Commit Graph

296 Commits (0e4bf6fda81ee47024e212fada5927eb2c0c7c4d)

Author SHA1 Message Date
Aleksander Machniak 9858c2a294 Merge branch 'master' into dev-elastic 8 years ago
ElpyDE 73db885647 Virtualmin driver for password plugin now uses virtualmin to ask for the domain 8 years ago
Aleksander Machniak 89987ee1e0 Password: Fix security issue in virtualmin and sasl drivers 8 years ago
Aleksander Machniak 757ba8b81a Fix typo 8 years ago
Torkel Bjørnson-Langen 278b46a99d password plugin: better error message on constraint violation (#5727)
If the password policy on the ldap server is violated when changing
password, report error as "constraint violation" instead of the
misleading "connection error".

Only tested with OpenLDAP (v2.4).
8 years ago
Aleksander Machniak 01656221a4 Update localization 8 years ago
Torkel Bjørnson-Langen 3bbe218b83 Password plugin: Added missing default values (#5726)
* Added correct default values for password plugin (ldap backends only)
* Sync default values in config.inc.php.dist with code.
8 years ago
Aleksander Machniak 6ba41836b6 Revert "extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)"
This reverts commit 938dd4670b.
8 years ago
Kay Marquardt 938dd4670b extend plugin password to avoid sudo (use ssh instead calling chpasswd) (#5654)
Use proc_open() instead of popen() to catch error messages from called wrapper.
Create new wrapper chpass-wrapper-expect.py
8 years ago
ka7 9a35768c26 spelling fixes (#5690) 8 years ago
Aleksander Machniak 8e6eb9fa72 Define 'save' class for password form button 8 years ago
Aleksander Machniak 81f67a4de2 Don't use each() deprecated in PHP 7.2 8 years ago
Aleksander Machniak 692cb9c63b Update localization 8 years ago
Aleksander Machniak be49c2e1cd Code improvements, replace exception thrown with rcube::raise_error() 8 years ago
Maikel Linke bd5eaf98aa Handle null or non-JSON result of cPanel UAPI
More unit testing. More documentation.
8 years ago
Maikel Linke dd29ca1ee8 Correct decoding of JSON response
The old version assumed `json_decode` would return an associative array.
While it can do so if an extra option is specified, the default
behaviour is to return an object. Therefore, a successful password
change resulted in an error while parsing the response.

The new code is accessing the response as object instead. The method
is now covered by a unit test.
8 years ago
Aleksander Machniak f351b48771 Update changelog, CS fixes 8 years ago
Maikel adbc9b1889 Add cPanel Webmail driver (#5549)
This driver does not use an admin account. It uses the user's account to
authenticate at the Webmail API. It uses the recommended UAPI and does
not rely on third-party classes.
8 years ago
Aleksander Machniak 8fc488afa0 Parse error and CS fixes after PR merge 8 years ago
Paolo Asperti 815b79df7f Added replacement variables support in password_pop_host (#5539)
Use rcube_utils::parse_host() on a hostname
8 years ago
Aleksander Machniak e240e5f8dd CS fixes and update changelog 8 years ago
KaloNK d41db75d82 Do not store passwords on disk - use proc_open instead of popen (#5531) 8 years ago
JohnDoh dd714b33a8 replace old trac links (#5514) 8 years ago
Raoul Bhatia c5a16e72d7 password: Add missing quote in password_ldap_ppolicy_uri in config.inc.php.dist (#5507)
This was introduced in 5322e91825
8 years ago
Aleksander Machniak d59bf988e3 Fix style of Save button in password form (larry) 8 years ago
Aleksander Machniak 391d0d2039 Remove "@version @package_version@" 8 years ago
Aleksander Machniak 33addff305 assword: Added possibility to nicely handle password epiration from other plugins (#5468)
Squashed commit of the following:

commit 41283ecab18321201c3adfef8e964e2aa0dc2032
Author: Aleksander Machniak <alec@alec.pl>
Date:   Sat Oct 15 08:37:31 2016 +0200

    CS fixes after PR merge, renamed session variable

commit b4440a0c4d15c194619c003683ff0d36787f82a8
Merge: cf9f0d8 5dee181
Author: Aleksander Machniak <alec@alec.pl>
Date:   Sat Oct 15 08:26:04 2016 +0200

