Commit Graph

46 Commits

Author SHA1 Message Date
xbipin
6db7ee23db Improving aesthetics.
Make title color more consistent with other pages.
Improving aesthetics.
2015-01-13 13:01:07 -02:00
Phil Davis
6317d31dfc Fix lineup of copyright lines
and module names and other bits of formatting and typos in header
comment sections.
2015-01-01 10:13:14 -02:00
Renato Botelho
d961e7e33e Welcome 2015 2014-12-31 16:22:27 -02:00
Jim Thompson
29aef6c45b Change copyright statement to reflect reality 2014-11-10 23:36:14 -06:00
ayvis
8cd558b61b xhtml Compliance
replaced <br>, <br/> and </br> with <br />
2014-03-14 21:24:03 +01:00
Renato Botelho
e41ec5848f Improve checks for params 'id', 'dup' and other similar ones to make sure they are numeric integer, also, pass them through htmlspecialchars() before print 2014-03-12 11:42:49 -03:00
Ermal Luçi
b145557112 Merge pull request #659 from mss/extended-query-example-work
Improve LDAP DN examples
2014-02-19 08:57:45 +01:00
jim-p
afdf29d3a4 Make the RADIUS settings respect the description of the timeout field. If the timeout value is left blank, use 5 seconds, don't print an error. 2013-10-22 10:53:02 -04:00
Renato Botelho
1e9b461124 Remove call-time pass by reference for do_input_validation, helps ticket #2565 2013-09-12 11:28:14 -03:00
jim-p
a5cd1c5a42 Add LDAP server options to control UTF8-encoding of parameters. Fixes #2227. While I'm here, add a checkbox to prevent the stripping of @ from the LDAP username if the user wants the full name transmitted. 2013-07-17 10:13:08 -04:00
jim-p
9d79318707 Add a note about the LDAP hostname matching the server cert's CN. 2013-06-27 14:34:54 -04:00
Malte S. Stretz
d345f59689 Don't gettext() the example strings.
They must not be translated.
2013-05-29 17:58:34 +02:00
Malte S. Stretz
04cdae5443 Improve Authentication Containers examples.
* The first example was wrong (cf. ldap_backed() in auth.inc which
  looks for a DC= part to determine a full DN.
* The second example now show the realtive DNs.
2013-05-29 17:56:24 +02:00
Malte S. Stretz
d57725aac5 Fix LDAP Extended Query example.
The old one was not valid LDAP filter syntax.
2013-05-29 17:42:11 +02:00
Colin Fleming
0f3a8925b3 Tidy up "system_authservers.php" XHTML
Add CDATA sections to SCRIPT tags
Update HTML boolean operators
Close INPUT tags
Move TFOOT between THEAD and TBODY, this is a "quirk" of HTML
Deprecate the ampersand in ANCHOR tags
Add missing closing HTML tag
2013-04-08 20:25:52 +01:00
jim-p
eed8df6f61 Only apply this test for radius servers. 2013-02-16 13:29:50 -05:00
jim-p
bddd2be844 Add a knob in the GUI to set the RADIUS authentication timeout. Previous default was 3s, new is 5s. When using two-factor auth via external (e.g. phone), this needs to be set much higher, 60-120. 2013-02-13 15:55:55 -05:00
Ermal
0aee7a7696 Correct Select button when no ca_ref is defined 2012-11-14 19:59:40 +00:00
bcyrill
5b42a459e6 Make tables sortable 2012-09-24 21:38:08 +02:00
jim-p
d71fc5d312 More shortcuts 2012-08-14 14:35:49 -04:00
Ermal
a8db73919c Resolves #2018. Add an id to the html object to make javascript work 2011-11-22 13:29:26 +00:00
jim-p
8f09682259 Don't run ldap_urlchange on page load if there is a custom port, otherwise it appears to ignore a custom LDAP port even when it's correct in the config. 2011-10-24 14:21:07 -04:00
namezero111111
c7073ebf51 Added web interface capability to make the LDAP search more specific in order to filter for group membership for example. 2011-08-28 05:43:39 +03:00
Ermal
fe2031ab18 Ticket #1052. Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this. 2011-07-15 13:10:40 +00:00
Warren Baker
beaab62274 More text consistency. 2011-06-28 13:10:24 +02:00
Scott Ullrich
dd5bf424c1 Fix XSS issues 2010-11-12 11:36:20 -05:00
jim-p
64ce9d7202 Do not require LDAP search base DN. Requiring this can prevent some valid LDAP configurations from properly authenticating. (See GDD-550841). 2010-10-27 13:11:16 -04:00
Renato Botelho
ee9933b6e2 Use <?php instead of the short form 2010-08-12 11:15:26 -03:00
Renato Botelho
ea53e38ff1 gettext fixes 2010-08-12 09:44:02 -03:00
jim-p
9db6993f9a Fix deletion of authentication servers. Fixes #600. 2010-05-18 11:06:23 -04:00
Renato Botelho
6d78607d4c fix indent 2010-04-28 14:03:01 -03:00
Renato Botelho
79501c4b68 Implement gettext() 2010-04-28 14:00:28 -03:00
Renato Botelho
257705ca3a Implement gettext() 2010-04-28 13:51:22 -03:00
Ermal
7a938f1b10 Ticket #389. Correctly make the ldap object picker work and handle various errors. 2010-04-27 14:55:56 +00:00
Ermal Lui
be934aaddb Make this work as it is supposed. 2010-03-09 17:22:31 +00:00
Ermal Lui
3de9447703 Do not allow changing the name of the auth server. Resolves #399. 2010-03-05 18:16:44 +00:00
Ermal Lui
6306b5ddc7 Overhaul the user login system to use the Servers tab as its base.
Fix quite a few problems down the way.
2010-03-03 16:17:35 +00:00
Ermal Lui
acee624f83 Do not allow same names on different auth servers. While here correct radius default ports. 2010-03-02 20:27:05 +00:00
Ermal Lui
8a6b0fbeb0 Add copyrights of myself. 2010-03-02 17:23:27 +00:00
Ermal Lui
c61e462626 Allow the GUI auth API to be used for doing authentication against authentication servers specified. Teach Openvpn to use this API. Allow openvpn to authenticate against multiple servers that can be selected on the server configuration page. 2010-03-02 17:07:06 +00:00
Ermal Lui
e8a58de43b Add support for authenticating users against server specified in the system->user manager->servers for openvpn. While there propperly fill the shared secret field for raidus in the servers page. 2010-02-24 23:58:51 +00:00
Scott Ullrich
1d333258dc Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on 2009-09-14 21:49:40 -04:00
Matthew Grooms
e30001cf19 Cleanup the tab format of the system user/group/server management pages.
The edges were square instead of rounded like most pfSense pages. Also
make sure tabs and cancel buttons are present in the add privilege and
add certificate pages.
2008-09-09 06:55:37 +00:00
Matthew Grooms
d799787e49 Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.

This commit also splits out the certificate management components into a
new system menu item.
2008-08-26 04:48:04 +00:00
Matthew Grooms
64cc39d3dd Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority
- Create internal certificate authority

Certificate Manager:
- List certificates
- Import existing certificate
- Create internal certificate using an internal CA
- Generate certificate signing request for external CAs
- Process certificate signing response from external CAs

Certificate revocation is not currently implemented. The user system will
also be extended to allow for user specific certificate management in a
follow-up commit.
2008-08-09 00:06:08 +00:00
Matthew Grooms
fbf672cbe9 Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.
2008-08-05 04:16:50 +00:00