Ermal
88165371ef
Do not allow empty passwords since this might cause problems for some authentication servers like ldap. Fixes #2326
2012-05-30 20:51:11 +00:00
jim-p
c886fed9ba
As suggested by wagonza, using SAMEORIGIN for X-Frame-Options is sufficient here, and does allow the traffic graphs to work. Fixes #2419
2012-05-15 11:44:38 -04:00
Scott Ullrich
babac37a3b
Add click jacking support. Ticket #2419
2012-05-10 11:51:09 -04:00
Warren Baker
49ddf9a10f
Handle HTTPOnly and Secure flags on cookies
2012-05-09 19:08:17 +02:00
Ermal
1cb94b24ef
Looking at pw code : chars are invalid in a comment fieldgit diff! Replace those to just space
2012-03-12 19:28:48 +00:00
Ermal
9252d093fa
Another try to eliminate the warning 'PHP Warning: Cannot modify header information - headers already sent by (output started at /etc/inc/authgui.inc:201) in /usr/local/www/guiconfig.inc on line 47'
2012-02-08 07:59:09 +00:00
Erik Fonnesbeck
c28fae2fd1
Revert "Check if a session already exists to avoid errors issued by php on sesion_start being called on existing session"
...
This reverts commit 9b2de7e2a6
2012-02-07 22:32:41 -07:00
Ermal
9b2de7e2a6
Check if a session already exists to avoid errors issued by php on sesion_start being called on existing session
2012-02-07 20:35:51 +00:00
jim-p
6763033dd5
Include admin user in bootup account sync
2012-01-25 15:39:33 -05:00
jim-p
9fd145911d
Be more careful when creating and removing a user, to only alter a user if it really matches the passwd entry. Fixes #2066
...
pw usershow likes to ignore what you want even with -n and if the user is numeric and doesn't exist, it fetches by uid. Can cause major problems if you try to remove a numeric user.
2012-01-23 14:15:14 -05:00
smos
2ce660ad4d
Unbreak a number of explode() replacements which required preg_split()
2012-01-20 12:18:13 +01:00
smos
cfbfd9412b
The function split() is replaced by the function explode(). Starting with PHP 5.3 this is deprecated and with version 6 gone.
...
Replacing it surpresses all the warnings
2012-01-19 20:33:41 +01:00
jim-p
6ac18f9d11
mhash -> hash change from Ermal
2012-01-19 14:50:15 -05:00
Ermal
906daddcf5
Ticket #1052 . Merge patch referenced in ticket.
2011-11-14 13:42:32 +00:00
jim-p
9f27de6d2f
Do not pass the ldap port separately, but add it to the LDAP URL. PHP's ldap_connect() ignores the passed port parameter if the first parameter is a URL instead of a hostname.
2011-10-25 11:05:11 -04:00
jim-p
007e59d2bf
Include certs.inc before calling lookup_ca in auth.inc. Fixes #1927
2011-10-05 10:15:41 -04:00
Ermal
b3c106a006
Check that we have user password otherwise strange things happen if tehre is nothing stored in the config
2011-09-28 23:48:32 +00:00
namezero111111
d1b69106d0
Added extended query possibility (for example, group membership)
2011-08-28 05:37:24 +03:00
smos
4fcab77bf1
Unbreak the DNS rebind check when accessing over IPv4
2011-08-21 18:45:40 +02:00
smos
e6f7e0be56
Fix the referrer checks for IPv6 addresses Ticket #1583
2011-08-21 13:13:11 +02:00
smos
4cf79fdd9b
Fix the DNS rebind Check for IPv6 addresses Ticket #1583
2011-08-21 13:03:50 +02:00
Ermal
a7702ed5db
Correct array key typo mistake. Ticket #1052
2011-08-08 16:24:20 +00:00
Ermal
fe2031ab18
Ticket #1052 . Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this.
2011-07-15 13:10:40 +00:00
jim-p
8b6313a4d3
Merge remote-tracking branch 'upstream/master'
...
Conflicts:
etc/inc/easyrule.inc
etc/inc/filter.inc
etc/inc/interfaces.inc
etc/inc/services.inc
etc/inc/xmlrpc_client.inc
usr/local/www/fbegin.inc
usr/local/www/services_dhcp.php
2011-07-12 19:57:42 -04:00
jim-p
2488a7e73a
Merge remote branch 'upstream/master'
2011-07-01 11:38:20 -04:00
Vinicius Coque
4842755397
Merge remote-tracking branch 'mainline/master' into inc
2011-06-28 16:55:51 -03:00
Ermal
84924e76c4
Add proper checks in auth code for testing if the section has been set in the config. Also do the same in the ugprade code
2011-06-28 19:26:41 +00:00
Vinicius Coque
a51493d198
Merge remote-tracking branch 'mainline/master' into inc
...
