Commit Graph

1148 Commits

Author SHA1 Message Date
Nick Couchman
d7d622051f GUACAMOLE-234: Change EqualityNode to PresenceNode for wildcard objectClass. 2019-08-10 13:57:51 -04:00
Nick Couchman
72dad76d42 GUACAMOLE-234: Adjust LDAP filters. 2019-08-10 13:57:51 -04:00
Nick Couchman
7825f57b99 GUACAMOLE-234: Correct counter for referral hops. 2019-08-10 13:57:51 -04:00
Nick Couchman
7a17b7f935 GUACAMOLE-234: Add storage for the LDAP Bind DN to LDAPAuthenticateduser. 2019-08-10 13:57:51 -04:00
Nick Couchman
d0b1d7639e GUACAMOLE-234: Clean up comments, instanceof, and type-casting. 2019-08-10 13:57:09 -04:00
Nick Couchman
4aa4489b78 GUACAMOLE-234: Correct LDAP filter mispelling. 2019-08-10 13:56:12 -04:00
Nick Couchman
288fcb5e13 GUACAMOLE-234: Exclude slf4j from Apache Directory dependency. 2019-08-10 13:56:11 -04:00
Nick Couchman
41e3b8ca56 GUACAMOLE-234: Clean up comments. 2019-08-10 13:56:11 -04:00
Nick Couchman
5777d93fdc GUACAMOLE-234: Clean up some LDAP implementation details. 2019-08-10 13:56:11 -04:00
Nick Couchman
2f1fac51af GUACAMOLE-234: Convert LDAP extension to use Apache Directory LDAP API. 2019-08-10 13:56:11 -04:00
Virtually Nick
9c26a7613c GUACAMOLE-579: Remove unnecessary JUnit dependencies. 2019-06-22 20:02:46 -04:00
Virtually Nick
7f26ba7a52 GUACAMOLE-579: Insure that CAS is providing a username. 2019-06-22 19:27:52 -04:00
Virtually Nick
a6601a2bfd GUACAMOLE-579: Change fromAttribute to canonicalize 2019-06-21 12:54:42 -04:00
Virtually Nick
d8db630dbd GUACAMOLE-579: Clean up comments, implement convenience method for tokens without a prefix, and remove unneeded classes. 2019-06-20 20:41:41 -04:00
Virtually Nick
8ab9e51009 GUACAMOLE-579: Put back original init method for compatibility. 2019-06-20 19:52:06 -04:00
Nick Couchman
55c4144fbf GUACAMOLE-579: Parse tokens from attributes provided by the CAS server. 2019-06-20 19:52:06 -04:00
Michael Jumper
1c1fac700c GUACAMOLE-807: Correct handling of parameter tokens within LDAP.
Parameter tokens are intended to be interpreted by the connections
stored within LDAP. This was previously done through explicitly using a
TokenFilter and the StandardTokens class, however usage of
StandardTokens is now deprecated and the values of tokens to be applied
are now expected to be received through connect(). Usage of
StandardTokens was removed from LDAP with commit 1210d56, but this is
insufficient. An additional parameter must also be provided to the
SimpleConnection constructor to enable its automatic token handling
behavior.
2019-06-07 08:39:30 -07:00
Mike Jumper
4d1e0f18dd GUACAMOLE-696: Merge changes taking database groups into account with respect to database objects when user is otherwise external to the database. 2019-05-05 19:36:37 -07:00
Virtually Nick
9158ca68e3 GUACAMOLE-696: Use Guava Sets to combine the user groups. 2019-05-05 21:16:44 -04:00
Michael Jumper
61b6664eac GUACAMOLE-715: Include all provided effective user groups that exist within the database in results of effective groups query, regardless of whether the user is declared as a member of those groups within the database.
While this query is generally functioning as described above for all
supported databases, it is not functioning properly for the
non-recursive variant of the MySQL/MariaDB query. This change corrects
that behavior.
2019-04-21 12:02:25 -07:00
Nick Couchman
52d6a6aff8 GUACAMOLE-715: Provide skeleton ModeledUser when none exists in DB. 2019-04-09 13:05:33 -04:00
Virtually Nick
e1fea889ca GUACAMOLE-696: In JDBC module, merge effective groups. 2019-02-21 20:37:36 -05:00
Michael Jumper
c3fbf44f70 GUACAMOLE-729: Bump version numbers to 1.1.0. 2019-02-09 11:08:28 -08:00
Joel Best
93d80418ba GUACAMOLE-717: Handle LDAPException gracefully when processing LDAP search results 2019-01-25 20:36:43 -05:00
Mike Jumper
df7404f4cb GUACAMOLE-693: Merge update to NOTICE copyright year (2018 -> 2019). 2019-01-24 16:43:48 -08:00
Nick Couchman
ba198398e0 GUACAMOLE-697: Add DISTINCT to selectOne permissions queries. 2019-01-24 07:53:22 -05:00
Nick Couchman
af2ef32fc3 GUACAMOLE-693: Update copyright year to 2019. 2019-01-23 17:12:45 -05:00
Michael Jumper
6be722ed9d GUACAMOLE-524: Require usages of SimpleConnection to explicitly request automatic interpretation of parameter tokens. Do not enable by default.
