Commit Graph

511 Commits

Author SHA1 Message Date
Johannes Meyer 0c47aececc Allow to disable stack traces globally
refs #9113
2015-08-24 14:44:54 +02:00
Johannes Meyer b9252010b3 PreferenceForm: Add missing activity indicator
refs #8369
2015-08-24 12:47:34 +02:00
Johannes Meyer 9ca278d7b2 Merge branch 'master' into feature/activity-indicators-for-form-submits-8369 2015-08-21 13:37:54 +02:00
Johannes Meyer 5602d57d0b Indicate that the configuration is being validated
refs #8369
2015-08-20 15:48:41 +02:00
Johannes Meyer bf1e177023 LoginForm: Provide a progress label
refs #8369
2015-08-20 15:32:53 +02:00
Matthias Jentsch 9e40f5f2c7 Remove option to skip certificate validation to prevent insecure configurations
Skipping certificate validation will allow MITM on every single request and not give any real security over just running unencrypted queries. On top of that, there is no way to configure this behavior from within PHP except of setting environment variables, which is really hacky and has side effects on other requests.

fixes #9607
2015-08-19 16:20:33 +02:00
Matthias Jentsch d51ecc3d72 Use better icons for resource and auth views
refs #9908
2015-08-18 11:42:42 +02:00
Matthias Jentsch 7095ad5bc7 Improve ini editor and dashlet input validation 2015-08-04 13:23:30 +02:00
Johannes Meyer dafa722cec Hide non-essential form fields when configuring LDAP user group backends
resolves #9780
2015-07-31 15:56:13 +02:00
Johannes Meyer 316a4d8b82 Merge branch 'master' into bugfix/allow-to-configure-how-to-manage-groups-9609 2015-07-30 16:16:04 +02:00
Johannes Meyer 5ca0e981c4 UserGroupBackendPage: Ensure that all required fields exist
refs #9609
2015-07-30 15:49:04 +02:00
Eric Lippmann 3aae37aff3 Don't redirect on external auth
refs #9660
2015-07-30 12:02:42 +02:00
Eric Lippmann c3a057dbdb lib: Add AuthChain::setSkipExternalBackends() in favor of setIteratorMode()
There's only one mode.

refs #9660
2015-07-29 16:18:30 +02:00
Eric Lippmann 257a9f9d1d Set Response::rerenderLayout() in the LoginForm
refs #9660
2015-07-29 15:09:29 +02:00
Eric Lippmann db78f810ff lib: Add log in functionality to the LoginForm
refs #9660
2015-07-29 14:15:11 +02:00
Johannes Meyer 155bcc5db7 LdapUserGroupBackendForm: Fetch config from the factory, not the app
refs #9609
2015-07-29 13:45:18 +02:00
Eric Lippmann 07849e0fea lib: Rename Authentication/Manager to Authentication/Auth
refs #9660
2015-07-28 17:08:55 +02:00
Johannes Meyer 5411efd546 LdapBackendForm: Fail gracefully if the discovery is not possible 2015-07-28 15:07:33 +02:00
Eric Lippmann 7cfc78558d Merge branch 'master' into feature/secure-modules-9644
Conflicts:
	library/Icinga/Exception/IcingaException.php
2015-07-28 13:42:02 +02:00
Eric Lippmann a51f0ad65e Roles: Include permissions and restrictions of unloaded modules too
Because we now have module permissions it makes sense to allow an admin to configure permissions and restrictions from a module
before allowing access to it.

