Erik Fonnesbeck
|
3e251b1290
|
Add SSH tunneling privilege to list of available privileges.
|
2010-07-12 15:31:14 -06:00 |
|
jim-p
|
df8d74dee3
|
Lock out shell accounts that have no OS access, or are expired/disabled.
|
2010-07-12 17:11:24 -04:00 |
|
jim-p
|
d8d2d3e462
|
Add check for user-ssh-tunnel to give users access to the ssh tunnel shell
|
2010-07-12 17:02:12 -04:00 |
|
jim-p
|
1ed86bc611
|
Flip this test around so it is easier to follow/read.
|
2010-07-12 16:56:42 -04:00 |
|
jim-p
|
5af2baf71e
|
Sync groups first, since users may rely on group changes.
|
2010-07-12 16:54:53 -04:00 |
|
jim-p
|
739c78ac30
|
Make sure a user gets deleted from the 'all' group.
|
2010-07-12 13:37:40 -04:00 |
|
jim-p
|
a137fedd7d
|
Clean up this code.
|
2010-07-12 12:52:25 -04:00 |
|
jim-p
|
a39675ecae
|
Remove home directory when deleting a user.
|
2010-07-12 12:40:25 -04:00 |
|
Chris Buechler
|
b1bd211944
|
only reload if relayd is already running, don't kill and then start it
|
2010-07-11 21:23:44 -04:00 |
|
Chris Buechler
|
087a89f823
|
fix some of the logging for load balancer, still partially broken
|
2010-07-11 19:58:19 -04:00 |
|
Chris Buechler
|
477dcf13ce
|
rename slbd pages since this is no longer slbd
|
2010-07-11 19:13:57 -04:00 |
|
Chris Buechler
|
f8cb57dba2
|
couple load balancer fixes, resolves #723
|
2010-07-11 17:23:44 -04:00 |
|
Erik Fonnesbeck
|
7017b54ec4
|
Speed up loading information from regdomain.xml
|
2010-07-10 23:40:56 -06:00 |
|
Erik Fonnesbeck
|
1fb064e86d
|
Separate regdomain.xml parsing back to a separate file, so it can be used when xmlreader.inc is used instead of xmlparse.inc
|
2010-07-10 21:36:54 -06:00 |
|
Erik Fonnesbeck
|
43141617a3
|
Combine checkout logic for cloning and updating in gitsync and fix a condition showing an error message on the initial cloning.
|
2010-07-09 23:52:53 -06:00 |
|
jim-p
|
2003b5d8bc
|
Print a warning on the login screen if you are accessing the router by a non-local IP address (one not configured on the system) to warn about potential MITM attacks.
|
2010-07-09 09:50:01 -04:00 |
|
jim-p
|
f17f9f2891
|
Bypass the DNS Rebind attack checks if accessing by IP address.
|
2010-07-09 09:19:03 -04:00 |
|
jim-p
|
dab2e7699e
|
Add some user cert lookup functions.
|
2010-07-07 13:42:08 -04:00 |
|
jim-p
|
ecefc738d7
|
Allow importing of a CA's private key (optionally).
|
2010-07-07 12:23:02 -04:00 |
|
Scott Ullrich
|
29721fe6a6
|
duplicate logic
|
2010-07-06 17:47:05 -04:00 |
|
Scott Ullrich
|
2c46f11f0a
|
Allow forwarded domains to be queried.
|
2010-07-06 17:44:48 -04:00 |
|
jim-p
|
f5e74456ce
|
Check for locally configured IPs in DNS rebind checks, so people who port forward from WAN to the LAN IP can still work.
|
2010-07-06 17:29:25 -04:00 |
|
jim-p
|
86b2190361
|
Add a text box where someone can enter in alternate hostnames for the system to bypass the DNS rebind checks.
|
2010-07-06 17:03:44 -04:00 |
|
jim-p
|
14eab6fb4d
|
Add a checkbox to disable DNS rebinding checks if needed.
