21 Commits

Author SHA1 Message Date
Brian Lycett
07cfb50e16 Fix SMTP authentication and mail body. Notify if there was a problem sending the email. 2020-11-30 16:14:53 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
761684b669 Issue 29 - config.inc.php does not take USERNAME_REGEX from environment 2020-07-06 09:31:56 +01:00
Brian Lycett
4ea1da0231 Fix to prevent Apache directory redirection 2020-06-02 17:00:41 +01:00
Brian Lycett
9d752514be Fix email validity check 2020-05-27 17:34:40 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f9edeb39b0 Add missing log prefix to session debug logs. 2020-05-04 13:49:48 +01:00
Brian Lycett
26d971080c Add debugging for user sessions and authentication. 2020-05-04 10:48:46 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Gea-Suan Lin
9e0aaac008 Add missing paths. 2019-07-31 14:30:23 +08:00
Gea-Suan Lin
b82d0c24b9 Fix all include_once() call with __DIR__-based paths. 2019-07-31 14:22:37 +08:00
Gea-Suan Lin
99943002b5 Use __DIR__ to avoid include_path dependency. 2019-07-31 14:08:53 +08:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
3b65ba3719 fix USERNAME_FORMAT variable typo 2018-07-12 11:05:25 +01:00
Brian Lycett
49f69e8eee Fix broken JS booleans 2018-06-04 17:04:14 +01:00
Brian Lycett
5ec202185c Add Docker components and setup instructions. Warn on insecure LDAP connections 2018-06-04 15:20:53 +01:00