refs #9644
2015-07-24 16:13:08 +02:00
Johannes Meyer df81fd502d ResourceConfigForm: Allow to manually validate the configuration
refs #7588
2015-07-24 14:31:02 +02:00
Johannes Meyer 2c4b6eb915 ResourceConfigForm: Replace isValid- with inspectResource()
refs #7588
2015-07-24 14:24:11 +02:00
Johannes Meyer ccc809853a UserBackendConfigForm: Allow to manually validate the configuration
refs #7588
2015-07-24 13:46:17 +02:00
Johannes Meyer b3e6b2755c UserBackendConfigForm: Replace isValid- with inspectUserBackend()
refs #7588
2015-07-24 11:45:49 +02:00
Johannes Meyer 760c7e4374 LdapBackendForm: Allow to discover a connection's default settings
refs #9602
2015-07-23 17:42:02 +02:00
Johannes Meyer 44643a6c4b PreferenceForm: Improve button placement 2015-07-23 16:49:50 +02:00
Johannes Meyer 4e3da3a6eb UserBackendConfigForm: Adjust how to process requests...
...and use sub-forms, finally.

refs #9602
2015-07-23 16:18:09 +02:00
Eric Lippmann 7c5b4de087 Fix coding style in RoleForm.php 2015-07-23 12:50:42 +02:00
Eric Lippmann bf590ed380 Provide module permissions automatically
refs #9644
2015-07-22 15:01:54 +02:00
Matthias Jentsch e357960d1e Add Inspection API to DB backend
refs #9641
2015-07-16 16:16:55 +02:00
Matthias Jentsch f4054d575b Add Inspection API to db connection
refs #9641
2015-07-16 15:29:45 +02:00
Matthias Jentsch 59c4f8d056 Use Inspection API in User Backend Form
refs #9630
2015-07-15 19:35:25 +02:00
Matthias Jentsch cf8b760ade Use Inspection API in LdapResourceForm
refs #9630
2015-07-15 19:33:47 +02:00
Johannes Meyer a8ac420897 LdapConnection: Establish a connection lazily 2015-07-10 09:51:39 +02:00
Johannes Meyer 066b3d9e28 ApplicationConfigForm: Make preference options be global options
refs #8709
2015-07-01 15:41:45 +02:00
Johannes Meyer 8c8198eeea UserGroupBackendForm: Some small documentation fixes 2015-06-29 11:11:06 +02:00
Johannes Meyer 3dddee8b7d Setup: Fix authentication backend validation
This is a ridiculous dirty fix. We'll definitely need to
improve how we create authentication backends...

fixes #9509
2015-06-25 14:36:51 +02:00
Johannes Meyer d95874b84c Setup: Provide a default user filter for ActiveDirectory backends
fixes #8703
2015-06-25 14:22:50 +02:00
Johannes Meyer c3ad7b211a Ldap\Connection: Rename to LdapConnection
refs #8954
2015-06-24 09:05:29 +02:00
Johannes Meyer 5fd2eb639a LdapResourceForm: Display exact error messages to the user 2015-06-23 14:08:50 +02:00
Johannes Meyer 15220da645 Automatically strip unnecessary parentheses from custom ldap filters
fixes #9348
2015-06-23 10:32:45 +02:00
Thomas Gelf b154e13ad9 RoleForm: hide config/"all-but-*" for rc1 2015-06-18 15:49:49 +02:00
Matthias Jentsch 42de13a2b9 Merge branch 'feature/ssh-remote-connection-resource-configuration-7595'
resolves #7595
2015-06-15 17:30:42 +02:00
Johannes Meyer 2dd04bb6c9 LdapUserGroupBackendForm: Do not disable `user_filter' and `group_filter'
refs #7343
2015-06-05 17:24:03 +02:00
Johannes Meyer e66f8731af UserBackendConfigForm: Allow to configure user backends of type msldap
fixes #9355
2015-06-05 17:20:31 +02:00
Johannes Meyer c800f1e6aa UserGroupBackendForm: Do not translate LDAP and ActiveDirectory
refs #7343
2015-06-05 16:40:17 +02:00
Johannes Meyer 840069b436 LdapUserGroupBackendForm: Do not persist default values
...

refs #7343
2015-06-05 16:34:28 +02:00
Johannes Meyer e910a5a254 LdapUserGroupBackendForm: Do not disable `base_dn' and `user_base_dn'
refs #7343
2015-06-05 16:16:35 +02:00
Johannes Meyer 797e9de629 LdapUserGroupBackendForm: Do not disable group configuration..
..when no user backend has been linked and it's not a ActiveDirectory.

