Commit Graph

65 Commits

Author SHA1 Message Date
Renato Botelho
7f7626ba44 Merge branch 'master-br' of https://github.com/ayvis/pfsense into ayvis-master-br 2014-03-17 11:17:29 -03:00
Chris Buechler
c728177042 standardize on www.pfsense.org and HTTPS, point package URLs to
packages.pfsense.org
2014-03-14 19:04:43 -05:00
ayvis
8cd558b61b xhtml Compliance
replaced <br>, <br/> and </br> with <br />
2014-03-14 21:24:03 +01:00
Renato Botelho
338ded9b3c Fix whitespaces and indent 2013-12-02 15:45:29 -02:00
Colin Fleming
1df3c262f9 Tidy up "system_usermanager_settings.php" XHTML
Add CDATA sections to SCRIPT tags
Update HTML boolean operators
2013-04-08 20:22:39 +01:00
Renato Botelho
0ff5ea767d Cosmetic change, s/manager/Manager/ to keep make it consistent with other entries 2013-02-07 08:28:53 -02:00
jim-p
072bc34c97 Correct the test which displays an error if someone chose to save+test but doesn't have an ldap backend. Also, fix a typo. 2011-02-24 13:20:49 -05:00
Ermal
20e18ef23b Properly test for ldap case when clicking save and test for GUI authserver. 2010-12-08 15:45:18 +00:00
Ermal
b641a575bf Ticket #934. Perform test only for ldap backend. Also tell the user through a message when they click it for other backends. 2010-10-15 13:59:03 +00:00
Chris Buechler
2959a19069 correctly select Local Database when it's configured as such 2010-08-07 02:41:23 -04:00
Ermal
db0bfe367b Do not blacklist radius for authentication method on the webGUI. 2010-07-27 21:42:45 +00:00
Erik Fonnesbeck
34a2fb1bdc Allow using the default session timeout. 2010-05-06 06:08:54 -06:00
Renato Botelho
0e94685b3a Fix gettext issues 2010-04-29 14:32:30 -03:00
Erik Fonnesbeck
c3c2fd205b Merge branch 'master' into gettext
Resolved conflicts:
	usr/local/www/system_advanced_firewall.php
	usr/local/www/system_routes.php
	usr/local/www/system_routes_edit.php
2010-04-28 21:17:27 -06:00
Chris Buechler
93c745f669 touch up text 2010-04-28 21:17:11 -04:00
Carlos Eduardo Ramos
e2f0ac5949 Implementing gettext() 2010-04-28 11:02:39 -03:00
Ermal
b567f5893c Ticket #378. Correct text to reflect the allowed 0 value. 2010-04-27 14:08:38 +00:00
Ermal
02647583e9 Ticket #378. Correctly handle a timeout of 0 to mean never timeout. 2010-04-27 14:07:48 +00:00
Ermal
cb045957d1 Since 0 is not allowed clarify comment. 2010-03-16 13:33:38 +00:00
Ermal
a69c003681 Ticket #423. Remove priv.inc/priv.defs.inc from files. They used require() instead of required once so produced errors or redefinitions of functions. These includes are now included on authgui.inc. 2010-03-15 19:13:20 +00:00
Ermal Lui
864336aa75 Remove the authentication fallback it does not have any meaning now. 2010-03-04 15:55:27 +00:00
Ermal Lui
8cd27a9820 Do not allow negative numbers in session timeout. Ticket #378. 2010-03-03 17:13:20 +00:00
Ermal Lui
6306b5ddc7 Overhaul the user login system to use the Servers tab as its base.
Fix quite a few problems down the way.
2010-03-03 16:17:35 +00:00
Ermal Lui
f98bfed21e Remove the windows LF on this file to be usable on vi. 2010-03-03 09:33:54 +00:00
Ermal Lui
d91f8b8c76 User _ instead of </> so browser does not interpret it as html. 2010-03-02 00:27:19 +00:00
Ermal Lui
c345f26517 Do not show the passwd used to logon on logs. Also change the replace from $username to <username> so php does not try to do clever stuff. 2010-03-02 00:21:39 +00:00
Ermal Lui
0c1b9688b3 The filter expects * and not a php variable. 2010-03-01 21:46:57 +00:00
Chris Buechler
eecc18174e revert unintentional change to system_usermanager_settings.php from last commit 2010-02-27 15:26:34 -05:00
Chris Buechler
a64b5d3f92 if reverted to HTTP, restart lighty 2010-02-27 15:24:35 -05:00
Chris Buechler
bdadaf3c1f Change default session timeout to 4 hours. Clarify text description. Remove limit of < 999 and other invalid/unnecessary input validation. Use product_name 2010-02-24 18:29:14 -05:00
Chris Buechler
cb565d6dd7 make re-brand friendly 2009-12-17 22:36:49 -05:00
sullrich
5092a6fbac include priv.inc 2009-11-28 21:15:48 -05:00
sullrich
ead24d63be Include priv.defs.inc 2009-11-28 20:08:13 -05:00
Scott Ullrich
1d333258dc Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on 2009-09-14 21:49:40 -04:00
Scott Ullrich
dff1a09d60 Mount image rw during changes 2008-11-20 22:11:06 +00:00
Matthew Grooms
d799787e49 Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.

