Robert Scheck
4c6084ab68
Repair LDAP_REJECT_UNAUTHORIZED=false (broken by commit 31f8912, fixes #3493 )
...
Previous commit 31f89121fe happened to fix
CVE-2021-3309, but unfortunately breaks LDAP_REJECT_UNAUTHORIZED=false.
2021-01-28 11:31:50 +01:00
Lauri Ojansivu
ba336de74b
Merge pull request #3485 from robert-scheck/ldap_ca_cert_line_breaks
...
Handle '\n' line breaks in PEM-encoded SSL/TLS certificates
2021-01-26 00:49:59 +02:00
Robert Scheck
927d15f2d8
Handle '\n' line breaks in PEM-encoded SSL/TLS certificates
...
For example Podman, handling OCI containers, does not seem to have
a way to pass multi-line strings via env files (and Docker seems to
have the same issue at least outside of docker-compose). Thus this
change allows 'LDAP_CA_CERT' to handle a string with '\n', because
currently only 0x0A aka LF might work. An example for additionally
supported format:
LDAP_CA_CERT=-----BEGIN CERTIFICATE-----\n...\n...\n...\n-----END CERTIFICATE-----
See also: https://github.com/wekan/wekan/issues/3484
2021-01-25 23:46:48 +01:00
Robert Scheck
31f89121fe
Reject by default LDAP connections not authorized via CA trust store
...
See also: https://github.com/wekan/wekan/issues/3482
2021-01-25 23:42:22 +01:00
Lauri Ojansivu
1a049e4499
Fixed LDAP Group Filters not working in docker.
...
Thanks to Sancretor !
Fixes wekan/wekan-ldap#86
2021-01-19 19:31:10 +02:00
Girish Ramakrishnan
e79e0cfb66
ldap: sync email address
2020-11-03 14:25:42 -08:00
Lauri Ojansivu
5eb3784527
Revert users changes that were made at Wekan v4.16.
...
Thanks to xet7 !
2020-06-18 02:00:51 +03:00
Lauri Ojansivu
f245b6b7fa
Update users.js etc with global search replace, to try to fix selecting correct user.
...
Thanks to xet7 !
2020-06-17 20:21:44 +03:00
Lauri Ojansivu
9b905c2833
Try to fix Node 12 Buffer() deprecation errors.
...
Thanks to xet7 !
2020-01-18 16:01:02 +02:00
Lauri Ojansivu
e01f4dbf13
Change Buffer to Buffer.alloc on Node v12. Try to fix Snap.
2020-01-11 13:08:29 +02:00
Tobias
2bd48bc45c
add settings field for LDAP user authentication field
2019-08-04 11:12:21 +02:00
Jean-Christophe Haessig
be44fb8aea
Makes LDAP background sync work. If the sync interval is unspecified, falls back to a hourly default.
2019-07-19 09:30:35 +02:00
Lauri Ojansivu
0fe40ad9ec
- Add missing [wekan-ldap#40]( https://github.com/wekan/wekan-ldap/pull/40 ) code about LDAP_SYNC_ADMIN_STATUS.
...
Thanks to JulianJacobi, n-st, chirrut2 and xet7 !
Closes #2351
2019-05-14 21:24:11 +03:00
Thiago Fernando
36f148a7cb
Update loginHandler.js
...
additional option to login in ldap server with user account
2019-05-10 14:58:19 -03:00
Thiago Fernando
fd1af07e43
Update ldap.js
2019-05-10 14:56:07 -03:00
Lauri Ojansivu
816ccf6509
Update package names.
2019-04-20 15:24:09 +03:00
Lauri Ojansivu
73e265d8fd
Include to Wekan packages directory contents, so that meteor command would build all directly.
...
This also simplifies build scripts.
Thanks to xet7 !
2019-04-20 15:18:33 +03:00