331 Commits

Author SHA1 Message Date
Petr Škoda
be094a59ca MDL-37499 add test ldap debuginfo 2013-01-25 16:04:03 +01:00
Petr Škoda
a7aff74fcc MDL-37499 implement basic tests for auth_ldap 2013-01-25 16:00:35 +01:00
Dan Poltawski
6d0a62bc37 MDL-3941 - version bump for TLS support in ldap 2013-01-08 16:42:47 +08:00
Dan Poltawski
6c74a228f3 Merge branch 'wip_master_mdl-3941_add_support_for_LDAP_TLS' of git://github.com/iarenaza/moodle 2013-01-08 16:40:50 +08:00
Dan Poltawski
81a38f50fb Merge branch 'wip_master_mdl-28585_ldap_auth_doesnt_handle_password_expiration' of https://github.com/iarenaza/moodle 2013-01-08 14:40:15 +08:00
Sam Hemelryk
be5a3168df MDL-21342 auth: tidy up pre-integration 2013-01-08 13:41:22 +13:00
Petr Škoda
b28247fe90 MDL-21342 add user login lockout 2013-01-04 15:12:31 +01:00
Iñaki Arenaza
cd37c1dad8 MDL-28585 LDAP Auth doesn't handle password expiration
All credit goes to Mark Ward for proposing the initial patch.

Signed-off-by: Iñaki Arenaza <iarenaza@mondragon.edu>
2012-12-14 00:10:09 +01:00
Iñaki Arenaza
a5428e15b2 MDL-37088 auth_ldap: bad operator in ldap sync_user() method 2012-12-10 16:52:42 +01:00
Iñaki Arenaza
326929d54a MDL-3941 auth/cas auth/ldap enrol/ldap Add support for LDAP-TLS.
Credit goes to Chris Bandy for proposing the initial patch.
2012-12-04 12:11:06 +01:00
Eloy Lafuente (stronk7)
663dbbc2e6 MDL-36933 Bump everything to 2012112900
(versions, requires and dependencies)
2012-11-30 03:30:09 +01:00
Dan Poltawski
6a0511c17e MDL-36119 - remove <em> from lang string
(Its across whole string, so shouldn't really be done within the string)
2012-11-08 10:18:06 +08:00
Dan Poltawski
ee943e7311 MDL-36119 - fix trailing whitespace 2012-11-08 10:18:06 +08:00
Iñaki Arenaza
c090d7c90e MDL-36119: auth_{ldap,cas}: LDAP Sync - implement paged results
Thanks to Jerome Charaoui for the original patch.
2012-11-07 19:13:10 +01:00
Iñaki Arenaza
34b10e26c6 MDL-31968 Make NTLM REMOTE_USER format configurable by the admin
Signed-off-by: Iñaki Arenaza <iarenaza@mondragon.edu>
2012-10-02 16:56:10 +02:00
Petr Škoda
fcb46048c1 MDL-34901 fix user login times handling 2012-08-19 15:33:31 +02:00
Ankit Agarwal
bf0f06b1be MDL-34471 libraries: Replace all uses of get_context_instance() with respective context_XXXX::instance() method 2012-08-02 15:37:38 +08:00
Rossiani Wijaya
eac75f211d MDL-34553 accessibility compliance for authentication: Add forform input text and select tag 2012-07-31 16:49:25 +08:00
Aparup Banerjee
8128e0c88b MDL-23254 Authentication : used httpswwwroot as root url during authentication procedure where $PAGE->https_required() is specified. 2012-06-28 15:32:33 +08:00
Eloy Lafuente (stronk7)
c5e783e512 MDL-33794 version.php: Bump all versions, requires and dependencies to 2012061700 2012-06-18 02:37:00 +02:00
Dan Poltawski
4e25e4696b Merge branch 'wip_mdl-31540-master' of https://github.com/iarenaza/moodle
Conflicts:
	auth/ldap/auth.php
2012-04-23 13:55:00 +08:00
Petr Skoda
a66b2ae4f4 MDL-32434 deprecate drop_temp_table() in favour of drop_table() 2012-04-15 12:23:15 +02:00
Sam Hemelryk
3211569a6a Revert "MDL-30843 and MDL-30842 - accessibility compliance: Add <label> for form input text and select tag"
This reverts commit f9f281b8fee75c2416d71bae7583fd026b9ccabb.
2012-04-11 17:18:58 +12:00
Rossiani Wijaya
f9f281b8fe MDL-30843 and MDL-30842 - accessibility compliance: Add <label> for form input text and select tag 2012-03-30 16:26:58 +08:00
Petr Skoda
88c48bbfda MDL-32052 use $this->authtype in auth config, this may help with sib classing of plugins 2012-03-17 10:58:43 +01:00
Iñaki Arenaza
ca769fa7f8 MDL-31540 Try to remove duplicates before storing LDAP search contexts
If the user specifies the same LDAP search context more than once,
when we sync users we retrieve the same set of users twice. When we
try to insert the "duplicated" user in the temp table again, the db
barfs and the db layer aborts the whole transaction.

