Eric Lippmann
b13c38b65b
Auth/Groups: Prefer the domain from the LDAP/MSAD user backend
...
If a LDAP/MSAD user group backend is linked w/ a user backend, the domain from the user backend is preferred over the domain configured for the user group backend.
2017-07-11 17:09:24 +02:00
Eric Lippmann
4b11afe7d5
Remove unused method LdapUserBackend::setConfig()
2017-07-11 17:08:16 +02:00
Eric Lippmann
bd23d008ca
Auth: Make sure to set the configured domain on LDAP/MSAD user backends
2017-07-11 17:02:32 +02:00
Eric Lippmann
cbde758fc6
Remove unused domain-aware auth related functions from UserBackend
...
These functions made it into the master branch accidentally.
2017-07-11 17:01:06 +02:00
Eric Lippmann
d05a262819
Auth: Protect User::setDomain() from empty strings
2017-07-11 16:56:35 +02:00
Johannes Meyer
b397b01966
DbRepository: Avoid to overwrite foreign keys in $aliasTableMap and $aliasColumnMap
2017-07-06 14:10:15 +02:00
Alexander A. Klimov
6848ed6c1e
Merge branch 'bugfix/can-t-progress-in-wizard-due-to-error-2842'
...
fixes #2842
2017-07-05 14:40:10 +02:00
Alexander A. Klimov
5460465e07
Fix null->setDecorators()
...
refs #2842
2017-07-05 14:34:17 +02:00
Johannes Meyer
375920f761
Use a more sophisticated inheritance and interface structure for HTTP exceptions ( #2881 )
...
HttpExceptionInterface now identifies HTTP exceptions, BaseHttpExceptions supersedes
HttpException as new superclass for other more concrete Exceptions and HttpException
is now a generic class to create new HTTP exceptions on the fly.
resolves #2880
2017-07-05 06:26:58 +02:00
Eric Lippmann
d208b48b72
Monitoring: Fix permission for the 'Process check result' action
...
fixes #2878
2017-07-04 17:24:57 +02:00
Eric Lippmann
c0d82fa2cc
Rephrase autosumbit tooltips
...
fixes #1507
2017-07-04 13:59:02 +02:00
Eric Lippmann
53091384cd
Remove unused attributes from the date time picker element
2017-07-04 10:32:30 +02:00
Eric Lippmann
a5990d4de8
Add date and time form elements
2017-07-03 15:03:26 +02:00
Johannes Meyer
08095ad5e8
ErrorController: Set $this->rerenderLayout in init()
...
Solves the issue that when being redirected directly after login
or any other route which causes the layout being rerendered, we
are only presented with the inline layout of the error controller.
2017-06-29 09:51:24 +02:00
Johannes Meyer
f6166b3ab6
ActionController: Allow to control which inline view script to use
...
This also affects that rerendering the layout does only have any effect
in case of XHR requests and is not overwritten anymore in this case.
Since this property was previously private, this should not break anything.
2017-06-28 11:14:01 +02:00
Johannes Meyer
22223acf1d
Controllers: Make all private properties protected
...
Controllers are neither library stuff nor any vital part that need to be
protected from too adventurous module developers.
2017-06-28 09:51:28 +02:00
Eric Lippmann
c554ebb473
Merge pull request #74 from Icinga/feature/travis
2017-06-23 14:45:38 +02:00
Alexander A. Klimov
8b43bd6646
Remove LdapBackendForm::isValidPartial()
2017-06-21 16:59:46 +02:00
Eric Lippmann
686d022987
Merge pull request #2863 from Icinga/feature/domain-support-for-authn-authz-2153
2017-06-21 13:16:36 +02:00
Alexander A. Klimov
fa5bc6c1ae
Wizard: make LDAP domain discovery working again
...
refs #2153
2017-06-20 15:46:31 +02:00
Alexander A. Klimov
9237c3e27d
Wizard: make AD discovery working again
...
refs #2153
2017-06-20 14:46:44 +02:00
Johannes Meyer
46647444c4
Repository: Fix broken conversion rules
...
The additional layers in $aliasTableMap and $aliasColumnMap required
for DbRepository's join probabilities are now only established there.
2017-06-20 08:32:44 +02:00
Alexander A. Klimov
6668556e50
Document domain-aware authentication
...
refs #2153
2017-06-19 09:37:17 +02:00
Johannes Meyer
8ee6e763a6
ActionController: Ensure to utilize the response to redirect and exit
2017-06-19 09:11:12 +02:00
Eric Lippmann
a119ed1589
Add more help text to the login domain configurations
...
refs #2153
2017-06-13 11:15:53 +02:00
Markus Frosch
b86789ecc5
Util/Json: Support PHP 5.3
2017-06-13 11:07:16 +02:00
Markus Frosch
3d3b1cdf4f
RestRequestTest: Fully qualify expected exception
2017-06-13 11:07:16 +02:00
Markus Frosch
593fd485f6
Add travis testing
2017-06-13 11:07:16 +02:00
Eric Lippmann
178d5f8283
Add CLI command for migrating users according to a given domain
...
refs #2153
2017-06-12 13:31:08 +02:00
Eric Lippmann
755b2108a8
Schema: Increase length of username columns
...
In order to support usernames with domains, the length of the username columns is now 254 which also supports email addresses as usernames.
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
53eae8d93e
Add limit parameter to StringHelper::trimSplit()
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
cfbd5c500e
Make LDAP user group backends domain-aware
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
0cbec01743
Make auth via LDAP user backends domain-aware
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
9599f6672f
Add domain config to LDAP user group backends if the backend is not linked w/ a LDAP user backend
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
9ac8253290
Make membership loading domain-aware
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
05288e9bea
Add interface for user backends which are responsible for a specific domain
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
8fbde51b5f
Throw an exception in User::getDomain() if the user does not have a domain
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
b34d1977d8
Fix discover domain btn
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
de62fa6baa
Change label for the default domain config
...
refs #2153
2017-06-12 13:31:07 +02:00
Eric Lippmann
41acffdc24
Login: set the default domain if necessary
...
refs #2153
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
1a5e64eda9
Any backend is responsible for at most one domain
...
refs #2153
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
8359771271
LdapCapabilities: discover NetBIOS name of an AD
...
refs #2153
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
2b9e9bf2b3
User: split the username into localpart and domain (if given)
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
46c5b30de8
Make a default domain configurable
...
refs #2153
2017-06-12 13:31:07 +02:00
Alexander A. Klimov
9400bf9224
LDAP user backend form: implement populateDomains()
...
refs #2153
2017-06-12 13:29:54 +02:00
Johannes Meyer
df04c0f837
ActionController: Introduce constant DEFAULT_TITLE
...
Controllers are now allowed to fully customize the page title.
2017-06-09 11:13:37 +02:00
Alexander A. Klimov
0b8e4d4b5c
LDAP user backend form: discover and store the LDAP server's domains
...
refs #2153
2017-06-07 10:19:52 +02:00
Eric Lippmann
6e2c128c54
Merge commit 'd74124bd12f53d13b5a6ea5408e9783cc5190d1e'
2017-06-06 10:56:54 +02:00
Johannes Meyer
91b0e98171
DbRepository: Allow to pass parameter $types to methods insert() and update()
...
DbConnection does already support this but it got somehow forgotten in this
class.
2017-06-06 09:48:40 +02:00
Johannes Meyer
29f9ff5ce0
DbRepository: Fix that virtual tables are not resolved when issuing statements
2017-06-06 09:33:06 +02:00