Commit Graph

313 Commits (82ee69df15faa20ea591db06b074c3bb5a552552)

Author SHA1 Message Date
Aleksander Machniak 9e129383a1 Improve randomness of password salts and random hashes (#5266) 8 years ago
Aleksander Machniak e9d70648dd Fix CS and obvious mistakes, update changelog after PR merge 8 years ago
Aleksander Machniak 4e26cd7691 Merge branch 'master' of https://github.com/NETLINK/roundcubemail into NETLINK-master 8 years ago
Zbigniew Szmyd 191396db17 The error log is redirected to logs/ldap_ppolicy.err 8 years ago
Zbigniew Szmyd 0c093b0b36 Added the missing changes 8 years ago
Zbigniew Szmyd 0efb682d40 New constant PASSWORD_IN_HISTORY added for ldap_ppolicy plugin. 8 years ago
Aleksander Machniak b751f8f20f Move password_dovecotpw_with_method close to other dovecot related options 8 years ago
Thomas Bruederli 4e3442877d Updated localizations from Transifex 8 years ago
Michał Wojciechowski cde1fbde0c Fix typos 8 years ago
Aleksander Machniak 796bb4ccbb Update localization, add Enigma plugin localizations 9 years ago
Julian Matz 7ed0d3308b Update cpanel.php
Call $rcmail->config->get() only once per option by assigning variable inside the IF statement.
9 years ago
Aleksander Machniak ab6fdfa8bc Fix PHP warning when password_hosts is set, but is not an array (#5260) 9 years ago
Julian Matz 8042955927 Update cpanel.php 9 years ago
Julian Matz e34e267e59 Update cpanel.php
Changed code style and indentation.
9 years ago
Julian Matz 6651a6cab0 Update cpanel.php
Add support for hash auth (cPanel Remote Access Key) and call the $xmlapi->listaccts() method to retrieve the cPanel account user that owns the domain (required for cPanel reseller accounts).
9 years ago
Julian Matz 16d5dcbaa4 Update config.inc.php.dist
Add support for cPanel hash auth, using a Remote Access Key (choice between hash auth and plain password auth).
9 years ago
Julian Matz a4c6aec76a Update config.inc.php.dist
Add support for cPanel remote access hash (choice between hash auth and plain password auth).
9 years ago
Oliver Ney 5f2df36879 Fix ldap connection use after release in password plugin 9 years ago
Aleksander Machniak aba88576ef Update localizations 9 years ago
Zbigniew Szmyd 0b07f37bea LDAP password policy driver files 9 years ago
Zbigniew Szmyd 5322e91825 LDAP password driver for password policy 9 years ago
Zbigniew Szmyd acbc67ea1c Correction to work good with the Net_LDAP2 2.2.0 9 years ago
Aleksander Machniak 8ef598b883 Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
9 years ago
Thomas Bruederli e257b830a1 Synchronize localizations from Transifex 9 years ago
Aleksander Machniak 8f8beafd56 Use .get_label() consistently (instead of .gettext()) 9 years ago
hsz ed4f659a76 Fixed dovecot and samba encryption - (invalid variables names) 9 years ago
Aleksander Machniak b922995297 CS fixes 9 years ago
Bram Matthys c10f97740a Add $config['password_crypt_rounds']: this specifies the number of rounds
to be used for the sha256 and sha512 crypt hashing algorithms.
