dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
806 Commits 3 Branches 0 Tags 75 MiB
e63e7f86e4
Commit Graph

674 Commits

Author SHA1 Message Date
Xavier Guimard
5698b101db Missing files 2009-06-02 16:39:51 +00:00
Xavier Guimard
a67d187844 Sympa auto-login feature 2009-06-02 16:20:00 +00:00
Clément Oudot
aa2d48027f Use _user instead of uid for connected user 2009-06-02 15:46:26 +00:00
Clément Oudot
9d87ad8532 Use PasswordDBLDAP in Menu 2009-06-02 15:34:13 +00:00
Clément Oudot
56f7f8639a LEMONLDAP::NG : add dependencies 2009-05-29 10:18:38 +00:00
Clément Oudot
15dadc06d0 LEMONLDAP::NG: bugs found with make test 2009-05-29 09:53:07 +00:00
Clément Oudot
75c1f0feae LEMONLDAP::NG : Reset password by mail (new functionnality) 2009-05-28 16:31:39 +00:00
Clément Oudot
68975eaa40 LEMONLDAP::NG : correct some little bugs seen in 'make test' 2009-05-26 12:24:03 +00:00
Clément Oudot
d2edd78c44 LEMONLDAP::NG : reimport FederID theme 2009-05-26 11:04:56 +00:00
Clément Oudot
a38bd3e6c7 LEMONLDAP::NG : 
* Create UserDBNull to use only Auth module
* Store submitted login (user field) in AuthSessionInfos
* Store password if needed in AuthRemote
 2009-05-25 12:59:57 +00:00
Xavier Guimard
db4982564b Update portal manifest 2009-05-21 11:52:57 +00:00
Clément Oudot
43988469c7 LEMONLDAP::NG : Manage X-FORWARDED-FOR header for IP (close bug #312340) 2009-05-20 09:29:52 +00:00
Clément Oudot
0d9eaed6fc LEMONLDAP::NG : 
* Correct XSS on user field
* Add "XSS attack detected" log messages
 2009-05-19 08:52:27 +00:00
Clément Oudot
565ba83c05 LEMONLDAP::NG : 
* Verify old password before modify
* Add the "PE_BADOLDPASSWORD" error
* Minor changes in pastel skin
* Erase old default skins
* Move icons to skins/common
 2009-05-18 13:53:51 +00:00
Xavier Guimard
ba73dad7ec Missing files in MANIFEST 2009-05-16 10:19:30 +00:00
Xavier Guimard
9ee1775253 Missing file in MANIFEST 2009-05-16 10:17:19 +00:00
Clément Oudot
cae5e6ed98 LemonLDAP::NG : 
* Create PasswordDBLDAP
* Force password modification when password is reset with ppolicy
* new parameter ldapSetPassword: set to 1 if you want to use the LDAP extended operation rather than LDAP modify
* TODO: update HTML templates
 2009-05-14 16:19:49 +00:00
Clément Oudot
0b43906ff4 LEMONLDAP::NG : 
* Add AUTH_USER Template parameter
* Document ldapGroupBase in portal constructor
* Correct error call when testing password policy
 2009-05-14 08:46:18 +00:00
Clément Oudot
a3d65bf25f LEMONLDAP::NG : Typo for SafeLib test file 2009-05-14 08:33:06 +00:00
Xavier Guimard
906c91cbf0 Closes #313716 : Cookie recover failed with AXIS client 2009-05-13 08:21:37 +00:00
Xavier Guimard
e5efb715c6 New manager in progress... 2009-05-10 20:47:55 +00:00
Xavier Guimard
cb494c36d5 Logs as PerlLogHandler in handler and little things 2009-05-06 05:38:20 +00:00
Xavier Guimard
f00be5055a New manager in progress... 2009-04-26 16:38:38 +00:00
Xavier Guimard
7b1fc1a6a9 New manager in progress... 2009-04-26 12:47:55 +00:00
Xavier Guimard
3fa2ac0d26 New manager in progress... 2009-04-25 12:30:40 +00:00
