15 Commits

Author SHA1 Message Date
huzvar
08a37ee961
Add dynamic Group Attribute. (#119)
* Add dynamic Group Attribute.

* Update ldap_functions.inc.php

* Update show_group.php

* Update run_checks.php
2021-10-05 14:55:22 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
2021-03-13 14:11:38 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
2020-12-24 18:24:41 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
5ec202185c Add Docker components and setup instructions. Warn on insecure LDAP connections 2018-06-04 15:20:53 +01:00