Commit Graph

62 Commits

Author SHA1 Message Date
Mattz0r e908c25290 Styled the two factor auth token prompt 2015-10-15 19:21:09 +02:00
Daniel Preussker afdbb2406d Added $nocache parameter
Fixed typo in caching
Excluded caching for MySQL-Authentication & /poll-log/
2015-09-30 15:20:06 +00:00
Paul Gear a10c488915 Merge pull request #1611 from SaaldjorMike/remove-php-closing-tags
Remove php closing tags to fix scrut issues
2015-08-05 06:32:12 +10:00
Mike Rostermund 0cc3e1a9e2 Remove php closing tags to fix scrut issues 2015-08-04 19:29:43 +02:00
Mike Rostermund 5369112d48 Fix some scrutinizer coding style issues 2015-08-04 18:36:03 +02:00
root 0a88c386b0 Add 'puredn' ldap authentication 2015-07-21 20:56:48 +03:00
Job Snijders d8693f05ae Fix coding style part 2 2015-07-15 11:04:22 +02:00
Ultra2D 6f299a9679 Merge remote-tracking branch 'upstream/master' into issue-714
Conflicts:
	html/includes/authentication/ldap.inc.php
2015-04-08 08:43:24 +02:00
Tyler Christiansen 1663b743db remove array_push is inefficient and we dont care about its return value 2015-04-07 14:03:30 -07:00
Tyler Christiansen d4f472e9cb stop ldap_compare() from running against ldap_comparison, which would result in an error 2015-04-07 13:58:31 -07:00
Tyler Christiansen b41605a13a clean up code and add more detection 2015-04-07 12:30:02 -07:00
Tyler Christiansen cb5a62087e make code more backward-compatible 2015-04-07 12:21:52 -07:00
Tyler Christiansen 2e233e0d5c add global config, fix get_userlist 2015-04-07 12:10:55 -07:00
Tyler Christiansen 00f77f8bdf add feature to loop all groups for auth 2015-04-07 11:48:29 -07:00
Ultra2D 3eaaac4ce4 Add email address for LDAP users. 2015-04-07 09:52:21 +02:00
Ultra2D 0ab454fefc Add support for LDAP directories using member in stead of memberUid and dn in stead of username for group members.
Used the same variables as Observium, see http://www.observium.org/wiki/Authentication_modules#OpenLDAP
2015-04-01 16:10:50 +02:00
mchasteen a1ef2e0f69 Fixed the mysql auth include and the db schema. I set the desc field to be a varchar(200) and set it to be NULL by default (this is a personal preference but since it was not set in the code...). I fixed adduser function in html/includes/authentication/mysql.inc.php. I added $description and $twofactor to the function argument with default values and added descr and twofactor elements in the array passed to the dbInsert function call. OpenSuSE 13.2 2015-02-26 23:03:05 +00:00
Neil Lathwood a4d3c8709d Fixed the scrut coding style issues 2015-02-22 16:45:40 +00:00
f0o d66cec7017 Added TwoFactor Authentication (RFC4226)
Tested against Google-Authenticator app on Android 4.4.4

Made `verify_hotp` more efficient.

Added autofocus on twofactor input

Added GUI Unlock and Remove for TwoFactor credentials in /edituser/

Allow additional tries after elapsed time from last try exceeds configured parameter `$config['twofactor_lock']`.
If `$config['twofactor_lock']` is not defined or is set to `0`, administrators have to unlock accounts that exceed 3 failures via GUI.

Added Documentation

Moved TwoFactor form to logon.inc.php
Disabled autocomplete on twofactor input field
Updated Docs to include link to Google-Authenticator's install-guides