Xavier Guimard
5a92a920ee New manager in progress 2009-04-24 16:33:40 +00:00
Xavier Guimard
9a3bf5489e Closes: #313627 2009-04-22 17:12:39 +00:00
Xavier Guimard
389bfaa38c Closes: #313627 2009-04-22 06:01:51 +00:00
Xavier Guimard
eb3e9126c5 LDAP schema missing in MANIFEST 2009-04-22 05:48:08 +00:00
Clément Oudot
1348922b42 LEMONLDAP::NG : typo in doxygen 2009-04-21 13:25:54 +00:00
Clément Oudot
eebac0ee3e LEMONLDAP::NG : checkLogonHours and checkDate in Safelib, and correct bug #313624 2009-04-21 13:24:38 +00:00
Clément Oudot
f2651d6202 LEMONLDAP::NG : OpenLDAP schema 2009-04-21 13:19:59 +00:00
Xavier Guimard
49b53cb3d5 Closes: #313589 (Port not taken into account in CDA) 2009-04-20 19:41:23 +00:00
Xavier Guimard
8b4c6288e0 Closes: #313554 (auth basic could fail with colon in password) 2009-04-20 17:49:35 +00:00
Xavier Guimard
8585457f8c Manager in progress... 2009-04-20 16:49:45 +00:00
Xavier Guimard
fddc5ac02c New manager in progress 2009-04-20 06:10:53 +00:00
Xavier Guimard
74253678ad New manager in progress... 2009-04-19 17:16:17 +00:00
Xavier Guimard
0abbe2f1d0 Experimental manager 2009-04-19 11:11:46 +00:00
Xavier Guimard
61866f20d6 Support for Apache::Session::LDAP and little things 2009-04-18 20:08:36 +00:00
Xavier Guimard
7ac6d25eaf * NoCache option for getConf() 
* sort problem + perltidy in Conf/LDAP
 2009-04-18 07:04:07 +00:00
Xavier Guimard
051f61b288 Since CGI stores now parameters at the root of the object, param is now redefined in Common/CGI.pm to secure those parameters 2009-04-11 11:16:44 +00:00
Xavier Guimard
294e35cbeb Error with PPolicy + CleanupHandler not launched 2009-04-11 06:13:28 +00:00
Xavier Guimard
c40c13734e SAML skeleton in progress... 2009-04-08 16:31:13 +00:00
Xavier Guimard
3ad76f30b2 PPolicy management is now in _LDAP.pm instead of AuthLDAP to be reused by Menu.pm 2009-04-08 10:32:33 +00:00
Xavier Guimard
a98e3ac8bb SAML skeleton 2009-04-07 20:38:24 +00:00
Xavier Guimard
87f9aba37e Default url value for logout 2009-04-07 09:54:50 +00:00
Xavier Guimard
d0408136d1 $vhost substitution failed 2009-04-07 09:48:55 +00:00
Xavier Guimard
c35ea2d689 Password management 2009-04-07 09:27:23 +00:00
Xavier Guimard
e15d136398 LDAP_PP_CHANGE_AFTER_RESET was not intercepted with OpenLDAP since bind() is granted in this case. 2009-04-07 08:26:12 +00:00
Clément Oudot
67c921f62a LEMONLDAP::NG : correct little bug in LDAP config backend, and add examples of LDAP configuration backend 2009-04-06 10:11:05 +00:00
Clément Oudot
d51cf49d21 LemonLDAP::NG : first support for LDAP configuration backend 2009-04-06 09:37:27 +00:00
Xavier Guimard
740ad09f9f Safelib + LDAPFilter parameter 2009-04-05 08:12:16 +00:00
Xavier Guimard
2f5af7de52 Documentation update 2009-04-04 15:29:38 +00:00
Xavier Guimard
73fa979c65 'CustomSOAPServices' target in portal 2009-04-04 07:36:42 +00:00
Xavier Guimard
f2f94e667d Obsolete test 2009-04-03 16:20:08 +00:00
Xavier Guimard
8bc0d20afa * Portal can now been used as 'proxy' for SOAP session storage. 
