Commit Graph
47 Commits
Author SHA1 Message Date
Ultra2D 0ab454fefc Add support for LDAP directories using member in stead of memberUid and dn in stead of username for group members.
Used the same variables as Observium, see http://www.observium.org/wiki/Authentication_modules#OpenLDAP
2015-04-01 16:10:50 +02:00
mchasteen a1ef2e0f69 Fixed the mysql auth include and the db schema. I set the desc field to be a varchar(200) and set it to be NULL by default (this is a personal preference but since it was not set in the code...). I fixed adduser function in html/includes/authentication/mysql.inc.php. I added $description and $twofactor to the function argument with default values and added descr and twofactor elements in the array passed to the dbInsert function call. OpenSuSE 13.2 2015-02-26 23:03:05 +00:00
Neil Lathwood a4d3c8709d Fixed the scrut coding style issues 2015-02-22 16:45:40 +00:00
f0o d66cec7017 Added TwoFactor Authentication (RFC4226)
Tested against Google-Authenticator app on Android 4.4.4

Made `verify_hotp` more efficient.

Added autofocus on twofactor input

Added GUI Unlock and Remove for TwoFactor credentials in /edituser/

Allow additional tries after elapsed time from last try exceeds configured parameter `$config['twofactor_lock']`.
If `$config['twofactor_lock']` is not defined or is set to `0`, administrators have to unlock accounts that exceed 3 failures via GUI.

Added Documentation

Moved TwoFactor form to logon.inc.php
Disabled autocomplete on twofactor input field
Updated Docs to include link to Google-Authenticator's install-guides

