Commit Graph

12851 Commits

Author SHA1 Message Date
Phil Davis
eef67fd5ef Redmine #5294 Do not delete a system user
This code checks if the user has somehow posted a user deletion for a user that has "system" scope. If so, then the delete iscnot done and an input error is displayed.
Note that in normal use the user manager page does not display a delete button for "system" users, so normally this does not happen - only if the user manually messes with the $POST variables.
2015-10-11 14:02:18 +05:45
Chris Buechler
7da63a641c Merge pull request #1953 from phil-davis/patch-10 2015-10-07 21:36:56 -05:00
Chris Buechler
0aa7de0978 correct htmlentities unintentionally removed by earlier commit 2015-10-07 21:34:30 -05:00
Phil Davis
cbf81857d9 Wording of alias_info_popup tip
I noticed this while comparing alias popup behavior between 2.2.5-DEVELOPMENT and 2.3
Might as well fix the grammar here for 2.2.5
This tip does not exist in 2.3 because the popup works more nicely there and so this text is not needed.
Therefore this change does not need to be ported forward to master.
2015-10-08 07:36:50 +05:45
Matt Smith
5bf321b6dd Add support for an IPv6 pool for mobile clients. 2015-10-07 14:15:54 -05:00
jim-p
b07f827a90 Don't enforce the use of only IPv4 or IPv6 when using IKEv2 since it works fine with IKEv2 2015-10-07 12:14:17 -04:00
Chris Buechler
46545f30a0 Specify %any where identifier is "any", so the note on these pages
actually works.
2015-10-01 13:19:42 -05:00
Chris Buechler
70fc7a158f Fix up IKE auto mode 2015-09-29 19:48:33 -05:00
Chris Buechler
72b4057b8d Correctly show v1/v2/auto on vpn_ipsec.php 2015-09-29 19:40:26 -05:00
Chris Buechler
d6bc309116 Bring this back, I'll fix issues afterwards. Revert "Remove "auto", it's just a synonym for IKEv2. Ticket #4873"
This reverts commit 47f802694a.
2015-09-29 19:24:20 -05:00
Chris Buechler
b98a584a7a Do a service reload of dyndns when changing gateways in case something has
changed. Ticket #5214
2015-09-29 17:29:41 -05:00
jim-p
635ee4eb05 Ensure this only contains a partial name, not a path, before attempting to craft a full name and read the file. Fixes #5203. 2015-09-28 13:46:58 -04:00
jim-p
0b74438e96 Reset the value of a package field before this test in case it has no default. Fixes #5199 2015-09-24 10:01:41 -04:00
Phil Davis
098f394329 Redmine #5196 Remove incorrect text about DNS servers - RELENG_2_2
The correct text is already displayed under the DNS server boxes at line 892.
This should also be done to master once the conversion of services_dhcp.php to bootstrap is stable.
2015-09-24 12:48:20 +05:45
Phil Davis
f4bd25a7c6 Redmine #4568 Preserve MLPPP settings when saving interface settings RELENG_2_2 Vagain
with errors fixed.
Supersedes https://github.com/pfsense/pfsense/pull/1781
2015-09-22 07:17:56 +05:45
Renato Botelho
6179b021f3 Merge pull request #1907 from doktornotor/patch-5 2015-09-21 16:12:33 -03:00
Renato Botelho
8bce0031f8 Merge pull request #1921 from doktornotor/patch-20 2015-09-21 13:49:57 -03:00
Renato Botelho
6298f87a24 Merge pull request #1923 from phil-davis/patch-5 2015-09-21 13:39:48 -03:00
doktornotor
1643073765 fix interface assignment menus running off VGA screen
Remove leftover :
2015-09-21 17:18:44 +02:00
doktornotor
2cefc6b17a fix interface assignment menus running off VGA screen 2015-09-21 16:54:41 +02:00
Phil Davis
29736edaf6 Redmine #5162 do not allow alias rename to an existing name - RELENG_2_2 2015-09-21 13:10:14 +05:45
doktornotor
2f0caa4319 show openvpn interfaces while reassigning the interfaces for a restored config backup - RELENG_2_2 2015-09-20 15:26:54 +02:00
doktornotor
9fbcedee3b pkg_edit.php - fix issue where default value was not being populated for newly added fields
Backport from PR #1906 / PR #1787 for RELENG_2_2. 

