Commit Graph

1613 Commits

Author SHA1 Message Date
Michael Jumper
719e957be1 GUACAMOLE-990: Guarantee auth banning occurs before all other auth processing. 2022-09-12 09:17:32 -07:00
James Muehlner
dfc7e6dd90 GUACAMOLE-1656: Simplify auto-refresh behavior in JDBC auth provider. 2022-08-26 18:12:23 +00:00
James Muehlner
3790d76fc9 GUACAMOLE-1656: Force refresh the user context on updateUserContext to ensure that any modified user attributes are picked up. 2022-08-26 18:12:21 +00:00
James Muehlner
33f2b499ef GUACAMOLE-1656: Fall back to user KSM config for single value fetch. 2022-08-26 18:11:40 +00:00
James Muehlner
87cd7fbe22 GUACAMOLE-1656: Remove user attributes header; it does not look good. 2022-08-26 18:07:46 +00:00
James Muehlner
e4c65cba19 GUACAMOLE-1656: Add per-user KSM vault functionality. 2022-08-26 18:07:43 +00:00
Mike Jumper
6b03b113a9 GUACAMOLE-1661: Merge support for indexing KSM records by user domain. 2022-08-25 09:07:45 -07:00
James Muehlner
c7bb1cb50c GUACAMOLE-1661: Parse config only once when iterating records. 2022-08-25 00:03:18 +00:00
James Muehlner
2b997a9992 GUACAMOLE-1661: Restore logic to not index records by login if hostname is already defined. 2022-08-24 19:03:16 +00:00
James Muehlner
e0a9364dde GUACAMOLE-1661: Simplify and clarify KSM domain search code. 2022-08-24 18:53:21 +00:00
James Muehlner
a99a76568b GUACAMOLE-990: Merge new guacamole-auth-ban extension to block brute-force auth attempts. 2022-08-22 15:57:33 -07:00
Michael Jumper
2e5d3f4faf GUACAMOLE-990: Disable tracking if max addresses is not a positive integer. 2022-08-22 15:16:46 -07:00
Michael Jumper
584db45a4f GUACAMOLE-990: Enabled/disable auth failure tracking via implementations of a common interface. 2022-08-22 15:16:46 -07:00
Michael Jumper
a9ed4c2982 GUACAMOLE-990: Revise guacamole-auth-ban log levels to generally always notify of problematic addresses. 2022-08-22 15:16:46 -07:00
Michael Jumper
43f65357c8 GUACAMOLE-990: Limit maximum number of tracked addresses. 2022-08-22 15:16:45 -07:00
Michael Jumper
2b19bc95da GUACAMOLE-990: Use translation string for "too many failed attempts" error. 2022-08-22 15:16:45 -07:00
Michael Jumper
275b5bee13 GUACAMOLE-990: Add extension for automatically blocking brute-force auth attempts. 2022-08-22 09:59:06 -07:00
James Muehlner
593cfaaffe GUACAMOLE-1661: Match by both user and domain when using KEEPER_USER_ tokens. 2022-08-10 23:49:59 +00:00
James Muehlner
aa06c81f29 GUACAMOLE-1661: Add domain search support for KSM vault extension. 2022-08-10 17:36:44 +00:00
James Muehlner
b35b4d509f GUACAMOLE-1372: Modify usage of SAML library to allow signed requests. 2022-07-28 18:28:58 +00:00
James Muehlner
67b5db77e1 GUACAMOLE-1629: Keep track of iterated identifiers when recursing connection group tree looking for KSM attribute to ensure no infinite loop. 2022-07-26 21:39:07 +00:00
James Muehlner
d599ad317c GUACAMOLE-1643: Ensure that the KSM config attribute is always visible for connection groups. 2022-07-21 23:26:25 +00:00
James Muehlner
492dbf48d6 GUACAMOLE-1643: Ensure connection groups with an empty KSM config attribute fall back to the global config. 2022-07-21 23:25:25 +00:00
James Muehlner
b8058e7561 GUACAMOLE-1643: Validate/translate KSM configs and one-time tokens on connection group save. 2022-07-21 17:38:31 +00:00
Mike Jumper
8772207a75 GUACAMOLE-1629: Merge support for vault-specific configuration at the connection group level. 2022-07-07 10:33:42 -07:00
James Muehlner
12832bed88 GUACAMOLE-1629: Use Java 8 compatible collector to append connection group attributes. 2022-07-06 19:06:42 +00:00
James Muehlner