So we try to detect and remove duplicates. This is a bit tricky (LDAP
is such a complex and wonderful protocol) as the contexts are
distinguished names and the matching/comparison rules are complex. But
assuming that we only use the attribute types used in 99.999% of the
distinguished names used for contexts out there (that is: dc, ou, cn,
o, l and c), and also assuming that the user is not using different
encodings/escapings for the same context, we can lower case the
contexts to compare them (and remove duplicates).

This is safe according to RFC-4517 (section 4.2.15. distinguishedNameMatch)
and RFC-4519 (where the EQUAILITY property is defined for the
different user application attribute types).

This shouldn't break any configuration that wasn't broken before :)

Signed-off-by: Iñaki Arenaza <iarenaza@mondragon.edu>
2012-03-08 21:57:59 +01:00
Petr Skoda
6f3451e540 MDL-31301 remove all uses of moodle_strtolower() and deprecated it 2012-03-03 11:46:26 +01:00
Petr Skoda
f8311defeb MDL-31301 use static textlib methods 2012-03-03 11:46:13 +01:00
Sam Hemelryk
cf6d069afd Merge branch 'MDL-31017' of git://github.com/stronk7/moodle 2012-01-05 11:17:31 +13:00
Eloy Lafuente (stronk7)
fb95ef9ecd MDL-31017 whitespace clean - take1 2012-01-04 16:27:32 +01:00
Petr Skoda
5ea41be1b3 MDL-30610 remove outdated auth upgrade code 2011-12-23 10:38:10 +01:00
Petr Skoda
be974aa7f9 MDL-30007 add/fix version files for all auth plugins 2011-11-29 20:41:21 +01:00
Iñaki Arenaza
7edcbecad6 MDL-27689 Vague README-LDAP file in auth/ldap
README-LDAP referes to a file that was renamed (to auth.php) in Moodle
1.8 and no longer exists. Make clear what file we are referring to.
2011-09-01 12:43:58 +02:00
Iñaki Arenaza
fa5f5c206f MDL-28402 LDAP configuration values being stored in lower case, causing misconfiguration
It looks like array_change_key_case() does not work recursively, so we
were not actually lowercasing the expiration attribute key. As the
configuration setting is always lowercase they didn't match.
2011-08-29 01:07:30 +02:00
Petr Skoda
f91f3f63a7 MDL-28182 always use full user object when deleting users 2011-07-22 22:46:32 +02:00
Iñaki Arenaza
971db6a110 MDL-24666 sync_users.php can throw db exception on sites upgraded from 1.x
From 2.0 on we lowercase all the settings related to LDAP attributes
to cope with differences in LDAP servers when returning attribute
names as array indices (some lowercase them, some leave them as
specified in the query, some normalize them, etc.).