refs #7343
2015-06-05 16:07:27 +02:00
Johannes Meyer 975edbe548 UserGroupBackendForm: Do not persist null values, really
Revert this once #9376 has been fixed.

refs #9376
2015-06-05 15:45:33 +02:00
Johannes Meyer e9e97cb1b3 UserGroupBackendForm: Unset the `name' property, always
refs #7343
2015-06-05 15:41:24 +02:00
Johannes Meyer 5688f0cb85 Allow to configure user group backends of type LDAP
refs #7343
2015-06-05 14:53:29 +02:00
Johannes Meyer 447088af22 Introduce form LdapUserGroupBackendForm
refs #7343
2015-06-05 14:52:46 +02:00
Johannes Meyer 7ebf185036 UserGroupBackendForm: Fix that autosubmit do not have any effect
refs #7343
2015-06-05 13:07:16 +02:00
Johannes Meyer cd0c418854 Merge branch 'master' into feature/user-and-group-management-8826 2015-06-02 10:44:13 +02:00
Johannes Meyer 2490d0ae67 ConfigController: We're configuring user backends from now on
refs #8826
2015-06-02 09:58:57 +02:00
Johannes Meyer 8875ce7d95 Provide permission config/authentication/* 2015-06-02 09:09:11 +02:00
Johannes Meyer 9bd5d4148e Drop permission config/application/groups/member
refs #8826
2015-06-02 09:08:16 +02:00
Johannes Meyer cf96e66ff2 Rename permission config/application/roles* to config/authentication/...
Does also split it into *, show, add, edit, remove as this should behave like
any other authentication configuration.

refs #8826
2015-06-02 09:07:06 +02:00
Johannes Meyer 3fffd90135 Rename permission config/application/groups* to config/authentication/...
refs #8826
2015-06-02 09:04:34 +02:00
Johannes Meyer a558f2873a Rename permission config/application/users* to config/authentication/...
refs #8826
2015-06-02 09:02:57 +02:00
Johannes Meyer 46e2393074 UsergroupbackendController: Do only assert that the user has one permission
The configuration of a backend itself should not be that granular.

refs #8826
2015-06-02 08:58:21 +02:00
Johannes Meyer 4bd36bc500 UserGroupForm: Notify the user that memberships will be cleared...
...when removing a group.

