Matthew Grooms
651d468705
Now that we have given the mhash extension a bit of time to settle into
...
the tree, enable nthash password generation.
2008-08-06 07:09:59 +00:00
Scott Ullrich
5285a0e316
Adding php5-openssl
2008-08-06 06:24:32 +00:00
Ermal Luçi
178700e6d8
If anybody needs plip(4) notify me!
2008-08-05 23:03:41 +00:00
Ermal Luçi
93a0a02815
This check is needed to prevent php oddities with arrays and strange behaviour of count and empty! As commit fixes errors with not configured openvpn.
2008-08-05 22:59:06 +00:00
Ermal Luçi
c542897782
Try to do better sanity checks.
2008-08-05 22:24:17 +00:00
Ermal Luçi
3134528d84
Rename the bridge knob to bridged so that the upgrade code works correctly and we play by the rules of the parser.
2008-08-05 22:21:14 +00:00
Matthew Grooms
ce6af29aea
Silence warnings generated by pw during configuration update. Requested by
...
Scott.
2008-08-05 22:14:16 +00:00
Ermal Luçi
5751daba60
Update latest config!
2008-08-05 22:11:43 +00:00
Ermal Luçi
e7a4d55650
Try to overcome php smartiness with floating point numbers.
2008-08-05 21:31:12 +00:00
Bill Marquette
64b97cf0d4
Ooops, remove leftover debug code
2008-08-05 21:03:53 +00:00
Bill Marquette
52bd375c78
oh how I hate thee php array
2008-08-05 21:03:10 +00:00
Ermal Luçi
fc9351e17f
Record that we are on a new config format.
2008-08-05 17:37:08 +00:00
Ermal Luçi
0760c14afb
Try to convert old bridges config to the new format.
2008-08-05 17:00:36 +00:00
Ermal Luçi
675aac3d62
Remove code for creating old way bridges. Anything has to be done through the new bridging code. Sorry not upgradable!
2008-08-05 16:32:23 +00:00
Ermal Luçi
c669255503
Remove old way bridge knobs too on the config. Anything has to be done through the new bridging code.
2008-08-05 16:16:55 +00:00
Ermal Luçi
02317e4885
Upgrade older configs to the new way of bridging.
2008-08-05 16:10:37 +00:00
Ermal Luçi
ad048a139b
No need for the 'filtering bridge' option with if_bridge(4).
2008-08-05 15:49:38 +00:00
Ermal Luçi
46bb7d0caa
Remove linking bridges with aliases this is dangerous and gives incorrect behaviour on filter rules.
...
Spotted-by: cmb@
2008-08-05 15:43:50 +00:00
Bill Marquette
50d86c1377
Bring in new server load balancing code, this introduces:
...
* The ability to create your own monitors (tcp, http, https, send/expect)
* A new way of displaying 'standard tables' - MainTable class
* monitor_type array type
2008-08-05 05:03:55 +00:00
Matthew Grooms
fbf672cbe9
Add an interface to manage external authentication servers. The two types
...
supported currently are LDAP and Radius.
2008-08-05 04:16:50 +00:00
Ermal Luçi
11f869eaa3
Fix openvpn upgrade code.
2008-08-04 19:14:42 +00:00
Ermal Luçi
2d78b166f3
Implement OpenDNS and fixup some indent.
2008-08-04 18:15:22 +00:00
Matthew Grooms
659fa7f23b
Cleanup authentication code. The basic auth method, the passwd, htpasswd
...
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.
The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Matthew Grooms
0af7398aab
Remove the vpn_endpoint_determine function. It did not work properly when
...
CARP devices were in use. Use the newer ipsec_get_phase1_src instead.
2008-08-02 02:04:05 +00:00
Matthew Grooms
5878ca478d
Add an option to set_local_group to clear the system user member list.
