Aleksander Machniak
8ef598b883
Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] ( #1490643 )
...
Unify the C program code with the one used by other drivers.
9 years ago
Thomas Bruederli
e257b830a1
Synchronize localizations from Transifex
9 years ago
Aleksander Machniak
8f8beafd56
Use .get_label() consistently (instead of .gettext())
9 years ago
hsz
ed4f659a76
Fixed dovecot and samba encryption - (invalid variables names)
9 years ago
Aleksander Machniak
b922995297
CS fixes
9 years ago
Bram Matthys
c10f97740a
Add $config['password_crypt_rounds']: this specifies the number of rounds
...
to be used for the sha256 and sha512 crypt hashing algorithms.
9 years ago
Aleksander Machniak
39813e961a
Show error message from CPanel API on password change failure ( #1490144 )
9 years ago
Aleksander Machniak
252cc4c4ac
Password: Allow temporarily disabling the plugin functionality with a notice
9 years ago
Aleksander Machniak
8b25622c75
Describe difference between dovecotpw and doveadm-pw ( #1490423 )
10 years ago
Aleksander Machniak
3cc6ec573d
Make password encryption algorithms available for all drivers ( #1490134 )
...
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
10 years ago
Aleksander Machniak
1c8f845637
Add notes about sudo setup ( #1490203 )
10 years ago
Aleksander Machniak
e6c1e0c638
Fix vpopmaild driver of password plugin
10 years ago
Thomas Bruederli
e2fb340289
Remove obsolete mt_srand() calls
10 years ago
Aleksander Machniak
1d09ee0ce6
Added 'kpasswd' driver by Peter Allgeyer
10 years ago
Aleksander Machniak
b59b72cc30
Fix "Non-static method PEAR::isError() should not be called statically" errors ( #1490281 )
10 years ago
Thomas Bruederli
36147bd6df
Update localizations from Transifex
10 years ago
Aleksander Machniak
7c96646de0
Fix security issue in DBMail driver of password plugin ( #1490261 )
10 years ago
Thomas Bruederli
fbb86218d0
Synchronized localizations from Transifex
10 years ago
Aleksander Machniak
d7cd5ddb86
Add missing composer.json files (skipped because of .gitignore)
10 years ago
Aleksander Machniak
ef29ac4339
Fix generation of Blowfish-based password hashes ( #1490184 )
...
Added password_blowfish_cost config option.
10 years ago
Aleksander Machniak
72b117feb1
Use consistent license identifiers, remove redundant package.xml files
10 years ago
Thomas Bruederli
f652e36b2b
Force-pull translations from Transifex
10 years ago
Thomas Bruederli
01bc27536a
Updated localizations from Transifex
10 years ago
Aleksander Machniak
5010941c43
Update password driver API description
10 years ago
Aleksander Machniak
c8d082a83e
Fix syntax error in plesk driver
10 years ago
Aleksander Machniak
d26e94ae94
Small CS fixes after PR merge
10 years ago
Lorenzo Perone
84296e1b93
fix indent to match style in ldap.php (tabs to spaces)
10 years ago
Lorenzo Perone
3e3fcd4d27
Password Plugin / LDAP Driver:
...
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
10 years ago
Aleksander Machniak
0ea079d604
dirname(__FILE__) -> __DIR__
10 years ago
Aleksander Machniak
78bee8b8b6
Fix regression in SHAA password generation in ldap driver of password plugin ( #1490094 )
10 years ago
xzaara
54462b0f68
Update password.php
...
Semicolons instead of colons in switch statement.
10 years ago
Aleksander Machniak
d1c8d7fc25
Support hashing algorithms without mhash() and even hash() extension ( #1490076 )
10 years ago
Aleksander Machniak
9dd327b400
Remove new_link argument usage, we don't need it anymore
10 years ago
Aleksander Machniak
4baf96a4ca
Added license headers to driver files, CS fixes
10 years ago
Cyrill von Wattenwyl
7dc269029d
removed unwanted file
10 years ago
Cyrill von Wattenwyl
141d615f39
Fixed merge conflicts
10 years ago
Cyrill von Wattenwyl
11a40dd1fe
Merge branch 'master' of https://github.com/roundcube/roundcubemail
...