0585ab5e5b GUACAMOLE-1629: Fix client/cache confusion in comments. 2022-07-06 19:01:33 +00:00
James Muehlner
374f1b5e49 GUACAMOLE-1629: Always include any pre-existing connection group attributes when exposing new ones. 2022-07-06 17:55:36 +00:00
James Muehlner
5b69bf405d GUACAMOLE-1629: Use TextField for KSM configuration since it's always one line. 2022-07-06 17:31:22 +00:00
James Muehlner
616cb39682 GUACAMOLE-1372: Throw fatal exception if files are specified but unreadable. 2022-07-05 20:38:11 +00:00
James Muehlner
025e831b3d GUACAMOLE-1372: Add configuration properties for setting private key and cert. 2022-07-05 19:49:54 +00:00
James Muehlner
fee2f8b416 GUACAMOLE-1629: Hook KSM vault code into base vault code and clean up. 2022-07-01 20:14:34 +00:00
James Muehlner
16efc0cdc1 GUACAMOLE-1629: Implement multiple-vault support for KSM codebase. 2022-06-29 21:36:53 +00:00
James Muehlner
f7d90a641e GUACAMOLE-1629: Add configuration properties and associated translations. 2022-06-29 21:36:22 +00:00
James Muehlner
f64bd30e9d GUACAMOLE-1623: Use Java 8 List initializer to fix Java 8 builds. 2022-06-23 02:41:42 +00:00
Mike Jumper
7d71391bb3 GUACAMOLE-1623: Merge support for extracting Windows domain information from vault-stored usernames. 2022-06-22 16:11:58 -07:00
James Muehlner
647cfa6a0c GUACAMOLE-1623: Extract domain field directly from the vault, or split out of username. 2022-06-22 22:42:30 +00:00
James Muehlner
4b161a5a6e GUACAMOLE-377: Merge client-side support for frame tracking, RemoteFX parameter, and performance tracking extension. 2022-06-13 12:58:50 -07:00
James Muehlner
31f9107ca2 GUACAMOLE-1616: Send updated tokens after adding HISTORY_UUID. 2022-06-03 20:51:59 +00:00
James Muehlner
7e4627c943 GUACAMOLE-1616: Store HISTORY_UUID in tokens for use by other extensions. 2022-05-31 21:36:08 +00:00
James Muehlner
cd3c1fbf35 GUACAMOLE-1616: Write history records for external connections if configured to do so. 2022-05-31 17:33:04 +00:00
Michael Jumper
59ace6c493 GUACAMOLE-377: Add extension for displaying render statistics in a toolbar. 2022-05-18 15:56:39 -07:00
James Muehlner
6425b69bd8 Merge changes from 1.5.0 back to master. 2022-04-28 17:04:37 +00:00
Michael Jumper
837a0360be GUACAMOLE-641: Clarify that null will also be returned if the List actually contains null. 2022-04-27 22:01:01 +00:00
Michael Jumper
741cf481d6 GUACAMOLE-641: Ensure empty strings within KSM record fields are handled as if the field value is absent. 2022-04-27 19:22:04 +00:00
James Muehlner
5a95861f02 Merge changes from staging/1.5.0 back to master. 2022-03-31 21:39:02 +00:00
Michael Jumper
98abadaef5 GUACAMOLE-462: Do not attempt to retrieve recordings for records with null UUIDs. 2022-03-31 19:56:50 +00:00
Michael Jumper
a608fa274d GUACAMOLE-1550: Allow TOTP key to be cleared by setting its generation status.
The previous functionality provided two checkboxes: one for requesting
that the TOTP key be cleared, and another for directly managing whether
the TOTP key has been confirmed. This is confusing as checkboxes
normally represent state, but the "reset" checkbox here is representing
an action.

Instead, both checkboxes should represent state: whether the key has
been generated and whether the generated key has been confirmed.
2022-03-11 19:05:04 +00:00
Michael Jumper
f83ee0c60b GUACAMOLE-462: Add ${HISTORY_PATH} convenience token for automatically placing recordings in the expected location. 2022-02-28 00:30:30 +00:00
Michael Jumper
a123eacab5 GUACAMOLE-462: Add extension for automatically associated session recordings, logs, etc. with history entries. 2022-02-28 00:30:30 +00:00