2008-08-01 23:43:27 +00:00
Matthew Grooms
613cf46cdf
When performing a user configuration upgrade, make sure the all group gets
...
created before syncing accounts to the system.
2008-08-01 23:20:28 +00:00
Ermal Luçi
97b8e3fc89
Do not generate antispoof for virtual interfaces.
2008-08-01 21:09:49 +00:00
Matthew Grooms
2f69e11c5e
Correct a regression that caused non NAT-T IPsec tunnel communications to
...
fail.
2008-08-01 20:52:26 +00:00
Matthew Grooms
6b07c15ad8
Rewrite the pfsense privilege system with the following goals in mind ...
...
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
2008-08-01 06:30:34 +00:00
Scott Ullrich
c9030aec22
Do not backup /var/empty
2008-07-31 21:54:45 +00:00
Scott Ullrich
9226ab399f
Unlink files when restoring.
2008-07-31 21:50:41 +00:00
Scott Ullrich
d688f4e0d2
Break out text to new line, pause for 5 seconds after showing backup size.
2008-07-31 21:36:21 +00:00
Scott Ullrich
8388bbc67a
Report backup size after completion.
2008-07-31 21:34:11 +00:00
Scott Ullrich
36db7251ea
Add line break to make the text look tidy.
2008-07-31 21:30:06 +00:00
Scott Ullrich
e469df3dda
Alert user we are restarting lighty and friends in 5 seconds.
2008-07-31 21:02:09 +00:00
Scott Ullrich
e265afd077
Launch helper script in background to relaunch lighty and friends.
2008-07-31 20:59:59 +00:00
Scott Ullrich
13d219d74d
Output echos in the correct order.
2008-07-31 20:57:32 +00:00
Scott Ullrich
26aa0611ac
Output more details during restart operations
2008-07-31 20:55:27 +00:00
Scott Ullrich
1bbb52e6bc
Spell exclude correctly
2008-07-31 20:51:50 +00:00
Scott Ullrich
665bba7534
* Ignore /var/run during backups
...
* Exec restart commands in background
2008-07-31 20:50:52 +00:00
Scott Ullrich
8d136ee2fc
Remove ermals testing branch. These changes have been merged.
2008-07-31 20:47:28 +00:00
Scott Ullrich
ff33e21f1f
* Backup prior configuration before syncing. Tired of blowing up my
...
firewall and having to spend hours to get back online. This is not
exactly productive.
* Add a RESTORE option as a branch if we detect a previous CVSSYNC.
With these changes it should be easy as pie to revert to the last known
good working state.
2008-07-31 20:46:50 +00:00
Ermal Luçi
18f081726f
Update list of hardware that supports vlan natively.
2008-07-31 17:57:31 +00:00
Ermal Luçi
0e1a94e7db
Try to do some more validation at old bridge creation till things settle for the other parts.
2008-07-31 17:21:05 +00:00
Ermal Luçi
929b2de583
Remove bogus parameter in the vlanmtu command wrongly setted by me.
...
Noteced-by: billm
2008-07-31 17:15:44 +00:00
Ermal Luçi
a5f86ae08b
Remove stale comments.
2008-07-30 18:10:41 +00:00
Ermal Luçi
ab900a0916
Remove generating entries when <bridge> knob is set forinterfaces.
...
It was awkward cause it tried to use the ip of the interface bridged with!
Furthemore we do bridging differently now so no need to keep that around too.
2008-07-30 16:53:28 +00:00
Scott Ullrich
fe7d3a1bdd
Channel 0 is no longer a valid option, use any per Sam L
2008-07-30 16:42:50 +00:00
Ermal Luçi
49624309be
Take into account that pptp might be configured for redir mode too!(Is this mode still needed or should it be set at the port forward tab?!)
2008-07-30 16:15:31 +00:00
Scott Ullrich
c93ad7898c
* Fix 7.x uploads
...
* Include forgotten speedup commit
2008-07-27 05:55:09 +00:00
