Michael Jumper
1c1fac700c
GUACAMOLE-807: Correct handling of parameter tokens within LDAP.
...
Parameter tokens are intended to be interpreted by the connections
stored within LDAP. This was previously done through explicitly using a
TokenFilter and the StandardTokens class, however usage of
StandardTokens is now deprecated and the values of tokens to be applied
are now expected to be received through connect(). Usage of
StandardTokens was removed from LDAP with commit 1210d56
, but this is
insufficient. An additional parameter must also be provided to the
SimpleConnection constructor to enable its automatic token handling
behavior.
2019-06-07 08:39:30 -07:00
Mike Jumper
4d1e0f18dd
GUACAMOLE-696: Merge changes taking database groups into account with respect to database objects when user is otherwise external to the database.
2019-05-05 19:36:37 -07:00
Virtually Nick
9158ca68e3
GUACAMOLE-696: Use Guava Sets to combine the user groups.
2019-05-05 21:16:44 -04:00
Michael Jumper
61b6664eac
GUACAMOLE-715: Include all provided effective user groups that exist within the database in results of effective groups query, regardless of whether the user is declared as a member of those groups within the database.
...
While this query is generally functioning as described above for all
supported databases, it is not functioning properly for the
non-recursive variant of the MySQL/MariaDB query. This change corrects
that behavior.
2019-04-21 12:02:25 -07:00
Nick Couchman
52d6a6aff8
GUACAMOLE-715: Provide skeleton ModeledUser when none exists in DB.
2019-04-09 13:05:33 -04:00
Virtually Nick
e1fea889ca
GUACAMOLE-696: In JDBC module, merge effective groups.
2019-02-21 20:37:36 -05:00
Michael Jumper
c3fbf44f70
GUACAMOLE-729: Bump version numbers to 1.1.0.
2019-02-09 11:08:28 -08:00
Joel Best
93d80418ba
GUACAMOLE-717: Handle LDAPException gracefully when processing LDAP search results
2019-01-25 20:36:43 -05:00
Mike Jumper
df7404f4cb
GUACAMOLE-693: Merge update to NOTICE copyright year (2018 -> 2019).
2019-01-24 16:43:48 -08:00
Nick Couchman
ba198398e0
GUACAMOLE-697: Add DISTINCT to selectOne permissions queries.
2019-01-24 07:53:22 -05:00
Nick Couchman
af2ef32fc3
GUACAMOLE-693: Update copyright year to 2019.
2019-01-23 17:12:45 -05:00
Michael Jumper
6be722ed9d
GUACAMOLE-524: Require usages of SimpleConnection to explicitly request automatic interpretation of parameter tokens. Do not enable by default.
...
Previous implementations of SimpleConnection did not interpret parameter
tokens automatically. Adding that behavior now could have security
implications for downstream users of the class if parameter values may
unexpectedly contain substrings which would be interpreted as tokens,
particularly if parameter values are built from untrusted input.
2019-01-21 19:55:33 -08:00
Michael Jumper
caf07a92a9
Merge 1.0.0 changes back to master.
2018-12-05 14:40:34 -08:00
Nick Couchman
29982e3a85
GUACAMOLE-526: Clean up unused code and minor errors.
2018-12-04 19:28:18 -05:00
Nick Couchman
df8c07c187
GUACAMOLE-526: Fix loading of CAS ticket field and redirection.
2018-12-04 19:28:14 -05:00
Michael Jumper
fc457c080d
Merge 1.0.0 changes back to master.
2018-12-03 07:32:21 -08:00
Nick Couchman
95dfb5e765
GUACAMOLE-670: Use exclusion to block loading of duplicate slf4j.
2018-12-03 07:35:22 -05:00
Nick Couchman
73744d22f9
GUACAMOLE-670: Add slf4j logging to modules to avoid pulling in conflicting versions.
2018-12-02 15:43:12 -05:00
Nick Couchman
823bbeace1
Merge 1.0.0 changes back to master.
2018-11-09 20:26:05 -05:00
Nick Couchman
001ece14e2
GUACAMOLE-220: Merge correct translation strings for user group "disabled" attribute.
2018-11-09 20:24:24 -05:00
James Muehlner
d4f58f2c0d
Merge changes from 1.0.0 back to master.
2018-11-08 22:18:28 -08:00
Michael Jumper
95b5fdccdc
GUACAMOLE-656: Explicitly depend on maven-surefire-plugin 3.0.0-M1 due to SUREFIRE-1588.
2018-11-08 22:09:35 -08:00
James Muehlner
756ec2fcc4
Merge 1.0.0 changes back to master.
2018-11-08 21:26:43 -08:00
Michael Jumper
b355106c77
GUACAMOLE-220: Remove unnecessary explicit type parameters.
