90 Commits

Author SHA1 Message Date
Taehyung Lim
41c5ac3626
add smtp helo host (#220) 2024-05-02 09:15:18 +01:00
wheelybird
7d1897b171
Add ability to define which LDAP attribute is used to log in. (#212) v1.11 2023-07-20 16:23:52 +01:00
Alexander Borgardt
ce400b3287
README.md: add missing backslash (#198) 2023-04-25 14:38:03 +01:00
Dan Raper
ec4d468dcf
Header styling tweaks (#197)
* Improve display of username in header

* Change colour to match other text
2023-04-11 09:41:25 +01:00
Brian Lycett
ccc709e010 Fix deprecated variable interpolations 2023-03-27 10:29:07 +01:00
Boris Rybalkin
40ec4a151c
let user know that first and last name are required in the code (#190) 2023-02-27 13:36:28 +00:00
grissi-r
592869247d
fix string deprecation (#184) 2023-01-10 09:51:18 +00:00
Brian Lycett
bc2570da4c Version bump in README. v1.10 2022-11-24 14:24:05 +00:00
Brian Lycett
6b9290340c Updated README 2022-11-24 14:00:56 +00:00
dr-waterstorm
28b2d9673a
Feature/support modern password hashes (#182)
* Added ARGON2 password hashing

* added missing ldap tag

Co-authored-by: Jens Rauch <jens.rauch@codenic.de>
2022-11-24 13:58:13 +00:00
Brian Lycett
274fe69bb5 Bump version no in README. v1.9 2022-10-10 13:56:41 +01:00
Brian Lycett
318091fc35 Bugfixes including SHOW_POSIX_ATTRIBUTES not working for new accounts. 2022-10-10 13:55:14 +01:00
Shakespeare2000
591ba7629e
Added libldap-common to apt-get (#175)
Signed-off-by: Shakespeare2000 <Shakespeare2000@users.noreply.github.com>
2022-07-18 09:47:08 +01:00
Brian Lycett
d79e58346d
Issue 163 (#168)
* Issue #163 - password reset warnings

* Fix errors showing when accounts don't have an email.  Fix errors when sending an email on password reset.  Prevent PHPMailer trying to use TLS when it's disabled.

Co-authored-by: Brian Lycett <brian.lycett.nonstaff@which.co.uk>
2022-06-01 13:59:57 +01:00
Brian Lycett
1db9635bf1 Upgrade PHP Mailer as docker build fails trying to download the current version. 2022-04-29 09:16:16 +01:00
Ignacio Larrain
ec4e430112
Explicit float to int conversion (#153)
Prevent "Implicit conversion from float (number) to int loses precision" errors.
2022-04-29 09:11:33 +01:00
Brian Lycett
b6e5513d5e Fix issue adding members to a group. 2022-04-28 14:04:23 +01:00
Brian Lycett
57af7c4e9c
Next release (#151)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

* Add support for consuming docker / kubernetes secrets passed as _FILE environment variables (#136)

* mod: condense Dockerfile

* add: _FILE feature
add: list of sensitive env_vars

* mod: sorted env_var list

* add: complete current env_var list

* fix: formatting

* mod: revert Dockerfile to prev. version

* mod: updated comment to be more descriptive
mod: rename variables to be more descriptive

* rem: list of env_var; no longer needed.
mod: env_file_replace function
^ search for all <env_var>_FILE variables and replace
^ <env_var> if the file exists and is not empty
mod: env_file_replace comment

Co-authored-by: pyunramura <jeremy.cummings@live.com>

* Update the README with information on using _FILE

* Change username regex variables

* Named server certs, as suggested by @huzvar

* Update LDAP filter method as suggested by @xgaia

* Feature/http header username (#120)

* Implement Remote Headers Auth

* Hide Logout on Remote Sessions

* Add Explanation for REMOTRE_HTTP_HEADERS_LOGIN settiing

Co-authored-by: Damian Galli <damian.galli@galli.site>

* Updated Readme, fixed random number generation for ARM systems, fixed JS to generate the username

* Fix issues #124 and #126

* Change badges to buttons for list counts

* Don't secretly set displayName

* Add Group Additional (#113)

* Add doku Group additional.

* Read Group additional configuration.

* New group add Additional objectclasses

* Allow for attributes that take multiple values.

* Updated README

* Formatting fixes, fix parsing params from account requests, initial code for the simple interface flag.

* Add attribute fields for groups and allow user-defined attributes to be displayed.  Move alert banner JS to a function.

* Update entries with any missing additional objectclasses when updating entries.  Update README to describe changes. Initial work to allow file uploads for attributes.

