Commit Graph

80 Commits

Author SHA1 Message Date
Aleksander Machniak
ed4dc2139d Password: Remove password_blowfish_cost option, in favor of password_algorithm_options 2021-09-25 15:35:29 +02:00
Aleksander Machniak
53801e5fdc Password: Remove some deprecated algorithms and replacement variables 2021-09-25 15:33:20 +02:00
Aleksander Machniak
ee74fe806e Password: Add support for passwords based on PHP's password_hash() function (#7724)
i.e. Bcrypt, Argon2i, Argon2id
2021-09-25 15:18:59 +02:00
Aleksander Machniak
b4b50b87b3 Password: Set password_minimum_length to 8 by default (#8003) 2021-04-18 10:49:44 +02:00
Josh Soref
203f456620 Spelling (#8001) 2021-04-18 08:43:18 +02:00
Aleksander Machniak
ca523bd7fa Remove hostnet.de specific code 2021-01-16 15:42:58 +01:00
Aleksander Machniak
a49b47b864 Merge branch 'password-httpapi-plugin' of https://github.com/davidc/roundcubemail into davidc-password-httpapi-plugin 2021-01-16 10:11:21 +01:00
Aleksander Machniak
c8ed7c7388 Document miab driver, rename some config options 2021-01-16 09:57:54 +01:00
Aleksander Machniak
5356700325 Merge branch 'tinycp-driver' of https://github.com/rimendoz86/roundcubemail into rimendoz86-tinycp-driver 2021-01-16 09:44:39 +01:00
Aleksander Machniak
ded37ff97c Introduce password_http_client config option 2021-01-16 09:06:28 +01:00
Alexey Shtokalo
925b11dbbe Added password driver for Mail-in-a-Box 2021-01-10 23:53:21 +03:00
Aleksander Machniak
9b01776ef0 Password: Removed old 'cpanel' driver, 'cpanel_webmail' driver renamed to 'cpanel' (#7780) 2021-01-02 19:18:20 +01:00
Aleksander Machniak
14a94cf0d7 PHP8 fixes, CS fixes, short array syntax, tests 2020-12-09 21:11:46 +01:00
Evili del Rio
38ffc55bc8 Correct documentation of password_login_exceptions parameter (#7523)
Signed-off-by: Evili del Rio <evili.del.rio@gmail.com>
2020-07-30 15:00:39 +02:00
Ricardo Mendoza
b0d2a2e7fb 1.1 2020-07-23 20:42:54 -07:00
David Croft
48da92765f Add httpapi password change driver to connect to generic HTTP/HTTPS APIs 2020-06-16 23:36:16 +01:00
Aleksander Machniak
a269e7c106 Fix misleading comment 2019-11-12 19:09:43 +01:00
Johannes Prösl
4644e3404f Adding ssha512 password_algorithm (#6805)
* Added SSHA512 method to the hash_password function

Basically a copy of the ssha method this case is compatible with the dovecot ssha512 settings so there is no doveadm needed alongside with roundcube to update ssha512 passwords.
2019-06-24 10:28:53 +02:00
Peter Kubica
51abe31f1a ldap_exop - fix issue #4992 2019-03-05 10:44:37 +01:00
Aleksander Machniak
9babe138af Password: Change API for password checking
... for simpler implementation of strength indicator in future.

Also simplified configuration by removing password_check_strength and
adding password_minimum_score.
2018-11-11 09:02:50 +01:00
PhilW
1bf6dc3de8 Password: add Zxcvbn strength driver 2018-10-07 09:58:29 +01:00
PhilW
00946f1f57 give password plugin drivers more power
Allow password drivers more control over the entire password changeing
processes not just the save action. Allow them to perform old/new
password comparisons and also password strength checking.

