Johannes Meyer
d6722c7772
LdapQuery: Compare multi-valued attributes as rfc2891 suggests
2021-02-23 08:22:58 +01:00
Eric Lippmann
fce2858beb
LDAP: Add option to disable server side sorting
...
We automatically detect whether the server supports server side sorting
and sort manually if that is not the case. But there are LDAP servers
which report that they support this feature in general but have it
disabled for certain fields.
If we send the server side control for any field that has server side
sort disabled, the LDAP server will abort the query.
With the new configuration option it is possible to disable server side
sorting and it has precedence over our automatic detection.
Since this is a very special LDAP server configuration, there is no GUI
option for this.
2020-05-25 11:08:13 +02:00
Johannes Meyer
098bcfb98f
LdapConnection: Ignore unknown vendor upon inspection
2020-01-13 13:46:32 +01:00
Johannes Meyer
7bb9c8e25f
LdapConnnection: Don't pass param `$serverCtrls` to `ldap_search` prior php 7.3
...
refs #4013
2020-01-13 13:17:40 +01:00
Johannes Meyer
7bc1893a24
LdapConnection: Don't utilize `ldap_control_paged_result()` on PHP 7.3+
...
https://www.php.net/manual/en/migration74.deprecated.php#migration74.deprecated.ldap
2019-12-04 09:33:13 +01:00
Johannes Meyer
40e27f8e2a
LdapConnection: Properly render logical NOTs with only single expression
...
fixes #3818
2019-06-05 12:59:36 +02:00
Elias Probst
483a9d1935
Typo (`Issueing` > `Issuing`) ( #3773 )
2019-05-03 15:56:47 +02:00
Johannes Meyer
1c0a70d152
Merge pull request #3758 from Icinga/fix/ldap-group-members-not-found-3650
...
Fix LDAP group members not found
2019-04-23 15:02:16 +02:00
Johannes Meyer
a2d30a100c
LdapQuery: Make all applied filters case-insensitive
...
LDAP peforms case-insensitive checks by default so do we now.
fixes #3650
2019-04-23 14:36:08 +02:00
Johannes Meyer
1d341f9253
LdapConnection: Include the normalized hostname in all informational messages
...
refs #3639
2019-04-23 10:55:23 +02:00
Johannes Meyer
d998bd9894
LdapConnection: Normalize the hostname in all cases, not just for LDAPS
...
refs #3639
2019-04-23 10:54:40 +02:00
ignasr
12ee9580a9
When using LDAPS, check if the Host field has hostnames with ports and use the value from Port field if not.
2019-04-12 08:57:52 +02:00
ignasr
9b1f49413d
use the correct LDAPS port
...
refs #3713
2019-03-08 18:49:20 +01:00
Eric Lippmann
d919e23d0b
Merge pull request #3585 from Icinga/feature/enhanced-ldap-logging
...
Feature/enhanced ldap logging
2018-11-15 11:28:47 +01:00
Markus Frosch
39f5b5e2cd
LdapConnection: Ensure port and timeout are numbers
2018-10-16 14:44:01 +02:00
Markus Frosch
3f782460dc
LdapConnection: Add timeout setting with a useful default value
2018-10-16 14:35:50 +02:00
Johannes Meyer
d8e3f23342
LdapCapabilities: Log which attributes were discovered
2018-10-08 10:34:27 +02:00
Alexander A. Klimov
fc1f6e13ab
Drop PHP 5.3 support
2018-05-07 11:36:54 +02:00
Johannes Meyer
ce4ae47805
LdapConnection: Respect a query's offset not only for ordered results
...
refs #2765
2018-01-16 12:59:42 +01:00
Johannes Meyer
37f22518bb
LdapConnection: Respect query limits also for paged queries
...
refs #2765
2018-01-16 12:59:42 +01:00
Alexander A. Klimov
2282e1aa4f
LdapConnection: respect a query's limit as expected
...
refs #2765
2018-01-16 12:59:42 +01:00
Alexander A. Klimov
ee7fa2c48c
Merge branch 'bugfix/wizard-ldap-connection-settings-discovery-failure-reasons-are-silented-2865'
...
fixes #2865
2017-10-26 11:14:51 +02:00
Alexander A. Klimov
d13856eb39
Wizard: show LDAP connection settings discovery failure reasons
...
refs #2865
2017-10-26 10:25:37 +02:00
Markus Frosch
28b1a00d4a
LdapUtils: Add isDN function
2017-10-20 15:17:11 +02:00
Alexander Aleksandrovič Klimov
2510155206
Suggest LDAP backend type based on the discovery (if any) ( #2993 )
...
fixes #2991
2017-10-06 11:23:07 +02:00
Michael Friedrich
ab364e0fc7
Remove unsupported livestatus functionality
...