* Session explorer works now with SOAP session storage (very low performances)
 2009-04-03 16:17:57 +00:00
Xavier Guimard
a3fb34b90c portal expression in handler 2009-04-02 16:05:38 +00:00
Xavier Guimard
2d2721308c portal can be now an expression in the handler 2009-04-02 06:07:01 +00:00
Xavier Guimard
3b8b909f23 Little bug in CDA 2009-03-31 11:08:54 +00:00
Xavier Guimard
b0b971b241 Double session mechanism : 2 cookies are generated, 1 secured, the other not. 
Handlers detects automatically the cookie to choose.
 2009-03-31 10:52:43 +00:00
Xavier Guimard
d23ca2b2ba POST feature now encodes properly datas 2009-03-31 09:59:53 +00:00
Xavier Guimard
9c89459e0f POST feature in progress... 2009-03-28 09:11:27 +00:00
Xavier Guimard
21d3ab4ebd Trying to implement get_key_from_all_sessions for Lemonldap::NG::Common::Apache::Session::SOAP 2009-03-20 12:03:15 +00:00
Xavier Guimard
e5e80709e6 Use Net::LDAP high availability system 
%ENV was not shared
 2009-03-08 17:37:31 +00:00
Xavier Guimard
2b6a1d94a5 Test for Multi module 2009-03-08 16:41:43 +00:00
Xavier Guimard
231f54ddf0 * New authentication and userDB module : 'Multi' to chain authentication modules. 
* Compilation for ModPerl::Registry by default
 2009-03-08 08:50:58 +00:00
Xavier Guimard
6bf8377104 More methods for notification mechanism (to be used by batch that control done notifications) 2009-03-04 08:37:08 +00:00
Xavier Guimard
a4dbbf2ccd POD 2009-03-03 06:21:52 +00:00
Xavier Guimard
859be3923f * Doxygen doc update 
* More tests
* perltidy on tests
 2009-02-25 18:10:07 +00:00
Xavier Guimard
6307a00750 Lot of work on Portal SOAP services. Now 5 functions are exported: 
* getAttributes(cookieValue)
 * getConfig()
 * getCookies(user,password)
 * error(code,language)
 * newNotification(xml)

WSDL is up to date but getConfig is not documented since it's a Lemonldap::NG internal service.
 2009-02-24 17:53:59 +00:00
Xavier Guimard
2a77ab4066 More tests 2009-02-24 08:03:37 +00:00
Xavier Guimard
20764ad812 New authentication and userDB backend : "Remote" can be used to check authentication from a remote Lemonldap::NG portal using CDA 2009-02-23 17:35:38 +00:00
Xavier Guimard
ee3fc975e0 More tests 2009-02-22 12:10:49 +00:00
Xavier Guimard
8451736ded Bad default domain 2009-02-21 11:43:01 +00:00
Xavier Guimard
ace1f67cb6 Error in WSDL 2009-02-20 15:49:03 +00:00
Xavier Guimard
75f8ca4876 Typo 2009-02-19 09:35:29 +00:00
Xavier Guimard
07446ed429 More tests 2009-02-19 09:34:09 +00:00
Xavier Guimard
9fdea7384f make cpan updates META.yml 2009-02-19 08:26:22 +00:00
Xavier Guimard
30d2bd4dd4 More tests 2009-02-19 08:06:59 +00:00
Xavier Guimard
6dd414cb76 XSS tests 2009-02-17 19:37:06 +00:00
Xavier Guimard
018bee1fc6 CDA now included in main portal 2009-02-17 15:39:14 +00:00
Xavier Guimard
553058998f Doxygen comments update 2009-02-17 15:22:42 +00:00
Xavier Guimard
ffb5ee8e33 Doxygen filter modification to show authentication process methods 2009-02-17 14:56:38 +00:00
Xavier Guimard
bff9a423aa Make test failed 2009-02-17 14:35:30 +00:00
Xavier Guimard
f0eae70988 * session explorer was based only on $uid. Now it use $whatToTrace field 
* whatToTrace was not taken in account in Handler/CGI.pm
 2009-02-16 18:01:40 +00:00
Xavier Guimard
dc637c297b Test more clean 2009-02-16 11:19:05 +00:00
Xavier Guimard
18bc88563c new function logGranted() 2009-02-15 19:56:01 +00:00
Xavier Guimard
5803952784 * delete log() method from the portal : 
* user actions are logged by userNotice() and userError()
  * other access are logged by HTTP server
* create authenticate() method in Simple.pm used to launch userNotice() for
  all authentication method
 2009-02-15 17:58:38 +00:00
Xavier Guimard
b6cdee5d2a Now userNotice and userError are customizable like subs called by _subProcess 2009-02-15 11:30:25 +00:00
Xavier Guimard
415d23b6e4 User actions are now registered with 3 functions : 
* log        : normal access to the portal
 * userNotice : authentications, logout,...