*) allow password drivers override default password comparisons (eg
   new is not same as current) #6473
*) allow password drivers override default strength checks (eg allow
   for 'not the same as last x passwords')
*) allow separate password saving and strength drivers for use of
   strength checking services eg HaveIBeenPwned.com #5040
*) allow drivers to define password strength rules displayed to the
   user
*) rename password_require_nonalpha config option to
   password_check_strength to reflect new strength checking
   possibilities (added backwards compatibility)
2018-10-07 07:50:42 +01:00
Aleksander Machniak
85046cdea4 Cleanup modoboa driver 2018-09-03 13:25:01 +02:00
Aleksander Machniak
60922dc3d5 Password: Added password_username_format option (#5766) 2018-04-23 19:01:35 +02:00
Aleksander Machniak
148ccda88a Password: Support host variables in password_db_dsn option (#5955) 2017-09-15 19:07:26 +02:00
Aleksander Machniak
982d211ec0 Update changelog, CS fixes 2017-05-19 20:04:08 +02:00
ElpyDE
73db885647 Virtualmin driver for password plugin now uses virtualmin to ask for the domain 2017-05-11 18:52:40 +02:00
Torkel Bjørnson-Langen
3bbe218b83 Password plugin: Added missing default values (#5726)
* Added correct default values for password plugin (ldap backends only)
* Sync default values in config.inc.php.dist with code.
2017-04-18 10:17:18 +02:00
Aleksander Machniak
6ba41836b6 Revert "extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)"
This reverts commit 938dd4670b.
2017-04-11 08:53:34 +02:00
Kay Marquardt
938dd4670b extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)
Use proc_open() instead of popen() to catch error messages from called wrapper.
Create new wrapper chpass-wrapper-expect.py
2017-04-10 13:38:16 +02:00
ka7
9a35768c26 spelling fixes (#5690) 2017-03-12 12:14:19 +01:00
Maikel
adbc9b1889 Add cPanel Webmail driver (#5549)
This driver does not use an admin account. It uses the user's account to
authenticate at the Webmail API. It uses the recommended UAPI and does
not rely on third-party classes.
2016-12-07 18:18:31 +01:00
Paolo Asperti
815b79df7f Added replacement variables support in password_pop_host (#5539)
Use rcube_utils::parse_host() on a hostname
2016-12-01 09:01:39 +01:00
Raoul Bhatia
c5a16e72d7 password: Add missing quote in password_ldap_ppolicy_uri in config.inc.php.dist (#5507)
This was introduced in 5322e91825
2016-11-11 18:26:32 +01:00
Aleksander Machniak
7f4ab8c14a Merge pull request #5364 from ZiBiS/master
Password: LDAP PPolicy driver
2016-10-10 16:17:17 +02:00
Zbigniew Szmyd
06956572ec Change parameters names to the standard. 2016-10-10 11:27:41 +02:00
Aleksander Machniak
4e26cd7691 Merge branch 'master' of https://github.com/NETLINK/roundcubemail into NETLINK-master 2016-10-01 08:00:56 +02:00
Aleksander Machniak
b751f8f20f Move password_dovecotpw_with_method close to other dovecot related options 2016-09-19 08:21:36 +02:00
Michał Wojciechowski
cde1fbde0c Fix typos 2016-07-23 14:01:10 +02:00
Julian Matz
16d5dcbaa4 Update config.inc.php.dist
Add support for cPanel hash auth, using a Remote Access Key (choice between hash auth and plain password auth).
2016-05-14 08:52:33 +01:00
Julian Matz
a4c6aec76a Update config.inc.php.dist
Add support for cPanel remote access hash (choice between hash auth and plain password auth).
2016-05-14 08:47:38 +01:00
Zbigniew Szmyd
5322e91825 LDAP password driver for password policy 2016-02-22 12:58:04 +01:00
Bram Matthys
c10f97740a Add $config['password_crypt_rounds']: this specifies the number of rounds
to be used for the sha256 and sha512 crypt hashing algorithms.
2015-09-05 21:31:25 +02:00
Aleksander Machniak
252cc4c4ac Password: Allow temporarily disabling the plugin functionality with a notice 2015-07-27 10:47:34 +02:00
Aleksander Machniak
8b25622c75 Describe difference between dovecotpw and doveadm-pw (#1490423) 2015-06-12 08:59:26 +02:00
Aleksander Machniak
3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
2015-05-27 13:37:10 +02:00
Aleksander Machniak
1c8f845637 Add notes about sudo setup (#1490203) 2015-05-21 09:13:18 +02:00
Aleksander Machniak
1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 2015-02-26 18:19:44 +01:00
Aleksander Machniak
ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
2014-12-09 18:39:55 +01:00
Lorenzo Perone
3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
2014-10-14 23:22:46 +02:00