806 Commits

Author SHA1 Message Date
Matthias Jentsch
9e40f5f2c7 Remove option to skip certificate validation to prevent insecure configurations
Skipping certificate validation will allow MITM on every single request and not give any real security over just running unencrypted queries. On top of that, there is no way to configure this behavior from within PHP except of setting environment variables, which is really hacky and has side effects on other requests.

fixes #9607
2015-08-19 16:20:33 +02:00
Matthias Jentsch
d51ecc3d72 Use better icons for resource and auth views
refs #9908
2015-08-18 11:42:42 +02:00
Matthias Jentsch
7095ad5bc7 Improve ini editor and dashlet input validation 2015-08-04 13:23:30 +02:00
Johannes Meyer
dafa722cec Hide non-essential form fields when configuring LDAP user group backends
resolves #9780
2015-07-31 15:56:13 +02:00
Johannes Meyer
316a4d8b82 Merge branch 'master' into bugfix/allow-to-configure-how-to-manage-groups-9609 2015-07-30 16:16:04 +02:00
Johannes Meyer
5ca0e981c4 UserGroupBackendPage: Ensure that all required fields exist
refs #9609
2015-07-30 15:49:04 +02:00
Eric Lippmann
3aae37aff3 Don't redirect on external auth
refs #9660
2015-07-30 12:02:42 +02:00
Eric Lippmann
c3a057dbdb lib: Add AuthChain::setSkipExternalBackends() in favor of setIteratorMode()
There's only one mode.

refs #9660
2015-07-29 16:18:30 +02:00
Eric Lippmann
257a9f9d1d Set Response::rerenderLayout() in the LoginForm
refs #9660
2015-07-29 15:09:29 +02:00
Eric Lippmann
db78f810ff lib: Add log in functionality to the LoginForm
refs #9660
2015-07-29 14:15:11 +02:00
Johannes Meyer
155bcc5db7 LdapUserGroupBackendForm: Fetch config from the factory, not the app
refs #9609
2015-07-29 13:45:18 +02:00
Eric Lippmann
07849e0fea lib: Rename Authentication/Manager to Authentication/Auth
refs #9660
2015-07-28 17:08:55 +02:00
Johannes Meyer
5411efd546 LdapBackendForm: Fail gracefully if the discovery is not possible 2015-07-28 15:07:33 +02:00
Eric Lippmann
7cfc78558d Merge branch 'master' into feature/secure-modules-9644
Conflicts:
	library/Icinga/Exception/IcingaException.php
2015-07-28 13:42:02 +02:00
Eric Lippmann
a51f0ad65e Roles: Include permissions and restrictions of unloaded modules too
Because we now have module permissions it makes sense to allow an admin to configure permissions and restrictions from a module
before allowing access to it.

refs #9644
2015-07-24 16:13:08 +02:00
Johannes Meyer
df81fd502d ResourceConfigForm: Allow to manually validate the configuration
refs #7588
2015-07-24 14:31:02 +02:00
Johannes Meyer
2c4b6eb915 ResourceConfigForm: Replace isValid- with inspectResource()
refs #7588
2015-07-24 14:24:11 +02:00
Johannes Meyer
ccc809853a UserBackendConfigForm: Allow to manually validate the configuration
refs #7588
2015-07-24 13:46:17 +02:00
Johannes Meyer
b3e6b2755c UserBackendConfigForm: Replace isValid- with inspectUserBackend()
refs #7588
2015-07-24 11:45:49 +02:00
Johannes Meyer
760c7e4374 LdapBackendForm: Allow to discover a connection's default settings
refs #9602
2015-07-23 17:42:02 +02:00
Johannes Meyer
44643a6c4b PreferenceForm: Improve button placement 2015-07-23 16:49:50 +02:00
Johannes Meyer
4e3da3a6eb UserBackendConfigForm: Adjust how to process requests...
...and use sub-forms, finally.

