summaryrefslogtreecommitdiffstats
path: root/etc/inc/auth.inc
Commit message (Collapse)AuthorAgeFilesLines
* Set LDAP option to dereference aliases when searchingAndrew MacIsaac2013-04-021-0/+4
|
* Print the error message from LDAP in the log for a bind failure.jim-p2013-03-061-1/+1
|
* Add a knob in the GUI to set the RADIUS authentication timeout. Previous ↵jim-p2013-02-131-2/+5
| | | | default was 3s, new is 5s. When using two-factor auth via external (e.g. phone), this needs to be set much higher, 60-120.
* Something in the LDAP libraries has changed and it no longer likes spaces in ↵jim-p2013-01-141-5/+5
| | | | the CA filename. Use the refid for the CA filename since it will always be unqiue, and it will never contain any spaces, unlike authname or the CA's descr.
* Removing gettext from strins that should not be translatedVinicius Coque2013-01-051-2/+2
|
* Put these logs under debug since that's their purposeErmal2012-11-191-1/+2
|
* Put these logs under debug since that's their purposeErmal2012-11-191-2/+4
|
* authentication, don't log 'errors' on normal procedurePiBa-NL2012-11-181-3/+3
|
* Not sure why this has been hidden so deep but putting that in the right ↵Ermal2012-11-151-2/+0
| | | | place should help with error displayed related to HEADER already sent in PHP errors.log
* Supress the error message if the ldap bind doesnt happenWarren Baker2012-07-271-1/+1
|
* Fix LDAP over IPv6 (works fine, just needed slight adjustment to URI)jim-p2012-06-301-5/+9
|
* Import OpenVPN cisco style radius attributes applying policy to logged in ↵Ermal2012-06-051-3/+5
| | | | users. Feature #2100
* Do not allow empty passwords since this might cause problems for some ↵Ermal2012-05-301-2/+2
| | | | authentication servers like ldap. Fixes #2326
* As suggested by wagonza, using SAMEORIGIN for X-Frame-Options is sufficient ↵jim-p2012-05-151-1/+1
| | | | here, and does allow the traffic graphs to work. Fixes #2419
* Add click jacking support. Ticket #2419Scott Ullrich2012-05-101-1/+3
|
* Handle HTTPOnly and Secure flags on cookiesWarren Baker2012-05-091-0/+12
|
* Looking at pw code : chars are invalid in a comment fieldgit diff! Replace ↵Ermal2012-03-121-1/+2
| | | | those to just space
* Another try to eliminate the warning 'PHP Warning: Cannot modify header ↵Ermal2012-02-081-1/+2
| | | | information - headers already sent by (output started at /etc/inc/authgui.inc:201) in /usr/local/www/guiconfig.inc on line 47'
* Revert "Check if a session already exists to avoid errors issued by php on ↵Erik Fonnesbeck2012-02-071-2/+1
| | | | | | sesion_start being called on existing session" This reverts commit 9b2de7e2a6afab31e1a62ac8d54435975a22a9a7.
* Check if a session already exists to avoid errors issued by php on ↵Ermal2012-02-071-1/+2
| | | | sesion_start being called on existing session
* Include admin user in bootup account syncjim-p2012-01-251-6/+2
|
* Be more careful when creating and removing a user, to only alter a user if ↵jim-p2012-01-231-3/+15
| | | | | | it really matches the passwd entry. Fixes #2066 pw usershow likes to ignore what you want even with -n and if the user is numeric and doesn't exist, it fetches by uid. Can cause major problems if you try to remove a numeric user.
* Unbreak a number of explode() replacements which required preg_split()smos2012-01-201-2/+2
|
* The function split() is replaced by the function explode(). Starting with ↵smos2012-01-191-8/+8
| | | | | | PHP 5.3 this is deprecated and with version 6 gone. Replacing it surpresses all the warnings
* mhash -> hash change from Ermaljim-p2012-01-191-1/+1
|
* Ticket #1052. Merge patch referenced in ticket.Ermal2011-11-141-5/+5
|
* Do not pass the ldap port separately, but add it to the LDAP URL. PHP's ↵jim-p2011-10-251-24/+19
| | | | ldap_connect() ignores the passed port parameter if the first parameter is a URL instead of a hostname.