Conflicts:
plugins/password/config.inc.php.dist
10 years ago
Thomas Bruederli
812f37c5d1
Synchronized localizations with Transifex
10 years ago
Aleksander Machniak
1299c6a231
Update translations
10 years ago
Aleksander Machniak
9d2550502a
CS fixes after PR merge
10 years ago
Mohammad Anwari
1599665651
New gearman driver for password plugin
10 years ago
Aleksander Machniak
1a3132366e
After PR merge code cleanup
11 years ago
simonp
1c5fdd674e
Show password rules before committing new password ( #1488285 )
11 years ago
Aleksander Machniak
7706df99f0
Allow anonymous LDAP searches
11 years ago
Aleksander Machniak
90ab9f2847
Fix loading localization
11 years ago
Aleksander Machniak
7e309b872f
Add title attribute to settings menu
11 years ago
Aleksander Machniak
abe381e3b0
Focus first input in password form on page load
11 years ago
Aleksander Machniak
4520fa0f38
Code cleanup and small fixes (after pull request merge)
11 years ago
simonp
12514266b9
Move login/hosts to seperate function
11 years ago
simonp
6f7042e582
Fix for login/hosts exceptions
11 years ago
simonp
9e9c03cb90
Moved functionality from password_first to password_init
11 years ago
simonp
e7ee70541f
Add option to force new users to change their password ( #1486884 )
11 years ago
simonp
8d3dab34ec
Add timeout for password-driver vpopmaild
11 years ago
Cyrill von Wattenwyl
187fd666aa
fixed typos and added section in README
11 years ago
Cyrill von Wattenwyl
12967c776c
Added Plesk-Driver to Password-Plugin
...
This Driver allows to change Passwords via Plesk RPC-API
11 years ago
Thomas Bruederli
b34d679075
Specify licenses in all javascript files and blocks to please LibreJS
11 years ago
Aleksander Machniak
9556f34d75
Load password.js only when needed
11 years ago
Aleksander Machniak
18a9b4f2f1
Fix dbmail driver (hints from https://github.com/roundcube/roundcubemail/pull/169 )
11 years ago
Aleksander Machniak
524e382669
Merge pull request #168 from tillkruess/master
...
another security fix for domainfactory password plugin driver
11 years ago
Till Krüss
aba993da6a
prevent unwanted code execution via CURLOPT_POSTFIELDS (again)
11 years ago
Aleksander Machniak
e7881f058a
Merge pull request #166 from tillkruess/master
...
security fix for domainfactory password plugin driver
11 years ago
Till Krüss
334475a50b
prevent unwanted code execution via CURLOPT_POSTFIELDS
11 years ago
Thomas Bruederli
774deaded1
Don't EVER log passwords
11 years ago
Thomas Bruederli
8404fe9e32
Updated localizations from Transifex
11 years ago
Aleksander Machniak
538e64c572
Fix Closure-compiler warnings, small code improvements
11 years ago
Thomas Bruederli
3b95e24fbb
Updated localizations from Transifex
11 years ago
Aleksander Machniak
393c868e8e
Substitute variables in 'password_ldap_search_base' value
11 years ago
Till Krüss
910a3581be
check if password was changed successfully, before looking for error messages
11 years ago
Till Krüss
0f4c9b850f
check if the new password matched the requirements; code cleanup
11 years ago
Aleksander Machniak
4136174517
Clean up translations once again, this time remove untranslated strings for all langs
11 years ago
Aleksander Machniak
9377edc497
More lceanup
11 years ago
Aleksander Machniak
3d9e683cda
Added plugin localizations
11 years ago
Thomas Bruederli
f93e0b3a14
Synchronized localization files from Transifex
11 years ago
Thomas Bruederli
cf46aefd9d
Make password plugin use the new 'settings_actions' hook to register its link in the settings navigation
11 years ago
Aleksander Machniak
99de1fdd26
In password ldap_simple driver: added LDAP debug, added password_ldap_bind
...