Moved authentication logic from authenticate.inc.php to twofactor.lib.php

typo in docblock for `twofactor_auth()`

Fixed scrutinizer bugs

To please scrutinizer
2014-12-28 15:40:40 +00:00
laf 7f95922160 Updated adduser to check for existing user and use password hashing 2014-10-06 18:39:48 +01:00
laf dc9c4308e8 Update ldap.inc.php 2014-03-29 11:38:04 +00:00
laf dff43f78f2 Update ldap.inc.php 2014-03-14 00:46:44 +00:00
laf 8cf255072c Updated edit user screen so you can now update details 2014-03-10 23:50:16 +00:00
laf 18f9b89639 Removed code that was previously commented out 2014-02-23 17:55:07 +00:00
laf 005504ae6d Updated session / cookie support 2014-02-03 22:39:37 +00:00
laf 04a9f4a2f3 Updated mysql auth to use PHPass 2014-02-03 12:10:06 +00:00
Adam Amstrong b273e04241 /// -> //
git-svn-id: http://www.observium.org/svn/observer/trunk@3240 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 12:24:34 +00:00
Adam Amstrong cacf913a55 # -> / for phpdoc
git-svn-id: http://www.observium.org/svn/observer/trunk@3239 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 11:29:53 +00:00
Tom Laermans 08d09b71ae don't show ldap error when empty form is submitted
git-svn-id: http://www.observium.org/svn/observer/trunk@3067 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-20 13:34:52 +00:00
Tom Laermans 764cb72cd5 fixes and cleanups
git-svn-id: http://www.observium.org/svn/observer/trunk@3018 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-10 15:53:10 +00:00
Adam Amstrong ee1517e38b ldap tls support
git-svn-id: http://www.observium.org/svn/observer/trunk@2880 61d68cd4-352d-0410-923a-c4978735b2b8
2012-02-27 23:36:19 +00:00
Tom Laermans 6b8cba3d24 syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2580 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-26 16:06:18 +00:00
Tom Laermans ff895f96a0 add get_userlist function, pull from LDAP in case of LDAP backend -- now awaiting fix of edituser page
git-svn-id: http://www.observium.org/svn/observer/trunk@2545 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 16:46:30 +00:00
Tom Laermans f1ce87d34d syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2542 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 15:05:11 +00:00
Tom Laermans 838617100c get ldap userlevel and user id from ldap now, configure the ldap groups levels in the config file; please note if you assigned rights to certain users they might have vanished as the userid is now the uidnumber from ldap
git-svn-id: http://www.observium.org/svn/observer/trunk@2539 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-21 22:04:05 +00:00
Tom Laermans d864ce234f kill a whole bunch of trailing spaces
git-svn-id: http://www.observium.org/svn/observer/trunk@2516 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 09:55:11 +00:00
Tom Laermans b862c91618 fix ldap auth plugin, broke a lot of userlevel stuff a long time ago due to mysql layer changes
git-svn-id: http://www.observium.org/svn/observer/trunk@2482 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-16 10:08:05 +00:00
Adam Amstrong 8d8e80c911 fix typo in useradd function for httpauth
git-svn-id: http://www.observium.org/svn/observer/trunk@2403 61d68cd4-352d-0410-923a-c4978735b2b8
2011-08-27 23:12:51 +00:00
Adam Amstrong a1d3e4606e fixes to auth and deleting users
git-svn-id: http://www.observium.org/svn/observer/trunk@2372 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-26 21:35:25 +00:00
Adam Amstrong d7d7d67fa0 fixes
git-svn-id: http://www.observium.org/svn/observer/trunk@2294 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 23:17:44 +00:00
Adam Amstrong 6bcc4f4e48 fix some stuff, break some stuff (ports disaply is missing some stuff atm)
git-svn-id: http://www.observium.org/svn/observer/trunk@2290 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 22:14:56 +00:00
Geert Hauwaerts 9202ff9bee - Added support in MySQL auth to prohibit users from modifying their password.
git-svn-id: http://www.observium.org/svn/observer/trunk@2252 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-05 14:54:12 +00:00
Tom Laermans 6c293c692a now in line with the rest of the code style...
git-svn-id: http://www.observium.org/svn/observer/trunk@2223 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 14:14:23 +00:00
Adam Amstrong c5aee9205b more auth fixes from lenwe.
git-svn-id: http://www.observium.org/svn/observer/trunk@2222 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 14:10:21 +00:00
Adam Amstrong 802958fe3d less if $thing more if isset($thing). from lenwe.
git-svn-id: http://www.observium.org/svn/observer/trunk@2220 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 11:28:39 +00:00
Tom Laermans f55a30f744 some formatting cleanups, introduce some more FIXMEs to look at, plus replace mysql_fetch_array by mysql_fetch_assoc, for great justice
git-svn-id: http://www.observium.org/svn/observer/trunk@2029 61d68cd4-352d-0410-923a-c4978735b2b8
2011-04-06 13:54:50 +00:00
Tom Laermans 2be7bfe497 r1984: BIG BROTHER RELEASE // Move user deletion code into authentication module
git-svn-id: http://www.observium.org/svn/observer/trunk@1984 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-28 10:48:43 +00:00
Tom Laermans 2f0c69c9ef only update password to salted if database field is long enough
git-svn-id: http://www.observium.org/svn/observer/trunk@1939 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-20 21:13:59 +00:00
Tom Laermans 7bd37c5b06 change from unsalted md5 to salted md5 passwords, migrating passwords as authentication succeeds
git-svn-id: http://www.observium.org/svn/observer/trunk@1936 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-19 20:23:23 +00:00
Tom Laermans 6ce38e5229 check for existing user in adduser
git-svn-id: http://www.observium.org/svn/observer/trunk@1930 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-18 16:56:02 +00:00
Tom Laermans 2afb522333 just another cleanup commit, don't mind me...
git-svn-id: http://www.observium.org/svn/observer/trunk@1885 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-16 18:28:52 +00:00
Tom Laermans c6428480bc remove dead map.php code, rename some .inc to .inc.php files, general trailing space cleanup part 1, some reindent. No expected functionality change whatsoever ;)
git-svn-id: http://www.observium.org/svn/observer/trunk@1824 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-12 08:50:47 +00:00
Tom Laermans 30bdd952ee Minor fixes, some cleanups, and standardising on echo("x") instead of echo "x"
git-svn-id: http://www.observium.org/svn/observer/trunk@1728 61d68cd4-352d-0410-923a-c4978735b2b8
2010-11-20 14:04:07 +00:00
Tom Laermans f5c7d989f6 Add support for Ingrasys iPoMan 1201 + minor fixes
git-svn-id: http://www.observium.org/svn/observer/trunk@1726 61d68cd4-352d-0410-923a-c4978735b2b8
2010-11-19 22:46:24 +00:00
Adam Amstrong 8dfad7f27d fix password change for mysql auth
git-svn-id: http://www.observium.org/svn/observer/trunk@1232 61d68cd4-352d-0410-923a-c4978735b2b8
2010-06-21 15:39:43 +00:00
Tom Laermans c0620baddc more working less sucking
git-svn-id: http://www.observium.org/svn/observer/trunk@994 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-06 01:22:09 +00:00
Tom Laermans 1900cbb309 can has working pages? NO CAN HAS :(
git-svn-id: http://www.observium.org/svn/observer/trunk@993 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-06 01:19:06 +00:00
Tom Laermans 71bcc3abe4 userlevel via authmodule
git-svn-id: http://www.observium.org/svn/observer/trunk@992 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-06 01:15:52 +00:00
Tom Laermans eed5f0c3c3 MOAR AUTHMODULE, with some parts left to do...
git-svn-id: http://www.observium.org/svn/observer/trunk@991 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-06 01:10:05 +00:00
Tom Laermans cb7c59505f change password option in the auth modules, not used in the webinterface yet
git-svn-id: http://www.observium.org/svn/observer/trunk@990 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-06 00:00:05 +00:00
Tom Laermans 5c15e4ec95 allow specifying LDAP version 2 or 3 in the config
git-svn-id: http://www.observium.org/svn/observer/trunk@978 61d68cd4-352d-0410-923a-c4978735b2b8
2010-03-01 01:23:37 +00:00
Tom Laermans b719e22e8e auth modules! please test http-auth again, i haven't, but i think i got it right...
git-svn-id: http://www.observium.org/svn/observer/trunk@973 61d68cd4-352d-0410-923a-c4978735b2b8
2010-02-28 13:04:07 +00:00