refs #8826
2015-06-01 14:25:29 +02:00
Johannes Meyer ea959c2dfd Introduce controller UsergroupbackendController
refs #8826
2015-05-29 16:35:30 +02:00
Johannes Meyer 04835db13e Introduce form UserGroupBackendForm
refs #8826
2015-05-29 16:34:34 +02:00
Johannes Meyer cb4d6f013a GroupController: Properly handle 404's when handling group members
refs #8826
2015-05-29 12:57:39 +02:00
Johannes Meyer 385042ea92 RepositoryForm: Verify that the entry to work with is valid
refs #8826
2015-05-28 16:27:48 +02:00
Alexander Fuhr 49589128ef Rename identity_key with private_key in ssh resource
refs #7595
2015-05-28 14:09:13 +02:00
Eric Lippmann 8b07a0e29a Add missing return argument in the ResourceConfigForm 2015-05-28 13:17:00 +02:00
Alexander Fuhr 558120e23b Add resource ssh usage to resources and instances
refs #7595
2015-05-28 10:50:13 +02:00
Alexander Fuhr bf21f55656 Add a new ssh resource form
refs #7595
2015-05-28 10:44:58 +02:00
Johannes Meyer e55d43418d RoleForm: Add new permission sets for user and group management
refs #8826
2015-05-27 10:39:29 +02:00
Johannes Meyer 170379b743 CreateMembershipForm: Properly handle errors when fetching groups
refs #8826
2015-05-27 08:55:53 +02:00
Johannes Meyer a75c74eae1 Introduce form CreateMembershipForm
refs #8826
2015-05-26 17:02:27 +02:00
Johannes Meyer 86146b8048 Introduce form AddMemberForm
refs #8826
2015-05-26 14:30:55 +02:00
Johannes Meyer 75c5aa2869 Move UserGroupForm to the Icinga\Forms\Config\UserGroup namespace
refs #8826
2015-05-26 10:24:13 +02:00
Johannes Meyer e2c250ca77 Move UserForm to the Icinga\Forms\Config\User namespace
refs #8826
2015-05-26 10:23:40 +02:00
Johannes Meyer ec556edc65 Merge branch 'master' into feature/user-and-group-management-8826 2015-05-26 09:28:35 +02:00
Johannes Meyer f3124ffd59 UserGroupForm: Fix redirect when renaming a group
refs #8826
2015-05-22 17:03:02 +02:00
Johannes Meyer 18e413d15a UserForm: Fix redirect when renaming a user
refs #8826
2015-05-22 17:01:34 +02:00
Eric Lippmann 250f863faa Allow anonymous LDAP binding
fixes #9224
2015-05-22 14:15:59 +02:00
Johannes Meyer 9c6a8898fd Introduce class UserGroupForm
refs #8826
2015-05-20 11:53:04 +02:00
Johannes Meyer 32d1569520 Introduce class UserForm
refs #8826
2015-05-20 10:54:06 +02:00
Johannes Meyer 8ea3cd0a13 Introduce class RepositoryForm
refs #8826
2015-05-20 10:53:31 +02:00
Johannes Meyer 71fa736144 Merge branch 'master' into feature/user-and-group-management-8826 2015-05-20 10:46:55 +02:00
Eric Lippmann bd54784496 Don't override submit label in the ConfirmRemovalForm 2015-05-20 10:30:00 +02:00
Eric Lippmann 5a69c26d2c Fix typo in PHPDoc of ConfirmRemovalForm::init() 2015-05-20 10:30:00 +02:00
Johannes Meyer c441117324 LdapUserBackend: Extend Repository and implement UserBackendInterface
refs #8826
2015-05-04 12:18:25 +02:00
Johannes Meyer 99ac0b78ea DbUserBackend: Extend DbRepository and implement UserBackendInterface
refs #8826
2015-05-04 12:15:05 +02:00
Johannes Meyer d09ea2845d Merge branch 'master' into feature/user-and-group-management-8826 2015-04-30 15:20:40 +02:00
Alexander A. Klimov c839cc0b08 Remove exclamation mark from the notification "Authentication order updated!"
resolves #8960
2015-04-27 13:16:54 +02:00
Johannes Meyer 6ca68f438d Move concrete UserBackend classes to Icinga\Authentication\User
refs #8826
2015-04-21 12:51:31 +02:00
Johannes Meyer 62bb35a71e Fix that the ldap port does not change when updating the encryption to use
fixes #8958
2015-04-07 15:07:36 +02:00
Johannes Meyer dc4d1246a9 Fix that the sql port does not change when updating the type of the database
fixes #7491
2015-04-07 15:07:36 +02:00
Alexander Klimov 967a2e82dc Use (only) "@return $this" in fluent interfaces' documentation 2015-04-07 14:24:11 +02:00
Eric Lippmann cdd5da80f0 Use Url::getRelativeUrl() when updating dashlets
fixes #8363
2015-04-07 13:05:12 +02:00
Johannes Meyer a3f2d7de7e LdapResourceForm: Translate "None" with a context as it's ambiguous 2015-03-13 08:53:08 +01:00
Eric Lippmann e36c430bb3 Merge branch 'feature/protected-menu-8720'
resolves #8720
2015-03-13 04:26:19 +01:00
Eric Lippmann f60a0b86ec POST disable/enable auto-refresh always against the current location
refs #8605
2015-03-13 04:01:08 +01:00
Eric Lippmann 9f0af662a7 Write none instead of plaintext for unencrypted LDAP resources 2015-03-13 00:47:23 +01:00