Commit Graph

88 Commits

Author SHA1 Message Date
Tony Murray
b9448a61a8 Remove Success output from homepage when using AD Auth. 2016-01-25 13:10:51 -06:00
Maximilian Wilhelm
64ce4f335f Add HTTP Authentication / LDAP Authorization module.
This Authentitation / Authorization module provides the ability to let
  the webserver (e.g. Apache) do the user Authentication (using Kerberos
  f.e.) and let libreNMS do the Authorization of the already known user.
  Authorization and setting of libreNMS user level is done by LDAP group
  names specified in the configuration file. The group configuration is
  basicly copied from the existing ldap Authentication module.

  To save lots of redundant queries to the LDAP server and speed up the
  libreNMS WebUI, all information is cached within the PHP $_SESSION as
  long as specified in $config['auth_ldap_cache_ttl'] (Default: 300s).

Signed-off-by: Maximilian Wilhelm <max@rfc2324.org>
2016-01-21 21:49:08 +01:00
laf
c6c3858312 Some more scrut fixes 2016-01-19 22:27:04 +00:00
laf
44dc6b652b Fixed scrut issues 2016-01-19 09:04:53 +00:00
laf
57c802cd4e Updated active directory auth to support dashboards 2016-01-17 15:26:35 +00:00
laf
3a299584b0 Added ability to specify default userlevel 2015-12-14 21:52:15 +00:00
laf
af21d4a54a Fix some scrut issues 2015-12-13 16:54:40 +00:00
laf
dcf4d0f378 Added docs and set default users to level 1 2015-12-13 15:51:15 +00:00
laf
b31cbd8dae Code for Radius authentication added 2015-12-13 15:37:55 +00:00
Daniel Preussker
ff03e17e7f scrut fixes 2015-11-21 14:12:27 +00:00
Daniel Preussker
340fd75bd5 fix rest of the authmodules 2015-11-21 12:25:34 +00:00
Daniel Preussker
224ccab950 Fixed adduser bug
Always show notification bubble
Added tooltip to archive's sticky button
2015-11-21 12:15:42 +00:00
Daniel Preussker
987c841b48 Automatically mark all news as read for new users
Renamed Schema for old system
2015-11-21 11:40:24 +00:00
vizay
6e78fc8d0b Update active_directory.inc.php 2015-11-17 12:28:28 +01:00
Peter Lamperud
04c75838f6 Functionality added: adduser(), user_exists_in_db() 2015-11-16 13:37:12 +01:00
Peter Lamperud
f971d7ecf3 Signed-off-by: Peter Lamperud <petlam@unibet.com> 2015-11-16 12:27:15 +01:00
Falk Stern
7c54782cc8 Moved auth_ad_dont_check_certificates to auth_ad_check_certificates 2015-11-16 10:24:16 +01:00
Tony Murray
02d54e9c50 Fix AD auth with untrusted certificates. LDAPTLS_REQCERT=never must be
set before ldap_connect.
2015-11-13 11:05:05 -06:00
Falk Stern
d326869675 Removed unused variables 2015-11-10 10:47:50 +01:00
Falk Stern
16df0fdd2e Coding style 2015-11-10 10:39:42 +01:00
Falk Stern
2326061e68 Removed unused variables and updated coding style 2015-11-10 10:38:42 +01:00
Falk Stern
0eeb4d2ef8 Fixed a bug from scrutinizer 2015-11-10 10:03:47 +01:00
Falk Stern
a785398492 Merge remote-tracking branch 'upstream/master' into active_directory_auth 2015-11-10 09:43:30 +01:00
Falk Stern
779c90b1fd Checking for groups now 2015-10-30 17:17:55 +01:00
Falk Stern
93b57040c5 Authenticate against active directory 2015-10-22 09:16:20 +02:00
Falk Stern
a36f3e1e35 Initial commit 2015-10-16 09:40:17 +02:00
Mattz0r
e908c25290 Styled the two factor auth token prompt 2015-10-15 19:21:09 +02:00
Daniel Preussker
afdbb2406d Added $nocache parameter
Fixed typo in caching
Excluded caching for MySQL-Authentication & /poll-log/
2015-09-30 15:20:06 +00:00
Paul Gear
a10c488915 Merge pull request #1611 from SaaldjorMike/remove-php-closing-tags
Remove php closing tags to fix scrut issues
2015-08-05 06:32:12 +10:00
Mike Rostermund
0cc3e1a9e2 Remove php closing tags to fix scrut issues 2015-08-04 19:29:43 +02:00
Mike Rostermund
5369112d48 Fix some scrutinizer coding style issues 2015-08-04 18:36:03 +02:00
root
0a88c386b0 Add 'puredn' ldap authentication 2015-07-21 20:56:48 +03:00
Job Snijders
d8693f05ae Fix coding style part 2 2015-07-15 11:04:22 +02:00
Ultra2D
6f299a9679 Merge remote-tracking branch 'upstream/master' into issue-714
Conflicts:
	html/includes/authentication/ldap.inc.php
2015-04-08 08:43:24 +02:00
Tyler Christiansen
1663b743db remove array_push is inefficient and we dont care about its return value 2015-04-07 14:03:30 -07:00
Tyler Christiansen
d4f472e9cb stop ldap_compare() from running against ldap_comparison, which would result in an error 2015-04-07 13:58:31 -07:00
Tyler Christiansen
b41605a13a clean up code and add more detection 2015-04-07 12:30:02 -07:00
Tyler Christiansen
cb5a62087e make code more backward-compatible 2015-04-07 12:21:52 -07:00
Tyler Christiansen
2e233e0d5c add global config, fix get_userlist 2015-04-07 12:10:55 -07:00
Tyler Christiansen
00f77f8bdf add feature to loop all groups for auth 2015-04-07 11:48:29 -07:00
Ultra2D
3eaaac4ce4 Add email address for LDAP users. 2015-04-07 09:52:21 +02:00
Ultra2D
0ab454fefc Add support for LDAP directories using member in stead of memberUid and dn in stead of username for group members.
Used the same variables as Observium, see http://www.observium.org/wiki/Authentication_modules#OpenLDAP
2015-04-01 16:10:50 +02:00
mchasteen
a1ef2e0f69 Fixed the mysql auth include and the db schema. I set the desc field to be a varchar(200) and set it to be NULL by default (this is a personal preference but since it was not set in the code...). I fixed adduser function in html/includes/authentication/mysql.inc.php. I added $description and $twofactor to the function argument with default values and added descr and twofactor elements in the array passed to the dbInsert function call. OpenSuSE 13.2 2015-02-26 23:03:05 +00:00
Neil Lathwood
a4d3c8709d Fixed the scrut coding style issues 2015-02-22 16:45:40 +00:00
f0o
d66cec7017 Added TwoFactor Authentication (RFC4226)
Tested against Google-Authenticator app on Android 4.4.4

