1
0
mirror of https://github.com/kakwa/ldapcherry synced 2024-11-25 02:34:31 +01:00
Commit Graph

252 Commits

Author SHA1 Message Date
kakwa
70140f966a pep 8 2019-02-07 21:09:42 +01:00
kakwa
c3feafdb2c pep8 2019-02-07 20:48:06 +01:00
kakwa
c81429a870 few tweaks for python3 support
* switch from script to entry_points in setup.py
* move the cli script in ldapcherry (to be used as a module)
* put the __main__ code in a dedicated function constituting the entry
point
* add a few python3 environments in travis file
2019-02-07 20:34:49 +01:00
kakwa
3d6e24eb73 pep8 2019-02-07 20:16:39 +01:00
kakwa
ccc252965d fix another __import__ 2019-02-06 23:04:23 +01:00
kakwa
74dc6c5894 various changes to support python3
* changes in urllib imports since quote_plus in urllib with python 2 and
in urllib.parse in python 3
* changes in imports for Sets since set is a native type in python 3 and
doesn't requires an import
* fix in __import__, '-1' level for module path discovery is not supported
anymore, switching to 0 (absolute import only).
2019-02-06 22:32:40 +01:00
John Thiltges
6f98076281 Protect against XSS vulnerabilities in URL redirection
- Switch from base64 to URL encoding for the passing the URL, using the built-in Mako filtering
- Apply HTML filtering to Mako output by default
- Disable HTML filtering for nested templates in adduser, modify, and selfmodify
2019-01-02 14:31:10 -06:00
kakwa
7019cc2348 fix setup.py 2017-04-06 20:58:20 +02:00
kakwa
f357adcd9a put version in standalone file
this way, it avoids error due to missing imports
2017-04-06 20:34:32 +02:00
kakwa
8270988ed4 changelog + version bump + factorize version 2017-04-06 20:21:31 +02:00
kakwa
eb36830845 fixes 2017-03-16 03:03:59 +01:00
kakwa
3fd6dcee82 fix issue related to python-ldap returning lists
Before, no particular treatment was done on the user attributes.
This caused some issues because python-ldap systematically returns
the attribute value as a list (even if it's mono-valuated).

Now we recover the attributes used in the group attr templates,
and we "normalize" the user attributes before using it in add_to_groups
and del_from_groups.

By normalize, we mean, transforming the list to it's unique value.
In case the attribute doesn't exist or is multi-valuated, it raises an
error.
2017-03-16 02:45:23 +01:00
kakwa
e4effc64ec fixing log errors in auth "none" mode
replacing None by unknown as a default value in order to avoid
error in generating log msg because None is not a string
2017-03-12 17:45:01 +01:00
kakwa
3a1966324d adding more try catch for template debugging 2017-03-07 22:34:05 +01:00
kakwa
819e575a28 pep8ification 2017-03-07 22:23:11 +01:00
Carpentier Pierre-Francois
12bb597903 Merge pull request #6 from rooty0/feat/template-parse-error
adding support for display template parse error
2017-03-07 22:19:15 +01:00
Stan Rudenko
e1a27aa0a7 adding support for display template parse error 2017-03-02 19:06:54 -08:00
Stan Rudenko
f7f72c7e11 adding textarea 2017-03-02 18:47:49 -08:00
kakwa
e37b88dbda fix some errors in unused code 2017-01-31 20:59:49 +01:00
kakwa
5a45a24055 proper exception in ldap backend
adding proper management of none existant user in group function
if user doesn't exist.
2016-08-01 19:57:51 +02:00
kakwa
7f00264e32 improve robustness if user dn attribute contains something like ,cn= 2016-07-31 12:21:26 +02:00
kakwa
d820cceeb6 pep8 2016-07-31 11:41:42 +02:00
kakwa
d4235bc33c better behavior if user doesn't exist in one backend 2016-07-31 11:39:28 +02:00
kakwa
fec09b1543 don't stop on UserDoesntExist exception on delete
previously, if a user didn't exist in one backend, the _deleteuser
function in ldapcherry would stop on the UserDoesntExist exception,
potentially leaving the user in other backends.
Now it logs it and continues to delete the user in other backend.
2016-07-31 10:06:17 +02:00
kakwa
a84ee528aa 403 flag for _check_auth + fix default 404 page
_check_auth can now return a 403 error instead of redirected to
the login page if needed (in case of the checkppolicy for example).
The default page handles post data and querystring better now.
2016-07-29 22:56:56 +02:00
kakwa
f863b230dd fix pep8 error 2016-07-29 07:41:42 +02:00
kakwa
9fb32f11be fix many encoding errors 2016-07-28 21:07:10 +02:00
kakwa
320f57ab76 fix self user password modification in AD Backend
In some forms, the 'cn' attribute might not be accessible.
The _set_password method relied on 'cn' to build the user dn.
Now it accepts the cn or the dn (by_cn switch).
2016-07-21 07:33:14 +02:00
kakwa
14afde33b5 fix pep 8 2016-07-10 08:29:40 +02:00
kakwa
f3fabe502e disable min search lenght for admin search 2016-07-10 08:10:19 +02:00
kakwa
c2f6b95fb0 fix html escape for lonely groups 2016-07-10 07:40:56 +02:00
kakwa
0beac119f9 fix many error with html unescaped attributes 2016-07-08 21:46:00 +02:00
kakwa
6c3fb4975d fix many encoding errors on login and password 2016-07-07 20:22:33 +02:00
kakwa
ebc5b69374 implement the display of users attributes on index page 2016-07-07 08:01:57 +02:00
kakwa
c64bb11504 add a default handler for 404 requests 2016-07-06 22:50:59 +02:00
kakwa
8b0e68d9db implementing debug mode in console 2016-07-06 21:54:08 +02:00
kakwa
baee15c40f properly implementing minimum lenght limit in search 2016-07-06 20:47:33 +02:00
Carpentier Pierre-Francois
caef6a889e Fix encoding issues in AD backend 2016-07-06 14:00:36 +02:00
kakwa
b8a65a44b6 pepify the source code 2016-06-17 00:10:02 +02:00
kakwa
d8631da7ba making some attributes explicitly mandatory for Active Directory backend 2016-06-16 22:32:44 +02:00
kakwa
c969e730c4 fix password setting with Active Directory 2016-06-16 21:49:48 +02:00
kakwa
e981451431 fix notification adding error
The test on whether the user notification queue existed or not was just wrong.
2015-11-08 20:15:48 +01:00
Carpentier Pierre-Francois
5caedc91c3 pep8 compliance 2015-11-03 09:14:03 +01:00
kakwa
c71645ac99 better log on user deletion (adding deteled **by user**) 2015-11-03 08:54:17 +01:00
kakwa
4e5c361e5e fix error messages/logs in ldap backend 2015-11-03 08:53:46 +01:00
kakwa
a74346f7a7 very small improvements on ppolicy.simple 2015-11-02 23:47:59 +01:00
kakwa
451c59e875 it's more logical to do the auth check before anything... 2015-11-02 23:17:49 +01:00
kakwa
fdba64f9da changing http returns for checkppolicy 2015-11-02 23:16:26 +01:00
kakwa
93cd8a40f6 adding notification for user deletion 2015-10-29 07:36:14 +01:00
kakwa
2451b2efdd adding notification after an action is performed 2015-10-28 23:11:23 +01:00