Oliver Ney
5f2df36879
Fix ldap connection use after release in password plugin
9 years ago
Aleksander Machniak
8ef598b883
Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] ( #1490643 )
...
Unify the C program code with the one used by other drivers.
9 years ago
Aleksander Machniak
39813e961a
Show error message from CPanel API on password change failure ( #1490144 )
9 years ago
Aleksander Machniak
3cc6ec573d
Make password encryption algorithms available for all drivers ( #1490134 )
...
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
10 years ago
Aleksander Machniak
e6c1e0c638
Fix vpopmaild driver of password plugin
10 years ago
Thomas Bruederli
e2fb340289
Remove obsolete mt_srand() calls
10 years ago
Aleksander Machniak
1d09ee0ce6
Added 'kpasswd' driver by Peter Allgeyer
10 years ago
Aleksander Machniak
b59b72cc30
Fix "Non-static method PEAR::isError() should not be called statically" errors ( #1490281 )
10 years ago
Aleksander Machniak
7c96646de0
Fix security issue in DBMail driver of password plugin ( #1490261 )
10 years ago
Aleksander Machniak
ef29ac4339
Fix generation of Blowfish-based password hashes ( #1490184 )
...
Added password_blowfish_cost config option.
10 years ago
Aleksander Machniak
c8d082a83e
Fix syntax error in plesk driver
10 years ago
Aleksander Machniak
d26e94ae94
Small CS fixes after PR merge
10 years ago
Lorenzo Perone
84296e1b93
fix indent to match style in ldap.php (tabs to spaces)
10 years ago
Lorenzo Perone
3e3fcd4d27
Password Plugin / LDAP Driver:
...
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
10 years ago
Aleksander Machniak
78bee8b8b6
Fix regression in SHAA password generation in ldap driver of password plugin ( #1490094 )
10 years ago
Aleksander Machniak
d1c8d7fc25
Support hashing algorithms without mhash() and even hash() extension ( #1490076 )
10 years ago
Aleksander Machniak
9dd327b400
Remove new_link argument usage, we don't need it anymore
10 years ago
Aleksander Machniak
4baf96a4ca
Added license headers to driver files, CS fixes
10 years ago
Cyrill von Wattenwyl
11a40dd1fe
Merge branch 'master' of https://github.com/roundcube/roundcubemail
...
Conflicts:
plugins/password/config.inc.php.dist
10 years ago
Aleksander Machniak
9d2550502a
CS fixes after PR merge
11 years ago
Mohammad Anwari
1599665651
New gearman driver for password plugin
11 years ago
Aleksander Machniak
7706df99f0
Allow anonymous LDAP searches
11 years ago
simonp
8d3dab34ec
Add timeout for password-driver vpopmaild
11 years ago
Cyrill von Wattenwyl
187fd666aa
fixed typos and added section in README
11 years ago
Cyrill von Wattenwyl
12967c776c
Added Plesk-Driver to Password-Plugin
...
This Driver allows to change Passwords via Plesk RPC-API
11 years ago
Aleksander Machniak
18a9b4f2f1
Fix dbmail driver (hints from https://github.com/roundcube/roundcubemail/pull/169 )
11 years ago
Aleksander Machniak
524e382669
Merge pull request #168 from tillkruess/master
...
another security fix for domainfactory password plugin driver
11 years ago
Till Krüss
aba993da6a
prevent unwanted code execution via CURLOPT_POSTFIELDS (again)
11 years ago
Aleksander Machniak
e7881f058a
Merge pull request #166 from tillkruess/master
...
security fix for domainfactory password plugin driver
11 years ago
Till Krüss
334475a50b
prevent unwanted code execution via CURLOPT_POSTFIELDS
11 years ago
Thomas Bruederli
774deaded1
Don't EVER log passwords
11 years ago
Aleksander Machniak
393c868e8e
Substitute variables in 'password_ldap_search_base' value
11 years ago
Till Krüss
910a3581be
check if password was changed successfully, before looking for error messages
11 years ago
Till Krüss
0f4c9b850f
check if the new password matched the requirements; code cleanup
11 years ago
Aleksander Machniak
99de1fdd26
In password ldap_simple driver: added LDAP debug, added password_ldap_bind
...
hook, so other plugins can provide user DN for password change
11 years ago
Aleksander Machniak
19884ec5d2
Code improvements, remove code duplication
11 years ago
Aleksander Machniak
6776d31cee
Add new password encodage ('ad') in ldap password drivers ( #1489349 )
11 years ago
Aleksander Machniak
0b17aae0cd
Fix setting domain in virtualmin password driver ( #1489332 )
11 years ago
Aleksander Machniak
1f22878608
In password virtualmin driver removed support for username in format based on user alias ( #1489332 )
11 years ago
Aleksander Machniak
bcedf05d19
s/$rcmail_config/$config/ also for plugins configuration
11 years ago
Aleksander Machniak
2193f6a130
Avoid unused local variables
12 years ago
Aleksander Machniak
ce89ecd542
Fix various PHP code bugs found using static analysis ( #1489086 )
12 years ago
Aleksander Machniak
c027ba7709
Fix bugs caught by static analysis
12 years ago
Aleksander Machniak
30ff85c5a1
Added new cPanel driver - fixes localization related issues ( #1487015 )
12 years ago
Aleksander Machniak
e0d4662523
Use rcube_utils::parse_host() for host config in smb driver ( #1488784 )
12 years ago
Aleksander Machniak
61be822d62
Remove deprecated functions (from bc.php file) usage in plugins
12 years ago
Mike Hennessy
a622b7d580
Update plugins/password/drivers/pam.php
...
The Ubuntu package php5-auth-pam renames the PECL PAM extension to pam_auth, so this file should check for both.
12 years ago
Aleksander Machniak
d6938bd1ea
CS fixes, mostly tabs to spaces conversion
12 years ago
Thomas Bruederli
e2e2e8f379
Use new RCUBE_PLUGINS_DIR constant
12 years ago
defa
921408eba6
Merge https://github.com/roundcube/roundcubemail into crypt_hash_branch
12 years ago