Mirrors/roundcubemail
2
0
Fork 0
mirror of https://github.com/roundcube/roundcubemail.git synced 2026-03-18 05:56:48 +01:00
Code Issues Packages Projects Releases Wiki Activity
10,884 Commits 72 Branches 205 Tags
2b89713d066a618cbdfd4e95ee8170bc0895dc15
Commit Graph

272 Commits

Author SHA1 Message Date
Rotzbua
f8b6493ecf Change http to https for plugins.roundcube.net (#6405) 2018-11-08 12:30:45 +01:00
Aleksander Machniak
cd9ec7983b Password: README, Style, CS improvements, bump version, update changelog 2018-11-08 12:03:41 +01:00
PhilW
1bf6dc3de8 Password: add Zxcvbn strength driver 2018-10-07 09:58:29 +01:00
PhilW
00946f1f57 give password plugin drivers more power 
Allow password drivers more control over the entire password changeing
processes not just the save action. Allow them to perform old/new
password comparisons and also password strength checking.

*) allow password drivers override default password comparisons (eg
   new is not same as current) #6473
*) allow password drivers override default strength checks (eg allow
   for 'not the same as last x passwords')
*) allow separate password saving and strength drivers for use of
   strength checking services eg HaveIBeenPwned.com #5040
*) allow drivers to define password strength rules displayed to the
   user
*) rename password_require_nonalpha config option to
   password_check_strength to reflect new strength checking
   possibilities (added backwards compatibility)
 2018-10-07 07:50:42 +01:00
Aleksander Machniak
b7d51573e4 Password: Fix bug where new users could skip forced password change (#6434) 2018-09-15 18:22:41 +02:00
Aleksander Machniak
bae58951bf Fix bug where password_dovecotpw_with_method setting could be ignored (#6436) 2018-09-09 10:30:06 +02:00
Aleksander Machniak
85046cdea4 Cleanup modoboa driver 2018-09-03 13:25:01 +02:00
Stéphane
95a9080958 modoboa driver for password plugin (#6361) 2018-09-03 13:18:28 +02:00
Aleksander Machniak
60922dc3d5 Password: Added password_username_format option (#5766) 2018-04-23 19:01:35 +02:00
Thomas Bruederli
c973f003e5 Synchronized localizations with Transifex 2018-03-10 15:48:06 +01:00
PhilW
e7311e0e5e more consistent function names 2017-11-18 13:17:14 +00:00
PhilW
af52df68bf use skinned alert and confirm boxes in plugins 2017-11-18 09:50:43 +00:00
Aleksander Machniak
23af0b7f36 Merge branch 'master' into dev-elastic 2017-11-07 20:50:01 +01:00
Thomas Bruederli
342b049841 Update localization files from Transifex 2017-10-30 22:16:39 +01:00
Aleksander Machniak
fd9517655f Fix password form 2017-10-28 18:23:35 +02:00
Aleksander Machniak
315f78a65a Elastic: Use btn.submit instead of button.save classes for Save button in forms 2017-10-20 14:56:08 +02:00
Aleksander Machniak
3c1b78af48 Merge branch 'master' into dev-elastic 2017-10-02 16:58:38 +02:00
Aleksander Machniak
148ccda88a Password: Support host variables in password_db_dsn option (#5955) 2017-09-15 19:07:26 +02:00
Aleksander Machniak
3a77c906a1 Merge branch 'master' into dev-elastic 2017-09-10 13:28:47 +02:00
buborh
4f400ab7aa password plugin ldap driver: use full %login as %name/%n when no @ in username. (#5902) 2017-08-19 07:51:58 +02:00
Aleksander Machniak
f3ce401def Set 'propform' class for password change form table 2017-08-04 12:47:20 +02:00
Aleksander Machniak
86a4d78369 Merge branch 'dev-elastic' 2017-07-02 16:47:54 +02:00
Remi Collet
ff256b7bb9 Drop ereg dependency, fix compat with PHP 7 (#5820) 2017-06-27 13:24:23 +02:00
Aleksander Machniak
982d211ec0 Update changelog, CS fixes 2017-05-19 20:04:08 +02:00
Aleksander Machniak
aacf1eb3bd Merge branch 'password-driver-virtualmin' of https://github.com/ElpyDE/roundcubemail into ElpyDE-password-driver-virtualmin 2017-05-19 19:59:25 +02:00
Aleksander Machniak
30f9839b46 Remove redundant code 2017-05-19 07:37:00 +02:00
Aleksander Machniak
9858c2a294 Merge branch 'master' into dev-elastic 2017-05-14 13:32:35 +02:00
ElpyDE
73db885647 Virtualmin driver for password plugin now uses virtualmin to ask for the domain 2017-05-11 18:52:40 +02:00
Aleksander Machniak
89987ee1e0 Password: Fix security issue in virtualmin and sasl drivers 2017-04-25 08:51:14 +02:00
Aleksander Machniak
757ba8b81a Fix typo 2017-04-22 08:06:07 +02:00
Torkel Bjørnson-Langen
278b46a99d password plugin: better error message on constraint violation (#5727) 
If the password policy on the ldap server is violated when changing
password, report error as "constraint violation" instead of the
misleading "connection error".

