Commit Graph

17 Commits

Author SHA1 Message Date
Scott Ullrich
2a7a9e3b14 Add shaper.inc and auth.inc 2009-11-21 22:46:56 -05:00
Matthew Grooms
bfea87fff2 Remove the page locking privileges after discussion with Scott on IRC. The
feature was confusing and offered little utility that I could see. If we
really need to provide serialized access to sections of the webui, IMO it
should be a global lock option and enabled or disabled manually and not a
privilege that is on all the time.
2008-09-03 17:52:15 +00:00
Matthew Grooms
60286f06b5 Do a better job of re-assigning admin privileges when the password reset
menu option is used. Reported by Scott and Chris.
2008-08-11 15:56:07 +00:00
Matthew Grooms
659fa7f23b Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.

The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Matthew Grooms
6b07c15ad8 Rewrite the pfsense privilege system with the following goals in mind ...
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
2008-08-01 06:30:34 +00:00
Matthew Grooms
45ee90edb3 Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions
that were only being used in one place or not at all were removed. The
user page privelege checks were also simplified in preperation for future
work in this area.
2008-07-25 02:28:31 +00:00
Scott Ullrich
fa66bc7bc1 Sync w/ HEAD. 2008-03-10 01:18:03 +00:00
Bill Marquette
709cc6e0f2 global s/[wW]ebGUI/webConfigurator/ - brought up via ticket #1427 2007-10-17 00:25:25 +00:00
Scott Ullrich
3121018425 Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
Scott Ullrich
7d5b43329e Alert to user we are changing default username back to admin on reset password. 2006-04-21 01:25:34 +00:00
Scott Ullrich
17f17002d7 When resetting the password from the console, reset the username to "admin".
Needless to say I waisted way more time than I should have finding this issue.
2006-04-19 17:24:55 +00:00
Scott Ullrich
262df9d55a Resync SSH and webConfigurator password after password reset 2005-08-21 18:29:52 +00:00
Bill Marquette
1b8df11bf3 Add $Id$ tags 2005-03-27 22:39:00 +00:00
Bill Marquette
5929e4c078 write_config() descriptions 2005-03-20 05:37:47 +00:00
Scott Ullrich
bbc3533ff7 Style clieanup. 2005-02-12 02:59:15 +00:00
Scott Ullrich
a78ca28572 Reset password to pfsense 2005-01-31 06:15:58 +00:00
Scott Ullrich
5b23774500 Initial revision 2004-11-07 03:06:49 +00:00