Check if the actual $fieldname element is present in the $a_pkg[$id] array before trying to assign its value. Do same with default_value. Fixes issue where default value was not being populated for newly added fields.
2015-09-19 20:48:54 +02:00
Renato Botelho
f70b256ed5 Merge pull request #1842 from phil-davis/GW-Widget-Monitor-IP-2-2 2015-09-18 16:27:09 -03:00
Renato Botelho
3155e96966 Merge pull request #1888 from phil-davis/TGdesc22 2015-09-17 08:13:27 -03:00
Chris Buechler
b1c3e99959 allow port ranges for natport. Ticket #5156 2015-09-17 01:15:13 -05:00
Chris Buechler
449b0fe533 Merge pull request #1811 from phil-davis/patch-10 2015-09-16 21:43:34 -05:00
jim-p
2c42910ad7 Work around a chicken-and-egg problem in user syncing. See #5152
See also: commit:5372d26d9d25d751d16865ed9d46869d3b0ec5e1
2015-09-16 15:47:42 -04:00
jim-p
9fb19cab96 Misc encoding/display issues in the Load Balancer code 2015-09-08 15:15:58 -04:00
jim-p
5a33a6fb8a Encode server name in OpenVPN widget 2015-09-08 15:11:40 -04:00
Phil Davis
43bcb7a802 Add description as a display option on Traffic Graph RELENG_2_2
Backport from master
2015-09-08 21:44:01 +05:45
jim-p
64c50ecd23 Encode auth server name before display. 2015-09-04 10:10:32 -04:00
jim-p
38f147d667 Encode alias description details before attempting to display them. 2015-09-01 12:17:37 -04:00
jim-p
1782b45d4b Encode the rule description before displaying back to the user in an error when attempting to delete an in-use alias. 2015-09-01 12:17:02 -04:00
jim-p
2061542951 Encode OpenVPN descriptions before display on OpenVPN status 2015-08-27 11:03:10 -04:00
jim-p
d4ff79ed0e Encode the OpenVPN server description before display on OpenVPN status 2015-08-27 10:38:44 -04:00
jim-p
5bf478ac2e Ensure the current RRD graph category is encoded before display 2015-08-27 09:29:40 -04:00
jim-p
609d2870e5 Fix titles in status.php, filename can't have a slash. 2015-08-20 10:02:15 -04:00
jim-p
1b70f82ed8 A few misc updates to status.php:
* Include "ipsec statusall" output
* Include the last 100 lines of the IPsec log
* Increase system log to 500 lines
* Fix captive portal rule display to include the zone name not ID number
2015-08-20 09:50:37 -04:00
jim-p
c617ffe7a4 Fix source address selection on Test Port to handle VIPs properly. 2015-08-18 14:12:54 -04:00
jim-p
1ce2e5d253 Fix a potential XSS in voucher testing. 2015-08-18 09:35:56 -04:00
jim-p
f6f7f1c244 Add support for LDAP RFC2307 style group membership. Implements #4923
To activate, check the box for RFC2307 in the LDAP server settings and fill in the group object class (typically posixGroup).
2015-08-13 14:57:45 -04:00
jim-p
9a0c4cd22f Provide an LDAP server timeout field. Default to 25 seconds. Part of ticket #3383
Previous default was ~1m20sec.
2015-08-13 12:54:31 -04:00
jim-p
709c2f99f1 Fix GUI auth from RADIUS to grab group names from the Class attribute. Implements #935
The RADIUS server must populate the Class attribute with a string, semicolon-separated, of user groups. Similar to LDAP, local groups must exist with matching names, and privileges are determined by the local matching groups.
2015-08-12 12:10:46 -04:00
Phil Davis
5685a74102 Compare package version strings with compare_pkg_versions
This fixes redmine #4924
2015-08-09 13:42:43 +05:45
Chris Buechler
fc3e3bdbe0 remove more old, unused platform stuff 2015-07-30 00:49:21 -05:00
Chris Buechler
fcf8ac0ab7 Fix killing of individual states for IPv6. Ticket #4906 2015-07-30 00:37:48 -05:00
Chris Buechler
ffb3d9d53a fix whitespace 2015-07-30 00:28:43 -05:00
Chris Buechler
38e7c09304 Use the appropriate source and dest IPs for all state types. Ticket #4907 2015-07-30 00:16:15 -05:00
jim-p
66f278b4c9 Add "sockstat" output to status.php 2015-07-29 11:40:25 -04:00