 * userError  : bad password,...

A new parameter 'syslog => "auth"' can be set to log userNotice and userError via syslog
 2009-02-15 08:53:44 +00:00
Xavier Guimard
f1dd28c821 LEMONLDAP::NG : more error reporting 2009-02-14 15:21:58 +00:00
Xavier Guimard
02ec5618d9 * New CGI accounting method in Handler/CGI.pm 
* Manager/Sessions.pm now use header_public()
 2009-02-14 09:15:06 +00:00
Xavier Guimard
0c18700f65 * cleaning code : 
* session have not to be recover in Menu since it's done before bu the portal
* accounting in CGIs (ModPerl::Registry context only) :
  * used by portal to inform Apache
 2009-02-14 08:55:19 +00:00
Xavier Guimard
15e4a17bd8 * Typo in debian/control 
* Notification/DBI.pm is now running
 2009-02-13 09:26:02 +00:00
Clément Oudot
0131877a7b LEMONLDAP::NG : Move old Lemonldap stuff in lemonldap-legacy branch 2009-02-13 08:41:47 +00:00
Xavier Guimard
51625bddaf abort() use in manager 2009-02-12 20:17:55 +00:00
Xavier Guimard
19e59af4cd log & debug method lmLog() for CGIs 2009-02-12 19:48:53 +00:00
Clément Oudot
ed55803c04 LEMONLDAP::NG : Abort redirection if ppolicy warnings are present 2009-02-12 17:09:33 +00:00
Xavier Guimard
f8169c1909 Notification system in progress : 
* File storage is running
 * DBI storage has not yet been tested
Documentation update
 2009-02-11 16:18:38 +00:00
Xavier Guimard
7c1ff1d938 Versions update 2009-02-10 17:28:27 +00:00
Clément Oudot
33d43ffd75 LEMONLDAP::NG : Apply patch for cronjob (issue #312315) 2009-02-10 16:32:56 +00:00
Xavier Guimard
ab1b201e71 * AuthBasic now use SOAP request to create the new session 
* perltidy
 2009-02-10 11:10:12 +00:00
Thomas CHEMINEAU
6b821a21dd LEMONLDAP::NG : Fixe a bug in libertySignOn function, to retrieve correct providerID 2009-02-09 16:06:41 +00:00
Xavier Guimard
c5a5ba909f Typo in pod 2009-02-08 19:12:08 +00:00
Xavier Guimard
b275ee2ac8 LEMONLDAP::NG : WSDL is now clean 2009-02-08 17:12:42 +00:00
Xavier Guimard
fbdb9ccb22 LEMONLDAP::NG : * Version is missing in SOAPServer.pm 
* perltidy on Portal/Simple.pm
 2009-02-08 07:59:46 +00:00
Xavier Guimard
0d7ecc689d LEMONLDAP::NG : missing files 2009-02-07 16:39:23 +00:00
Xavier Guimard
6494326e1e LEMONLDAP::NG : typo 2009-02-06 17:41:23 +00:00
Xavier Guimard
2f9e6da6c1 LEMONLDAP::NG : problem with UTF8 in Notification.pm 2009-02-06 17:32:44 +00:00
Xavier Guimard
1800497815 LEMONLDAP::NG : propagation of 0.9.3.4 changes 2009-02-05 17:05:18 +00:00
Xavier Guimard
26492b5723 LEMONLDAP::NG : hide password in AuthBasic 2009-02-03 17:49:10 +00:00
Xavier Guimard
a25e10b040 LEMONLDAP::NG : * documentation modification 
* SOAP service to update notification database
 2009-02-03 09:36:13 +00:00
Xavier Guimard
1b6f56699a LEMONLDAP::NG : Missing file Portal/Notification.pm 2009-02-02 08:53:51 +00:00
Xavier Guimard
85d765a002 LEMONLDAP::NG : WSDL for portal + dependency of Crypt::Rijndael in Debian 2009-02-01 15:38:06 +00:00
Xavier Guimard
4a271a8225 LEMONLDAP::NG : Doxygen in progress 2009-01-31 07:30:59 +00:00
Xavier Guimard
21f5808cdf LEMONLDAP::NG : Notification system is running now (for file storage only). TODO: Soapservice to accept notifications 2009-01-30 15:26:34 +00:00
