Commit Graph

5758 Commits

Author SHA1 Message Date
Virtually Nick
1488bb6968 GUACAMOLE-1081: Fix JUnit tests for token modifiers. 2020-10-30 20:02:20 -04:00
Michael Jumper
c6a6d381f4 Merge 1.3.0 changes back to master. 2020-10-30 16:20:15 -07:00
Mike Jumper
df0a3fb6b6 GUACAMOLE-1081: Merge migration to uppercase token modifiers. 2020-10-30 14:07:57 -07:00
Michael Jumper
9ad5d4801c Merge 1.3.0 changes back to master. 2020-10-30 11:30:11 -07:00
Mike Jumper
1f8c240f8e GUACAMOLE-1123: Merge standardization on ActivityRecordSet for history retrieval. 2020-10-30 11:27:04 -07:00
Virtually Nick
ba060f5534 GUACAMOLE-1123: Provide default interface implementations for history methods. 2020-10-30 12:26:29 -04:00
Virtually Nick
0430d5510a GUACAMOLE-1123: Fixes to comments, method scope, and minor code tweaks. 2020-10-30 12:26:29 -04:00
Virtually Nick
3d761ea794 GUACAMOLE-1123: Deprecate getHistory() method. 2020-10-30 12:26:29 -04:00
Virtually Nick
71625340f5 GUACAMOLE-1123: Implement new methods for retrieving user and connection history. 2020-10-30 12:26:29 -04:00
Virtually Nick
54b80f94bf GUACAMOLE-1123: Add RecordMapper support for searching history limited by the identifier of a record. 2020-10-30 11:51:16 -04:00
Virtually Nick
51f93ece8d GUACAMOLE-1081: Switch token modifiers to upper-case for consistency. 2020-10-30 09:16:29 -04:00
Virtually Nick
3854da3078 Merge 1.3.0 changes back to master. 2020-10-28 16:07:44 -04:00
Virtually Nick
acf40b06b8 GUACAMOLE-1146: Merge take configured "totp-period" into account when generating tokens. 2020-10-28 16:05:58 -04:00
Michael Jumper
f0c96c1e1e GUACAMOLE-1146: Take configured "totp-period" into account when generating tokens. 2020-10-28 12:27:09 -07:00
Michael Jumper
4374362163 Merge 1.3.0 changes back to master. 2020-10-26 12:59:01 -07:00
Mike Jumper
23eaaa9132 GUACAMOLE-760: Merge support for configuring MySQL / MariaDB server timezone. 2020-10-26 12:54:23 -07:00
Virtually Nick
6d7456ec31 GUACAMOLE-760: Add JUnit tests for TimeZone getAvailableIDs. 2020-10-26 11:09:49 -04:00
Virtually Nick
3630e7800c GUACAMOLE-760: Add validation and tests for the TimeZoneGuacamoleProperty 2020-10-25 22:32:28 -04:00
Virtually Nick
0ec9bec4c8 GUACAMOLE-760: Add support for configuring server timezone. 2020-10-15 14:37:03 -04:00
Virtually Nick
0091bb1aea GUACAMOLE-1149: Merge correct regression in TOTP support if user accounts are not automatically created. 2020-08-21 07:22:26 -04:00
Virtually Nick
1af7b15825 GUACAMOLE-942: Merge correct race condition in retrieval of readable connection identifiers. 2020-08-21 07:14:00 -04:00
Michael Jumper
b07356164c GUACAMOLE-1149: Refresh model of current user after automatic account creation.
The proper database IDs must be populated in the current user's
ModeledUser for other parts of the database extension to work
correctly, including saving of user attributes.
2020-08-20 22:38:48 -07:00
Michael Jumper
cb50cea104 GUACAMOLE-1149: Refuse to update skeleton database users. 2020-08-20 22:37:27 -07:00
Michael Jumper
0bddff8bad GUACAMOLE-942: Correct race condition in retrieval of readable connection identifiers.
As activeTunnels is a live map which may change while
getActiveConnections() is running, it is possible for an initial call
to activeTunnels.isEmpty() to pass yet for the set of connection
identifiers produced to be empty.
2020-08-20 19:17:45 -07:00
Virtually Nick
f00f6d6935 GUACAMOLE-1152: Merge correct handling of client vs. server exceptions. 2020-08-20 12:19:25 -04:00
Michael Jumper
2ffe8d9705 GUACAMOLE-1152: Ensure field values accurately represent login state.
If expected fields are deleted rather than reset to empty, those fields
will not be resubmitted in future requests, resulting in the content of
those requests not accurately representing true client-side login state.