    Merge branch 'master' of https://github.com/ZiBiS/roundcubemail into ZiBiS-master

commit 5dee1812e7
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Thu Oct 13 14:20:14 2016 +0200

    passing by session

commit 6ccb7e7d1d
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Thu Oct 13 11:45:43 2016 +0200

    formatted passwdexpdatetime should be set in session data

commit a43f30fdfc
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Thu Oct 13 11:10:06 2016 +0200

    _passwdexpwarning removed and expdatetime object is stored in session

commit 62ef852a11
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Thu Oct 13 10:24:39 2016 +0200

    String concatenation is removed and expdatetime is passed via session
    data.

commit 2aea3a4e85
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Wed Oct 12 10:20:58 2016 +0200

    Removing ppolicy plugin from my repository.

commit 8848c944ab
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Tue Oct 11 11:32:37 2016 +0200

    little correction of variables names

commit 5266c89da9
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Tue Oct 11 11:14:17 2016 +0200

    little corrections

commit c665b5c607
Author: Zbigniew Szmyd <zbigniew.szmyd@linseco.pl>
Date:   Tue Oct 11 10:31:05 2016 +0200

    A plugin to check LDAP password for expiration
8 years ago
Aleksander Machniak affec47eab CS fixes, updated changelog 8 years ago
Aleksander Machniak 7f4ab8c14a Merge pull request #5364 from ZiBiS/master
Password: LDAP PPolicy driver
8 years ago
Zbigniew Szmyd fa533a4a01 Revert "Correction to work good with the Net_LDAP2 2.2.0"
This reverts commit acbc67ea1c.
8 years ago
Zbigniew Szmyd 06956572ec Change parameters names to the standard. 8 years ago
Zbigniew Szmyd 7254a89e7f get log_dir from config 8 years ago
Zbigniew Szmyd c22d4bc642 The correction of the script path and log_dir from the rc
config.
8 years ago
Aleksander Machniak 9e129383a1 Improve randomness of password salts and random hashes (#5266) 8 years ago
Aleksander Machniak e9d70648dd Fix CS and obvious mistakes, update changelog after PR merge 8 years ago
Aleksander Machniak 4e26cd7691 Merge branch 'master' of https://github.com/NETLINK/roundcubemail into NETLINK-master 8 years ago
Zbigniew Szmyd 191396db17 The error log is redirected to logs/ldap_ppolicy.err 8 years ago
Zbigniew Szmyd 0c093b0b36 Added the missing changes 8 years ago
Zbigniew Szmyd 0efb682d40 New constant PASSWORD_IN_HISTORY added for ldap_ppolicy plugin. 8 years ago
Aleksander Machniak b751f8f20f Move password_dovecotpw_with_method close to other dovecot related options 8 years ago
Thomas Bruederli 4e3442877d Updated localizations from Transifex 8 years ago
Michał Wojciechowski cde1fbde0c Fix typos 8 years ago
Aleksander Machniak 796bb4ccbb Update localization, add Enigma plugin localizations 9 years ago
Julian Matz 7ed0d3308b Update cpanel.php
Call $rcmail->config->get() only once per option by assigning variable inside the IF statement.
9 years ago
Aleksander Machniak ab6fdfa8bc Fix PHP warning when password_hosts is set, but is not an array (#5260) 9 years ago
Julian Matz 8042955927 Update cpanel.php 9 years ago
Julian Matz e34e267e59 Update cpanel.php
Changed code style and indentation.
9 years ago
Julian Matz 6651a6cab0 Update cpanel.php
Add support for hash auth (cPanel Remote Access Key) and call the $xmlapi->listaccts() method to retrieve the cPanel account user that owns the domain (required for cPanel reseller accounts).
9 years ago
Julian Matz 16d5dcbaa4 Update config.inc.php.dist
Add support for cPanel hash auth, using a Remote Access Key (choice between hash auth and plain password auth).
9 years ago
Julian Matz a4c6aec76a Update config.inc.php.dist
Add support for cPanel remote access hash (choice between hash auth and plain password auth).
9 years ago
Oliver Ney 5f2df36879 Fix ldap connection use after release in password plugin 9 years ago
Aleksander Machniak aba88576ef Update localizations 9 years ago
Zbigniew Szmyd 0b07f37bea LDAP password policy driver files 9 years ago
Zbigniew Szmyd 5322e91825 LDAP password driver for password policy 9 years ago