9 years ago
Aleksander Machniak 39813e961a Show error message from CPanel API on password change failure (#1490144) 9 years ago
Aleksander Machniak 252cc4c4ac Password: Allow temporarily disabling the plugin functionality with a notice 9 years ago
Aleksander Machniak 8b25622c75 Describe difference between dovecotpw and doveadm-pw (#1490423) 10 years ago
Aleksander Machniak 3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
10 years ago
Aleksander Machniak 1c8f845637 Add notes about sudo setup (#1490203) 10 years ago
Aleksander Machniak e6c1e0c638 Fix vpopmaild driver of password plugin 10 years ago
Thomas Bruederli e2fb340289 Remove obsolete mt_srand() calls 10 years ago
Aleksander Machniak 1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 10 years ago
Aleksander Machniak b59b72cc30 Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 10 years ago
Thomas Bruederli 36147bd6df Update localizations from Transifex 10 years ago
Aleksander Machniak 7c96646de0 Fix security issue in DBMail driver of password plugin (#1490261) 10 years ago
Thomas Bruederli fbb86218d0 Synchronized localizations from Transifex 10 years ago
Aleksander Machniak d7cd5ddb86 Add missing composer.json files (skipped because of .gitignore) 10 years ago
Aleksander Machniak ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
10 years ago
Aleksander Machniak 72b117feb1 Use consistent license identifiers, remove redundant package.xml files 10 years ago
Thomas Bruederli f652e36b2b Force-pull translations from Transifex 10 years ago
Thomas Bruederli 01bc27536a Updated localizations from Transifex 10 years ago
Aleksander Machniak 5010941c43 Update password driver API description 10 years ago
Aleksander Machniak c8d082a83e Fix syntax error in plesk driver 10 years ago
Aleksander Machniak d26e94ae94 Small CS fixes after PR merge 10 years ago
Lorenzo Perone 84296e1b93 fix indent to match style in ldap.php (tabs to spaces) 10 years ago
Lorenzo Perone 3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
10 years ago
Aleksander Machniak 0ea079d604 dirname(__FILE__) -> __DIR__ 10 years ago
Aleksander Machniak 78bee8b8b6 Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) 10 years ago
xzaara 54462b0f68 Update password.php
Semicolons instead of colons in  switch statement.
10 years ago
Aleksander Machniak d1c8d7fc25 Support hashing algorithms without mhash() and even hash() extension (#1490076) 10 years ago
Aleksander Machniak 9dd327b400 Remove new_link argument usage, we don't need it anymore 10 years ago
Aleksander Machniak 4baf96a4ca Added license headers to driver files, CS fixes 10 years ago
Cyrill von Wattenwyl 7dc269029d removed unwanted file 10 years ago
Cyrill von Wattenwyl 141d615f39 Fixed merge conflicts 10 years ago
Cyrill von Wattenwyl 11a40dd1fe Merge branch 'master' of https://github.com/roundcube/roundcubemail
Conflicts:
	plugins/password/config.inc.php.dist
10 years ago
Thomas Bruederli 812f37c5d1 Synchronized localizations with Transifex 10 years ago
Aleksander Machniak 1299c6a231 Update translations 10 years ago
Aleksander Machniak 9d2550502a CS fixes after PR merge 11 years ago
Mohammad Anwari 1599665651 New gearman driver for password plugin 11 years ago
Aleksander Machniak 1a3132366e After PR merge code cleanup 11 years ago
simonp 1c5fdd674e Show password rules before committing new password (#1488285) 11 years ago
Aleksander Machniak 7706df99f0 Allow anonymous LDAP searches 11 years ago
Aleksander Machniak 90ab9f2847 Fix loading localization 11 years ago
Aleksander Machniak 7e309b872f Add title attribute to settings menu 11 years ago
Aleksander Machniak abe381e3b0 Focus first input in password form on page load 11 years ago
Aleksander Machniak 4520fa0f38 Code cleanup and small fixes (after pull request merge) 11 years ago
simonp 12514266b9 Move login/hosts to seperate function 11 years ago
simonp 6f7042e582 Fix for login/hosts exceptions 11 years ago
simonp 9e9c03cb90 Moved functionality from password_first to password_init 11 years ago
