60 Commits

Author SHA1 Message Date
Brian Lycett
e46e590c79 Update entries with any missing additional objectclasses when updating entries. Update README to describe changes. Initial work to allow file uploads for attributes. 2022-04-05 14:42:14 +01:00
Brian Lycett
9092a3a39b Add attribute fields for groups and allow user-defined attributes to be displayed. Move alert banner JS to a function. 2022-04-04 13:55:56 +01:00
Brian Lycett
2ff87e98dc Formatting fixes, fix parsing params from account requests, initial code for the simple interface flag. 2022-03-31 15:50:32 +01:00
Brian Lycett
f11813f4c7 Allow for attributes that take multiple values. 2022-03-31 10:45:59 +01:00
huzvar
08c24c96d8
Add Group Additional (#113)
* Add doku Group additional.

* Read Group additional configuration.

* New group add Additional objectclasses
2022-03-11 10:59:48 +00:00
Brian Lycett
d7a2ad5d02 Don't secretly set displayName 2022-03-11 10:59:21 +00:00
Brian Lycett
5a96630845 Change badges to buttons for list counts 2022-03-10 14:56:58 +00:00
Brian Lycett
4c7fbbc542 Fix issues #124 and #126 2022-03-10 14:41:27 +00:00
Brian Lycett
04fe22f889 Updated Readme, fixed random number generation for ARM systems, fixed JS to generate the username 2022-03-09 16:56:17 +00:00
Damian Galli
4e01a09399
Feature/http header username (#120)
* Implement Remote Headers Auth

* Hide Logout on Remote Sessions

* Add Explanation for REMOTRE_HTTP_HEADERS_LOGIN settiing

Co-authored-by: Damian Galli <damian.galli@galli.site>
2022-03-09 16:00:44 +00:00
Brian Lycett
4de7877b19 Update LDAP filter method as suggested by @xgaia 2022-03-09 15:59:15 +00:00
Brian Lycett
9bbe0db8d5 Change username regex variables 2022-03-09 15:23:49 +00:00
Brian Lycett
b3b372d189 Merge master 2022-03-09 15:15:31 +00:00
Brian Lycett
1ae87b6582 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2022-03-09 14:29:23 +00:00
huzvar
9c1a5d0faf
Fix change empty password with accept weak passwords. (#141) 2022-03-03 13:39:42 +00:00
Brian Lycett
228c813e71 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2021-12-17 09:56:25 +00:00
LordFelius
45f834ff2e
fixed LDAP_GROUP_MEMBERSHIP_USES_UID not working (#133)
should use string == 'TRUE' instead of == TRUE , as getenv returns a string , which always considered equaling a bool TRUE .
2021-12-17 09:55:22 +00:00
huzvar
37076f8704
Fix edit user style. (#118)
Copy from edit group (show_group.php).
2021-10-06 09:01:53 +01:00
huzvar
6a374c9624
Fix style description change password. (#114) 2021-10-05 15:11:26 +01:00
Brian Lycett
05d04448a1 Merge branch 'master' of github.com:wheelybird/ldap-user-manager 2021-10-05 15:03:30 +01:00
Brian Lycett
4420a78b31 Revert to old cookie code. 2021-10-05 15:03:24 +01:00
huzvar
08a37ee961
Add dynamic Group Attribute. (#119)
* Add dynamic Group Attribute.

* Update ldap_functions.inc.php

* Update show_group.php

* Update run_checks.php
2021-10-05 14:55:22 +01:00
Rickiewars
7753eb4a7b
Update web_functions.inc.php (#117)
Fix for issue #115

Added typecast to int that fixes a fatal error telling that the second argument of rand() expects an int but a float is given on an ARMv7 architecture.
Problem seems to be introduced in PHP v8.
2021-09-03 10:58:11 +01:00
huzvar
1f4ab9e1f0
Fix url. (#111) 2021-08-31 09:15:08 +01:00
Brian Lycett
884c293bca Fix syntax error. 2021-07-22 10:14:10 +01:00
Brian Lycett
d32f2006c7 Fix for LDAP_GROUP_MEMBERSHIP_USES_UID override 2021-07-22 09:16:38 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Brian Lycett
d714b72cb0 Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access. 2021-05-25 09:02:04 +01:00
Brian Lycett
15f99a49ef Fixes to allow overriding attribute labels properly 2021-05-21 09:15:59 +01:00
Brian Lycett
d8eb7ae81d Customisable email text, define base path for the URL when behind a reverse proxy, upgrade to PHP 8, no more empty member entries in groups, various tweaks and enhancements. 2021-05-19 08:55:07 +01:00
Brian Lycett
769ff0f1b0 Add the ability to set the server path. Get directed to the appropriate module when you log in. 2021-04-15 15:43:53 +01:00
Monsieur X
b33ff26fd2
Custom email body (#51)
* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print
2021-04-01 09:15:15 +01:00
Brian Lycett
65bee01fad Fix incorrect mail variable 2021-03-27 16:11:11 +00:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
2021-03-13 14:11:38 +00:00
Brian Lycett
08a9027947 Issue #57 - fix for SMTP not working for servers that don't require authentication. 2020-12-30 11:09:50 +00:00
João Alves
8449c39991
Fix variable name (#59)
Fixed variable name from rfc2308bis to rfc2307bis
2020-12-30 11:03:00 +00:00
João Alves
953d9b7a4b
Fix for missing condition (#58)
Changed the condition in which the ACCOUNT_REQUESTS_ENABLED is disabled. Only disable it if it is not previously disabled.
2020-12-30 11:02:39 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
2020-12-24 18:24:41 +00:00
Brian Lycett
07cfb50e16 Fix SMTP authentication and mail body. Notify if there was a problem sending the email. 2020-11-30 16:14:53 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
761684b669 Issue 29 - config.inc.php does not take USERNAME_REGEX from environment 2020-07-06 09:31:56 +01:00
Brian Lycett
4ea1da0231 Fix to prevent Apache directory redirection 2020-06-02 17:00:41 +01:00
Brian Lycett
9d752514be Fix email validity check 2020-05-27 17:34:40 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f9edeb39b0 Add missing log prefix to session debug logs. 2020-05-04 13:49:48 +01:00
Brian Lycett
26d971080c Add debugging for user sessions and authentication. 2020-05-04 10:48:46 +01:00