refs #9602
2015-07-23 16:18:09 +02:00
Eric Lippmann
7c5b4de087 Fix coding style in RoleForm.php 2015-07-23 12:50:42 +02:00
Eric Lippmann
bf590ed380 Provide module permissions automatically
refs #9644
2015-07-22 15:01:54 +02:00
Matthias Jentsch
e357960d1e Add Inspection API to DB backend
refs #9641
2015-07-16 16:16:55 +02:00
Matthias Jentsch
f4054d575b Add Inspection API to db connection
refs #9641
2015-07-16 15:29:45 +02:00
Matthias Jentsch
59c4f8d056 Use Inspection API in User Backend Form
refs #9630
2015-07-15 19:35:25 +02:00
Matthias Jentsch
cf8b760ade Use Inspection API in LdapResourceForm
refs #9630
2015-07-15 19:33:47 +02:00
Johannes Meyer
a8ac420897 LdapConnection: Establish a connection lazily 2015-07-10 09:51:39 +02:00
Johannes Meyer
066b3d9e28 ApplicationConfigForm: Make preference options be global options
refs #8709
2015-07-01 15:41:45 +02:00
Johannes Meyer
8c8198eeea UserGroupBackendForm: Some small documentation fixes 2015-06-29 11:11:06 +02:00
Johannes Meyer
3dddee8b7d Setup: Fix authentication backend validation
This is a ridiculous dirty fix. We'll definitely need to
improve how we create authentication backends...

fixes #9509
2015-06-25 14:36:51 +02:00
Johannes Meyer
d95874b84c Setup: Provide a default user filter for ActiveDirectory backends
fixes #8703
2015-06-25 14:22:50 +02:00
Johannes Meyer
c3ad7b211a Ldap\Connection: Rename to LdapConnection
refs #8954
2015-06-24 09:05:29 +02:00
Johannes Meyer
5fd2eb639a LdapResourceForm: Display exact error messages to the user 2015-06-23 14:08:50 +02:00
Johannes Meyer
15220da645 Automatically strip unnecessary parentheses from custom ldap filters
fixes #9348
2015-06-23 10:32:45 +02:00
Thomas Gelf
b154e13ad9 RoleForm: hide config/"all-but-*" for rc1 2015-06-18 15:49:49 +02:00
Matthias Jentsch
42de13a2b9 Merge branch 'feature/ssh-remote-connection-resource-configuration-7595'
resolves #7595
2015-06-15 17:30:42 +02:00
Johannes Meyer
2dd04bb6c9 LdapUserGroupBackendForm: Do not disable user_filter' and group_filter'
refs #7343
2015-06-05 17:24:03 +02:00
Johannes Meyer
e66f8731af UserBackendConfigForm: Allow to configure user backends of type msldap
fixes #9355
2015-06-05 17:20:31 +02:00
Johannes Meyer
c800f1e6aa UserGroupBackendForm: Do not translate LDAP and ActiveDirectory
refs #7343
2015-06-05 16:40:17 +02:00
Johannes Meyer
840069b436 LdapUserGroupBackendForm: Do not persist default values
...

refs #7343
2015-06-05 16:34:28 +02:00
Johannes Meyer
e910a5a254 LdapUserGroupBackendForm: Do not disable base_dn' and user_base_dn'
refs #7343
2015-06-05 16:16:35 +02:00
Johannes Meyer
797e9de629 LdapUserGroupBackendForm: Do not disable group configuration..
..when no user backend has been linked and it's not a ActiveDirectory.

refs #7343
2015-06-05 16:07:27 +02:00
Johannes Meyer
975edbe548 UserGroupBackendForm: Do not persist null values, really
Revert this once #9376 has been fixed.

refs #9376
2015-06-05 15:45:33 +02:00
Johannes Meyer
e9e97cb1b3 UserGroupBackendForm: Unset the `name' property, always
refs #7343
2015-06-05 15:41:24 +02:00
Johannes Meyer
5688f0cb85 Allow to configure user group backends of type LDAP
refs #7343
2015-06-05 14:53:29 +02:00
Johannes Meyer
447088af22 Introduce form LdapUserGroupBackendForm
refs #7343
2015-06-05 14:52:46 +02:00
Johannes Meyer
7ebf185036 UserGroupBackendForm: Fix that autosubmit do not have any effect
refs #7343
2015-06-05 13:07:16 +02:00
Johannes Meyer
cd0c418854 Merge branch 'master' into feature/user-and-group-management-8826 2015-06-02 10:44:13 +02:00