simonp e7ee70541f Add option to force new users to change their password (#1486884) 11 years ago
simonp 8d3dab34ec Add timeout for password-driver vpopmaild 11 years ago
Cyrill von Wattenwyl 187fd666aa fixed typos and added section in README 11 years ago
Cyrill von Wattenwyl 12967c776c Added Plesk-Driver to Password-Plugin
This Driver allows to change Passwords via Plesk RPC-API
11 years ago
Thomas Bruederli b34d679075 Specify licenses in all javascript files and blocks to please LibreJS 11 years ago
Aleksander Machniak 9556f34d75 Load password.js only when needed 11 years ago
Aleksander Machniak 18a9b4f2f1 Fix dbmail driver (hints from https://github.com/roundcube/roundcubemail/pull/169) 11 years ago
Aleksander Machniak 524e382669 Merge pull request #168 from tillkruess/master
another security fix for domainfactory password plugin driver
11 years ago
Till Krüss aba993da6a prevent unwanted code execution via CURLOPT_POSTFIELDS (again) 11 years ago
Aleksander Machniak e7881f058a Merge pull request #166 from tillkruess/master
security fix for domainfactory password plugin driver
11 years ago
Till Krüss 334475a50b prevent unwanted code execution via CURLOPT_POSTFIELDS 11 years ago
Thomas Bruederli 774deaded1 Don't EVER log passwords 11 years ago
Thomas Bruederli 8404fe9e32 Updated localizations from Transifex 11 years ago
Aleksander Machniak 538e64c572 Fix Closure-compiler warnings, small code improvements 11 years ago
Thomas Bruederli 3b95e24fbb Updated localizations from Transifex 11 years ago
Aleksander Machniak 393c868e8e Substitute variables in 'password_ldap_search_base' value 11 years ago
Till Krüss 910a3581be check if password was changed successfully, before looking for error messages 11 years ago
Till Krüss 0f4c9b850f check if the new password matched the requirements; code cleanup 11 years ago
Aleksander Machniak 4136174517 Clean up translations once again, this time remove untranslated strings for all langs 11 years ago
Aleksander Machniak 9377edc497 More lceanup 11 years ago
Aleksander Machniak 3d9e683cda Added plugin localizations 11 years ago
Thomas Bruederli f93e0b3a14 Synchronized localization files from Transifex 11 years ago
Thomas Bruederli cf46aefd9d Make password plugin use the new 'settings_actions' hook to register its link in the settings navigation 11 years ago
Aleksander Machniak 99de1fdd26 In password ldap_simple driver: added LDAP debug, added password_ldap_bind
hook, so other plugins can provide user DN for password change
11 years ago
Aleksander Machniak 19884ec5d2 Code improvements, remove code duplication 11 years ago
Aleksander Machniak 6776d31cee Add new password encodage ('ad') in ldap password drivers (#1489349) 11 years ago
Aleksander Machniak 0b17aae0cd Fix setting domain in virtualmin password driver (#1489332) 11 years ago
Aleksander Machniak 1f22878608 In password virtualmin driver removed support for username in format based on user alias (#1489332) 11 years ago
Thomas Bruederli eef9eb1146 Synchronized localization files from Transifex 11 years ago
Aleksander Machniak bcedf05d19 s/$rcmail_config/$config/ also for plugins configuration 11 years ago
simonp 5b5651a095 Added README section for vpopmaild driver at the password-plugin 11 years ago
Thomas Bruederli 71b577ea7d Added Luxembourgish localizations 12 years ago
Thomas Bruederli 0703bfecd0 Merged configuration refactoring from 'dev_config' branch back into master (#1487311) 12 years ago
Thomas Bruederli a7e0897fde Synchronized localization files with Transifex 12 years ago
Aleksander Machniak a306996bc5 Change license to GPLv3+ also in README file 12 years ago
Thomas Bruederli 07c6c69eca Make all bundled plugins the same license as Roundcube itself, which is GPLv3+ 12 years ago
Aleksander Machniak 461a30d771 Merge config files (#1487311).
Now we have defaults.inc.php and config.inc.php.
Renamed $rcmail_config to $config. Old naming and old files are supported
for backward compatibility.