Xavier Guimard
2540bb36f0 LEMONLDAP::NG : * new feature in devel : notification system 
* now, there is a shared key that can be use to crypt datas
                  (used in notification to hide cookie value)
 2009-01-28 17:37:10 +00:00
Xavier Guimard
87d9d17f84 LEMONLDAP::NG : typo (Closes: #312339) 2009-01-17 19:48:57 +00:00
Xavier Guimard
ecb8ccbf96 LEMONLDAP::NG : bug with ldap+tls (Closes: #312418) 2009-01-17 19:45:21 +00:00
Xavier Guimard
f143719429 LEMONLDAP::NG : Typo 2009-01-03 08:54:49 +00:00
Xavier Guimard
486666a611 LEMONLDAP::NG : * Debian first install failed 
* Doxygen documentation in progress
                  => Version 0.9.3.2
 2009-01-03 08:49:30 +00:00
Xavier Guimard
bfab1a6e3b LEMONLDAP::NG Doxygen in progress 2008-12-31 15:10:02 +00:00
Xavier Guimard
ca064ead85 LEMONLDAP::NG : bad commit before 2008-12-31 10:53:25 +00:00
Xavier Guimard
4b57751fe8 LEMONLDAP::NG : ** READY FOR 0.9.3 ** 
- Better Makefile
 2008-12-31 10:39:39 +00:00
Xavier Guimard
62b02d49fd LEMONLDAP::NG : Doxygen documentation in progress 2008-12-30 09:37:56 +00:00
Clément Oudot
cef50ff78f LEMONLDAP::NG : autofocus in login page 2008-12-29 15:58:17 +00:00
Xavier Guimard
403917e618 LEMONLDAP::NG : Doxygen documentation in progress 2008-12-29 14:34:08 +00:00
Xavier Guimard
41fe04e8b8 LEMONLDAP::NG : Doxygen documentation in progress... 2008-12-29 10:28:31 +00:00
Xavier Guimard
7361207b88 LEMONLDAP::NG : New Makefile target "make doxygen" 2008-12-29 10:19:04 +00:00
Xavier Guimard
dbfec27788 LEMONLDAP::NG : back to previous version of lmSetApacheUser() 2008-12-28 15:19:39 +00:00
Xavier Guimard
bf6450df17 LEMONLDAP::NG : Split CGI and SOAP functions 2008-12-28 11:12:29 +00:00
Xavier Guimard
b5b2279117 LEMONLDAP::NG : SOAP::Lite dependency in Common 2008-12-28 09:06:58 +00:00
Xavier Guimard
2e5911ac4e LEMONLDAP::NG : Doxygen in progress. 2008-12-28 08:36:52 +00:00
Clément Oudot
985bdc2509 LEMONLDAP::NG : don't test url if direct access to portal 2008-12-27 11:00:45 +00:00
Xavier Guimard
228288d43c LEMONLDAP::NG : Doxygen in progress 2008-12-26 19:18:23 +00:00
Xavier Guimard
13a5a1daab LEMONLDAP::NG : Doxygen documentation in progress 2008-12-26 17:58:48 +00:00
Xavier Guimard
09f1a45cab LEONLDAP::NG : Better tests for Lemonldap::NG::Common 2008-12-26 16:13:36 +00:00
Xavier Guimard
52e22cd675 LEMONLDAP::NG : little more documentation 2008-12-25 20:06:23 +00:00
Xavier Guimard
5483c4451a LEMONLDAP::NG : * Romanian translation update 
* perltidy
                * test for menu
 2008-12-25 14:14:15 +00:00
Xavier Guimard
e4a7734f23 LEMONLDAP::NG : dependencies 2008-12-25 08:21:30 +00:00
Xavier Guimard
03fda7186f LEMONLDAP::NG : little change 2008-12-25 08:06:21 +00:00
Xavier Guimard
0d8ab5ea2b LEMONLDAP::NG : Perl module versions update for CPAN export 2008-12-25 08:04:33 +00:00
Xavier Guimard
78852ac337 LEMONLDAP::NG perltidy 2008-12-24 14:57:23 +00:00
Xavier Guimard
13cdc9b8ec LEMONLDAP::NG : XSS patch not compatible with logout system 2008-12-24 14:55:44 +00:00
Xavier Guimard
44cc396a83 LEMONLDAP::NG : Few things... 2008-12-24 14:35:49 +00:00
Xavier Guimard