For example, if a user receives an insufficient credentials error due to
their password expiring, failing to provide any new password should
result in at least the following fields:

 1. Their original username (part of the initial login attempt)
 2. Their original password (part of the initial login attempt)
 3. Their new password (empty)

If fields are incorrectly reset to null, those fields will not be
submitted, resulting instead in a request containing only:

 1. Their original username (part of the initial login attempt)
 2. Their original password (part of the initial login attempt)

which is indistinguishable from a normal login attempt.
2020-08-19 14:32:45 -07:00
Michael Jumper
10e47a19ff GUACAMOLE-1152: Correctly differentiate between client errors and server errors.
By definition, a client error is not an internal error, but an
intentional refusal of the server to handle a malformed or otherwise
invalid request. These should not be handled in the same way as server
errors which unexpectedly block processing of a request and should be
corrected by an administrator.

In the case of GUACAMOLE-1152, client errors should not be ignored even
if failures are explicitly configured as tolerated for the associated
authentication provider.
2020-08-17 16:48:52 -07:00
Virtually Nick
d4fb1b0549 GUACAMOLE-1135: Merge return MySQL StoreUrls in URI format 2020-08-05 16:17:27 -04:00
Richard Grime
d32ebd656a GUACAMOLE-1135: Return StoreUrls in URI format 2020-08-05 08:52:54 +00:00
Virtually Nick
21eb3b4e23 GUACAMOLE-1147: Merge add support for additional LDAP properties in Docker container 2020-08-04 11:18:08 -04:00
Virtually Nick
d4fdafef23 GUACAMOLE-1150: Merge fix for correctly checking connection group permissions. 2020-08-04 11:12:50 -04:00
quantumhu
5d64a842d0 GUACAMOLE-1150: Fix for correctly checking connection group permissions. 2020-08-04 09:59:13 -04:00
Erwan
4ba33dcbc0 GUACAMOLE-1147: Add all ldap attributes from the doc 2020-08-03 20:32:52 +02:00
Erwan
2f42b90f86 GUACAMOLE-1147: Add ldap-member-attribute-type support for Docker 2020-07-29 15:42:27 +02:00
Virtually Nick
9863aec9f6 GUACAMOLE-919: Merge implement PostgreSQL defaultStatementTimeout and socketTimeout 2020-07-29 08:17:02 -04:00
Virtually Nick
8d864bea64 GUACAMOLE-1082: Merge add guacamole-auth-cas to Docker script 2020-07-29 08:10:48 -04:00
Douglas Heriot
a1922b6fdb GUACAMOLE-919: Whitespace fix 2020-07-27 13:36:56 +10:00
Douglas Heriot
20b1dbf00f GUACAMOLE-919: More updates to style and comments. 2020-07-27 13:36:52 +10:00
Douglas Heriot
6cf9787f7b GUACAMOLE-919: Fix style issues, improve comments. 2020-07-27 13:36:48 +10:00
Douglas Heriot
0528ca0564 GUACAMOLE-919: make defaultStatementTimeout an int
More consistent with how socketTimeout.

MyBatis documentation says only positive integers are valid,
and property should not be set otherwise.
So in the case of 0 the property will not be set.
2020-07-27 13:36:40 +10:00
Douglas Heriot
306e1ad3ab GUACAMOLE-919: pass postgres driver socketTimout 2020-07-27 13:36:36 +10:00
Douglas Heriot
34130f54c9 GUACAMOLE-919: pass through defaultStatementTimeout
Testing a workaround for handling dropped TCP connections to the Postgres database.
2020-07-27 13:36:26 +10:00
Virtually Nick
c247a1cfcd GUACAMOLE-1136: Merge return correct MYSQL_SSL_CLIENT_ properties 2020-07-25 20:21:45 -04:00
Jordi Roman
70f331c76d GUACAMOLE-1082: guacamole-docker scripts with guacamole-auth-cas 2020-07-21 13:49:12 +02:00
Virtually Nick
8e77864e63 GUACAMOLE-980: Merge migrate Docker image to JDK8 2020-07-20 06:26:02 -04:00
asutosh936
9385c123aa GUACAMOLE-980: used tomcat-jre8 Docker-Image seems to be deprecated 2020-07-19 21:27:36 -05:00
Richard Grime
fea3fd3b77 GUACAMOLE-1136: Return correct MYSQL_SSL_CLIENT_
MySQL Environment incorrectly returned MYSQL_SSL_TRUST_
parameters for the file and password, instead of the
expected MYSQL_SSL_CLIENT_ values.
2020-07-14 18:20:26 +00:00
Mike Jumper
3c4c81f0b6 GUACAMOLE-1120: Merge removal of CAS extension resources that no longer exist. 2020-07-08 00:33:17 -07:00
Virtually Nick
699e262501 GUACAMOLE-857: Merge add guacamole-auth-header to Docker image 2020-07-07 12:25:11 -04:00
Jeremy Frasier
8be628a549 GUACAMOLE-857: Configure and use header auth extension if specified 2020-07-07 12:05:54 -04:00