28 Commits

Author SHA1 Message Date
Brian Lycett
e46e590c79 Update entries with any missing additional objectclasses when updating entries. Update README to describe changes. Initial work to allow file uploads for attributes. 2022-04-05 14:42:14 +01:00
Brian Lycett
9092a3a39b Add attribute fields for groups and allow user-defined attributes to be displayed. Move alert banner JS to a function. 2022-04-04 13:55:56 +01:00
Brian Lycett
f11813f4c7 Allow for attributes that take multiple values. 2022-03-31 10:45:59 +01:00
huzvar
08c24c96d8
Add Group Additional (#113)
* Add doku Group additional.

* Read Group additional configuration.

* New group add Additional objectclasses
2022-03-11 10:59:48 +00:00
Brian Lycett
d7a2ad5d02 Don't secretly set displayName 2022-03-11 10:59:21 +00:00
Brian Lycett
4c7fbbc542 Fix issues #124 and #126 2022-03-10 14:41:27 +00:00
Brian Lycett
04fe22f889 Updated Readme, fixed random number generation for ARM systems, fixed JS to generate the username 2022-03-09 16:56:17 +00:00
Brian Lycett
4de7877b19 Update LDAP filter method as suggested by @xgaia 2022-03-09 15:59:15 +00:00
Brian Lycett
b3b372d189 Merge master 2022-03-09 15:15:31 +00:00
huzvar
08a37ee961
Add dynamic Group Attribute. (#119)
* Add dynamic Group Attribute.

* Update ldap_functions.inc.php

* Update show_group.php

* Update run_checks.php
2021-10-05 14:55:22 +01:00
Brian Lycett
86c82a402e
Next release (#107)
* Custom email body (#51)

* get email body from ENV

* read subject from env

* html mail

* replace special string with username and password

* missing ;

* more str_replace

* utf8 in mail

* typo

* docs

* fix var

* count accounts

* fix print

* Add the ability to set the server path.  Get directed to the appropriate module when you log in.

* Fixes to allow overriding attribute labels properly

* Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access.

Co-authored-by: Monsieur X <xgaia@gmx.com>
2021-07-22 09:12:55 +01:00
Brian Lycett
d714b72cb0 Fix server_path in various places, update to cookies use 'samesite', include boostrap and queryjs files so LUM can run without internet access. 2021-05-25 09:02:04 +01:00
Brian Lycett
15f99a49ef Fixes to allow overriding attribute labels properly 2021-05-21 09:15:59 +01:00
Brian Lycett
d8eb7ae81d Customisable email text, define base path for the URL when behind a reverse proxy, upgrade to PHP 8, no more empty member entries in groups, various tweaks and enhancements. 2021-05-19 08:55:07 +01:00
Brian Lycett
769ff0f1b0 Add the ability to set the server path. Get directed to the appropriate module when you log in. 2021-04-15 15:43:53 +01:00
Justin B
2b550b1819
Fixed a regex syntax error on line 34 (#78)
Co-authored-by: root <root@sso.us-central1-a.c.pmg-internal.internal>
2021-03-15 09:30:56 +00:00
Brian Lycett
5acc835be9
Use other attributes (#77)
* Changes to allow using different account attributes, additional objectclasses, protection against accidentally removing all admin acccess, remove Helm files, username sanity updates

* Fixed LDAP user searches using the base DN

* Don't render the menu if there are fatal errors

* FIx tag parsing.  No TLS warning for local LDAP connections.

* Fix bug retrieving account attributes

* Multi-arch support and tidied-up README
2021-03-13 14:11:38 +00:00
Brian Lycett
3b8e94ce66
Christmas jingles (#55)
* Add account requests, email user on password update, RFC2307BIS autodetection and various bug fixes.

* Remove test.php
2020-12-24 18:24:41 +00:00
Brian Lycett
8dacee9c4e Add send email, show full DN, fix TLS check at setup and add verbose LDAP debugging 2020-11-28 18:00:01 +00:00
Brian Lycett
7d5d6b89ad Fix stupid bug that was left over from testing hashing 2020-10-29 15:18:21 +00:00
Brian Lycett
4c5e337ce6
Better passwords (#35)
* Add support for stronger hashes (#34)

* Add generate_salt function

* Add suport for clear text passwords

If someone wants to shoot themselves in the foot, they are free to do it

* Add support for blowfish

* Add support for extended DES

* Add support for md5crypt

* Fix salt generation call

* Add support for sha256crypt

* Add support for sha512crypt

* Update previous functions

* Add a default cause

* Fix some shenanigans and log cleanup

* Couple minor fixes

* Let password hash checking be done in the password function

* Update the README with new passwords

* Change the default fallback to SSHA

* Put crypt algos in an array ordered by preference so we can fail to the most secure algo available

* Remove superfluous count++

* Updated password hashing code

Co-authored-by: Angelin01 <angeloborsoiross@hotmail.com>
2020-08-03 17:35:13 +01:00
Brian Lycett
33c6aaa55e
Hashing (#22)
* Added ALLOW_WEAK_PASSWORDS and PASSWORD_HASH options, some bug and log format fixes

* Fixed incorrect variable name in check for password hash setting.
2020-05-22 11:03:23 +01:00
Brian Lycett
73b3797b30 Changes to allow this to work with both NIS and BIS schemas. 2020-05-06 17:19:20 +01:00
Brian Lycett
f103611e9c Added an LDAP debugging option 2020-05-01 17:14:04 +01:00
Brian Lycett
495d31521a Code tidy, encode URLs and add no-https option 2020-01-10 12:01:31 +00:00
Brian Lycett
b99d753ff9 Fix for issue adding accounts with an email address 2019-02-08 13:02:06 +00:00
Brian Lycett
127511b65d Added the ability to add/update the email address along with javascript to automatically generate it. 2019-02-08 11:28:11 +00:00
Brian Lycett
5ec202185c Add Docker components and setup instructions. Warn on insecure LDAP connections 2018-06-04 15:20:53 +01:00