Only tested with OpenLDAP (v2.4).
 2017-04-21 10:39:49 +02:00
Aleksander Machniak
01656221a4 Update localization 2017-04-19 13:13:07 +02:00
Torkel Bjørnson-Langen
3bbe218b83 Password plugin: Added missing default values (#5726) 
* Added correct default values for password plugin (ldap backends only)
* Sync default values in config.inc.php.dist with code.
 2017-04-18 10:17:18 +02:00
Aleksander Machniak
6ba41836b6 Revert "extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)" 
This reverts commit 938dd4670b.
 2017-04-11 08:53:34 +02:00
Kay Marquardt
938dd4670b extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654) 
Use proc_open() instead of popen() to catch error messages from called wrapper.
Create new wrapper chpass-wrapper-expect.py
 2017-04-10 13:38:16 +02:00
ka7
9a35768c26 spelling fixes (#5690) 2017-03-12 12:14:19 +01:00
Aleksander Machniak
8e6eb9fa72 Define 'save' class for password form button 2017-03-10 18:44:38 +01:00
Aleksander Machniak
81f67a4de2 Don't use each() deprecated in PHP 7.2 2017-02-06 15:46:18 +01:00
Aleksander Machniak
692cb9c63b Update localization 2016-12-15 09:42:17 +01:00
Aleksander Machniak
be49c2e1cd Code improvements, replace exception thrown with rcube::raise_error() 2016-12-13 08:42:30 +01:00
Maikel Linke
bd5eaf98aa Handle null or non-JSON result of cPanel UAPI 
More unit testing. More documentation.
 2016-12-10 08:45:08 +11:00
Maikel Linke
dd29ca1ee8 Correct decoding of JSON response 
The old version assumed `json_decode` would return an associative array.
While it can do so if an extra option is specified, the default
behaviour is to return an object. Therefore, a successful password
change resulted in an error while parsing the response.

The new code is accessing the response as object instead. The method
is now covered by a unit test.
 2016-12-08 23:35:43 +11:00
Aleksander Machniak
f351b48771 Update changelog, CS fixes 2016-12-07 18:28:32 +01:00
Maikel
adbc9b1889 Add cPanel Webmail driver (#5549) 
This driver does not use an admin account. It uses the user's account to
authenticate at the Webmail API. It uses the recommended UAPI and does
not rely on third-party classes.
 2016-12-07 18:18:31 +01:00
Aleksander Machniak
8fc488afa0 Parse error and CS fixes after PR merge 2016-12-01 09:05:31 +01:00
Paolo Asperti
815b79df7f Added replacement variables support in password_pop_host (#5539) 
Use rcube_utils::parse_host() on a hostname
 2016-12-01 09:01:39 +01:00
Aleksander Machniak
e240e5f8dd CS fixes and update changelog 2016-11-27 14:27:23 +01:00
KaloNK
d41db75d82 Do not store passwords on disk - use proc_open instead of popen (#5531) 2016-11-27 14:20:58 +01:00
JohnDoh
dd714b33a8 replace old trac links (#5514) 2016-11-13 19:15:00 +01:00
Raoul Bhatia
c5a16e72d7 password: Add missing quote in password_ldap_ppolicy_uri in config.inc.php.dist (#5507) 
This was introduced in 5322e91825
 2016-11-11 18:26:32 +01:00