ayvis
1d7ba68396
replaced <br>, <br/> with <br /> in ANSI encoded files. Converted these files to UTF-8
2014-03-18 16:09:05 -03:00
Renato Botelho
f177717459
Use php function to get hostname instead of exec()
2014-02-04 12:34:41 -02:00
Ermal
b2af12ad48
Use closelog to explicitly close open resource.
2013-12-19 09:12:39 +00:00
Ermal
5e28dad4a3
Migrate openvpn authentication to use fcgicli rather than forking a php process. Maybe should could consider to write a short library todo this
2013-12-19 08:53:32 +00:00
Ermal
3260b82f36
Make it more clear what is the username during syslog
2012-11-14 19:32:34 +00:00
Ermal
1492e02cb4
Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100
2012-06-05 19:37:45 +00:00
bcyrill
239a297742
Use appropriate syslog priorities.
2012-04-14 21:19:12 +02:00
Ermal
fe2031ab18
Ticket #1052 . Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this.
2011-07-15 13:10:40 +00:00
Scott Ullrich
673e809501
nuke trailing carriage returns
2010-12-22 10:39:12 -05:00
Ermal
befad72821
Ticket #1037 . Move environment manipulation to the authentication script since escaping slashes is not so easz on dynamic built paths.
2010-11-26 21:54:44 +00:00
Scott Ullrich
9734b0545e
Remove trailing carriage return
2010-11-10 12:00:32 -05:00
jim-p
8901958c07
Add backend code to verify username against cn on login if set by user. Needs GUI code to set the option yet. Ticket #887
2010-10-12 17:21:32 -04:00
Ermal Luçi
cc686d98fe
Add the neccesary foo for radius.inc to work.
2010-03-02 20:19:35 +00:00
Ermal Luçi
8a6b0fbeb0
Add copyrights of myself.
2010-03-02 17:23:27 +00:00
Ermal Luçi
006a162f53
Take care of local authentication. Also when the user authenticates do not serach on other authentication sources.
2010-03-02 17:10:08 +00:00
Ermal Luçi
c61e462626
Allow the GUI auth API to be used for doing authentication against authentication servers specified. Teach Openvpn to use this API. Allow openvpn to authenticate against multiple servers that can be selected on the server configuration page.
2010-03-02 17:07:06 +00:00
Ermal Luçi
a13ce628f8
Do not allow login for expired and disabled users. Fix this even in openvpn authentication script. While here clean up the code quite a bit.
2010-03-02 10:21:12 +00:00
Chris Buechler
0c8d27635c
Revert "fix OpenVPN user auth"
...
This reverts commit f67a48ccda .
2009-12-29 23:16:00 -05:00
Chris Buechler
f67a48ccda
fix OpenVPN user auth
2009-12-29 23:10:24 -05:00
Scott Ullrich
523855b02b
Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions
2009-09-12 15:34:07 -04:00
Matthew Grooms
1f5309a3a5
Use the correct syslog LOG_ERR constant and make this file executable.
2008-10-06 18:25:58 +00:00
Matthew Grooms
3c11bd3c5b
Minor re-work of OpenVPN configuration. Use operational modes to determine
...
what configuration options are appropriate. The operational mode dictates
the authentication method. They are defines as follows ...
Peer to Peer ( SSL/TLS )
Peer to Peer ( Shared Key )
Remote Access ( SSL/TLS )
Remote Access ( User Auth )
Remote Access ( SSL/TLS + User Auth )
Some of these modes allow for user authentication using passwords. We now
use the etc/inc/openvpn.auth-user.php file to facilitate this by checking
the username and password supplied by OpenVPN against our centralized user
database.
The Server and Client user interfaces have also been updated to support
TLS packet authentication. This is an additional security option that is
optional.
2008-09-06 21:10:43 +00:00