But we only lowercase them when saving the settings page. So on sites
that have been migrated from 1.x, it may happen that we still have
mixed-case attribute names. And this is fatal for the user_attribute
setting, as we might not detect it in the returned array from LDAP and
it will be empty (and the db layer throws and exception).

So we just make sure the attribute name is lowercased (and trimmed,
in case it's got some white space around it).

Signed-off-by: Iñaki Arenaza <iarenaza@mondragon.edu>
2011-07-04 21:47:43 +02:00
Petr Skoda
c6a074f867 MDL-26795 fix incorrect location of email change strings
AMOS BEGIN
 MOV [auth_emailchangecancel,auth_email],[emailchangecancel,core_auth]
 MOV [auth_emailchangepending,auth_email],[emailchangepending,core_auth]
 MOV [auth_emailupdate,auth_email],[emailupdate,core_auth]
 MOV [auth_emailnowexists,auth_email],[emailnowexists,core_auth]
 MOV [auth_emailupdatemessage,auth_email],[emailupdatemessage,core_auth]
 MOV [auth_emailupdatesuccess,auth_email],[emailupdatesuccess,core_auth]
 MOV [auth_emailupdatetitle,auth_email],[emailupdatetitle,core_auth]
 CPY [auth_emailnoemail,auth_email],[noemail,auth_ldap]
AMOS END
2011-03-27 17:19:23 +02:00
Petr Skoda
ee69d85a1f MDL-26634 LDAP NTLM SSO Multiple subnet separator is not specified and people use a wrong one
Credit goes to Inaki Arenaza.
2011-03-13 10:14:20 +01:00
Petr Skoda
431ac39634 MDL-26623 fix file permissions
The permissions are now going to be verified as part of the weekly release process.
2011-03-01 12:26:49 +01:00
Petr Skoda
9449d0c5e8 MDL-25778 fix default country and city on user upload form and revert change in auth plugins
Auth plugins should have separate defaults from site defaults).
2011-02-15 09:13:33 +01:00
Petr Skoda
fa7f750c60 MDL-25778 add defaultcity option
This is based on patch by Jonathan Harker.
2011-02-14 20:10:50 +01:00
Helen Foster
f085c3eccb MDL-21250 capital letters removal 2010-12-08 19:47:46 +00:00
Petr Skoda
17c70aa007 MDL-16723 automatic redirects to https when loginhttps enabled - this solves accidental usage of http version + it also solves recent navigation regressions + fixed regression from PAGE conversions + deprecated old httpsrequired() and $HTTPSPAGEREQUIRED 2010-10-10 15:04:19 +00:00
Petr Skoda
1dffbae2da MDL-24321 switching to stdClass in /auth/ 2010-09-21 08:09:22 +00:00
Helen Foster
0d9926b3f5 MDL-24203 typo fix thanks to Koen Roggemans 2010-09-17 12:25:19 +00:00
Petr Skoda
f685e83030 MDL-14679 fixed remaining old style set_field()s 2010-09-03 18:14:55 +00:00
Petr Skoda
dd88de0ebd MDL-14679 fixed remaining old style update_record()s 2010-09-03 18:01:25 +00:00
Petr Skoda
a9637e7df4 MDL-14679 fixed a lot more old style uses of insert_record() 2010-09-03 17:47:41 +00:00
Petr Skoda
99f9f85f00 MDL-23489 auth plugins can specify own edit profile url - patch submitted by Jay Knight + tweaking change password url to use new moodle_url at the same time, it is backwards compatible, custom plugins may still use string url for now 2010-08-18 22:07:00 +00:00
Petr Skoda
28bd3d9ad3 MDL-23824 CLI script improvements - just define('CLI_SCRIPT', true) before require config.php; all incorrect uses of cli and web scripts are detected; refactored cron script - now in two separate sctipts; fix cli inline docs and help - we have to sudo to apache account; standardised cli script locations in auth plugins 2010-08-17 12:33:30 +00:00