73 Commits

Author SHA1 Message Date
f971d7ecf3 Signed-off-by: Peter Lamperud <petlam@unibet.com> 2015-11-16 12:27:15 +01:00
7c54782cc8 Moved auth_ad_dont_check_certificates to auth_ad_check_certificates 2015-11-16 10:24:16 +01:00
02d54e9c50 Fix AD auth with untrusted certificates. LDAPTLS_REQCERT=never must be
set before ldap_connect.
2015-11-13 11:05:05 -06:00
d326869675 Removed unused variables 2015-11-10 10:47:50 +01:00
16df0fdd2e Coding style 2015-11-10 10:39:42 +01:00
2326061e68 Removed unused variables and updated coding style 2015-11-10 10:38:42 +01:00
0eeb4d2ef8 Fixed a bug from scrutinizer 2015-11-10 10:03:47 +01:00
a785398492 Merge remote-tracking branch 'upstream/master' into active_directory_auth 2015-11-10 09:43:30 +01:00
779c90b1fd Checking for groups now 2015-10-30 17:17:55 +01:00
93b57040c5 Authenticate against active directory 2015-10-22 09:16:20 +02:00
a36f3e1e35 Initial commit 2015-10-16 09:40:17 +02:00
e908c25290 Styled the two factor auth token prompt 2015-10-15 19:21:09 +02:00
afdbb2406d Added $nocache parameter
Fixed typo in caching
Excluded caching for MySQL-Authentication & /poll-log/
2015-09-30 15:20:06 +00:00
a10c488915 Merge pull request #1611 from SaaldjorMike/remove-php-closing-tags
Remove php closing tags to fix scrut issues
2015-08-05 06:32:12 +10:00
0cc3e1a9e2 Remove php closing tags to fix scrut issues 2015-08-04 19:29:43 +02:00
5369112d48 Fix some scrutinizer coding style issues 2015-08-04 18:36:03 +02:00
0a88c386b0 Add 'puredn' ldap authentication 2015-07-21 20:56:48 +03:00
d8693f05ae Fix coding style part 2 2015-07-15 11:04:22 +02:00
6f299a9679 Merge remote-tracking branch 'upstream/master' into issue-714
Conflicts:
	html/includes/authentication/ldap.inc.php
2015-04-08 08:43:24 +02:00
1663b743db remove array_push is inefficient and we dont care about its return value 2015-04-07 14:03:30 -07:00
d4f472e9cb stop ldap_compare() from running against ldap_comparison, which would result in an error 2015-04-07 13:58:31 -07:00
b41605a13a clean up code and add more detection 2015-04-07 12:30:02 -07:00
cb5a62087e make code more backward-compatible 2015-04-07 12:21:52 -07:00
2e233e0d5c add global config, fix get_userlist 2015-04-07 12:10:55 -07:00
00f77f8bdf add feature to loop all groups for auth 2015-04-07 11:48:29 -07:00
3eaaac4ce4 Add email address for LDAP users. 2015-04-07 09:52:21 +02:00
0ab454fefc Add support for LDAP directories using member in stead of memberUid and dn in stead of username for group members.
Used the same variables as Observium, see http://www.observium.org/wiki/Authentication_modules#OpenLDAP
2015-04-01 16:10:50 +02:00
a1ef2e0f69 Fixed the mysql auth include and the db schema. I set the desc field to be a varchar(200) and set it to be NULL by default (this is a personal preference but since it was not set in the code...). I fixed adduser function in html/includes/authentication/mysql.inc.php. I added $description and $twofactor to the function argument with default values and added descr and twofactor elements in the array passed to the dbInsert function call. OpenSuSE 13.2 2015-02-26 23:03:05 +00:00
a4d3c8709d Fixed the scrut coding style issues 2015-02-22 16:45:40 +00:00
f0o
d66cec7017 Added TwoFactor Authentication (RFC4226)
Tested against Google-Authenticator app on Android 4.4.4

Made `verify_hotp` more efficient.

Added autofocus on twofactor input

Added GUI Unlock and Remove for TwoFactor credentials in /edituser/

Allow additional tries after elapsed time from last try exceeds configured parameter `$config['twofactor_lock']`.
If `$config['twofactor_lock']` is not defined or is set to `0`, administrators have to unlock accounts that exceed 3 failures via GUI.

Added Documentation

Moved TwoFactor form to logon.inc.php
Disabled autocomplete on twofactor input field
Updated Docs to include link to Google-Authenticator's install-guides

Moved authentication logic from authenticate.inc.php to twofactor.lib.php

typo in docblock for `twofactor_auth()`

Fixed scrutinizer bugs

To please scrutinizer
2014-12-28 15:40:40 +00:00
laf
7f95922160 Updated adduser to check for existing user and use password hashing 2014-10-06 18:39:48 +01:00
laf
dc9c4308e8 Update ldap.inc.php 2014-03-29 11:38:04 +00:00
laf
dff43f78f2 Update ldap.inc.php 2014-03-14 00:46:44 +00:00
laf
8cf255072c Updated edit user screen so you can now update details 2014-03-10 23:50:16 +00:00
laf
18f9b89639 Removed code that was previously commented out 2014-02-23 17:55:07 +00:00
laf
005504ae6d Updated session / cookie support 2014-02-03 22:39:37 +00:00
laf
04a9f4a2f3 Updated mysql auth to use PHPass 2014-02-03 12:10:06 +00:00
b273e04241 /// -> //
git-svn-id: http://www.observium.org/svn/observer/trunk@3240 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 12:24:34 +00:00
cacf913a55 # -> / for phpdoc
git-svn-id: http://www.observium.org/svn/observer/trunk@3239 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 11:29:53 +00:00
08d09b71ae don't show ldap error when empty form is submitted
git-svn-id: http://www.observium.org/svn/observer/trunk@3067 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-20 13:34:52 +00:00
764cb72cd5 fixes and cleanups
git-svn-id: http://www.observium.org/svn/observer/trunk@3018 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-10 15:53:10 +00:00
ee1517e38b ldap tls support
git-svn-id: http://www.observium.org/svn/observer/trunk@2880 61d68cd4-352d-0410-923a-c4978735b2b8
2012-02-27 23:36:19 +00:00
6b8cba3d24 syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2580 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-26 16:06:18 +00:00
ff895f96a0 add get_userlist function, pull from LDAP in case of LDAP backend -- now awaiting fix of edituser page
git-svn-id: http://www.observium.org/svn/observer/trunk@2545 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 16:46:30 +00:00
f1ce87d34d syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2542 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-22 15:05:11 +00:00
838617100c get ldap userlevel and user id from ldap now, configure the ldap groups levels in the config file; please note if you assigned rights to certain users they might have vanished as the userid is now the uidnumber from ldap
git-svn-id: http://www.observium.org/svn/observer/trunk@2539 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-21 22:04:05 +00:00
d864ce234f kill a whole bunch of trailing spaces
git-svn-id: http://www.observium.org/svn/observer/trunk@2516 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 09:55:11 +00:00
b862c91618 fix ldap auth plugin, broke a lot of userlevel stuff a long time ago due to mysql layer changes
git-svn-id: http://www.observium.org/svn/observer/trunk@2482 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-16 10:08:05 +00:00
8d8e80c911 fix typo in useradd function for httpauth
git-svn-id: http://www.observium.org/svn/observer/trunk@2403 61d68cd4-352d-0410-923a-c4978735b2b8
2011-08-27 23:12:51 +00:00
a1d3e4606e fixes to auth and deleting users
git-svn-id: http://www.observium.org/svn/observer/trunk@2372 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-26 21:35:25 +00:00