summaryrefslogtreecommitdiff
path: root/inc/auth
Commit message (Collapse)AuthorAge
* Wrap user modifications in eventsGabriel Birke2008-08-17
| | | | | | | | Adds a wrapper function in the basic auth class which is used by the core code to modify the user database. The wrapper function signals events and delegates the action to the auth backend. darcs-hash:20080817141121-79ce3-3300a4342b62a7a18ebcc9a765d87b30a0264621.gz
* avoid infinite loop in ldap auth backend FS#1365Andreas Gohr2008-04-10
| | | | darcs-hash:20080410193008-7ad00-bb87213baaf169756433fc91c13caff6d763bf5f.gz
* mysql auth backend: check DB query result correctly FS#1039Andreas Gohr2008-02-23
| | | | darcs-hash:20080223130827-7ad00-3c9ba32b002a34548df1696a26bd92616e763ccc.gz
* add gidnumber to LDAP auth userdata FS#1338Andreas Gohr2008-02-19
| | | | darcs-hash:20080219165659-7ad00-e957772a651073b3e3af19c5300a6c6880c4876c.gz
* Make session reference file check overridable for auth backendsAndreas Gohr2008-02-15
| | | | darcs-hash:20080215121716-7ad00-35d275212e0e3c41626ed64d9096aad10f4ad2db.gz
* LDAP backend: try to rebind with current user for getUserData() FS#1053Andreas Gohr2008-02-15
| | | | darcs-hash:20080215085556-7ad00-bcdc77251ad51b80bb4a55956efb7987a9eade32.gz
* filter usernames case-insensitive in user managerGabriel Birke2008-02-13
| | | | darcs-hash:20080213194342-79ce3-e05ea08fd276d0d841863878d614412aeaf2e305.gz
* getUserData should really be implemented always... (FS#1272)Andreas Gohr2007-12-03
| | | | | | | ... but with this patch DokuWiki will not break completely when left out for trustExternal() auth backends darcs-hash:20071203201532-7ad00-72dbc2d16e4c8c09cca9558286164f4d858c19ce.gz
* spelling fix FS#1220Andreas Gohr2007-08-09
| | | | darcs-hash:20070809212154-7ad00-bde57d95f9b61840f1cdac4d60f89bcd0ae83c4a.gz
* PGSQL auth backend - connect via socket FS#1198Andreas Gohr2007-07-30
| | | | | | | If the server field is empty in configuration the postgres backend will try to connect via a local socket to the server darcs-hash:20070730171227-7ad00-83bb5c4e60fec79e116343b1043a0dfe9800f82b.gz
* check for empty group array in LDAP backend FS#1004Andreas Gohr2007-06-21
| | | | darcs-hash:20070621194636-7ad00-0a02dabd55d9bda3bf07b1eb8bcfdefd832c2df9.gz
* Code corrections in inc/auth/plain.class.php deleteUser() methodChris Smith2007-06-20
| | | | darcs-hash:20070620163148-d26fc-f25224e3a9757c298461073386c854122ffb37c2.gz
* properly escape values used in LDAP filters FS#1048Andreas Gohr2007-05-13
| | | | darcs-hash:20070513094851-7ad00-c58c7a33f7c773975aab98664774718be155d361.gz
* support for setting the MySQL charset for auth backendThomas Koenig2007-04-23
| | | | darcs-hash:20070423155220-3f9f2-62892a6a0d4f170e24a86d385f2c4a1e1f7d25fa.gz
* tf_rename_lower.patchhenning.noren2007-01-03
| | | | | | | Name the TRUE/FALSE-constants consistently as lowercase everywhere. This might also be an tiny optimization in some environments. darcs-hash:20070103205700-d2a3e-e7ec0aedb938d563f583116a2d5b17f3a3fea36c.gz
* always bind as superuser for getting userinfo (LDAP) #751Andreas Gohr2006-10-03
| | | | | | | Rebind as superuser even on a previous successful bind as normal user, when superuser credentials are available. LDAP access restrictions may need it. darcs-hash:20061003153018-7ad00-16a69e99f93433bd9e999086f8757a56f975a1ef.gz
* use DOKU_URL as key for sessions and auth cookie #896 #581 #884Andreas Gohr2006-10-03