2018-11-08 20:11:17 -08:00
Michael Jumper
a4d6f62df0
GUACAMOLE-220: Reword description of getGroupSearchFilter() to be less brain-meltingly difficult to read.
2018-11-08 19:55:49 -08:00
Michael Jumper
83033cad65
GUACAMOLE-220: Use JavaDoc "{@link Map}" to point to Map interface.
2018-11-08 19:45:25 -08:00
Michael Jumper
3c5594db2e
GUACAMOLE-220: Group attribute "disabled" controls whether the group has any effect, not whether login is allowed.
2018-11-03 17:24:06 -07:00
Michael Jumper
d533de118f
GUACAMOLE-220: Add EMPTY_SET convenience constant to all core set interfaces.
2018-11-03 14:08:46 -07:00
Michael Jumper
d10256e151
GUACAMOLE-220: Deprecate built-in support for storage of permissions in SimpleUser. Add convenience constructors for SimpleObjectPermissionSet.
2018-11-03 13:58:50 -07:00
Michael Jumper
aa0c654231
GUACAMOLE-220: Retrieve user groups from LDAP. Take immediate group membership into account.
2018-11-03 12:41:54 -07:00
Michael Jumper
bdc792603d
GUACAMOLE-220: Add configuration property for setting the attributes which uniquely identify user groups within LDAP.
2018-11-03 12:41:54 -07:00
Michael Jumper
7c57b448bb
GUACAMOLE-220: Define generic service for executing LDAP queries. Refactor existing services to remove common code.
2018-11-03 12:41:54 -07:00
Nick Couchman
f3cbdf5a3b
Merge 1.0.0 changes back to master.
2018-10-11 06:40:52 -04:00
Michael Jumper
d79988d59e
GUACAMOLE-96: Do not require TOTP for users that cannot enroll due to lack of permission to update their account.
2018-10-11 01:35:51 -07:00
Michael Jumper
13e2b06666
GUACAMOLE-524: Switch to "LDAP_" prefix for LDAP user attribute tokens.
2018-10-05 12:54:00 -07:00
Michael Jumper
cb30b148b9
GUACAMOLE-524: Consistently generate token names from LDAP attributes with arbitrary naming conventions.
2018-10-05 12:47:26 -07:00
Michael Jumper
98bd3ead21
GUACAMOLE-524: Remove Attributes interface from AuthenticatedUser. Rely instead on tokens injected via decoration of connections.
2018-10-05 12:47:26 -07:00
Michael Jumper
7a3f51be71
GUACAMOLE-524: Rename LDAP-specific AuthenticatedUser / UserContext to not conflict with guacamole-ext classes.
2018-10-05 12:47:26 -07:00
Michael Jumper
1210d5624c
GUACAMOLE-524: Deprecate and replace StandardTokens with arbitrary tokens provided to Connectable.connect().
2018-10-05 12:47:26 -07:00
Nick Couchman
01709fb26b
Merge 1.0.0 changes back to master.
2018-10-05 15:13:36 -04:00
Michael Jumper
11c1d8c97e
GUACAMOLE-96: Add protected convenience method for retrieving delegate object.
2018-10-05 10:36:47 -07:00
Michael Jumper
aae17f3a9f
GUACAMOLE-524: Accept only supported attributes via setAttributes(). Do not replace existing attributes.
2018-10-02 20:32:24 -07:00
Michael Jumper
ea142d15ce
GUACAMOLE-360: Add convenience function for testing user identity.
2018-10-01 11:46:34 -07:00
Michael Jumper
ad937defa6
GUACAMOLE-360: Update active connection permission check to support user groups.
2018-10-01 11:35:32 -07:00
Nick Couchman
658ce78846
Merge 1.0.0 changes back to master.
...
Conflicts:
extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/user/RemoteAuthenticatedUser.java
2018-10-01 13:51:56 -04:00
Nick Couchman
828313541b
GUACAMOLE-220: Merge add database support for user groups.
2018-10-01 13:38:55 -04:00
Michael Jumper
4d5196207b
GUACAMOLE-220: Correct typo - "that status of" should be "the status of".
2018-09-30 23:12:49 -07:00
Michael Jumper
f4ccf8ef62
GUACAMOLE-220: Remove effectively-redundant admin permission check.
2018-09-30 23:11:20 -07:00
Nick Couchman
d1a6c297b8
Merge 1.0.0 changes back to master.
2018-09-29 16:50:32 -04:00
Michael Jumper
1fef6a05e1
GUACAMOLE-635: Require Java 1.8 for all Java components except guacamole-common.
2018-09-29 12:56:17 -07:00