62 Commits

Author SHA1 Message Date
Brian Lycett
4420a78b31 Revert to old cookie code. 2021-10-05 15:03:24 +01:00
Rickiewars
7753eb4a7b
Update web_functions.inc.php (#117)
Fix for issue #115

Added typecast to int that fixes a fatal error telling that the second argument of rand() expects an int but a float is given on an ARMv7 architecture.
Problem seems to be introduced in PHP v8.
2021-09-03 10:58:11 +01:00
huzvar
1f4ab9e1f0
Fix url. (#111) 2021-08-31 09:15:08 +01:00
Brian Lycett
884c293bca Fix syntax error. v1.7 2021-07-22 10:14:10 +01:00
Brian Lycett
d32f2006c7 Fix for LDAP_GROUP_MEMBERSHIP_USES_UID override 2021-07-22 09:16:38 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Brian Lycett
65bee01fad Fix incorrect mail variable 2021-03-27 16:11:11 +00:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
v1.6
2021-03-13 14:11:38 +00:00
Brian Lycett
882816ac1d Update issue templates 2021-03-10 11:14:57 +00:00
Brian Lycett
08a9027947 Issue #57 - fix for SMTP not working for servers that don't require authentication. 2020-12-30 11:09:50 +00:00
João Alves
8449c39991
Fix variable name (#59)
Fixed variable name from rfc2308bis to rfc2307bis
2020-12-30 11:03:00 +00:00
João Alves
953d9b7a4b
Fix for missing condition (#58)
Changed the condition in which the ACCOUNT_REQUESTS_ENABLED is disabled. Only disable it if it is not previously disabled.
2020-12-30 11:02:39 +00:00
Brian Lycett
8a147d5687
Update README.md 2020-12-27 11:28:54 +00:00
Brian Lycett
46ab80ca05
README fixes 2020-12-27 11:27:58 +00:00
Brian Lycett
6bbba38c5b Added missing settings section header in README 2020-12-24 18:32:33 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
v1.5
2020-12-24 18:24:41 +00:00
Brian Lycett
ff17c6e288 Update release version in README v1.4 2020-11-30 17:46:09 +00:00
Brian Lycett
07cfb50e16 Fix SMTP authentication and mail body. Notify if there was a problem sending the email. 2020-11-30 16:14:53 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging v1.3 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
v1.2
2020-08-03 17:35:13 +01:00
Brian Lycett
761684b669 Issue 29 - config.inc.php does not take USERNAME_REGEX from environment 2020-07-06 09:31:56 +01:00
Brian Lycett
4ea1da0231 Fix to prevent Apache directory redirection 2020-06-02 17:00:41 +01:00
Brian Lycett
9d752514be Fix email validity check 2020-05-27 17:34:40 +01:00
Brian Lycett
eb061e3586 Update container version in README example v1.1 2020-05-22 11:05:01 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
9e5d3bd32b Fix README formatting bug 2020-05-15 09:14:05 +01:00
Abhishek Srivastava
60f85f6125
Adding helm support for deployment on K8s cluster (#17)
Added Helm support for deploying to a Kubernetes cluster (cheers to @Abhishek-Srivastava !)
2020-05-15 09:12:24 +01:00
Brian Lycett
57a6785c9d Fix README links 2020-05-07 09:17:54 +01:00
Brian Lycett
25753bda36 Fix README links 2020-05-07 09:16:40 +01:00
Brian Lycett
c35df86300 Update README for new release 2020-05-07 09:14:11 +01:00
Brian Lycett
9eb0836389
Merge pull request #19 from wheelybird/nis_fixes
Changes to allow this to work with both NIS and BIS schemas.
v1.0
2020-05-06 17:20:17 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f9edeb39b0 Add missing log prefix to session debug logs. 2020-05-04 13:49:48 +01:00
Brian Lycett
8f739c3c02
Merge pull request #15 from wheelybird/more_debugging
Added an LDAP debugging option
2020-05-04 13:47:32 +01:00
Brian Lycett
26d971080c Add debugging for user sessions and authentication. 2020-05-04 10:48:46 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
028fd217a6
Merge pull request #9 from wheelybird/updates
Code tidy, encode URLs and add no-https option
2020-01-10 12:03:14 +00:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Brian Lycett
c3244bdd7f
Merge pull request #5 from gslin/master
Avoid `include_path` dependency.
2019-09-09 10:00:36 +01:00
Gea-Suan Lin
9e0aaac008 Add missing paths. 2019-07-31 14:30:23 +08:00
Gea-Suan Lin
b82d0c24b9 Fix all include_once() call with __DIR__-based paths. 2019-07-31 14:22:37 +08:00
Gea-Suan Lin
99943002b5 Use __DIR__ to avoid include_path dependency. 2019-07-31 14:08:53 +08:00
Brian Lycett
79ac66c96f
Update README.md 2019-07-05 15:17:06 +01:00
Brian Lycett
834e52d620
Add self-service password change screenshot 2019-06-12 11:53:20 +01:00
Brian Lycett
9ee5a0c707
Update README with screenshots 2019-06-12 11:51:54 +01:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
e2f9636feb Use a CA to generate the certificates to fix issues with Chrome/Chromium 2019-02-07 16:59:04 +00:00