This commit also splits out the certificate management components into a
new system menu item.
2008-08-26 04:48:04 +00:00
Matthew Grooms
64cc39d3dd Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority
- Create internal certificate authority

Certificate Manager:
- List certificates
- Import existing certificate
- Create internal certificate using an internal CA
- Generate certificate signing request for external CAs
- Process certificate signing response from external CAs

Certificate revocation is not currently implemented. The user system will
also be extended to allow for user specific certificate management in a
follow-up commit.
2008-08-09 00:06:08 +00:00
Matthew Grooms
fbf672cbe9 Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.
2008-08-05 04:16:50 +00:00
Matthew Grooms
659fa7f23b Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.

The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Matthew Grooms
6b07c15ad8 Rewrite the pfsense privilege system with the following goals in mind ...
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
2008-08-01 06:30:34 +00:00
Scott Ullrich
5456326f85 Remove the statement Only Supports one Container Currently!!! 2008-02-20 19:13:39 +00:00
Scott Ullrich
4f7c388212 Add Edir, etc to the LDAP other description. 2008-02-19 16:56:11 +00:00
Scott Ullrich
2ddf8c6e11 Make select button really a button intead of HTML <a href> 2008-02-19 00:28:11 +00:00
Scott Ullrich
6344d71f98 Make form more user friendly:
"Active Directory"

hide:
LDAP Filter (use default: (samaccountname=$username))
LDAP Naming Attribute (use default: samaccountname)
Group Membership Attribute Name (use default: memberOf)

"eDirectory"

hide:
LDAP Filter (use default: (cn=$username))
LDAP Naming Attribute (use default: CN)
Group Membership Attribute Name (use default: groupMembership)
2008-02-19 00:25:34 +00:00
Scott Ullrich
b0ed07d189 Latest eDir / Active Directory tweaks from Mark Batchelor.
Thanks again for him helping us with this project!
2008-01-31 18:16:40 +00:00
Scott Ullrich
348cb6d79c Add back ldap auth caontainer picker. 2008-01-18 02:41:52 +00:00
Scott Ullrich
5ed85831cd * Hide password field
* Remove session timeout graphic
* Allow session timeout to remain blank
2008-01-13 20:23:52 +00:00
Scott Ullrich
222efdce8f Remove the need to define authetnication containers. Now a user can login
anywhere in the LDAP tree and will use the groups to deterimine the access
privs.

Work sponsored-by: Centipede Networks
2007-12-31 22:55:27 +00:00
Scott Ullrich
f3f60e61d6 * Return OU=Users which is built-in to active directory
* Specify that LDAP is Active Directory compatible

Work sponsored-by: Centipede Networks
2007-12-31 03:24:38 +00:00
Scott Ullrich
073115bc29 Adding LDAP Authentication container picker.
Work sponsored-by: Centipede Networks
2007-12-31 03:13:31 +00:00