Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use php function to get hostname instead of exec() | Renato Botelho | 2014-02-04 | 1 | -5/+4 |
| | |||||
* | Use closelog to explicitly close open resource. | Ermal | 2013-12-19 | 1 | -4/+17 |
| | |||||
* | Migrate openvpn authentication to use fcgicli rather than forking a php ↵ | Ermal | 2013-12-19 | 1 | -9/+42 |
| | | | | process. Maybe should could consider to write a short library todo this | ||||
* | Make it more clear what is the username during syslog | Ermal | 2012-11-14 | 1 | -2/+2 |
| | |||||
* | Import OpenVPN cisco style radius attributes applying policy to logged in ↵ | Ermal | 2012-06-05 | 1 | -1/+37 |
| | | | | users. Feature #2100 | ||||
* | Use appropriate syslog priorities. | bcyrill | 2012-04-14 | 1 | -1/+1 |
| | |||||
* | Ticket #1052. Enforce certificates if they are present for authenticating to ↵ | Ermal | 2011-07-15 | 1 | -6/+1 |
| | | | | ldap. Allow to select a CA under ldap type authentication backend to be used for this. | ||||
* | nuke trailing carriage returns | Scott Ullrich | 2010-12-22 | 1 | -1/+1 |
| | |||||
* | Ticket #1037. Move environment manipulation to the authentication script ↵ | Ermal | 2010-11-26 | 1 | -1/+7 |
| | | | | since escaping slashes is not so easz on dynamic built paths. | ||||
* | Remove trailing carriage return | Scott Ullrich | 2010-11-10 | 1 | -1/+1 |
| | |||||
* | Add backend code to verify username against cn on login if set by user. ↵ | jim-p | 2010-10-12 | 1 | -0/+7 |
| | | | | Needs GUI code to set the option yet. Ticket #887 | ||||
* | Add the neccesary foo for radius.inc to work. | Ermal Luçi | 2010-03-02 | 1 | -0/+35 |
| | |||||
* | Add copyrights of myself. | Ermal Luçi | 2010-03-02 | 1 | -0/+1 |
| | |||||
* | Take care of local authentication. Also when the user authenticates do not ↵ | Ermal Luçi | 2010-03-02 | 1 | -1/+3 |
| | | | | serach on other authentication sources. | ||||
* | Allow the GUI auth API to be used for doing authentication against ↵ | Ermal Luçi | 2010-03-02 | 1 | -4/+15 |
| | | | | authentication servers specified. Teach Openvpn to use this API. Allow openvpn to authenticate against multiple servers that can be selected on the server configuration page. | ||||
* | Do not allow login for expired and disabled users. Fix this even in openvpn ↵ | Ermal Luçi | 2010-03-02 | 1 | -20/+4 |
| | | | | authentication script. While here clean up the code quite a bit. | ||||
* | Revert "fix OpenVPN user auth" | Chris Buechler | 2009-12-29 | 1 | -3/+3 |
| | | | | This reverts commit f67a48ccda79386b5628e746e43bdf55a4f54ed6. | ||||
* | fix OpenVPN user auth | Chris Buechler | 2009-12-29 | 1 | -3/+3 |
| | |||||
* | Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions | Scott Ullrich | 2009-09-12 | 1 | -1/+4 |
| | |||||
* | Use the correct syslog LOG_ERR constant and make this file executable. | Matthew Grooms | 2008-10-06 | 1 | -1/+3 |
| | |||||
* | Minor re-work of OpenVPN configuration. Use operational modes to determine | Matthew Grooms | 2008-09-06 | 1 | -0/+79 |
what configuration options are appropriate. The operational mode dictates the authentication method. They are defines as follows ... Peer to Peer ( SSL/TLS ) Peer to Peer ( Shared Key ) Remote Access ( SSL/TLS ) Remote Access ( User Auth ) Remote Access ( SSL/TLS + User Auth ) Some of these modes allow for user authentication using passwords. We now use the etc/inc/openvpn.auth-user.php file to facilitate this by checking the username and password supplied by OpenVPN against our centralized user database. The Server and Client user interfaces have also been updated to support TLS packet authentication. This is an additional security option that is optional. |