Commit Graph

6212 Commits

Author SHA1 Message Date
James Muehlner
b2d7b83d98 GUACAMOLE-990: Merge change ensuring internal errors are correctly handed and logged. 2022-09-28 12:28:31 -07:00
James Muehlner
4415efa726 GUACAMOLE-1687: Merge change ensuring network will cause keep-alive pings to be sent. 2022-09-28 11:04:41 -07:00
Michael Jumper
7f2ea222bb GUACAMOLE-1687: Clean, document, and clarify usage of tunnel timer reset function. 2022-09-28 10:50:25 -07:00
Michael Jumper
3036c96a1f GUACAMOLE-1687: Leverage network activity to ensure keep-alive pings are sent. 2022-09-27 16:46:25 -07:00
Michael Jumper
b7deee427d GUACAMOLE-990: Ensure internal errors during auth reach global error handling/logging. 2022-09-26 11:42:23 -07:00
James Muehlner
165bd413c0 GUACAMOLE-990: Merge change ensuring banning occurs before other auth. 2022-09-12 14:58:46 -07:00
Michael Jumper
719e957be1 GUACAMOLE-990: Guarantee auth banning occurs before all other auth processing. 2022-09-12 09:17:32 -07:00
Mike Jumper
6b03b113a9 GUACAMOLE-1661: Merge support for indexing KSM records by user domain. 2022-08-25 09:07:45 -07:00
James Muehlner
c7bb1cb50c GUACAMOLE-1661: Parse config only once when iterating records. 2022-08-25 00:03:18 +00:00
James Muehlner
2b997a9992 GUACAMOLE-1661: Restore logic to not index records by login if hostname is already defined. 2022-08-24 19:03:16 +00:00
James Muehlner
e0a9364dde GUACAMOLE-1661: Simplify and clarify KSM domain search code. 2022-08-24 18:53:21 +00:00
James Muehlner
a99a76568b GUACAMOLE-990: Merge new guacamole-auth-ban extension to block brute-force auth attempts. 2022-08-22 15:57:33 -07:00
Michael Jumper
2e5d3f4faf GUACAMOLE-990: Disable tracking if max addresses is not a positive integer. 2022-08-22 15:16:46 -07:00
Michael Jumper
584db45a4f GUACAMOLE-990: Enabled/disable auth failure tracking via implementations of a common interface. 2022-08-22 15:16:46 -07:00
Michael Jumper
a9ed4c2982 GUACAMOLE-990: Revise guacamole-auth-ban log levels to generally always notify of problematic addresses. 2022-08-22 15:16:46 -07:00
Michael Jumper
8b981d9213 GUACAMOLE-990: Add Docker image support for guacamole-auth-ban. 2022-08-22 15:16:45 -07:00
Michael Jumper
43f65357c8 GUACAMOLE-990: Limit maximum number of tracked addresses. 2022-08-22 15:16:45 -07:00
Michael Jumper
2b19bc95da GUACAMOLE-990: Use translation string for "too many failed attempts" error. 2022-08-22 15:16:45 -07:00
Michael Jumper
f9d8abcfde GUACAMOLE-990: Clear out any previous authentication token that is known to be invalid. 2022-08-22 15:16:45 -07:00
James Muehlner
843add93a5 GUACAMOLE-1614: Merge inclusion of chromium-driver in Docker build for JS unit tests. 2022-08-22 14:26:56 -07:00
Michael Jumper
ffb023c6c3 GUACAMOLE-1614: Include chromium-driver in Docker build for sake of JS unit tests. 2022-08-22 11:41:10 -07:00
Michael Jumper
275b5bee13 GUACAMOLE-990: Add extension for automatically blocking brute-force auth attempts. 2022-08-22 09:59:06 -07:00
Michael Jumper
e6a61b7223 GUACAMOLE-990: Fire auth success/failure events only after authentication has absolutely succeeded or failed, including the details of any failure.
Previously, these events were fired only after the user's identity had
been determined (or failed to be determined). If we don't wait until
after the user contexts have also been successfully obtained (or failed
to be obtained), then things like MFA will not be taken into account
for auth events.
