551387f Captcha and token in progress (#1140) 2017-01-24 22:05:07 +00:00
Xavier Guimard
b70dac9f3a CSP in progress (#1138) 2017-01-19 06:09:20 +00:00
Xavier Guimard
04585cf188 Prepare Content-Security-Policy for portal (#1138) 2017-01-18 22:36:03 +00:00
Xavier Guimard
6b2dbd6482 Add portal status plugin (#595) 2017-01-16 21:00:50 +00:00
Xavier Guimard
6e3cb623ac Remove registerUrl: fixed to /register (#595) 2017-01-14 08:17:35 +00:00
Xavier Guimard
1b88459c31 Remove samlIDPSSODescriptorSingleSignOnServiceSOAP from everywhere 2017-01-13 08:17:20 +00:00
Xavier Guimard
52b2c8f90e Remove unimplemented SAML methods 2017-01-12 11:55:28 +00:00
Xavier Guimard
3c5cb018ef Compact conf 2017-01-11 21:10:13 +00:00
Xavier Guimard
62e3ba159d REST in progress (#970) 2017-01-10 12:25:30 +00:00
Xavier Guimard
10509e2a52 REST in progress (#970) 2017-01-09 06:11:30 +00:00
Xavier Guimard
d1646392a9 Split soap/rest server in config/sessions (#970) 2017-01-08 08:42:16 +00:00
Xavier Guimard
1983842f79 SOAP server (#970) 2017-01-07 20:37:07 +00:00
Xavier Guimard
b28fbd23aa Add "rest" parameter (#970) 2017-01-06 16:18:43 +00:00
Xavier Guimard
b94a337a05 Optimize checksession endpoint (#595) 2017-01-04 22:19:17 +00:00
Xavier Guimard
d35e24703e Remove old Google auth (#595)
Google OpenId endpoints now points to OpenId-Connect configuration
2017-01-03 06:09:29 +00:00
Xavier Guimard
c14bd95d92 Import some 1.9.7 changes 2016-12-29 06:25:07 +00:00
Clément Oudot
c48ee9d3e3 Apply modification for oidcRPMetaDataOptionsExtraClaims to trunk (#1105) 2016-11-15 16:04:43 +00:00
Clément Oudot
fdf74d2f3a Apply patch on Manager in trunk (#1088) 2016-10-04 09:07:55 +00:00
Clément Oudot
fc878c0545 Apply patch on Manager in trunk (#1087) 2016-09-29 19:24:58 +00:00
Clément Oudot
91b7ac93b1 Apply bypass consent option to trunk (#1089) 2016-09-27 13:23:29 +00:00
Clément Oudot
47c227246b Port option to store ID token in trunk (#1083) 2016-09-13 13:40:02 +00:00
Clément Oudot
5d2be9a418 Port SAML Token options in trunk (#1083) 2016-09-13 12:04:30 +00:00
Clément Oudot
7b4e3e4904 Port timeoutActivityInterval to trunk (#1001) 2016-09-12 09:49:40 +00:00
Clément Oudot
cfff6103a7 Change default values for SAML security parameters (#1079) 2016-09-06 09:49:45 +00:00
Clément Oudot
e141c2482a Add IDP resolution rule in Manager (#1076) 2016-08-31 08:32:32 +00:00
Clément Oudot
3a6978dad8 Add option to decode UTF8 SAML attributes (#1045) 2016-07-08 14:14:37 +00:00
Clément Oudot
35eb674b33 Manage values for samlIDPMetaDataOptionsSLOBinding (#1046) 2016-06-21 12:40:43 +00:00
Xavier Guimard
b9efa8cbf8 Use attribute or macro for issuerDBGetParameters (#LEMONLDAP=1025) 2016-06-03 16:02:58 +00:00
Xavier Guimard
e370416bc1 Add issuerDBGet parameters (#1025) 2016-06-03 11:34:14 +00:00
Xavier Guimard
4cde65c825 Set default values for BrowserID parameters (#595) 2016-05-23 21:52:26 +00:00
Xavier Guimard
40acd8d0fb Fix SMTPServer test (closes: #1019) 2016-05-18 15:23:51 +00:00
Xavier Guimard
a39c45b46c Remove dbiUserChain, dbiUserPassword and dbiUserUser parameters 2016-05-16 07:08:02 +00:00
Clément Oudot
085ac82587 Add ldapAllowResetExpiredPassword parameter in trunk Manager (#1011) 2016-05-11 13:12:17 +00:00
Xavier Guimard
f89152d225 #996 2016-04-21 20:19:20 +00:00
Xavier Guimard
b8181f2ecf Optimize some regexps 2016-04-14 16:55:36 +00:00
Xavier Guimard
ce0f0d09c4 s/CAS_/CAS/ 2016-03-31 20:08:40 +00:00
Xavier Guimard
5a04d1ff61 Import encrypt in header functions (closes: #983) 2016-03-23 12:55:09 +00:00
Xavier Guimard
2d2edb61ac Merge experimental branch (#960)
Also update version to 2.0
2016-03-17 22:19:44 +00:00
Xavier Guimard
ac3ee4f6a2 Update attributes and macros test (#967) 2016-03-15 20:30:33 +00:00
Xavier Guimard
580d5a4bcc More translations in errors 2016-03-09 06:06:46 +00:00
Xavier Guimard
9cbbdda0b1 _timezone is a valid macro name (#967) 2016-03-08 18:06:40 +00:00
Xavier Guimard
57ac1c4a2e Add tests for exportedHeaders (closes: #972) 2016-03-08 12:38:13 +00:00
