Commit Graph

115 Commits

Author SHA1 Message Date
Aleksander Machniak
148ccda88a Password: Support host variables in password_db_dsn option (#5955) 2017-09-15 19:07:26 +02:00
buborh
4f400ab7aa password plugin ldap driver: use full %login as %name/%n when no @ in username. (#5902) 2017-08-19 07:51:58 +02:00
Remi Collet
ff256b7bb9 Drop ereg dependency, fix compat with PHP 7 (#5820) 2017-06-27 13:24:23 +02:00
Aleksander Machniak
982d211ec0 Update changelog, CS fixes 2017-05-19 20:04:08 +02:00
Aleksander Machniak
aacf1eb3bd Merge branch 'password-driver-virtualmin' of https://github.com/ElpyDE/roundcubemail into ElpyDE-password-driver-virtualmin 2017-05-19 19:59:25 +02:00
Aleksander Machniak
30f9839b46 Remove redundant code 2017-05-19 07:37:00 +02:00
ElpyDE
73db885647 Virtualmin driver for password plugin now uses virtualmin to ask for the domain 2017-05-11 18:52:40 +02:00
Aleksander Machniak
89987ee1e0 Password: Fix security issue in virtualmin and sasl drivers 2017-04-25 08:51:14 +02:00
Torkel Bjørnson-Langen
278b46a99d password plugin: better error message on constraint violation (#5727)
If the password policy on the ldap server is violated when changing
password, report error as "constraint violation" instead of the
misleading "connection error".

Only tested with OpenLDAP (v2.4).
2017-04-21 10:39:49 +02:00
Torkel Bjørnson-Langen
3bbe218b83 Password plugin: Added missing default values (#5726)
* Added correct default values for password plugin (ldap backends only)
* Sync default values in config.inc.php.dist with code.
2017-04-18 10:17:18 +02:00
Aleksander Machniak
6ba41836b6 Revert "extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)"
This reverts commit 938dd4670b.
2017-04-11 08:53:34 +02:00
Kay Marquardt
938dd4670b extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)
Use proc_open() instead of popen() to catch error messages from called wrapper.
Create new wrapper chpass-wrapper-expect.py
2017-04-10 13:38:16 +02:00
ka7
9a35768c26 spelling fixes (#5690) 2017-03-12 12:14:19 +01:00
Aleksander Machniak
81f67a4de2 Don't use each() deprecated in PHP 7.2 2017-02-06 15:46:18 +01:00
Aleksander Machniak
be49c2e1cd Code improvements, replace exception thrown with rcube::raise_error() 2016-12-13 08:42:30 +01:00
Maikel Linke
bd5eaf98aa Handle null or non-JSON result of cPanel UAPI
More unit testing. More documentation.
2016-12-10 08:45:08 +11:00
Maikel Linke
dd29ca1ee8 Correct decoding of JSON response
The old version assumed `json_decode` would return an associative array.
While it can do so if an extra option is specified, the default
behaviour is to return an object. Therefore, a successful password
change resulted in an error while parsing the response.

The new code is accessing the response as object instead. The method
is now covered by a unit test.
2016-12-08 23:35:43 +11:00
Aleksander Machniak
f351b48771 Update changelog, CS fixes 2016-12-07 18:28:32 +01:00
Maikel
adbc9b1889 Add cPanel Webmail driver (#5549)
This driver does not use an admin account. It uses the user's account to
authenticate at the Webmail API. It uses the recommended UAPI and does
not rely on third-party classes.
2016-12-07 18:18:31 +01:00
Aleksander Machniak
8fc488afa0 Parse error and CS fixes after PR merge 2016-12-01 09:05:31 +01:00
Paolo Asperti
815b79df7f Added replacement variables support in password_pop_host (#5539)
Use rcube_utils::parse_host() on a hostname
2016-12-01 09:01:39 +01:00
JohnDoh
dd714b33a8 replace old trac links (#5514) 2016-11-13 19:15:00 +01:00
Aleksander Machniak
affec47eab CS fixes, updated changelog 2016-10-10 16:25:06 +02:00
Aleksander Machniak
7f4ab8c14a Merge pull request #5364 from ZiBiS/master
Password: LDAP PPolicy driver
2016-10-10 16:17:17 +02:00
Zbigniew Szmyd
fa533a4a01 Revert "Correction to work good with the Net_LDAP2 2.2.0"
This reverts commit acbc67ea1c.
2016-10-10 11:55:12 +02:00
Zbigniew Szmyd
06956572ec Change parameters names to the standard. 2016-10-10 11:27:41 +02:00
Zbigniew Szmyd
7254a89e7f get log_dir from config 2016-10-03 12:28:07 +02:00
Zbigniew Szmyd
c22d4bc642 The correction of the script path and log_dir from the rc
config.
2016-10-03 09:06:11 +02:00
Aleksander Machniak
e9d70648dd Fix CS and obvious mistakes, update changelog after PR merge 2016-10-01 08:08:23 +02:00
Zbigniew Szmyd
191396db17 The error log is redirected to logs/ldap_ppolicy.err 2016-09-30 21:42:06 +02:00
Julian Matz
7ed0d3308b Update cpanel.php
Call $rcmail->config->get() only once per option by assigning variable inside the IF statement.
2016-05-22 14:54:17 +01:00
Julian Matz
8042955927 Update cpanel.php 2016-05-15 12:53:54 +01:00
Julian Matz
e34e267e59 Update cpanel.php
Changed code style and indentation.
2016-05-15 12:41:01 +01:00
Julian Matz
6651a6cab0 Update cpanel.php
Add support for hash auth (cPanel Remote Access Key) and call the $xmlapi->listaccts() method to retrieve the cPanel account user that owns the domain (required for cPanel reseller accounts).
2016-05-14 08:59:31 +01:00
Oliver Ney
5f2df36879 Fix ldap connection use after release in password plugin 2016-04-23 00:39:34 +02:00
Zbigniew Szmyd
0b07f37bea LDAP password policy driver files 2016-02-22 13:01:47 +01:00
Zbigniew Szmyd
acbc67ea1c Correction to work good with the Net_LDAP2 2.2.0 2016-02-22 11:19:28 +01:00
Aleksander Machniak
8ef598b883 Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
2016-01-21 16:27:03 +01:00
Aleksander Machniak
39813e961a Show error message from CPanel API on password change failure (#1490144) 2015-08-10 13:57:45 +02:00
Aleksander Machniak
3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
2015-05-27 13:37:10 +02:00
Aleksander Machniak
e6c1e0c638 Fix vpopmaild driver of password plugin 2015-03-31 16:05:27 +02:00
Thomas Bruederli
e2fb340289 Remove obsolete mt_srand() calls 2015-03-12 09:59:47 +01:00
Aleksander Machniak
1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 2015-02-26 18:19:44 +01:00
Aleksander Machniak
b59b72cc30 Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 2015-02-26 18:04:03 +01:00
Aleksander Machniak
7c96646de0 Fix security issue in DBMail driver of password plugin (#1490261) 2015-02-05 11:27:34 +01:00
Aleksander Machniak
ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
2014-12-09 18:39:55 +01:00
Aleksander Machniak
c8d082a83e Fix syntax error in plesk driver 2014-10-26 11:43:01 +01:00
Aleksander Machniak
d26e94ae94 Small CS fixes after PR merge 2014-10-18 14:50:10 +02:00
Lorenzo Perone
84296e1b93 fix indent to match style in ldap.php (tabs to spaces) 2014-10-16 16:47:35 +02:00
Lorenzo Perone
3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
2014-10-14 23:22:46 +02:00