13 Commits

Author SHA1 Message Date
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
2021-03-13 14:11:38 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
2020-12-24 18:24:41 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
5ec202185c Add Docker components and setup instructions. Warn on insecure LDAP connections 2018-06-04 15:20:53 +01:00