Commit Graph

78 Commits (f0fa9324d83ea1bd57f0b702e3b419f7194169cb)

Author SHA1 Message Date
Aleksander Machniak 8ef598b883 Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643)
Unify the C program code with the one used by other drivers.
9 years ago
Aleksander Machniak 39813e961a Show error message from CPanel API on password change failure (#1490144) 9 years ago
Aleksander Machniak 3cc6ec573d Make password encryption algorithms available for all drivers (#1490134)
...via password::hash_password() method and password_algorithm option.
Add %P and %O macros for password_query in favor of %c, %d, %n and %q.
10 years ago
Aleksander Machniak e6c1e0c638 Fix vpopmaild driver of password plugin 10 years ago
Thomas Bruederli e2fb340289 Remove obsolete mt_srand() calls 10 years ago
Aleksander Machniak 1d09ee0ce6 Added 'kpasswd' driver by Peter Allgeyer 10 years ago
Aleksander Machniak b59b72cc30 Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) 10 years ago
Aleksander Machniak 7c96646de0 Fix security issue in DBMail driver of password plugin (#1490261) 10 years ago
Aleksander Machniak ef29ac4339 Fix generation of Blowfish-based password hashes (#1490184)
Added password_blowfish_cost config option.
10 years ago
Aleksander Machniak c8d082a83e Fix syntax error in plesk driver 10 years ago
Aleksander Machniak d26e94ae94 Small CS fixes after PR merge 10 years ago
Lorenzo Perone 84296e1b93 fix indent to match style in ldap.php (tabs to spaces) 10 years ago
Lorenzo Perone 3e3fcd4d27 Password Plugin / LDAP Driver:
- adds support for (optional) multiple userPassword values for compatibility with more authentication shemes
- adds support for CRAM-MD5 scheme as implemented by doveadm pw (credits: see header of plugins/password/helpers/dovecot_hmacmd5.php)
10 years ago
Aleksander Machniak 78bee8b8b6 Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) 10 years ago
Aleksander Machniak d1c8d7fc25 Support hashing algorithms without mhash() and even hash() extension (#1490076) 10 years ago
Aleksander Machniak 9dd327b400 Remove new_link argument usage, we don't need it anymore 10 years ago
Aleksander Machniak 4baf96a4ca Added license headers to driver files, CS fixes 10 years ago
Cyrill von Wattenwyl 11a40dd1fe Merge branch 'master' of https://github.com/roundcube/roundcubemail
Conflicts:
	plugins/password/config.inc.php.dist
10 years ago
Aleksander Machniak 9d2550502a CS fixes after PR merge 10 years ago
Mohammad Anwari 1599665651 New gearman driver for password plugin 10 years ago
Aleksander Machniak 7706df99f0 Allow anonymous LDAP searches 11 years ago
simonp 8d3dab34ec Add timeout for password-driver vpopmaild 11 years ago
Cyrill von Wattenwyl 187fd666aa fixed typos and added section in README 11 years ago
Cyrill von Wattenwyl 12967c776c Added Plesk-Driver to Password-Plugin
This Driver allows to change Passwords via Plesk RPC-API
11 years ago
Aleksander Machniak 18a9b4f2f1 Fix dbmail driver (hints from https://github.com/roundcube/roundcubemail/pull/169) 11 years ago
Aleksander Machniak 524e382669 Merge pull request #168 from tillkruess/master
another security fix for domainfactory password plugin driver
11 years ago
Till Krüss aba993da6a prevent unwanted code execution via CURLOPT_POSTFIELDS (again) 11 years ago
Aleksander Machniak e7881f058a Merge pull request #166 from tillkruess/master
security fix for domainfactory password plugin driver
11 years ago
Till Krüss 334475a50b prevent unwanted code execution via CURLOPT_POSTFIELDS 11 years ago
Thomas Bruederli 774deaded1 Don't EVER log passwords 11 years ago
Aleksander Machniak 393c868e8e Substitute variables in 'password_ldap_search_base' value 11 years ago
Till Krüss 910a3581be check if password was changed successfully, before looking for error messages 11 years ago
Till Krüss 0f4c9b850f check if the new password matched the requirements; code cleanup 11 years ago
Aleksander Machniak 99de1fdd26 In password ldap_simple driver: added LDAP debug, added password_ldap_bind
hook, so other plugins can provide user DN for password change
11 years ago
Aleksander Machniak 19884ec5d2 Code improvements, remove code duplication 11 years ago
Aleksander Machniak 6776d31cee Add new password encodage ('ad') in ldap password drivers (#1489349) 11 years ago
Aleksander Machniak 0b17aae0cd Fix setting domain in virtualmin password driver (#1489332) 11 years ago
Aleksander Machniak 1f22878608 In password virtualmin driver removed support for username in format based on user alias (#1489332) 11 years ago
Aleksander Machniak bcedf05d19 s/$rcmail_config/$config/ also for plugins configuration 11 years ago
Aleksander Machniak 2193f6a130 Avoid unused local variables 12 years ago
Aleksander Machniak ce89ecd542 Fix various PHP code bugs found using static analysis (#1489086) 12 years ago
Aleksander Machniak c027ba7709 Fix bugs caught by static analysis 12 years ago
Aleksander Machniak 30ff85c5a1 Added new cPanel driver - fixes localization related issues (#1487015) 12 years ago
Aleksander Machniak e0d4662523 Use rcube_utils::parse_host() for host config in smb driver (#1488784) 12 years ago
Aleksander Machniak 61be822d62 Remove deprecated functions (from bc.php file) usage in plugins 12 years ago
Mike Hennessy a622b7d580 Update plugins/password/drivers/pam.php
The Ubuntu package php5-auth-pam renames the PECL PAM extension to pam_auth, so this file should check for both.
12 years ago
Aleksander Machniak d6938bd1ea CS fixes, mostly tabs to spaces conversion 12 years ago
Thomas Bruederli e2e2e8f379 Use new RCUBE_PLUGINS_DIR constant 12 years ago
defa 921408eba6 Merge https://github.com/roundcube/roundcubemail into crypt_hash_branch 12 years ago
Aleksander Machniak 145503a32d Fix parse error in virtualmin driver (#1488668) 12 years ago