Zbigniew Szmyd acbc67ea1c Correction to work good with the Net_LDAP2 2.2.0 9 years ago
Aleksander Machniak 8ef598b883 Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
9 years ago
Thomas Bruederli e257b830a1 Synchronize localizations from Transifex 9 years ago
Aleksander Machniak 8f8beafd56 Use .get_label() consistently (instead of .gettext()) 9 years ago
hsz ed4f659a76 Fixed dovecot and samba encryption - (invalid variables names) 9 years ago
Aleksander Machniak b922995297 CS fixes 9 years ago
Bram Matthys c10f97740a Add $config['password_crypt_rounds']: this specifies the number of rounds
to be used for the sha256 and sha512 crypt hashing algorithms.
9 years ago
Aleksander Machniak 39813e961a Show error message from CPanel API on password change failure (#1490144) 9 years ago
Aleksander Machniak 252cc4c4ac Password: Allow temporarily disabling the plugin functionality with a notice 9 years ago
Aleksander Machniak 8b25622c75 Describe difference between dovecotpw and doveadm-pw (#1490423) 10 years ago
Aleksander Machniak 3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
10 years ago
Aleksander Machniak 1c8f845637 Add notes about sudo setup (#1490203) 10 years ago
Aleksander Machniak e6c1e0c638 Fix vpopmaild driver of password plugin 10 years ago
Thomas Bruederli e2fb340289 Remove obsolete mt_srand() calls 10 years ago
Aleksander Machniak 1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 10 years ago
Aleksander Machniak b59b72cc30 Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 10 years ago
Thomas Bruederli 36147bd6df Update localizations from Transifex 10 years ago
Aleksander Machniak 7c96646de0 Fix security issue in DBMail driver of password plugin (#1490261) 10 years ago
Thomas Bruederli fbb86218d0 Synchronized localizations from Transifex 10 years ago
Aleksander Machniak d7cd5ddb86 Add missing composer.json files (skipped because of .gitignore) 10 years ago
Aleksander Machniak ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
10 years ago
Aleksander Machniak 72b117feb1 Use consistent license identifiers, remove redundant package.xml files 10 years ago
Thomas Bruederli f652e36b2b Force-pull translations from Transifex 10 years ago
Thomas Bruederli 01bc27536a Updated localizations from Transifex 10 years ago
Aleksander Machniak 5010941c43 Update password driver API description 10 years ago
Aleksander Machniak c8d082a83e Fix syntax error in plesk driver 10 years ago
Aleksander Machniak d26e94ae94 Small CS fixes after PR merge 10 years ago
Lorenzo Perone 84296e1b93 fix indent to match style in ldap.php (tabs to spaces) 10 years ago
Lorenzo Perone 3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
10 years ago
Aleksander Machniak 0ea079d604 dirname(__FILE__) -> __DIR__ 10 years ago
Aleksander Machniak 78bee8b8b6 Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) 10 years ago
xzaara 54462b0f68 Update password.php
Semicolons instead of colons in  switch statement.
10 years ago
Aleksander Machniak d1c8d7fc25 Support hashing algorithms without mhash() and even hash() extension (#1490076) 10 years ago
Aleksander Machniak 9dd327b400 Remove new_link argument usage, we don't need it anymore 10 years ago
Aleksander Machniak 4baf96a4ca Added license headers to driver files, CS fixes 10 years ago
Cyrill von Wattenwyl 7dc269029d removed unwanted file 10 years ago
Cyrill von Wattenwyl 141d615f39 Fixed merge conflicts 10 years ago
Cyrill von Wattenwyl 11a40dd1fe Merge branch 'master' of https://github.com/roundcube/roundcubemail
Conflicts:
	plugins/password/config.inc.php.dist
10 years ago
Thomas Bruederli 812f37c5d1 Synchronized localizations with Transifex 10 years ago
Aleksander Machniak 1299c6a231 Update translations 10 years ago
Aleksander Machniak 9d2550502a CS fixes after PR merge 11 years ago
Mohammad Anwari 1599665651 New gearman driver for password plugin 11 years ago
Aleksander Machniak 1a3132366e After PR merge code cleanup 11 years ago
simonp 1c5fdd674e Show password rules before committing new password (#1488285) 11 years ago
Aleksander Machniak 7706df99f0 Allow anonymous LDAP searches 11 years ago
Aleksander Machniak 90ab9f2847 Fix loading localization 11 years ago