Commit Graph

93 Commits

Author SHA1 Message Date
Aleksander Machniak
affec47eab CS fixes, updated changelog 2016-10-10 16:25:06 +02:00
Aleksander Machniak
7f4ab8c14a Merge pull request #5364 from ZiBiS/master
Password: LDAP PPolicy driver
2016-10-10 16:17:17 +02:00
Zbigniew Szmyd
fa533a4a01 Revert "Correction to work good with the Net_LDAP2 2.2.0"
This reverts commit acbc67ea1c.
2016-10-10 11:55:12 +02:00
Zbigniew Szmyd
06956572ec Change parameters names to the standard. 2016-10-10 11:27:41 +02:00
Zbigniew Szmyd
7254a89e7f get log_dir from config 2016-10-03 12:28:07 +02:00
Zbigniew Szmyd
c22d4bc642 The correction of the script path and log_dir from the rc
config.
2016-10-03 09:06:11 +02:00
Aleksander Machniak
e9d70648dd Fix CS and obvious mistakes, update changelog after PR merge 2016-10-01 08:08:23 +02:00
Zbigniew Szmyd
191396db17 The error log is redirected to logs/ldap_ppolicy.err 2016-09-30 21:42:06 +02:00
Julian Matz
7ed0d3308b Update cpanel.php
Call $rcmail->config->get() only once per option by assigning variable inside the IF statement.
2016-05-22 14:54:17 +01:00
Julian Matz
8042955927 Update cpanel.php 2016-05-15 12:53:54 +01:00
Julian Matz
e34e267e59 Update cpanel.php
Changed code style and indentation.
2016-05-15 12:41:01 +01:00
Julian Matz
6651a6cab0 Update cpanel.php
Add support for hash auth (cPanel Remote Access Key) and call the $xmlapi->listaccts() method to retrieve the cPanel account user that owns the domain (required for cPanel reseller accounts).
2016-05-14 08:59:31 +01:00
Oliver Ney
5f2df36879 Fix ldap connection use after release in password plugin 2016-04-23 00:39:34 +02:00
Zbigniew Szmyd
0b07f37bea LDAP password policy driver files 2016-02-22 13:01:47 +01:00
Zbigniew Szmyd
acbc67ea1c Correction to work good with the Net_LDAP2 2.2.0 2016-02-22 11:19:28 +01:00
Aleksander Machniak
8ef598b883 Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
2016-01-21 16:27:03 +01:00
Aleksander Machniak
39813e961a Show error message from CPanel API on password change failure (#1490144) 2015-08-10 13:57:45 +02:00
Aleksander Machniak
3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
2015-05-27 13:37:10 +02:00
Aleksander Machniak
e6c1e0c638 Fix vpopmaild driver of password plugin 2015-03-31 16:05:27 +02:00
Thomas Bruederli
e2fb340289 Remove obsolete mt_srand() calls 2015-03-12 09:59:47 +01:00
Aleksander Machniak
1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 2015-02-26 18:19:44 +01:00
Aleksander Machniak
b59b72cc30 Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 2015-02-26 18:04:03 +01:00
Aleksander Machniak
7c96646de0 Fix security issue in DBMail driver of password plugin (#1490261) 2015-02-05 11:27:34 +01:00
Aleksander Machniak
ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
2014-12-09 18:39:55 +01:00
Aleksander Machniak
c8d082a83e Fix syntax error in plesk driver 2014-10-26 11:43:01 +01:00
Aleksander Machniak
d26e94ae94 Small CS fixes after PR merge 2014-10-18 14:50:10 +02:00
Lorenzo Perone
84296e1b93 fix indent to match style in ldap.php (tabs to spaces) 2014-10-16 16:47:35 +02:00
Lorenzo Perone
3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
2014-10-14 23:22:46 +02:00
Aleksander Machniak
78bee8b8b6 Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) 2014-10-10 10:25:52 +02:00
Aleksander Machniak
d1c8d7fc25 Support hashing algorithms without mhash() and even hash() extension (#1490076) 2014-09-28 19:03:08 +02:00
Aleksander Machniak
9dd327b400 Remove new_link argument usage, we don't need it anymore 2014-09-09 13:50:35 +02:00
Aleksander Machniak
4baf96a4ca Added license headers to driver files, CS fixes 2014-09-08 09:50:59 +02:00
Cyrill von Wattenwyl
11a40dd1fe Merge branch 'master' of https://github.com/roundcube/roundcubemail
Conflicts:
	plugins/password/config.inc.php.dist
2014-09-02 11:20:52 +02:00
Aleksander Machniak
9d2550502a CS fixes after PR merge 2014-07-16 15:12:53 +02:00
Mohammad Anwari
1599665651 New gearman driver for password plugin 2014-07-14 23:54:32 +07:00
Aleksander Machniak
7706df99f0 Allow anonymous LDAP searches 2014-06-24 12:03:17 +02:00
simonp
8d3dab34ec Add timeout for password-driver vpopmaild 2014-05-16 12:29:06 +02:00
Cyrill von Wattenwyl
187fd666aa fixed typos and added section in README 2014-05-12 10:03:11 +02:00
Cyrill von Wattenwyl
12967c776c Added Plesk-Driver to Password-Plugin
This Driver allows to change Passwords via Plesk RPC-API
2014-05-08 16:43:28 +02:00
Aleksander Machniak
18a9b4f2f1 Fix dbmail driver (hints from https://github.com/roundcube/roundcubemail/pull/169) 2014-03-05 14:01:45 +01:00
Aleksander Machniak
524e382669 Merge pull request #168 from tillkruess/master
another security fix for domainfactory password plugin driver
2014-02-13 08:02:45 +01:00
Till Krüss
aba993da6a prevent unwanted code execution via CURLOPT_POSTFIELDS (again) 2014-02-13 09:40:17 +05:30
Aleksander Machniak
e7881f058a Merge pull request #166 from tillkruess/master
security fix for domainfactory password plugin driver
2014-02-10 18:27:50 +01:00
Till Krüss
334475a50b prevent unwanted code execution via CURLOPT_POSTFIELDS 2014-02-10 21:32:06 +05:30
Thomas Bruederli
774deaded1 Don't EVER log passwords 2014-02-03 15:34:55 +01:00
Aleksander Machniak
393c868e8e Substitute variables in 'password_ldap_search_base' value 2013-11-08 08:19:11 +01:00
Till Krüss
910a3581be check if password was changed successfully, before looking for error messages 2013-10-15 18:13:24 +08:00
Till Krüss
0f4c9b850f check if the new password matched the requirements; code cleanup 2013-10-15 17:56:03 +08:00
Aleksander Machniak
99de1fdd26 In password ldap_simple driver: added LDAP debug, added password_ldap_bind
hook, so other plugins can provide user DN for password change
2013-09-27 13:12:17 +02:00
Aleksander Machniak
19884ec5d2 Code improvements, remove code duplication 2013-09-23 12:53:58 +02:00