2022-08-22 09:59:06 -07:00
Michael Jumper
0e5a3cb74f GUACAMOLE-990: The UserContext passed to redecorate() should NOT be the internal DecoratedUserContext wrapper. 2022-08-18 12:26:55 -07:00
James Muehlner
593cfaaffe GUACAMOLE-1661: Match by both user and domain when using KEEPER_USER_ tokens. 2022-08-10 23:49:59 +00:00
James Muehlner
aa06c81f29 GUACAMOLE-1661: Add domain search support for KSM vault extension. 2022-08-10 17:36:44 +00:00
Mike Jumper
6138a51e9d GUACAMOLE-1320: Merge support for chunked file uploads. 2022-07-29 22:12:29 -07:00
elijahnicpon
a116208a6d GUACAMOLE-1320: Provide chunked file upload mechanism - update uploadHandler documentation 2022-07-28 19:22:31 -04:00
Mike Jumper
1b6b54502e GUACAMOLE-1372: Merge support for signed SAML requests. 2022-07-28 12:46:31 -07:00
James Muehlner
b35b4d509f GUACAMOLE-1372: Modify usage of SAML library to allow signed requests. 2022-07-28 18:28:58 +00:00
Michael Jumper
8cc7e47de2 Merge 1.5.0 changes back to master.
Please enter a commit message to explain why this merge is necessary,
2022-07-27 23:51:48 -07:00
Mike Jumper
fed176def6 GUACAMOLE-1005: Merge Docker support for configuring RemoteIPValve. 2022-07-27 23:42:11 -07:00
elijahnicpon
003f7e945a GUACAMOLE-1320: Provide chunked file upload mechanism - add sendEnd() 2022-07-27 20:26:17 -04:00
elijahnicpon
c9a2fc249e GUACAMOLE-1320: Provide chunked file upload mechanism 2022-07-27 14:07:48 -04:00
Mike Jumper
4b4490b45a GUACAMOLE-1629: Merge correction to handling of group cycles in KSM support. 2022-07-26 14:52:10 -07:00
James Muehlner
67b5db77e1 GUACAMOLE-1629: Keep track of iterated identifiers when recursing connection group tree looking for KSM attribute to ensure no infinite loop. 2022-07-26 21:39:07 +00:00
Mike Jumper
5b1d39634e GUACAMOLE-1643: Merge corrections to connection group KSM config edit behavior. 2022-07-22 08:49:24 -07:00
James Muehlner
d599ad317c GUACAMOLE-1643: Ensure that the KSM config attribute is always visible for connection groups. 2022-07-21 23:26:25 +00:00
James Muehlner
492dbf48d6 GUACAMOLE-1643: Ensure connection groups with an empty KSM config attribute fall back to the global config. 2022-07-21 23:25:25 +00:00
Mike Jumper
a11b9a9ae4 GUACAMOLE-1643: Merge support for KSM one-time tokens at connection group level. 2022-07-21 12:57:49 -07:00
James Muehlner
b8058e7561 GUACAMOLE-1643: Validate/translate KSM configs and one-time tokens on connection group save. 2022-07-21 17:38:31 +00:00
Mike Jumper
8772207a75 GUACAMOLE-1629: Merge support for vault-specific configuration at the connection group level. 2022-07-07 10:33:42 -07:00
James Muehlner
12832bed88 GUACAMOLE-1629: Use Java 8 compatible collector to append connection group attributes. 2022-07-06 19:06:42 +00:00
James Muehlner
0585ab5e5b GUACAMOLE-1629: Fix client/cache confusion in comments. 2022-07-06 19:01:33 +00:00
James Muehlner
374f1b5e49 GUACAMOLE-1629: Always include any pre-existing connection group attributes when exposing new ones. 2022-07-06 17:55:36 +00:00
James Muehlner
5b69bf405d GUACAMOLE-1629: Use TextField for KSM configuration since it's always one line. 2022-07-06 17:31:22 +00:00
Mike Jumper
e348d3f89a GUACAMOLE-1372: Merge support for signed/encrypted SAML requests. 2022-07-05 14:32:31 -07:00
James Muehlner
616cb39682 GUACAMOLE-1372: Throw fatal exception if files are specified but unreadable. 2022-07-05 20:38:11 +00:00
James Muehlner
025e831b3d GUACAMOLE-1372: Add configuration properties for setting private key and cert. 2022-07-05 19:49:54 +00:00
James Muehlner
fee2f8b416 GUACAMOLE-1629: Hook KSM vault code into base vault code and clean up. 2022-07-01 20:14:34 +00:00