* Functionality to upload binary files and display them in the form it's a JPEG.  Added a new page to download existing binary content.

* Bugfixes for compatibility with older osixia/openldap versions.  Change SIMPLE_INTERFACE to SHOW_POSIX_ATTRIBUTES.

* Update version number in README.

Co-authored-by: Monsieur X <xgaia@gmx.com>
Co-authored-by: pyunramura <35285259+pyunramura@users.noreply.github.com>
Co-authored-by: pyunramura <jeremy.cummings@live.com>
Co-authored-by: Damian Galli <da.ga@live.de>
Co-authored-by: Damian Galli <damian.galli@galli.site>
Co-authored-by: huzvar <89766648+huzvar@users.noreply.github.com>
v.18
2022-04-12 15:43:21 +01:00
Brian Lycett
1ae87b6582 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2022-03-09 14:29:23 +00:00
Gabriel A. Devenyi
71add491b2
Fix typo (#144) 2022-03-09 14:25:03 +00:00
huzvar
9c1a5d0faf
Fix change empty password with accept weak passwords. (#141) 2022-03-03 13:39:42 +00:00
santos-lucas
7af47448a9
Update README.md (#139)
Just some missing word correction.
2022-01-24 13:59:02 +00:00
Brian Lycett
228c813e71 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2021-12-17 09:56:25 +00:00
LordFelius
45f834ff2e
fixed LDAP_GROUP_MEMBERSHIP_USES_UID not working (#133)
should use string == 'TRUE' instead of == TRUE , as getenv returns a string , which always considered equaling a bool TRUE .
2021-12-17 09:55:22 +00:00
huzvar
37076f8704
Fix edit user style. (#118)
Copy from edit group (show_group.php).
2021-10-06 09:01:53 +01:00
huzvar
6a374c9624
Fix style description change password. (#114) 2021-10-05 15:11:26 +01:00
Brian Lycett
05d04448a1 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2021-10-05 15:03:30 +01:00
Brian Lycett
4420a78b31 Revert to old cookie code. 2021-10-05 15:03:24 +01:00
huzvar
08a37ee961
Add dynamic Group Attribute. (#119)
* Add dynamic Group Attribute.

* Update ldap_functions.inc.php

* Update show_group.php

* Update run_checks.php
2021-10-05 14:55:22 +01:00
Rickiewars
7753eb4a7b
Update web_functions.inc.php (#117)
Fix for issue #115

Added typecast to int that fixes a fatal error telling that the second argument of rand() expects an int but a float is given on an ARMv7 architecture.
Problem seems to be introduced in PHP v8.
2021-09-03 10:58:11 +01:00
huzvar
1f4ab9e1f0
Fix url. (#111) 2021-08-31 09:15:08 +01:00
Brian Lycett
884c293bca Fix syntax error. v1.7 2021-07-22 10:14:10 +01:00
Brian Lycett
d32f2006c7 Fix for LDAP_GROUP_MEMBERSHIP_USES_UID override 2021-07-22 09:16:38 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Brian Lycett
65bee01fad Fix incorrect mail variable 2021-03-27 16:11:11 +00:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
v1.6
2021-03-13 14:11:38 +00:00
Brian Lycett
882816ac1d Update issue templates 2021-03-10 11:14:57 +00:00
Brian Lycett
08a9027947 Issue #57 - fix for SMTP not working for servers that don't require authentication. 2020-12-30 11:09:50 +00:00
João Alves
8449c39991
Fix variable name (#59)
Fixed variable name from rfc2308bis to rfc2307bis
2020-12-30 11:03:00 +00:00
João Alves
953d9b7a4b
Fix for missing condition (#58)
Changed the condition in which the ACCOUNT_REQUESTS_ENABLED is disabled. Only disable it if it is not previously disabled.
2020-12-30 11:02:39 +00:00
Brian Lycett
8a147d5687
Update README.md 2020-12-27 11:28:54 +00:00
Brian Lycett
46ab80ca05
README fixes 2020-12-27 11:27:58 +00:00
Brian Lycett
6bbba38c5b Added missing settings section header in README 2020-12-24 18:32:33 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
v1.5
2020-12-24 18:24:41 +00:00
Brian Lycett
ff17c6e288 Update release version in README v1.4 2020-11-30 17:46:09 +00:00
Brian Lycett
07cfb50e16 Fix SMTP authentication and mail body. Notify if there was a problem sending the email. 2020-11-30 16:14:53 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging v1.3 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
v1.2
2020-08-03 17:35:13 +01:00