hook, so other plugins can provide user DN for password change
11 years ago
Aleksander Machniak
19884ec5d2
Code improvements, remove code duplication
11 years ago
Aleksander Machniak
6776d31cee
Add new password encodage ('ad') in ldap password drivers ( #1489349 )
11 years ago
Aleksander Machniak
0b17aae0cd
Fix setting domain in virtualmin password driver ( #1489332 )
11 years ago
Aleksander Machniak
1f22878608
In password virtualmin driver removed support for username in format based on user alias ( #1489332 )
11 years ago
Thomas Bruederli
eef9eb1146
Synchronized localization files from Transifex
11 years ago
Aleksander Machniak
bcedf05d19
s/$rcmail_config/$config/ also for plugins configuration
11 years ago
simonp
5b5651a095
Added README section for vpopmaild driver at the password-plugin
11 years ago
Thomas Bruederli
71b577ea7d
Added Luxembourgish localizations
11 years ago
Thomas Bruederli
0703bfecd0
Merged configuration refactoring from 'dev_config' branch back into master ( #1487311 )
12 years ago
Thomas Bruederli
a7e0897fde
Synchronized localization files with Transifex
12 years ago
Aleksander Machniak
a306996bc5
Change license to GPLv3+ also in README file
12 years ago
Thomas Bruederli
07c6c69eca
Make all bundled plugins the same license as Roundcube itself, which is GPLv3+
12 years ago
Aleksander Machniak
461a30d771
Merge config files ( #1487311 ).
...
Now we have defaults.inc.php and config.inc.php.
Renamed $rcmail_config to $config. Old naming and old files are supported
for backward compatibility.
12 years ago
Thomas Bruederli
3e78fc7fdf
Synced localizations from Transifex
12 years ago
Aleksander Machniak
2193f6a130
Avoid unused local variables
12 years ago
Aleksander Machniak
ce89ecd542
Fix various PHP code bugs found using static analysis ( #1489086 )
12 years ago
Aleksander Machniak
c027ba7709
Fix bugs caught by static analysis
12 years ago
Aleksander Machniak
28151b329b
Update changelog
12 years ago
Aleksander Machniak
f41ccebadd
Merge pull request #63 from Steffen185/patch-1
...
Save new password even if it has not changed (optional)
12 years ago
Thomas Bruederli
c8f2c0c5af
Synchronized localizations from Transifex
12 years ago
Steffen185
859a7a117a
Fixed wrong copy-paste
12 years ago
Steffen185
b343adf3cb
Use new config option "password_force_save"
12 years ago
Steffen185
6db9f84737
Added config option "password_force_save"
12 years ago
Aleksander Machniak
721ee561ed
Update changelog
12 years ago
Aleksander Machniak
30ff85c5a1
Added new cPanel driver - fixes localization related issues ( #1487015 )
12 years ago
Steffen185
6f7eafce18
Save new password even if it has not changed
...
I have recently changed the password scheme of my Dovecot/Postfix/Roundcube installation. New passwords are encrypted stronger than before. It is not possible to automatically update existing passwords (because the old encryption is not so bad that I can easily crack it). But I'd like to tell my users that they can upgrade to the new password scheme by simply submitting the "change password" form with their old password in all three input fields. Currently a minor optimization prevents this. I think this minor optimization should be removed.
12 years ago
Aleksander Machniak
e0d4662523
Use rcube_utils::parse_host() for host config in smb driver ( #1488784 )
12 years ago
Thomas Bruederli
4090870623
Localization updates from Transifex
12 years ago
Thomas Bruederli
aed581b6c4
Import all translations from Transifex
12 years ago
Thomas Bruederli
8e50ae9a6f
Extend copyright to 2013
12 years ago
Aleksander Machniak
b005927f91
Add basic tests for plugins
12 years ago
Aleksander Machniak
61be822d62
Remove deprecated functions (from bc.php file) usage in plugins
12 years ago
Thomas Bruederli
de2009ec2c
Pulled de_CH translations from Transifex (first test)
12 years ago
Thomas Bruederli
49437c123a
Add proper headers to localization template files
12 years ago
Thomas Bruederli
c942e4a2e9
Merge branch 'master' of github.com:roundcube/roundcubemail
12 years ago
Thomas Bruederli
aabeab1e4e
Updated localizations from launchpad
12 years ago
Mike Hennessy
a622b7d580
Update plugins/password/drivers/pam.php
...
The Ubuntu package php5-auth-pam renames the PECL PAM extension to pam_auth, so this file should check for both.
