Commit Graph

492 Commits

Author SHA1 Message Date
Mike Jumper
91f8f5b06b Merge pull request #302 from glyptodon/GUAC-1429
GUAC-1429: Return whole objects instead of identifiers to fix text/plain conversion error.
2015-12-09 23:06:00 -08:00
James Muehlner
b0ac9e8d52 GUAC-1429: Modify Directory API to set identifier on added object, and update javascript to use new models. 2015-12-09 22:59:08 -08:00
James Muehlner
61a73ba5bc GUAC-1426 Remove code to retroactively grant UPDATE permission to existing users. 2015-12-09 19:39:54 -08:00
Michael Jumper
d51a719f2f GUAC-1406: Explicitly call startTLS() if STARTTLS is enabled. 2015-12-08 16:08:27 -08:00
Michael Jumper
8724ef7de7 GUAC-1166: Use appropriate socket factory depending on selected encryption method. 2015-12-08 14:27:38 -08:00
Michael Jumper
a692253b68 GUAC-1166: Add ldap-encryption-method property. Select appropriate default port depending on encryption method. 2015-12-08 14:27:38 -08:00
James Muehlner
a0e18286d1 GUAC-1391: Skip readable check when listing active sessions for system administrators. 2015-12-02 20:17:16 -08:00
James Muehlner
edf22d6ab1 GUAC-1373: Modified connection history record search to only filter by start date. 2015-11-24 22:01:38 -08:00
James Muehlner
8f58d90ec7 GUAC-1373: Add new indexes to help performance in search query. 2015-11-24 21:34:43 -08:00
Michael Jumper
77804b2a9d GUAC-1373: Define sorting only by start date. 2015-11-24 21:34:37 -08:00
Michael Jumper
65393adeda GUAC-1373: Move property/attribute logic into ModeledConnection and ModeledConnectionGroup. 2015-11-12 13:13:23 -08:00
Michael Jumper
a774686311 GUAC-1373: Injected JDBCEnvironment should be private. 2015-11-12 12:44:40 -08:00
Michael Jumper
7298cb7bb7 GUAC-1373: Restore bind() for GuacamoleTunnelService. 2015-11-12 12:43:42 -08:00
Michael Jumper
c22d22f99b GUAC-1373: Refactor PostgreSQL auth to support new JDBCEnvironment. 2015-11-12 12:28:04 -08:00
Michael Jumper
ea87134879 GUAC-1373: Clean up logic surrounding legacy concurrency properties. 2015-11-12 12:27:00 -08:00
Michael Jumper
5cb228391c GUAC-1373: Add default constants. Clean up. 2015-11-12 12:26:58 -08:00
James Muehlner
920ce67bee GUAC-1373: Partly refactored JDBC property loading. 2015-11-12 12:25:35 -08:00
Michael Jumper
c530865a95 GUAC-1342: Clarify username attribute warning. 2015-11-02 17:59:26 -08:00
Michael Jumper
600fc081f6 GUAC-1342: Perform token substitution on connections retrieved from LDAP. 2015-11-02 17:37:13 -08:00
Michael Jumper
70785697f0 GUAC-1115: Fix typo in comment regarding ldap-username-attribute. 2015-10-23 16:42:01 -07:00
Michael Jumper
1b0961bee5 GUAC-1115: Do not require config base DN if not storing connections. 2015-10-23 16:29:44 -07:00
Michael Jumper
c173929002 GUAC-1115: Log failures to bind with search DN. 2015-10-23 16:09:54 -07:00
Michael Jumper
bd497c40b1 GUAC-1115: Move LDAP connection management into own service. 2015-10-23 16:03:53 -07:00
Michael Jumper
00bf24791f GUAC-1115: Ensure LDAP connection is always cleaned up. 2015-10-23 15:53:04 -07:00
Michael Jumper
80a6e4cac6 GUAC-1115: Fix formatting of user query. 2015-10-23 15:51:40 -07:00
Michael Jumper