Xavier Guimard
5d4877ddc5 Replace error by warning on RSA keys (closes: #965) 2016-03-05 18:57:37 +00:00
Xavier Guimard
7ac07074ae Update versions 2016-03-03 20:25:16 +00:00
Xavier Guimard
c3c77cbfd5 Forgotten keywords 2016-03-02 14:28:12 +00:00
Clément Oudot
c3346131a0 zimbraUrl and zimbraSsoUrl are not standard URLs (#943) 2016-02-25 10:38:36 +00:00
Xavier Guimard
178cef3eee Include customFunctions in all Perl expr (#820) 2016-02-17 19:09:51 +00:00
Xavier Guimard
7653c2d3d3 Better test for customFunction (#820) 2016-02-17 18:40:36 +00:00
Xavier Guimard
1799b59c45 Manage logout rules (#820) 2016-02-17 17:28:33 +00:00
Xavier Guimard
45dfd72b0b Bad customFunctions test (Closes: #938) 2016-02-17 16:38:10 +00:00
Xavier Guimard
f4ed479a1c Bad regexp for uri 2016-02-17 14:31:30 +00:00
Xavier Guimard
2f91261261 Typo 2016-02-09 22:17:48 +00:00
Xavier Guimard
cef5f5eb42 Better debug (#820) 2016-02-09 22:17:44 +00:00
Xavier Guimard
ae7febe69d Add extended functions in locationRules test (may close #924) 2016-02-09 22:17:42 +00:00
Xavier Guimard
27048b1670 More tests 2016-02-09 12:38:43 +00:00
Xavier Guimard
bb710cead0 Insert custom functions in locationRules test (#820) 2016-02-09 12:19:01 +00:00
Xavier Guimard
c4137c1d3e Update parameters tests + add test (#583, Closes #LEMONLDAP-924) 2016-02-05 11:21:00 +00:00
Xavier Guimard
cfb485828a reloadUrl keys may contain a port number 2016-02-04 18:07:47 +00:00
Xavier Guimard
b59b728e6a Start hash parameters test (#820) 2016-02-03 21:30:32 +00:00
Clément Oudot
6773ef3474 Fix text on slaveMasterIP (#923) 2016-02-02 16:11:51 +00:00
Clément Oudot
499976b95f Use simple int form for timeoutActivity (#917) 2016-02-02 10:22:09 +00:00
Clément Oudot
607641dcfd Possibility to use certificate in SAML response (#836) 2016-02-01 16:42:15 +00:00
Xavier Guimard
4f3a42ba48 Manage Ajax requests redirection with 401 (new parameter noAjaxHook) 2016-01-28 06:43:46 +00:00
Clément Oudot
3d1a70ad0e Add default attributes for an RP (#892) 2016-01-21 17:17:44 +00:00
Clément Oudot
ee105c4ead Add default attributes for an OP (#892) 2016-01-21 17:17:43 +00:00
Clément Oudot
ac722bdbbf Do not set default value for prompt (#820) 2016-01-21 14:19:31 +00:00
Clément Oudot
5059d3720c Associate correct help page to OpenID Connect nodes (#895) 2016-01-21 13:50:25 +00:00
Xavier Guimard
77158b92f5 Attribute help was not displayed (#Closes: #895) 2016-01-21 06:02:02 +00:00
Xavier Guimard
d36ed32290 Some little things 2016-01-13 17:54:39 +00:00
Xavier Guimard
5ef6d9692f Change backend lists (#883) 2016-01-12 17:20:20 +00:00
Xavier Guimard
d877623f6d Default value must not be a scalar for hash containers (#882) 2016-01-12 09:34:02 +00:00
Clément Oudot
1dc99ce818 Improve OpenID Connect configuration (#820) 2016-01-11 16:59:44 +00:00
Clément Oudot
94612f1eb3 Modify oidcServiceMetadataIssuer attribute (#820) 2016-01-11 15:12:49 +00:00
Clément Oudot
dae02078ce Possibility to use a certificate instead of a public key (#879) 2016-01-11 10:55:59 +00:00
Clément Oudot
58a5f51d93 Change default value for portalForceAuthnInterval (#820) 2016-01-06 15:58:40 +00:00
Xavier Guimard
1f03eb063c Little beautify changes 2016-01-06 09:43:31 +00:00
Xavier Guimard
876c420ed5 Update tests 2016-01-04 20:43:15 +00:00
Xavier Guimard
4c87b96f97 Add select content in Manager/Attributes.pm for tests 2015-12-30 20:32:45 +00:00
Xavier Guimard
820fbb5ffa RSA keys may be empty 2015-12-30 18:32:07 +00:00
Xavier Guimard
5c7cc89610 New forms for grantSessionRule 2015-12-30 18:32:01 +00:00
Xavier Guimard
2076abf9d1 Typo 2015-12-28 12:08:25 +00:00
Xavier Guimard
ae675692c4 +Attribute to change LDAP alias dereference (Closes: #787) 2015-12-28 11:58:53 +00:00
Xavier Guimard
10323d6b76 Check conditions in AuthSlave and UserDBSlave
Closes: #865
2015-12-27 12:29:32 +00:00
Xavier Guimard
63e70c7933 Bad tests 2015-12-26 20:17:23 +00:00
Xavier Guimard
d18918b020 Move files that should be used only by jsongenerator.pl in Manager/Build 2015-12-26 20:08:31 +00:00