* Include certs.inc before calling lookup_ca in auth.inc. Fixes #1927jim-p2011-10-051-0/+1
|
* Check that we have user password otherwise strange things happen if tehre is ↵Ermal2011-09-281-0/+5
| | | | nothing stored in the config
* Added extended query possibility (for example, group membership)namezero1111112011-08-281-2/+13
|
* Unbreak the DNS rebind check when accessing over IPv4smos2011-08-211-1/+2
|
* Fix the referrer checks for IPv6 addresses Ticket #1583smos2011-08-211-0/+8
|
* Fix the DNS rebind Check for IPv6 addresses Ticket #1583smos2011-08-211-3/+4
|
* Correct array key typo mistake. Ticket #1052Ermal2011-08-081-3/+3
|
* Ticket #1052. Enforce certificates if they are present for authenticating to ↵Ermal2011-07-151-5/+43
| | | | ldap. Allow to select a CA under ldap type authentication backend to be used for this.
* Merge remote-tracking branch 'upstream/master'jim-p2011-07-121-34/+34
|\ | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/easyrule.inc etc/inc/filter.inc etc/inc/interfaces.inc etc/inc/services.inc etc/inc/xmlrpc_client.inc usr/local/www/fbegin.inc usr/local/www/services_dhcp.php
| * Merge remote-tracking branch 'mainline/master' into incVinicius Coque2011-06-281-6/+10
| |\
| * \ Merge remote-tracking branch 'mainline/master' into incVinicius Coque2011-04-151-0/+2
| |\ \ | | | | | | | | | | | | | | | | Conflicts: etc/inc/gwlb.inc
| * \ \ Merge remote-tracking branch 'mainline/master' into incVinicius Coque2011-03-251-1/+3
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/auth.inc etc/inc/config.lib.inc etc/inc/filter.inc etc/inc/pfsense-utils.inc etc/inc/pkg-utils.inc etc/inc/priv.defs.inc etc/inc/services.inc etc/inc/shaper.inc etc/inc/voucher.inc etc/inc/vpn.inc usr/local/www/fbegin.inc
| * \ \ \ Merge branch 'master' into incVinicius Coque2011-01-281-1/+5
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/captiveportal.inc etc/inc/config.console.inc etc/inc/config.lib.inc etc/inc/easyrule.inc etc/inc/filter.inc etc/inc/ipsec.inc etc/inc/pkg-utils.inc etc/inc/shaper.inc etc/inc/system.inc etc/inc/voucher.inc
| * \ \ \ \ Merge remote branch 'mainline/master' into incVinicius Coque2010-12-141-40/+68
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/auth.inc etc/inc/config.lib.inc etc/inc/filter.inc etc/inc/gwlb.inc etc/inc/interfaces.inc etc/inc/pfsense-utils.inc etc/inc/pkg-utils.inc etc/inc/shaper.inc etc/inc/upgrade_config.inc etc/inc/xmlparse.inc usr/local/www/fbegin.inc
| * \ \ \ \ \ Merge remote branch 'mainline/master' into incRenato Botelho2010-11-161-0/+37
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/PEAR.inc etc/inc/filter.inc
| * \ \ \ \ \ \ Merge remote branch 'mainline/master' into incRenato Botelho2010-11-031-3/+3
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/auth.inc etc/inc/config.lib.inc etc/inc/priv.defs.inc etc/inc/system.inc etc/inc/upgrade_config.inc etc/inc/vpn.inc
| * | | | | | | | More gettext fixesRenato Botelho2010-10-011-2/+2
| | | | | | | | |
| * | | | | | | | Fix quotes to use %N$X on gettext callsRenato Botelho2010-10-011-7/+7
| | | | | | | | |
| * | | | | | | | Merge remote branch 'mainline/master' into incRenato Botelho2010-10-011-0/+2
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/filter.inc etc/inc/system.inc
| * \ \ \ \ \ \ \ \ Merge remote branch 'mainline/master' into incRenato Botelho2010-09-131-2/+2
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/filter.inc etc/inc/gwlb.inc
| * | | | | | | | | | Fix gettext calls with printf to permit change strings orderRenato Botelho2010-08-301-7/+7
| | | | | | | | | | |
| * | | | | | | | | | Merge remote branch 'mainline/master' into incRenato Botelho2010-08-181-1/+1
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: etc/inc/interfaces.inc
| * \ \ \ \ \ \ \ \ \ \ Merge remote branch 'mainline/master' into incRenato Botelho2010-08-161-2/+2
| |\ \ \ \ \ \ \ \ \ \ \
OpenPOWER on IntegriCloud