Michael Jumper
606c7bd55c
GUACAMOLE-1224: Improve readability of JavaDoc by shortening text of hyperlinked enum values.
2022-10-14 16:08:46 -07:00
Michael Jumper
a0a5335c4d
GUACAMOLE-1224: Further clarify DirectoryObjectEvent, renaming to IdentifiableObjectEvent.
2022-10-14 16:08:46 -07:00
Michael Jumper
9b7982a7f2
GUACAMOLE-1224: Clarify context of getAuthenticationProvider() for DirectoryObjectEvents.
2022-10-14 16:08:46 -07:00
Michael Jumper
93e7422466
GUACAMOLE-1224: Extract base interface for events affecting objects stored in a Directory.
2022-10-14 16:08:46 -07:00
Michael Jumper
e5761551e4
GUACAMOLE-1224: Log identifiers of extensions reporting authentication failures.
2022-10-14 16:08:46 -07:00
Michael Jumper
818471ac84
GUACAMOLE-1224: Migrate existing auth-related logging to global event listener.
2022-10-14 16:08:46 -07:00
Michael Jumper
b3319b817d
GUACAMOLE-1224: Add user session invalidation/logout event.
2022-10-14 16:08:46 -07:00
Michael Jumper
63de886e5d
GUACAMOLE-1224: Ensure all user sessions are explicitly invalidated prior to application shutdown.
2022-10-14 16:08:46 -07:00
Michael Jumper
8c36eaf55d
GUACAMOLE-1224: Add events for overall webapp startup/shutdown.
2022-10-14 16:07:09 -07:00
Michael Jumper
9bda1b2c19
GUACAMOLE-1224: Add a default, global event listener providing logging.
2022-10-14 16:07:09 -07:00
Michael Jumper
79a1bcb2a3
GUACAMOLE-1224: Extract getName() / setName() into common Nameable interface.
2022-10-14 15:55:17 -07:00
Michael Jumper
417587259f
GUACAMOLE-1224: Add CRUD-type events for Directory modifications.
2022-10-14 15:55:17 -07:00
Mike Jumper
0af17df712
GUACAMOLE-1628: Merge changes adding unzip tool required by LOGBACK_LEVEL.
2022-10-03 13:50:30 -07:00
Joshua Lancaster
e1794550ef
GUACAMOLE-1628: Docker image of guacamole client is missing unzip
2022-10-03 11:09:42 -07:00
Mike Jumper
89c981127a
GUACAMOLE-1656: Merge fix for possible NPE if user KSM config is unset.
2022-09-28 21:17:59 -07:00
James Muehlner
b8d2a9edc1
GUACAMOLE-1656: Check if user KSM config is null before constructing a client.
2022-09-29 03:12:20 +00:00
Mike Jumper
6c43611f51
GUACAMOLE-1656: Merge support for per-user KSM vaults.
2022-09-28 15:06:40 -07:00
James Muehlner
06d321fe5d
GUCAMOLE-1656: Do not expose the KSM config blob through the REST API.
2022-09-28 21:55:32 +00:00
James Muehlner
b2d7b83d98
GUACAMOLE-990: Merge change ensuring internal errors are correctly handed and logged.
2022-09-28 12:28:31 -07:00
James Muehlner
4415efa726
GUACAMOLE-1687: Merge change ensuring network will cause keep-alive pings to be sent.
2022-09-28 11:04:41 -07:00
Michael Jumper
7f2ea222bb
GUACAMOLE-1687: Clean, document, and clarify usage of tunnel timer reset function.
2022-09-28 10:50:25 -07:00
Michael Jumper
3036c96a1f
GUACAMOLE-1687: Leverage network activity to ensure keep-alive pings are sent.
2022-09-27 16:46:25 -07:00
Michael Jumper
b7deee427d
GUACAMOLE-990: Ensure internal errors during auth reach global error handling/logging.
2022-09-26 11:42:23 -07:00
James Muehlner
8a7bde8e9c
GUACAMOLE-1656: Simplify, clean up, and improve documentation of KSM code.
2022-09-23 23:19:41 +00:00
James Muehlner
165bd413c0
GUACAMOLE-990: Merge change ensuring banning occurs before other auth.
2022-09-12 14:58:46 -07:00
Michael Jumper
719e957be1
GUACAMOLE-990: Guarantee auth banning occurs before all other auth processing.
