36 Commits

Author SHA1 Message Date
huzvar
37076f8704
Fix edit user style. (#118)
Copy from edit group (show_group.php).
2021-10-06 09:01:53 +01:00
huzvar
6a374c9624
Fix style description change password. (#114) 2021-10-05 15:11:26 +01:00
huzvar
08a37ee961
Add dynamic Group Attribute. (#119)
* Add dynamic Group Attribute.

* Update ldap_functions.inc.php

* Update show_group.php

* Update run_checks.php
2021-10-05 14:55:22 +01:00
Rickiewars
7753eb4a7b
Update web_functions.inc.php (#117)
Fix for issue #115

Added typecast to int that fixes a fatal error telling that the second argument of rand() expects an int but a float is given on an ARMv7 architecture.
Problem seems to be introduced in PHP v8.
2021-09-03 10:58:11 +01:00
huzvar
1f4ab9e1f0
Fix url. (#111) 2021-08-31 09:15:08 +01:00
Brian Lycett
884c293bca Fix syntax error. 2021-07-22 10:14:10 +01:00
Brian Lycett
d32f2006c7 Fix for LDAP_GROUP_MEMBERSHIP_USES_UID override 2021-07-22 09:16:38 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Brian Lycett
65bee01fad Fix incorrect mail variable 2021-03-27 16:11:11 +00:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
2021-03-13 14:11:38 +00:00
Brian Lycett
08a9027947 Issue #57 - fix for SMTP not working for servers that don't require authentication. 2020-12-30 11:09:50 +00:00
João Alves
8449c39991
Fix variable name (#59)
Fixed variable name from rfc2308bis to rfc2307bis
2020-12-30 11:03:00 +00:00
João Alves
953d9b7a4b
Fix for missing condition (#58)
Changed the condition in which the ACCOUNT_REQUESTS_ENABLED is disabled. Only disable it if it is not previously disabled.
2020-12-30 11:02:39 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
2020-12-24 18:24:41 +00:00
Brian Lycett
07cfb50e16 Fix SMTP authentication and mail body. Notify if there was a problem sending the email. 2020-11-30 16:14:53 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
761684b669 Issue 29 - config.inc.php does not take USERNAME_REGEX from environment 2020-07-06 09:31:56 +01:00
Brian Lycett
4ea1da0231 Fix to prevent Apache directory redirection 2020-06-02 17:00:41 +01:00
Brian Lycett
9d752514be Fix email validity check 2020-05-27 17:34:40 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f9edeb39b0 Add missing log prefix to session debug logs. 2020-05-04 13:49:48 +01:00
Brian Lycett
26d971080c Add debugging for user sessions and authentication. 2020-05-04 10:48:46 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Gea-Suan Lin
9e0aaac008 Add missing paths. 2019-07-31 14:30:23 +08:00
Gea-Suan Lin
b82d0c24b9 Fix all include_once() call with __DIR__-based paths. 2019-07-31 14:22:37 +08:00
Gea-Suan Lin
99943002b5 Use __DIR__ to avoid include_path dependency. 2019-07-31 14:08:53 +08:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
3b65ba3719 fix USERNAME_FORMAT variable typo 2018-07-12 11:05:25 +01:00
Brian Lycett
49f69e8eee Fix broken JS booleans 2018-06-04 17:04:14 +01:00
Brian Lycett
5ec202185c Add Docker components and setup instructions. Warn on insecure LDAP connections 2018-06-04 15:20:53 +01:00