Signed-off-by: Eric Lippmann <eric.lippmann@icinga.com>
2017-09-29 10:33:55 +02:00
Eric Lippmann
686d022987
Merge pull request #2863 from Icinga/feature/domain-support-for-authn-authz-2153
2017-06-21 13:16:36 +02:00
Alexander A. Klimov
9237c3e27d
Wizard: make AD discovery working again
...
refs #2153
2017-06-20 14:46:44 +02:00
Alexander A. Klimov
8359771271
LdapCapabilities: discover NetBIOS name of an AD
...
refs #2153
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
0b8e4d4b5c
LDAP user backend form: discover and store the LDAP server's domains
...
refs #2153
2017-06-07 10:19:52 +02:00
Johannes Meyer
8d3e8b829f
LdapConnection: Properly handle multiple hosts if encryption is involved
...
refs #2645
2017-02-02 13:29:34 +01:00
Johannes Meyer
181e2ef05c
Swag: Fix swag (aka a whole bunch of code style issues..)
2017-01-27 14:48:59 +01:00
Michael Friedrich
08a82daea3
Update to icinga.com
...
refs #2687
2017-01-18 12:04:43 +01:00
Eric Lippmann
1d1a4b4be3
Optimize imports in LdapConnection
2016-04-08 12:58:30 +02:00
Eric Lippmann
1f69189b14
Merge branch 'feature/ldap-scope-11485'
...
resolves #11485
2016-04-08 12:57:41 +02:00
Markus Frosch
955a9482ad
lib/LDAP: Add fetchByDn for a base scope retrieval on an entry
...
refs #11485
2016-04-07 17:16:51 +02:00
Markus Frosch
202d61dd4e
lib/LDAP: Add support for LDAP search scope
...
Configurable on the LdapQuery, handled by LdapConnection::ldapSearch
refs #11485
2016-04-07 17:16:38 +02:00
Markus Frosch
adeaf60aed
lib/LDAP: Do not explicitly set the fields list when ordering
...
refs #11489
2016-04-07 17:13:07 +02:00
Markus Frosch
0f538e7f06
lib/LDAP: LdapUtils::explodeDN replace deprecated use of eval in preg_replace
...
fixes #11490
2016-04-04 09:25:59 +02:00
Johannes Meyer
cdb873cbdb
ResourceFactory: Validate a resource's configuration
...
Probably only a quickfix, but feels still more proper than the
previous solution, on a second thought..
2016-02-12 14:19:44 +01:00
Alexander A. Klimov
34afcc07b3
LdapConnection: disallow an empty root DN
...
fixes #11114
2016-02-09 10:29:08 +01:00
Alexander A. Klimov
474803fee4
Change all license headers to only reflect a file's year of creation
...
refs #11000
2016-02-08 15:41:00 +01:00
Johannes Meyer
9587c363f6
LdapConnection: Do not explicitly emit the bind password in the log
2015-11-27 08:13:35 +01:00
Johannes Meyer
31b584b338
LdapConnection: Fix method fetchOne()
...
The method suffered from multiple issues:
* Actual NULL values were interpreted as if the row does not have any cols
* Which attribute's value got returned was dependent on the result set instead of the desired columns
refs #10567
2015-11-11 12:44:08 +01:00
Johannes Meyer
2917f352b5
Merge branch 'master' into bugfix/unreliable-attribute-ambiguity-check-10567
...
Conflicts:
library/Icinga/Authentication/UserGroup/LdapUserGroupBackend.php
library/Icinga/Protocol/Ldap/LdapConnection.php
2015-11-11 11:53:19 +01:00
Johannes Meyer
c85bce7211
LdapConnection: Add method ldapSearch()
...
This will now emit a debug message for each issued search operation.
refs #10567
2015-11-11 10:01:00 +01:00
Johannes Meyer
cee639d689
LdapConnection: Re-apply a query's filter on unfolded rows
...
refs #10370
2015-11-10 14:03:08 +01:00
Johannes Meyer
e408630e34
LdapConnection: Do not require calling array_flip for method cleanupAttributes()
...
Seems to be a relict of an earlier implementation..
refs #10370
2015-11-10 13:41:08 +01:00
Johannes Meyer
666e67b405
LdapConnection: Prefer strict checks when utilizing in_array()
2015-11-10 13:17:30 +01:00
Johannes Meyer
4341eef4b1
LdapQuery: Add support for Icinga\Data\Filter
...
refs #10370
2015-11-09 15:59:48 +01:00