2022-09-12 09:17:32 -07:00
James Muehlner
dfc7e6dd90
GUACAMOLE-1656: Simplify auto-refresh behavior in JDBC auth provider.
2022-08-26 18:12:23 +00:00
James Muehlner
3790d76fc9
GUACAMOLE-1656: Force refresh the user context on updateUserContext to ensure that any modified user attributes are picked up.
2022-08-26 18:12:21 +00:00
James Muehlner
e882a08486
GUACAMOLE-1656: Ensure the preferences page refreshes on save in case a one-time-token was updated.
2022-08-26 18:11:42 +00:00
James Muehlner
33f2b499ef
GUACAMOLE-1656: Fall back to user KSM config for single value fetch.
2022-08-26 18:11:40 +00:00
James Muehlner
87cd7fbe22
GUACAMOLE-1656: Remove user attributes header; it does not look good.
2022-08-26 18:07:46 +00:00
James Muehlner
e4c65cba19
GUACAMOLE-1656: Add per-user KSM vault functionality.
2022-08-26 18:07:43 +00:00
Mike Jumper
6b03b113a9
GUACAMOLE-1661: Merge support for indexing KSM records by user domain.
2022-08-25 09:07:45 -07:00
James Muehlner
c7bb1cb50c
GUACAMOLE-1661: Parse config only once when iterating records.
2022-08-25 00:03:18 +00:00
James Muehlner
2b997a9992
GUACAMOLE-1661: Restore logic to not index records by login if hostname is already defined.
2022-08-24 19:03:16 +00:00
James Muehlner
e0a9364dde
GUACAMOLE-1661: Simplify and clarify KSM domain search code.
2022-08-24 18:53:21 +00:00
James Muehlner
a99a76568b
GUACAMOLE-990: Merge new guacamole-auth-ban extension to block brute-force auth attempts.
2022-08-22 15:57:33 -07:00
Michael Jumper
2e5d3f4faf
GUACAMOLE-990: Disable tracking if max addresses is not a positive integer.
2022-08-22 15:16:46 -07:00
Michael Jumper
584db45a4f
GUACAMOLE-990: Enabled/disable auth failure tracking via implementations of a common interface.
2022-08-22 15:16:46 -07:00
Michael Jumper
a9ed4c2982
GUACAMOLE-990: Revise guacamole-auth-ban log levels to generally always notify of problematic addresses.
2022-08-22 15:16:46 -07:00
Michael Jumper
8b981d9213
GUACAMOLE-990: Add Docker image support for guacamole-auth-ban.
2022-08-22 15:16:45 -07:00
Michael Jumper
43f65357c8
GUACAMOLE-990: Limit maximum number of tracked addresses.
2022-08-22 15:16:45 -07:00
Michael Jumper
2b19bc95da
GUACAMOLE-990: Use translation string for "too many failed attempts" error.
2022-08-22 15:16:45 -07:00
Michael Jumper
f9d8abcfde
GUACAMOLE-990: Clear out any previous authentication token that is known to be invalid.
2022-08-22 15:16:45 -07:00
James Muehlner
843add93a5
GUACAMOLE-1614: Merge inclusion of chromium-driver in Docker build for JS unit tests.
2022-08-22 14:26:56 -07:00
Michael Jumper
ffb023c6c3
GUACAMOLE-1614: Include chromium-driver in Docker build for sake of JS unit tests.
2022-08-22 11:41:10 -07:00
Michael Jumper
275b5bee13
GUACAMOLE-990: Add extension for automatically blocking brute-force auth attempts.
2022-08-22 09:59:06 -07:00
Michael Jumper
e6a61b7223
GUACAMOLE-990: Fire auth success/failure events only after authentication has absolutely succeeded or failed, including the details of any failure.
...
Previously, these events were fired only after the user's identity had
been determined (or failed to be determined). If we don't wait until
after the user contexts have also been successfully obtained (or failed
to be obtained), then things like MFA will not be taken into account
for auth events.
2022-08-22 09:59:06 -07:00
Michael Jumper
0e5a3cb74f
GUACAMOLE-990: The UserContext passed to redecorate() should NOT be the internal DecoratedUserContext wrapper.
2022-08-18 12:26:55 -07:00
James Muehlner
593cfaaffe
GUACAMOLE-1661: Match by both user and domain when using KEEPER_USER_ tokens.
2022-08-10 23:49:59 +00:00