9f22962f03 LEMONLDAP::NG : Status test failed 2008-12-24 14:22:02 +00:00
Xavier Guimard
b96cad7a18 LEMONLDAP::NG : Status has been broken by new storage.conf capability 2008-12-24 09:55:09 +00:00
Xavier Guimard
2449e92c2d LEMONLDAP::NG : A site in the protected domain is accepted in $portal->{urldc} even if the site is not declared in the manager 2008-12-24 09:12:53 +00:00
Xavier Guimard
8e6c8de591 LEMONLDAP::NG : I think version 0.9.3 is ready... 2008-12-24 08:32:11 +00:00
Xavier Guimard
aeefee4ec4 LEMONLDAP::NG : Debian installation in progress 2008-12-24 07:22:42 +00:00
Xavier Guimard
5ba1178057 LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now. 2008-12-22 17:49:36 +00:00
Xavier Guimard
cb9c75eb79 LEMONLDAP::NG : typo 2008-12-19 18:02:03 +00:00
Clément Oudot
d28f3036e3 LEMONLDAP::NG : Add icons in input fields 2008-12-18 16:08:03 +00:00
Xavier Guimard
c9adec5db5 LEMONLDAP::NG : Little problem in average count. The current minute has not to be taken in account. 2008-12-18 11:18:41 +00:00
Xavier Guimard
8b0058e546 LEMONLDAP::NG : little bug in Proxy.pm and debconf dependency 2008-12-13 17:12:14 +00:00
Xavier Guimard
cc07eae107 LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules 2008-12-11 17:02:02 +00:00
Xavier Guimard
a77e385730 LEMONLDAP::NG : little bug in SOAP error() 2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa LEMONLDAP::NG : error display in SOAP 2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4 LEMONLDAP::NG : now the portal can be called by browser or by SOAP 2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422 LEMONLDAP::NG : typo 2008-12-07 12:15:40 +00:00
Xavier Guimard
ae392f0276 LEMONLDAP::NG : SOAP Service in progress... 2008-12-07 11:47:38 +00:00
Xavier Guimard
53dc4bbbf4 LEMONLDAP::NG : * To avoid XSS, 3 controls : 
1) url must be base64 encoded
                  2) urldc is serialized on 1 line ("s/[\r\n]//sg")
                  3) urldc must not contains '"`\0<
                * Common/CGI can now intercept SOAP requests
 2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c LEMONLDAP::NG : XSS prevention 2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416 LEMONLDAP::NG : * branche 0.9.2 is missing 
* ' and " are now filtered in url in Portal.pm
 2008-12-06 07:27:35 +00:00
Xavier Guimard
789a39df97 LEMONLDAP::NG : * Support for Apache::Session::PHP (for Manager/Session and purgeCentralCache) 
* better cache control for Common::CGI.pm::header_public()
                * bug with the manager introduced previously
 2008-12-05 16:30:27 +00:00
Xavier Guimard
5bbe35cedc LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible 2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085 LEMONLDAP::NG : minnor things 2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247 LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP 2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8 LEMONLDAP::NG : Enforce XSS protection by deleting bad urls 2008-12-03 16:41:30 +00:00
Xavier Guimard
24a14caeda LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites 
* perltidy in Manager/Sessions.pm
                * Doxygen in progress...