Previous implementations of SimpleConnection did not interpret parameter
tokens automatically. Adding that behavior now could have security
implications for downstream users of the class if parameter values may
unexpectedly contain substrings which would be interpreted as tokens,
particularly if parameter values are built from untrusted input.
2019-01-21 19:55:33 -08:00
Michael Jumper
caf07a92a9 Merge 1.0.0 changes back to master. 2018-12-05 14:40:34 -08:00
Nick Couchman
29982e3a85 GUACAMOLE-526: Clean up unused code and minor errors. 2018-12-04 19:28:18 -05:00
Nick Couchman
df8c07c187 GUACAMOLE-526: Fix loading of CAS ticket field and redirection. 2018-12-04 19:28:14 -05:00
Michael Jumper
fc457c080d Merge 1.0.0 changes back to master. 2018-12-03 07:32:21 -08:00
Nick Couchman
95dfb5e765 GUACAMOLE-670: Use exclusion to block loading of duplicate slf4j. 2018-12-03 07:35:22 -05:00
Nick Couchman
73744d22f9 GUACAMOLE-670: Add slf4j logging to modules to avoid pulling in conflicting versions. 2018-12-02 15:43:12 -05:00
Nick Couchman
823bbeace1 Merge 1.0.0 changes back to master. 2018-11-09 20:26:05 -05:00
Nick Couchman
001ece14e2 GUACAMOLE-220: Merge correct translation strings for user group "disabled" attribute. 2018-11-09 20:24:24 -05:00
James Muehlner
d4f58f2c0d Merge changes from 1.0.0 back to master. 2018-11-08 22:18:28 -08:00
Michael Jumper
95b5fdccdc GUACAMOLE-656: Explicitly depend on maven-surefire-plugin 3.0.0-M1 due to SUREFIRE-1588. 2018-11-08 22:09:35 -08:00
James Muehlner
756ec2fcc4 Merge 1.0.0 changes back to master. 2018-11-08 21:26:43 -08:00
Michael Jumper
b355106c77 GUACAMOLE-220: Remove unnecessary explicit type parameters. 2018-11-08 20:11:17 -08:00
Michael Jumper
a4d6f62df0 GUACAMOLE-220: Reword description of getGroupSearchFilter() to be less brain-meltingly difficult to read. 2018-11-08 19:55:49 -08:00
Michael Jumper
83033cad65 GUACAMOLE-220: Use JavaDoc "{@link Map}" to point to Map interface. 2018-11-08 19:45:25 -08:00
Michael Jumper
3c5594db2e GUACAMOLE-220: Group attribute "disabled" controls whether the group has any effect, not whether login is allowed. 2018-11-03 17:24:06 -07:00
Michael Jumper
d533de118f GUACAMOLE-220: Add EMPTY_SET convenience constant to all core set interfaces. 2018-11-03 14:08:46 -07:00
Michael Jumper
d10256e151 GUACAMOLE-220: Deprecate built-in support for storage of permissions in SimpleUser. Add convenience constructors for SimpleObjectPermissionSet. 2018-11-03 13:58:50 -07:00
Michael Jumper
aa0c654231 GUACAMOLE-220: Retrieve user groups from LDAP. Take immediate group membership into account. 2018-11-03 12:41:54 -07:00
Michael Jumper
bdc792603d GUACAMOLE-220: Add configuration property for setting the attributes which uniquely identify user groups within LDAP. 2018-11-03 12:41:54 -07:00
Michael Jumper
7c57b448bb GUACAMOLE-220: Define generic service for executing LDAP queries. Refactor existing services to remove common code. 2018-11-03 12:41:54 -07:00
Nick Couchman
f3cbdf5a3b Merge 1.0.0 changes back to master. 2018-10-11 06:40:52 -04:00
Michael Jumper
d79988d59e GUACAMOLE-96: Do not require TOTP for users that cannot enroll due to lack of permission to update their account. 2018-10-11 01:35:51 -07:00