91 Commits

Author SHA1 Message Date
1d2a49746d Added authentication module combining http authentication and Active Directory authorization 2016-05-18 10:06:12 +02:00
12a3b305ed API access when using LDAP authorization 2016-03-10 14:48:01 +01:00
322053c827 API access when using LDAP authentication 2016-03-07 14:07:51 +01:00
b9448a61a8 Remove Success output from homepage when using AD Auth. 2016-01-25 13:10:51 -06:00
64ce4f335f Add HTTP Authentication / LDAP Authorization module.
This Authentitation / Authorization module provides the ability to let
  the webserver (e.g. Apache) do the user Authentication (using Kerberos
  f.e.) and let libreNMS do the Authorization of the already known user.
  Authorization and setting of libreNMS user level is done by LDAP group
  names specified in the configuration file. The group configuration is
  basicly copied from the existing ldap Authentication module.

  To save lots of redundant queries to the LDAP server and speed up the
  libreNMS WebUI, all information is cached within the PHP $_SESSION as
  long as specified in $config['auth_ldap_cache_ttl'] (Default: 300s).

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>
2016-01-21 21:49:08 +01:00
laf
c6c3858312 Some more scrut fixes 2016-01-19 22:27:04 +00:00
laf
44dc6b652b Fixed scrut issues 2016-01-19 09:04:53 +00:00
laf
57c802cd4e Updated active directory auth to support dashboards 2016-01-17 15:26:35 +00:00
laf
3a299584b0 Added ability to specify default userlevel 2015-12-14 21:52:15 +00:00
laf
af21d4a54a Fix some scrut issues 2015-12-13 16:54:40 +00:00
laf
dcf4d0f378 Added docs and set default users to level 1 2015-12-13 15:51:15 +00:00
laf
b31cbd8dae Code for Radius authentication added 2015-12-13 15:37:55 +00:00
ff03e17e7f scrut fixes 2015-11-21 14:12:27 +00:00
340fd75bd5 fix rest of the authmodules 2015-11-21 12:25:34 +00:00
224ccab950 Fixed adduser bug
Always show notification bubble
Added tooltip to archive's sticky button
2015-11-21 12:15:42 +00:00
987c841b48 Automatically mark all news as read for new users
Renamed Schema for old system
2015-11-21 11:40:24 +00:00
6e78fc8d0b Update active_directory.inc.php 2015-11-17 12:28:28 +01:00
04c75838f6 Functionality added: adduser(), user_exists_in_db() 2015-11-16 13:37:12 +01:00
f971d7ecf3 Signed-off-by: Peter Lamperud <petlam@unibet.com> 2015-11-16 12:27:15 +01:00
7c54782cc8 Moved auth_ad_dont_check_certificates to auth_ad_check_certificates 2015-11-16 10:24:16 +01:00
02d54e9c50 Fix AD auth with untrusted certificates. LDAPTLS_REQCERT=never must be
set before ldap_connect.
2015-11-13 11:05:05 -06:00
d326869675 Removed unused variables 2015-11-10 10:47:50 +01:00
16df0fdd2e Coding style 2015-11-10 10:39:42 +01:00
2326061e68 Removed unused variables and updated coding style 2015-11-10 10:38:42 +01:00
0eeb4d2ef8 Fixed a bug from scrutinizer 2015-11-10 10:03:47 +01:00
a785398492 Merge remote-tracking branch 'upstream/master' into active_directory_auth 2015-11-10 09:43:30 +01:00
779c90b1fd Checking for groups now 2015-10-30 17:17:55 +01:00
93b57040c5 Authenticate against active directory 2015-10-22 09:16:20 +02:00
a36f3e1e35 Initial commit 2015-10-16 09:40:17 +02:00
e908c25290 Styled the two factor auth token prompt 2015-10-15 19:21:09 +02:00
afdbb2406d Added $nocache parameter
Fixed typo in caching
Excluded caching for MySQL-Authentication & /poll-log/
2015-09-30 15:20:06 +00:00
a10c488915 Merge pull request #1611 from SaaldjorMike/remove-php-closing-tags
Remove php closing tags to fix scrut issues
2015-08-05 06:32:12 +10:00
0cc3e1a9e2 Remove php closing tags to fix scrut issues 2015-08-04 19:29:43 +02:00
5369112d48 Fix some scrutinizer coding style issues 2015-08-04 18:36:03 +02:00
0a88c386b0 Add 'puredn' ldap authentication 2015-07-21 20:56:48 +03:00
d8693f05ae Fix coding style part 2 2015-07-15 11:04:22 +02:00
6f299a9679 Merge remote-tracking branch 'upstream/master' into issue-714
Conflicts:
	html/includes/authentication/ldap.inc.php
2015-04-08 08:43:24 +02:00
1663b743db remove array_push is inefficient and we dont care about its return value 2015-04-07 14:03:30 -07:00
d4f472e9cb stop ldap_compare() from running against ldap_comparison, which would result in an error 2015-04-07 13:58:31 -07:00
b41605a13a clean up code and add more detection 2015-04-07 12:30:02 -07:00
cb5a62087e make code more backward-compatible 2015-04-07 12:21:52 -07:00
2e233e0d5c add global config, fix get_userlist 2015-04-07 12:10:55 -07:00
00f77f8bdf add feature to loop all groups for auth 2015-04-07 11:48:29 -07:00
3eaaac4ce4 Add email address for LDAP users. 2015-04-07 09:52:21 +02:00
0ab454fefc Add support for LDAP directories using member in stead of memberUid and dn in stead of username for group members.
Used the same variables as Observium, see http://www.observium.org/wiki/Authentication_modules#OpenLDAP
2015-04-01 16:10:50 +02:00
a1ef2e0f69 Fixed the mysql auth include and the db schema. I set the desc field to be a varchar(200) and set it to be NULL by default (this is a personal preference but since it was not set in the code...). I fixed adduser function in html/includes/authentication/mysql.inc.php. I added $description and $twofactor to the function argument with default values and added descr and twofactor elements in the array passed to the dbInsert function call. OpenSuSE 13.2 2015-02-26 23:03:05 +00:00
a4d3c8709d Fixed the scrut coding style issues 2015-02-22 16:45:40 +00:00
f0o
d66cec7017 Added TwoFactor Authentication (RFC4226)
Tested against Google-Authenticator app on Android 4.4.4

Made `verify_hotp` more efficient.

Added autofocus on twofactor input

Added GUI Unlock and Remove for TwoFactor credentials in /edituser/

Allow additional tries after elapsed time from last try exceeds configured parameter `$config['twofactor_lock']`.
If `$config['twofactor_lock']` is not defined or is set to `0`, administrators have to unlock accounts that exceed 3 failures via GUI.

Added Documentation

Moved TwoFactor form to logon.inc.php
Disabled autocomplete on twofactor input field
Updated Docs to include link to Google-Authenticator's install-guides

Moved authentication logic from authenticate.inc.php to twofactor.lib.php

typo in docblock for `twofactor_auth()`

Fixed scrutinizer bugs

To please scrutinizer
2014-12-28 15:40:40 +00:00
laf
7f95922160 Updated adduser to check for existing user and use password hashing 2014-10-06 18:39:48 +01:00
laf
dc9c4308e8 Update ldap.inc.php 2014-03-29 11:38:04 +00:00