 2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72 LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used 2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2 LEMONLDAP::NG : * security fix => XSS 
* Begin Doxygen documentation
 2008-12-03 13:27:30 +00:00
Xavier Guimard
e1e67bae80 LEMONLDAP::NG : Javascript typo: little error in Manager 2008-12-02 13:56:45 +00:00
Xavier Guimard
6dc275710c LEMONLDAP::NG : * avoid a little warning in tests 
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
 2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387 LEMONLDAP::NG : better manner to delete cookie 2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924 LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE 
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
 2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request 2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0 LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML) 
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
 2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0 LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML 
* Links in Debian examples installation
 2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f LEMONLDAP::NG : web form in a distinct file 2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81 LEMONLDAP::NG : Notification system skeleton 2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7 LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test 2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3 LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities 
* CGIs now use abort() instead of die
                * debug system in COnf.pm (set "LogLevel debug" in Apache)
 2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b LEMONLDAP::NG : die replaced by $self->abort in CGIs 2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e LEMONLDAP::NG : removing old feature : LDAP filter in groups 2008-11-20 18:13:27 +00:00
Xavier Guimard
1e17091abb LEMONLDAP::NG : *security bug* : a blank password was available on AuthBasic 2008-11-20 17:34:35 +00:00
Xavier Guimard
eea294ce3b LEMONLDAP::NG : Manager/Base.pm becomes Common/CGI.pm 2008-11-20 06:53:44 +00:00
Xavier Guimard
c9fc66bbef LEMONLDAP::NG : Conf.pm now can use local cache. If "localStorage" is set in "configStorage" : 
* getConf acts as a "must-revalidate" proxy for the configuration (get numConf
                   from globalCache and give local conf if ti's the same number
                 * if "local=>1" is set when calling getConf, globalConfiguration number is not
                   checked and it returns local config

                Handler/SharedConf will so be simplified
 2008-11-19 17:49:46 +00:00
Xavier Guimard
64f0192eda LEMONLDAP::NG : an uid can start with a "0" 2008-11-19 15:50:25 +00:00
Xavier Guimard
45670f3d21 LEMONLDAP::NG : bless was not safe in Conf.pm 2008-11-19 11:25:35 +00:00
Xavier Guimard
b5c2abb2a0 LEMONLDAP::NG : customFunctions called "package::function" where not correctly interpreted 2008-11-19 11:19:06 +00:00
Clément Oudot
19b5fa1190 LEMONLDAP::NG : fix bug #311849 2008-11-18 12:47:30 +00:00
Xavier Guimard
cae4cbade0 LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie 2008-11-17 16:59:56 +00:00
Xavier Guimard
dd0c815795 LEMONLDAP::NG : one more bug... 2008-11-17 15:12:17 +00:00
Xavier Guimard
e1ff8a6d46 LEMONLDAP::NG : oups ! bug introduced in the previous commit 2008-11-17 15:09:33 +00:00
Xavier Guimard
e42c8b263f LEMONLDAP::NG : little bugs in customFunctions 2008-11-17 15:06:58 +00:00
Xavier Guimard
d88ae29227 LEMONLDAP::NG : new customFunctions feature (+ perltidy everywhere) 2008-11-17 14:02:50 +00:00
Clément Oudot
e5d13fdf17 LEMONLDAP::NG : Add Sessions Explorer in Application Menu 2008-11-16 12:40:28 +00:00
Clément Oudot
73fa157836 LEMONLDAP::NG : sessions.pl configured with make example 2008-11-16 12:13:26 +00:00
Xavier Guimard
f399324f18 LEMONLDAP::NG : little hook in Menu.pm 2008-11-14 07:16:26 +00:00