Commit Graph

201 Commits

Author SHA1 Message Date
Magnus Lewis-Smith
41fec2793d GUACAMOLE-300: conform to guac-style style guidelines
https://guacamole.apache.org/guac-style/
2019-10-23 12:34:23 +01:00
Magnus Lewis-Smith
450af91be9 GUACAMOLE-300: Support posixGroup in LDAP Authentication and Group-based Session Admission
reset/rebase/squash a chaos of commits:
- implement user/group membership search using Apache Directory Ldap module instead of JLDAP
- Retrieve user's group membership if specified by username rather than DN
- New enum 'MemberAttributeType'
- New GuacamoleProperty 'MemberAttributeTypeProperty'
- New configuration property 'ldap-member-attribute-type'
    Specifies what the field specified by 'ldap-member-attribute' actually
    contains -- "dn" (default) or "uid" or ...
2019-10-23 11:10:20 +01:00
Michael Jumper
ff8fb55880 Merge 1.1.0 changes back to master. 2019-10-11 10:43:55 -07:00
Virtually Nick
a037146a87 GUACAMOLE-893: Fix issue where just checking for attribute presence. 2019-10-10 20:53:07 -04:00
Virtually Nick
10b3adcd83 GUACAMOLE-893: Fix regression in LDAP causing null filter value to be sent. 2019-10-09 14:53:34 -04:00
Inperpetuammemoriam
e1f4f8ab97 GUACAMOLE-889: Fix mismatching attribute names
This patch targets the following error message:

line 30 objectClass: AttributeType not found: "protocol"
2019-10-04 19:10:25 +02:00
Mike Jumper
981adc94e6 GUACAMOLE-699: Merge changes bringing German translations up-to-date. 2019-09-09 18:52:53 -07:00
Nick Couchman
610ed6934e GUACAMOLE-234: Fix bind issue that occurs using try-with-resources. 2019-08-26 11:19:35 -04:00
leetxyz
5ac68c3f72 GUACAMOLE-699: Fix language ordering, add de.json to auth-jdbc-*, fix intendation 2019-08-15 18:09:30 +02:00
Virtually Nick
749da7d29c GUACAMOLE-234: Fix resource leaks in new LDAP code. 2019-08-12 13:03:31 -04:00
Virtually Nick
11f7a7f3c7 GUACAMOLE-234: Update license files. 2019-08-11 18:37:43 -04:00
Virtually Nick
8b172a98fc GUACAMOLE-234: Fix style, debug messages, and logger output. 2019-08-10 22:14:56 -04:00
Virtually Nick
8c1a3f3435 GUACAMOLE-234: Remove stray catch block. 2019-08-10 13:57:51 -04:00
Virtually Nick
5ea518a390 GUACAMOLE-234: Update to latest available Apache Directory API. 2019-08-10 13:57:51 -04:00
Nick Couchman
ed568b1f55 GUACAMOLE-234: Tweaks to handling bind requests/failures. 2019-08-10 13:57:51 -04:00
Nick Couchman
742b0c4e65 GUACAMOLE-234: Correctly handle bind failure. 2019-08-10 13:57:51 -04:00
Nick Couchman
791cfeabbb GUACAMOLE-234: Only try LDAP bind if user authenticated with LDAP. 2019-08-10 13:57:51 -04:00
Nick Couchman
fc5c4c538e GUACAMOLE-234: Don't close the connection after bind. 2019-08-10 13:57:51 -04:00
Nick Couchman
d7d622051f GUACAMOLE-234: Change EqualityNode to PresenceNode for wildcard objectClass. 2019-08-10 13:57:51 -04:00
Nick Couchman
72dad76d42 GUACAMOLE-234: Adjust LDAP filters. 2019-08-10 13:57:51 -04:00
Nick Couchman
7825f57b99 GUACAMOLE-234: Correct counter for referral hops. 2019-08-10 13:57:51 -04:00
Nick Couchman
7a17b7f935 GUACAMOLE-234: Add storage for the LDAP Bind DN to LDAPAuthenticateduser. 2019-08-10 13:57:51 -04:00
Nick Couchman
d0b1d7639e GUACAMOLE-234: Clean up comments, instanceof, and type-casting. 2019-08-10 13:57:09 -04:00
Nick Couchman
4aa4489b78 GUACAMOLE-234: Correct LDAP filter mispelling. 2019-08-10 13:56:12 -04:00
Nick Couchman
288fcb5e13 GUACAMOLE-234: Exclude slf4j from Apache Directory dependency. 2019-08-10 13:56:11 -04:00
Nick Couchman
41e3b8ca56 GUACAMOLE-234: Clean up comments. 2019-08-10 13:56:11 -04:00
Nick Couchman
5777d93fdc GUACAMOLE-234: Clean up some LDAP implementation details. 2019-08-10 13:56:11 -04:00
Nick Couchman
2f1fac51af GUACAMOLE-234: Convert LDAP extension to use Apache Directory LDAP API. 2019-08-10 13:56:11 -04:00
Virtually Nick
9c26a7613c GUACAMOLE-579: Remove unnecessary JUnit dependencies. 2019-06-22 20:02:46 -04:00
Virtually Nick
a6601a2bfd GUACAMOLE-579: Change fromAttribute to canonicalize 2019-06-21 12:54:42 -04:00
Virtually Nick
d8db630dbd GUACAMOLE-579: Clean up comments, implement convenience method for tokens without a prefix, and remove unneeded classes. 2019-06-20 20:41:41 -04:00
Nick Couchman
55c4144fbf GUACAMOLE-579: Parse tokens from attributes provided by the CAS server. 2019-06-20 19:52:06 -04:00
Michael Jumper
1c1fac700c GUACAMOLE-807: Correct handling of parameter tokens within LDAP.
Parameter tokens are intended to be interpreted by the connections
stored within LDAP. This was previously done through explicitly using a
TokenFilter and the StandardTokens class, however usage of
StandardTokens is now deprecated and the values of tokens to be applied
are now expected to be received through connect(). Usage of
StandardTokens was removed from LDAP with commit 1210d56, but this is
insufficient. An additional parameter must also be provided to the
SimpleConnection constructor to enable its automatic token handling
behavior.
2019-06-07 08:39:30 -07:00
Michael Jumper
c3fbf44f70 GUACAMOLE-729: Bump version numbers to 1.1.0. 2019-02-09 11:08:28 -08:00
Joel Best
93d80418ba GUACAMOLE-717: Handle LDAPException gracefully when processing LDAP search results 2019-01-25 20:36:43 -05:00
Nick Couchman
af2ef32fc3 GUACAMOLE-693: Update copyright year to 2019. 2019-01-23 17:12:45 -05:00
James Muehlner
d4f58f2c0d Merge changes from 1.0.0 back to master. 2018-11-08 22:18:28 -08:00
Michael Jumper
95b5fdccdc GUACAMOLE-656: Explicitly depend on maven-surefire-plugin 3.0.0-M1 due to SUREFIRE-1588. 2018-11-08 22:09:35 -08:00
James Muehlner
756ec2fcc4 Merge 1.0.0 changes back to master. 2018-11-08 21:26:43 -08:00
Michael Jumper
b355106c77 GUACAMOLE-220: Remove unnecessary explicit type parameters. 2018-11-08 20:11:17 -08:00
Michael Jumper
a4d6f62df0 GUACAMOLE-220: Reword description of getGroupSearchFilter() to be less brain-meltingly difficult to read. 2018-11-08 19:55:49 -08:00
Michael Jumper
83033cad65 GUACAMOLE-220: Use JavaDoc "{@link Map}" to point to Map interface. 2018-11-08 19:45:25 -08:00
Michael Jumper
d10256e151 GUACAMOLE-220: Deprecate built-in support for storage of permissions in SimpleUser. Add convenience constructors for SimpleObjectPermissionSet. 2018-11-03 13:58:50 -07:00
Michael Jumper
aa0c654231 GUACAMOLE-220: Retrieve user groups from LDAP. Take immediate group membership into account. 2018-11-03 12:41:54 -07:00
Michael Jumper
bdc792603d GUACAMOLE-220: Add configuration property for setting the attributes which uniquely identify user groups within LDAP. 2018-11-03 12:41:54 -07:00
Michael Jumper
7c57b448bb GUACAMOLE-220: Define generic service for executing LDAP queries. Refactor existing services to remove common code. 2018-11-03 12:41:54 -07:00
Michael Jumper
13e2b06666 GUACAMOLE-524: Switch to "LDAP_" prefix for LDAP user attribute tokens. 2018-10-05 12:54:00 -07:00
Michael Jumper
cb30b148b9 GUACAMOLE-524: Consistently generate token names from LDAP attributes with arbitrary naming conventions. 2018-10-05 12:47:26 -07:00
Michael Jumper
98bd3ead21 GUACAMOLE-524: Remove Attributes interface from AuthenticatedUser. Rely instead on tokens injected via decoration of connections. 2018-10-05 12:47:26 -07:00
Michael Jumper
7a3f51be71 GUACAMOLE-524: Rename LDAP-specific AuthenticatedUser / UserContext to not conflict with guacamole-ext classes. 2018-10-05 12:47:26 -07:00