12 years ago
Thomas Bruederli 3e78fc7fdf Synced localizations from Transifex 12 years ago
Aleksander Machniak 2193f6a130 Avoid unused local variables 12 years ago
Aleksander Machniak ce89ecd542 Fix various PHP code bugs found using static analysis (#1489086) 12 years ago
Aleksander Machniak c027ba7709 Fix bugs caught by static analysis 12 years ago
Aleksander Machniak 28151b329b Update changelog 12 years ago
Aleksander Machniak f41ccebadd Merge pull request #63 from Steffen185/patch-1
Save new password even if it has not changed (optional)
12 years ago
Thomas Bruederli c8f2c0c5af Synchronized localizations from Transifex 12 years ago
Steffen185 859a7a117a Fixed wrong copy-paste 12 years ago
Steffen185 b343adf3cb Use new config option "password_force_save" 12 years ago
Steffen185 6db9f84737 Added config option "password_force_save" 12 years ago
Aleksander Machniak 721ee561ed Update changelog 12 years ago
Aleksander Machniak 30ff85c5a1 Added new cPanel driver - fixes localization related issues (#1487015) 12 years ago
Steffen185 6f7eafce18 Save new password even if it has not changed
I have recently changed the password scheme of my Dovecot/Postfix/Roundcube installation. New passwords are encrypted stronger than before. It is not possible to automatically update existing passwords (because the old encryption is not so bad that I can easily crack it). But I'd like to tell my users that they can upgrade to the new password scheme by simply submitting the "change password" form with their old password in all three input fields. Currently a minor optimization prevents this. I think this minor optimization should be removed.
12 years ago
Aleksander Machniak e0d4662523 Use rcube_utils::parse_host() for host config in smb driver (#1488784) 12 years ago
Thomas Bruederli 4090870623 Localization updates from Transifex 12 years ago
Thomas Bruederli aed581b6c4 Import all translations from Transifex 12 years ago
Thomas Bruederli 8e50ae9a6f Extend copyright to 2013 12 years ago
Aleksander Machniak b005927f91 Add basic tests for plugins 12 years ago
Aleksander Machniak 61be822d62 Remove deprecated functions (from bc.php file) usage in plugins 12 years ago
Thomas Bruederli de2009ec2c Pulled de_CH translations from Transifex (first test) 12 years ago
Thomas Bruederli 49437c123a Add proper headers to localization template files 12 years ago
Thomas Bruederli c942e4a2e9 Merge branch 'master' of github.com:roundcube/roundcubemail 12 years ago
Thomas Bruederli aabeab1e4e Updated localizations from launchpad 12 years ago
Mike Hennessy a622b7d580 Update plugins/password/drivers/pam.php
The Ubuntu package php5-auth-pam renames the PECL PAM extension to pam_auth, so this file should check for both.
12 years ago
Aleksander Machniak d6938bd1ea CS fixes, mostly tabs to spaces conversion 12 years ago
Aleksander Machniak 789e5988aa Clarify rcube::get_user_name() usage, add rcube::get_user_email() 12 years ago
Thomas Bruederli e2e2e8f379 Use new RCUBE_PLUGINS_DIR constant 12 years ago
Thomas Bruederli 6199a72c8e Updated localization files from launchpad 12 years ago
Aleksander Machniak 98128f13fc Rename option password_supported_hosts to password_hosts, code cleanup 12 years ago
Aleksander Machniak 657864a29c Merge pull request #42 from NETLINK/patch-1
Add option to define IMAP hosts that support password changes
12 years ago
Aleksander Machniak 3067458acb Fix wrong (non-specific) error message on crypt or connection error (#1488808) 12 years ago
NETLINK 204e1e03e9 Update plugins/password/password.php 12 years ago
NETLINK 7978f872cb Update plugins/password/password.php
Add logic for checking supported IMAP hosts

Make use of additional config option
'password_supported_hosts' (see config.inc.php.dist).
If current IMAP host is not in array of defined
hosts, exit and suppress Password option in Settings.
12 years ago
NETLINK 32395bde1a Update plugins/password/config.inc.php.dist
Added config option to specify hosts that support password changing.
12 years ago
Thomas Bruederli fa3a619315 Imported recent launchpad translations 12 years ago
defa 5ba07a429a added sample configuration 12 years ago
defa 921408eba6 Merge https://github.com/roundcube/roundcubemail into crypt_hash_branch 12 years ago
Aleksander Machniak 145503a32d Fix parse error in virtualmin driver (#1488668) 12 years ago
GDR\! a0f006748f Password plugin made compatible with modern Virtualmin
Added a new username format in Virtualmin driver,
which works for default Virtualmin settings where
username is user.postfix and domain is taken from
email address.

Example:
email - info@goodcoffee.com
login - info.goodcof
12 years ago
defa 5c603c4032 fixed the patch after some testing, works productive 12 years ago