3086 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Peter Bieringer	45f2a4cc0e	Merge pull request #1667 from jackwilsdon/fix-ipv6-test ... Fix test failing on systems without IPv6 support - thank you very much!	2025-01-02 21:05:45 +00:00
Jack Wilsdon	532fad9ba6	Fix test failing on systems without IPv6 support	2025-01-02 12:18:53 +00:00
Peter Marschall	99f5ec389d	LDAP auth: indroduce config option 'ldap_user_attribute' ... This option gives us - flexible authentication options where the name used for logging on does not have to be the account name e.g. use ldap_filter = (&(obhjectclass=inetOrgperson)(|(cn={0]})(mail={0}))) to allow loginng on using the cn or the mail address - automatically consistent / canonicalized username values (i.e. exactly the way the LDAP server returns them)	2025-01-02 12:05:39 +01:00
Peter Marschall	0253682c00	LDAP auth: do not blindly assume groups have a 2-letter naming attribute ... Instead, strip away everything before (and including) the '=' sign of ther RDN.	2025-01-02 12:05:39 +01:00
Peter Marschall	8c2feb4726	LDAP auth: escape values used in LDAP filters to avoid possible injection of malicious code.	2025-01-02 12:05:39 +01:00
Peter Marschall	c243ae4ebf	LDAP auth: require exactly one result when searching for the LDAP user DN ... This makes sure not fail securely when the query returns multiple entries - correct grammar in some cases - we're doing _authentication here, not authorization - uppercase LDAP in messages & comments - rename variable _ldap_version to _ldap_module_version to avoid misunderstanding it as LDAP's protocol version - align formatting & messages better between _login2() and _login3()	2025-01-02 12:05:39 +01:00
Peter Marschall	6f82333ff7	LDAP auth: harmonize _login2() and _login3() methods	2025-01-02 12:05:32 +01:00
Peter Bieringer	6f0ac545f0	code fix	2025-01-02 08:08:22 +01:00
Peter Bieringer	70c4a34eb8	fix/extend changelog	2025-01-01 17:36:33 +01:00
Peter Bieringer	3763f28ae4	tox fixes	2025-01-01 17:36:15 +01:00
Peter Bieringer	0a5ae5b0b4	extend startup logging for htpasswd	2025-01-01 17:31:16 +01:00
Peter Bieringer	5d48ba5d1e	add test cases	2025-01-01 17:28:09 +01:00
Peter Bieringer	5a591b6471	use different token	2025-01-01 16:41:11 +01:00
Peter Bieringer	8604dacad0	fix typing	2025-01-01 16:40:55 +01:00
Peter Bieringer	ca665c4849	add a dummy delay action	2025-01-01 16:32:07 +01:00
Peter Bieringer	8fdbd0dbf6	log cosmetics	2025-01-01 16:31:47 +01:00
Peter Bieringer	46fe98f60b	make htpasswd cache optional	2025-01-01 16:31:31 +01:00
Peter Bieringer	c10ce7ae46	add support for login info log	2025-01-01 16:30:34 +01:00
Peter Bieringer	6ebca08423	extend copyright	2025-01-01 15:47:22 +01:00
Peter Bieringer	c1be04abd1	fixes suggested by tox	2024-12-31 18:26:43 +01:00
Peter Bieringer	c00ab76c83	[auth] htpasswd: module 'bcrypt' is no longer mandatory in case digest method not used in file / changelog	2024-12-31 17:09:29 +01:00
Peter Bieringer	5357e692d9	[auth] htpasswd: module 'bcrypt' is no longer mandatory in case digest method not used in file	2024-12-31 17:09:21 +01:00
Peter Bieringer	9cac3008b7	extend changelog	2024-12-31 16:15:51 +01:00
Peter Bieringer	2489356dda	implement htpasswd file caching	2024-12-31 16:14:38 +01:00
Peter Bieringer	5ce0cee8bf	add chache cleanup and locking	2024-12-31 16:13:52 +01:00
Peter Bieringer	79ba07e16b	change default cache times	2024-12-31 16:13:05 +01:00
Peter Bieringer	c0acbd4402	update changelog	2024-12-31 08:12:49 +01:00
Peter Bieringer	b75e303556	reorg code, disable caching on not required types	2024-12-31 08:11:19 +01:00
Peter Bieringer	a794a51885	fix failed_login cache, improve coding	2024-12-31 07:57:54 +01:00
Peter Bieringer	4f2990342d	add additional debug line	2024-12-31 07:57:13 +01:00
Peter Bieringer	ac8abbd12c	3.3.4.dev	2024-12-30 08:15:55 +01:00
Peter Bieringer	9af15e6656	fixes triggered by tox	2024-12-30 05:25:10 +01:00
Peter Bieringer	30e2ab490e	cache_logins+htpasswd	2024-12-30 08:19:20 +01:00
Peter Bieringer	ddd099accd	debug log which password hash method was used	2024-12-30 08:17:59 +01:00
Peter Bieringer	8e97b709bf	implement cache_logins* option	2024-12-30 08:17:59 +01:00
Peter Bieringer	74311560c9	add cache_logins* options	2024-12-30 08:17:59 +01:00
Peter Marschall	b22038c746	LDAP auth: a little bit of cleanup ... - correct grammar in some cases - we're doing authentication here, not authorization - uppercase LDAP in messages & comments - rename variable _ldap_version to _ldap_module_version to avoid misunderstanding it as LDAP's protocol version	2024-12-29 17:36:01 +01:00
Peter Bieringer	c2b2274dad	update release	2024-12-28 08:05:39 +01:00
Peter Bieringer	2674f9a382	enhance and fix logwatch	2024-12-28 07:56:10 +01:00
Peter Bieringer	51960bcab8	extend doc related to config options used	2024-12-27 09:04:47 +01:00
Peter Bieringer	a5dd4d8a7d	Merge pull request #1665 from itglob/master ... Disable overloading BaseAuth login method	2024-12-26 16:19:15 +00:00
IM	94898ef6c1	flake8 E302	2024-12-25 22:28:01 +03:00
IM	7df2fb35a7	Disable overloading BaseAuth login method	2024-12-25 21:56:04 +03:00
Peter Bieringer	a4266c9690	Merge pull request #1664 from pbiering/issue-1133 ... Fix for Issue 1133	2024-12-25 10:36:08 +00:00
Peter Bieringer	1e8d9eda50	fix found by mypy	2024-12-24 12:10:47 +01:00
Peter Bieringer	0b00218d75	log precondition result on PUT request / changelog	2024-12-24 12:04:09 +01:00
Peter Bieringer	7e23c603c1	log precondition result on PUT request	2024-12-24 12:04:05 +01:00
Peter Bieringer	6569e481df	Merge pull request #1663 from pbiering/logwatch ... Contrib: logwatch config and script	2024-12-24 07:29:46 +00:00
Peter Bieringer	b19418f43c	update	2024-12-24 08:25:31 +01:00
Peter Bieringer	e2934a12c0	Contrib: logwatch config and script	2024-12-24 08:24:13 +01:00