Conflicts:
etc/inc/gwlb.inc
2011-04-15 13:38:13 -03:00
Seth Mos
af8f910eeb
Merge remote branch 'upstream/master'
2011-04-12 10:40:44 +02:00
jim-p
fbfd675a53
Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202
2011-04-08 08:59:50 -04:00
Vinicius Coque
54bdff758f
Merge remote-tracking branch 'mainline/master' into inc
...
Conflicts:
etc/inc/auth.inc
etc/inc/config.lib.inc
etc/inc/filter.inc
etc/inc/pfsense-utils.inc
etc/inc/pkg-utils.inc
etc/inc/priv.defs.inc
etc/inc/services.inc
etc/inc/shaper.inc
etc/inc/voucher.inc
etc/inc/vpn.inc
usr/local/www/fbegin.inc
2011-03-25 08:49:04 -03:00
Seth Mos
209620ea03
Add IPv6 support to the DNS rebinding attack function
2011-03-14 18:44:28 +01:00
smos
4fc3855f17
Make it possible to turn off successful login messages, this should quiet the console, system logs
2011-03-02 08:47:46 +01:00
Vinicius Coque
9d3d8d005e
Merge branch 'master' into inc
...
Conflicts:
etc/inc/captiveportal.inc
etc/inc/config.console.inc
etc/inc/config.lib.inc
etc/inc/easyrule.inc
etc/inc/filter.inc
etc/inc/ipsec.inc
etc/inc/pkg-utils.inc
etc/inc/shaper.inc
etc/inc/system.inc
etc/inc/voucher.inc
2011-01-28 17:32:17 -02:00
Ermal
ee4fc984e1
Silence warnings.
2011-01-26 10:17:31 +00:00
Chris Buechler
17dd7ff3d7
allow 127.0.0.1 and localhost for HTTP_REFERER checks
2011-01-09 22:45:21 -05:00
Vinicius Coque
c92ccac76f
Merge remote branch 'mainline/master' into inc
...
Conflicts:
etc/inc/auth.inc
etc/inc/config.lib.inc
etc/inc/filter.inc
etc/inc/gwlb.inc
etc/inc/interfaces.inc
etc/inc/pfsense-utils.inc
etc/inc/pkg-utils.inc
etc/inc/shaper.inc
etc/inc/upgrade_config.inc
etc/inc/xmlparse.inc
usr/local/www/fbegin.inc
2010-12-14 09:56:34 -02:00
Scott Ullrich
65f7fba8fc
Correct webConfgurator auth/error messages
2010-12-10 16:53:32 -05:00
Scott Ullrich
3aba1835f9
Add log_auth() which with send items to syslogd using LOG_AUTH facilities. Use this new log_authh() for login error and success entries
2010-12-10 16:02:18 -05:00
Erik Fonnesbeck
7ac98d0b35
Switches must come after the user name when using pw lock/unlock.
2010-12-03 17:30:12 -07:00
Erik Fonnesbeck
cdab65ccce
Remove authorized_keys file when there are no authorized keys for the user.
2010-12-03 16:56:28 -07:00
Scott Ullrich
76ffdf9048
Add successful user for sshlockout
2010-11-30 19:35:37 -05:00
Scott Ullrich
88ecfc5870
Reword auth error message to match ssh for the most part
2010-11-30 18:46:08 -05:00
Scott Ullrich
9ae11a629d
Revert "Add Active Directory group membership checking Ticket #1009 "
...
This reverts commit ef17372492
2010-11-29 17:39:46 -05:00
Scott Ullrich
ef17372492
Add Active Directory group membership checking Ticket #1009
2010-11-29 17:36:43 -05:00
Erik Fonnesbeck
ed32aef778
Don't consider the HTTP referrer check as passing if it was skipped. Ticket #1027
2010-11-21 10:36:10 -07:00
Erik Fonnesbeck
0f806ecab4
Upon restoring a config, replacing whole sections, or editing config.xml in edit.php, prevent possible accidental lockout from DNS rebind and HTTP referrer checks by disabling them until reboot or the next time they pass, whichever comes sooner. Ticket #1027
2010-11-21 10:23:34 -07:00
Erik Fonnesbeck
d7bf317824
Various fixes and improvements for the DNS rebind and HTTP referrer checks.
...
* Only compare with full host from referrer, since someone can put whatever they want at the left side of the period to the left of the domain name.
* Now can check for hostname as well, not just hostname.domain, in referrer check.
* Fix althostnames case for referrer check.
* Move the simpler, more commonly used cases above the ones involving foreach loops and skip the loops when a name match has already been found.
* Break out of foreach loops when a match has already been found.
* Do case-insensitive matching of hosts and domains.
* Remove useless checks of non-IP addresses against SERVER_ADDR.
2010-11-18 06:04:24 -07:00
Erik Fonnesbeck
a219c64325
Add workaround for referrer check to not be triggered on the previous IP address when redirected by the setup wizard.
2010-11-17 08:35:30 -07:00
Renato Botelho
39a8090a5a
Merge remote branch 'mainline/master' into inc
...
Conflicts:
etc/inc/PEAR.inc
etc/inc/filter.inc
2010-11-16 09:31:33 -02:00