|
2010-07-06 16:32:09 -04:00 |
|
Erik Fonnesbeck
|
06cb265678
|
Remove extra }
|
2010-07-06 13:34:34 -06:00 |
|
jim-p
|
7319dc7309
|
More fixes for DNS rebinding checks (Most of this code is Scott's, with some minor fixes by me)
|
2010-07-06 15:26:52 -04:00 |
|
Erik Fonnesbeck
|
89e7778f20
|
Fix up checks for changing wireless regulatory settings.
|
2010-07-06 13:14:20 -06:00 |
|
Scott Ullrich
|
c8dc187cef
|
Correct check
|
2010-07-06 14:55:16 -04:00 |
|
Scott Ullrich
|
c371754a80
|
Correct check
|
2010-07-06 14:51:26 -04:00 |
|
Scott Ullrich
|
11ecbf135d
|
Check for 127.0.0.1 as well
|
2010-07-06 14:36:57 -04:00 |
|
Scott Ullrich
|
3821f3daa8
|
Oops, correct check
|
2010-07-06 14:36:02 -04:00 |
|
Scott Ullrich
|
b6022a2392
|
Add localhost as a valid host for SSH forwarding cases
|
2010-07-06 14:35:11 -04:00 |
|
jim-p
|
0321fa1ba4
|
Wrap the dns rebind check in a test to see if our error function exists. If it doesn't, it's probably being called from captive portal, so skip the check. Fixes #721
|
2010-07-06 14:27:44 -04:00 |
|
jim-p
|
4b49a8a91e
|
Move the skel dir to /etc/skel, where it's easier to manage from a build point of view.
|
2010-07-06 13:55:10 -04:00 |
|
jim-p
|
681f5f4e53
|
Add ssh_tunnel_shell to /etc/shells
|
2010-07-06 12:47:26 -04:00 |
|
jim-p
|
5a554f3085
|
Slight fix to dyndns check
|
2010-07-06 12:10:36 -04:00 |
|
Scott Ullrich
|
9b13f84b4f
|
Check dyndns hostnames as well for DNS Rebind issues
|
2010-07-06 11:51:47 -04:00 |
|
Erik Fonnesbeck
|
15409667f7
|
Add per-rule NAT reflection override.
|
2010-07-05 19:31:14 -06:00 |
|
Scott Ullrich
|
fc4d562bd3
|
Adding back --rebind-localhost-ok now that dnsmasq version is bumped.
|
2010-07-02 11:11:32 -04:00 |
|
Scott Ullrich
|
d39a0970eb
|
Do not include --rebind-localhost-ok it appears to not be in our version. Will re-add it once the binary is in place
|
2010-07-01 23:20:13 -04:00 |
|
Erik Fonnesbeck
|
d999ba6c3f
|
This code returned the size in kilobytes, while the part usually used returns megabytes.
|
2010-07-01 19:13:09 -06:00 |
|
Scott Ullrich
|
cc89c9e5b0
|
^ Potential
|
2010-07-01 17:35:06 -04:00 |
|
Scott Ullrich
|
6266cf9949
|
Binding -> Rebinding
|
2010-07-01 17:25:51 -04:00 |
|
Scott Ullrich
|
1ba06f4465
|
Comment what we are doing here and add the ticket #.
|
2010-07-01 17:25:17 -04:00 |
|
Scott Ullrich
|
ce46b5da40
|
More dns-rebind checks. Ticket #708
|
2010-07-01 17:12:56 -04:00 |
|
Scott Ullrich
|
88809d25da
|
Adding --rebind-localhost-ok Suggested-by: BillM
|
2010-07-01 16:48:13 -04:00 |
|
Scott Ullrich
|
5ead2472de
|
Do not allow dns rebinding
|
2010-07-01 15:15:01 -04:00 |
|
jim-p
|
5d8cd81abd
|
Reorg this test a little, and make sure we only add client-to-client for remote access types.
|
2010-06-30 11:07:50 -04:00 |
|
jim-p
|
29293dce60
|
Give users with ssh access a real shell, but make sure that admin still gets /etc/rc.initial
|
2010-06-29 16:51:25 -04:00 |
|
jim-p
|
77f7e3bf50
|
Set a skeleton directory for pw
|
2010-06-29 16:29:57 -04:00 |
|