529dccf675 GUAC-1115: Fix NPE in password conversion. 2015-10-23 15:51:22 -07:00
Michael Jumper
725e7d553c GUAC-1115: Add ConfigurationService functions for retrieving search DN and password. 2015-10-23 15:38:44 -07:00
Michael Jumper
bf53b5515d GUAC-1115: Move DN derivation into UserService. 2015-10-23 15:22:31 -07:00
Michael Jumper
947e7b1004 GUAC-1115: Add LDAP query for retrieving the DNs which correspond to a particular user account. 2015-10-23 15:18:33 -07:00
Michael Jumper
eca825c899 GUAC-1115: Split bindAs() into LDAP- and Guacamole-specific versions of the same. 2015-10-23 15:17:57 -07:00
Michael Jumper
c563fa43b4 GUAC-1115: Warn if we need to directly derive the user DN, but can't because multiple username attributes were provided. 2015-10-20 15:24:26 -07:00
Michael Jumper
1c7794b870 GUAC-1115: Treat empty lists as blank. 2015-10-20 15:23:05 -07:00
Michael Jumper
cbfcd8b1e4 GUAC-1115: Add and document ldap-search-bind-* properties. 2015-10-20 15:19:04 -07:00
Michael Jumper
abe709a71b GUAC-1115: Proceed even if an error prevents retrieval of all users in the directory (mitigates GUAC-1353). 2015-10-20 15:18:17 -07:00
Michael Jumper
b87afb9b54 GUAC-1115: Correct documented semantics of LDAP_USER_BASE_DN. 2015-10-20 15:00:19 -07:00
Michael Jumper
8c284399b1 GUAC-1115: Accept multiple username attributes. 2015-10-20 14:57:09 -07:00
Michael Jumper
58d7fc4e18 GUAC-1193: Add indexes to start_date and end_date columns. 2015-10-16 17:54:50 -07:00
James Muehlner
fdbc68bb92 GUAC-1193: Implement front end for connection history. 2015-10-13 23:38:55 -07:00
James Muehlner
03c1ac1876 GUAC-1193 Add required connection name property to connection record. 2015-10-13 20:04:24 -07:00
Michael Jumper
3c271da9b4 GUAC-1193: Do not use <bind> within <foreach>, as it only substitutes the last bound value for *ALL* usages of the created variable. Do not use LIKE, as we would then have to escape the search term in Java. 2015-10-08 17:56:12 -07:00
Michael Jumper
3cdcb1004f GUAC-1193: Move history record query and permission checks into ConnectionService. 2015-10-08 17:55:14 -07:00
Michael Jumper
9b99fd7323 GUAC-1193: Add searchReadable() query, limited by available permissions. 2015-10-08 17:55:14 -07:00
Michael Jumper
b02fdb673a GUAC-1193: Fix ordering of record search results (OGNL comparison for enums is not string-based). 2015-10-08 14:35:06 -07:00
Michael Jumper
ac71bf553a GUAC-1193: Remove unused import. 2015-10-08 14:00:03 -07:00
Michael Jumper
2ce4fd12ad GUAC-1193: Add PostgreSQL version of history query. 2015-10-08 13:54:01 -07:00
Michael Jumper
ef128b492d GUAC-1193: Fix description of query. 2015-10-08 13:53:49 -07:00
James Muehlner
a631aa803b GUAC-1193: Implement JDBC ConnectionRecordSet. Add MySQL mapping. 2015-10-06 23:06:21 -07:00
Michael Jumper
3c5f72b288 GUAC-1193: Include connection identifier within history records. 2015-09-23 16:02:17 -07:00
James Muehlner
5de7682cf7 GUAC-1193: Create connection history interface, and add simple implementation. 2015-09-22 23:33:51 -07:00
Michael Jumper
25a5cf27c0 GUAC-1350: Invalid logins should not result in "insufficient credentials" exceptions. 2015-09-15 21:41:12 -07:00