Moved authentication logic from authenticate.inc.php to twofactor.lib.php

typo in docblock for `twofactor_auth()`

Fixed scrutinizer bugs

To please scrutinizer
2014-12-28 15:40:40 +00:00
laf 7f95922160 Updated adduser to check for existing user and use password hashing 2014-10-06 18:39:48 +01:00
laf dc9c4308e8 Update ldap.inc.php 2014-03-29 11:38:04 +00:00
laf dff43f78f2 Update ldap.inc.php 2014-03-14 00:46:44 +00:00
laf 8cf255072c Updated edit user screen so you can now update details 2014-03-10 23:50:16 +00:00
laf 18f9b89639 Removed code that was previously commented out 2014-02-23 17:55:07 +00:00
laf 005504ae6d Updated session / cookie support 2014-02-03 22:39:37 +00:00
laf 04a9f4a2f3 Updated mysql auth to use PHPass 2014-02-03 12:10:06 +00:00
Adam Amstrong b273e04241 /// -> //
git-svn-id: http://www.observium.org/svn/observer/trunk@3240 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 12:24:34 +00:00
Adam Amstrong cacf913a55 # -> / for phpdoc
git-svn-id: http://www.observium.org/svn/observer/trunk@3239 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 11:29:53 +00:00
Tom Laermans 08d09b71ae don't show ldap error when empty form is submitted
git-svn-id: http://www.observium.org/svn/observer/trunk@3067 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-20 13:34:52 +00:00
Tom Laermans 764cb72cd5 fixes and cleanups
git-svn-id: http://www.observium.org/svn/observer/trunk@3018 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-10 15:53:10 +00:00
Adam Amstrong ee1517e38b ldap tls support
git-svn-id: http://www.observium.org/svn/observer/trunk@2880 61d68cd4-352d-0410-923a-c4978735b2b8
2012-02-27 23:36:19 +00:00
Tom Laermans 6b8cba3d24 syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2580 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-26 16:06:18 +00:00
Tom Laermans ff895f96a0 add get_userlist function, pull from LDAP in case of LDAP backend -- now awaiting fix of edituser page
git-svn-id: http://www.observium.org/svn/observer/trunk@2545 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 16:46:30 +00:00
Tom Laermans f1ce87d34d syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2542 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 15:05:11 +00:00
Tom Laermans 838617100c get ldap userlevel and user id from ldap now, configure the ldap groups levels in the config file; please note if you assigned rights to certain users they might have vanished as the userid is now the uidnumber from ldap
git-svn-id: http://www.observium.org/svn/observer/trunk@2539 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-21 22:04:05 +00:00
Tom Laermans d864ce234f kill a whole bunch of trailing spaces
git-svn-id: http://www.observium.org/svn/observer/trunk@2516 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 09:55:11 +00:00
Tom Laermans b862c91618 fix ldap auth plugin, broke a lot of userlevel stuff a long time ago due to mysql layer changes
git-svn-id: http://www.observium.org/svn/observer/trunk@2482 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-16 10:08:05 +00:00
Adam Amstrong 8d8e80c911 fix typo in useradd function for httpauth
git-svn-id: http://www.observium.org/svn/observer/trunk@2403 61d68cd4-352d-0410-923a-c4978735b2b8
2011-08-27 23:12:51 +00:00
Adam Amstrong a1d3e4606e fixes to auth and deleting users
git-svn-id: http://www.observium.org/svn/observer/trunk@2372 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-26 21:35:25 +00:00
Adam Amstrong d7d7d67fa0 fixes
git-svn-id: http://www.observium.org/svn/observer/trunk@2294 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 23:17:44 +00:00
Adam Amstrong 6bcc4f4e48 fix some stuff, break some stuff (ports disaply is missing some stuff atm)
git-svn-id: http://www.observium.org/svn/observer/trunk@2290 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 22:14:56 +00:00
Geert Hauwaerts 9202ff9bee - Added support in MySQL auth to prohibit users from modifying their password.
git-svn-id: http://www.observium.org/svn/observer/trunk@2252 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-05 14:54:12 +00:00
Tom Laermans 6c293c692a now in line with the rest of the code style...
git-svn-id: http://www.observium.org/svn/observer/trunk@2223 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 14:14:23 +00:00
Adam Amstrong c5aee9205b more auth fixes from lenwe.
git-svn-id: http://www.observium.org/svn/observer/trunk@2222 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 14:10:21 +00:00
Adam Amstrong 802958fe3d less if $thing more if isset($thing). from lenwe.
git-svn-id: http://www.observium.org/svn/observer/trunk@2220 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-03 11:28:39 +00:00
Tom Laermans f55a30f744 some formatting cleanups, introduce some more FIXMEs to look at, plus replace mysql_fetch_array by mysql_fetch_assoc, for great justice
git-svn-id: http://www.observium.org/svn/observer/trunk@2029 61d68cd4-352d-0410-923a-c4978735b2b8
2011-04-06 13:54:50 +00:00
Tom Laermans 2be7bfe497 r1984: BIG BROTHER RELEASE // Move user deletion code into authentication module
git-svn-id: http://www.observium.org/svn/observer/trunk@1984 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-28 10:48:43 +00:00
Tom Laermans 2f0c69c9ef only update password to salted if database field is long enough
git-svn-id: http://www.observium.org/svn/observer/trunk@1939 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-20 21:13:59 +00:00
Tom Laermans 7bd37c5b06 change from unsalted md5 to salted md5 passwords, migrating passwords as authentication succeeds
git-svn-id: http://www.observium.org/svn/observer/trunk@1936 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-19 20:23:23 +00:00
Tom Laermans 6ce38e5229 check for existing user in adduser
git-svn-id: http://www.observium.org/svn/observer/trunk@1930 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-18 16:56:02 +00:00