12 years ago
Aleksander Machniak
d6938bd1ea
CS fixes, mostly tabs to spaces conversion
12 years ago
Aleksander Machniak
789e5988aa
Clarify rcube::get_user_name() usage, add rcube::get_user_email()
12 years ago
Thomas Bruederli
e2e2e8f379
Use new RCUBE_PLUGINS_DIR constant
12 years ago
Thomas Bruederli
6199a72c8e
Updated localization files from launchpad
12 years ago
Aleksander Machniak
98128f13fc
Rename option password_supported_hosts to password_hosts, code cleanup
12 years ago
Aleksander Machniak
657864a29c
Merge pull request #42 from NETLINK/patch-1
...
Add option to define IMAP hosts that support password changes
12 years ago
Aleksander Machniak
3067458acb
Fix wrong (non-specific) error message on crypt or connection error ( #1488808 )
12 years ago
NETLINK
204e1e03e9
Update plugins/password/password.php
12 years ago
NETLINK
7978f872cb
Update plugins/password/password.php
...
Add logic for checking supported IMAP hosts
Make use of additional config option
'password_supported_hosts' (see config.inc.php.dist).
If current IMAP host is not in array of defined
hosts, exit and suppress Password option in Settings.
12 years ago
NETLINK
32395bde1a
Update plugins/password/config.inc.php.dist
...
Added config option to specify hosts that support password changing.
12 years ago
Thomas Bruederli
fa3a619315
Imported recent launchpad translations
12 years ago
defa
5ba07a429a
added sample configuration
12 years ago
defa
921408eba6
Merge https://github.com/roundcube/roundcubemail into crypt_hash_branch
12 years ago
Aleksander Machniak
145503a32d
Fix parse error in virtualmin driver ( #1488668 )
12 years ago
GDR\!
a0f006748f
Password plugin made compatible with modern Virtualmin
...
Added a new username format in Virtualmin driver,
which works for default Virtualmin settings where
username is user.postfix and domain is taken from
email address.
Example:
email - info@goodcoffee.com
login - info.goodcof
12 years ago
defa
5c603c4032
fixed the patch after some testing, works productive
12 years ago
defa
5e9b40a0d5
added more digest-support to crypt-function
12 years ago
Aleksander Machniak
de56ea1909
Merge branch 'pdo'
...
Conflicts:
CHANGELOG
12 years ago
Aleksander Machniak
ee2187e1b1
Fix errors after removing users.alias column ( #1488581 )
12 years ago
Thomas Bruederli
c41a86e5cc
Updated translations from launchpad
12 years ago
Aleksander Machniak
91f2271fac
Replace rcube_mdb2 with rcube_db
13 years ago
GDR\!
6ffe0beaa4
Password plugin made compatible with modern Virtualmin
...
Added a new username format in Virtualmin driver,
which works for default Virtualmin settings where
username is user.postfix and domain is taken from
email address.
Example:
email - info@goodcoffee.com
login - info.goodcof
13 years ago
vbenincasa
6c95b3e4ee
- Update the HTTPSocket class from 2.7 to 2.8 to avoid plugin problems when used with SSL (and when DirectAdmin uses the option "force_hostname" that requires a correct "host" header value).
13 years ago
thomascube
48e9c14ebd
Move plugins repository into roundcubemail root folder; svn:externals are not defined anymore
13 years ago
till
63a3dc5fde
moved plugins
15 years ago
alecpl
aaf8255d18
- Password: lv_LV localization added
15 years ago
alecpl
e576f25578
- Password: ca_ES localization added
15 years ago
alecpl
64608bf2ef
- Password: Make passwords encoding consistent with core, add 'password_charset' global option ( #1486473 )
15 years ago
alecpl
255d2362c5
- es_ES localization ( #1486482 )
15 years ago
yllar
33ea0c7ace
translations update
15 years ago
alecpl
a65bf3a14b
- Password: fix vpopmaild driver ( #1486478 )
15 years ago
yllar
f09ca31fb1
localization update
15 years ago
alecpl
1904fa7104
- Added XIMSS (Communigate) driver for Password plugin
15 years ago
alecpl
6fff3c8e02
- more css unification for boxes + toolbarmenu moved to common.css ( #1486198 )
15 years ago
alecpl
2aaa992cc1
- unified boxtitle css styles
15 years ago
alecpl
1bf9a86a8e
- Password: cPanel driver added
15 years ago
yllar
741d96fdda
translations update
15 years ago
alecpl
586e356c3d
- cs_CZ update
15 years ago