Made `verify_hotp` more efficient.

Added autofocus on twofactor input

Added GUI Unlock and Remove for TwoFactor credentials in /edituser/

Allow additional tries after elapsed time from last try exceeds configured parameter `$config['twofactor_lock']`.
If `$config['twofactor_lock']` is not defined or is set to `0`, administrators have to unlock accounts that exceed 3 failures via GUI.

Added Documentation

Moved TwoFactor form to logon.inc.php
Disabled autocomplete on twofactor input field
Updated Docs to include link to Google-Authenticator's install-guides

Moved authentication logic from authenticate.inc.php to twofactor.lib.php

typo in docblock for `twofactor_auth()`

Fixed scrutinizer bugs

To please scrutinizer
2014-12-28 15:40:40 +00:00
laf
7f95922160 Updated adduser to check for existing user and use password hashing 2014-10-06 18:39:48 +01:00
laf
dc9c4308e8 Update ldap.inc.php 2014-03-29 11:38:04 +00:00
laf
dff43f78f2 Update ldap.inc.php 2014-03-14 00:46:44 +00:00
laf
8cf255072c Updated edit user screen so you can now update details 2014-03-10 23:50:16 +00:00
laf
18f9b89639 Removed code that was previously commented out 2014-02-23 17:55:07 +00:00