| | | | | | | | | | This patch changes the DOKU_COOKIE define to be based on the DOKU_URL define. DOKU_COOKIE is now used as session key as well, making sessions no longer dependend on the title option. This should fix problems with multiple wikis on the same host (using the same title) and wikis accessed through different URLs. darcs-hash:20061003121546-7ad00-aea4c256b7752815ed422ce74a659152a601d267.gz
* force rebind after opening new LDAP connection #751Andreas Gohr2006-10-03
| | | | | | | This patch sets the private bound variable back to false if a new connection is opened. darcs-hash:20061003104320-7ad00-24370bcdc7beff5db7d7f2e68ea180763699ca5c.gz
* cleanID on passforgot action #861Andreas Gohr2006-09-16
| | | | darcs-hash:20060916194626-7ad00-2eeb07a509c95359a9bd1b164db4af7279b7f330.gz
* fixed auth problem introduced in last unittest fixAndreas Gohr2006-08-05
| | | | darcs-hash:20060805163147-7ad00-77e7d9cd88f012cd2ecc6275a574abde30f4a9be.gz
* fix for php5's more stringent type checking in foreach (auth/mysql.class.php)chris2006-08-04
| | | | | | as described at http://wiki.splitbrain.org/wiki:auth:mysql#using_mysql_5 darcs-hash:20060803231253-9b6ab-bbf06ef1e9141c5ec1d3c79dad7f88481296ad8b.gz
* changed inheritance for pgsql auth backendAndreas Gohr2006-06-11
| | | | | | | Because of incompatible SQL syntax the postgres backend can no longer inherit the retrieveUsers method from the MySQL backend darcs-hash:20060611170748-7ad00-83c69718da2f391e44504638b795956cf412fca0.gz
* MySQL 3.23 compatibility issuematthiasgrimm2006-06-11
| | | | | | | MySQL 3.23 doesn't support the keyword OFFSET in the LIMIT statement. This patch changes the code to the second alternative syntax. darcs-hash:20060611164347-7ef76-b38861cebe45604c253bd4436451825733fe7083.gz
* MySQL Bug - PHP warning if query result is emptymatthiasgrimm2006-05-22
| | | | | | | | If a database query has no result, the returned array is not valid. This caused a PHP warning in the user manager if the filter is set in a way that the result list is empty. darcs-hash:20060522162327-7ef76-d8fa89a047a9a159b600f11ccb189e845b2a5b8f.gz
* ldap auth fix #762Andreas Gohr2006-03-31
| | | | darcs-hash:20060331081201-7ad00-ad95897fb68ce105c586c80ce7b1ff0ccb4840a6.gz
* use 389 as standard port in ldap authAndreas Gohr2006-03-14
| | | | darcs-hash:20060314191118-7ad00-371b7be42bd6abfcd7f0cdb97a19b02422b4a7b8.gz
* fixed port assignment in ldap backendAndreas Gohr2006-03-07
| | | | darcs-hash:20060307191915-7ad00-70d98478ebfd00fdbab4901bb254b96d20287348.gz
* punbb backend dies when magic quotes enabledAndreas Gohr2006-03-03
| | | | darcs-hash:20060303214459-7ad00-17f399257acafed5914eeb727b45b2fa984f00e8.gz
* Allow non-ID names in ACLsAndreas Gohr2006-03-02
| | | | | | | | | Some auth backends allow special chars like whitespaces in user and group names. This made problems with the existing ACL checks and ACL manager. This patch makes the ACL system work with these cases by (url)encoding all special chars below 128. darcs-hash:20060302101850-6e07b-14bda9dbdb3528904325419b35bb9eddb0d1dde3.gz
* Postgres backend for new OO authAndreas Gohr2006-03-01
| | | | darcs-hash:20060301223021-7ad00-868d32088de468523c63c4cc7e44869331dfc4b9.gz
* file cleanupsAndreas Gohr2006-02-17
| | | | | | | | | | This patch cleans up the source code to satisfy the coding guidelines (see http://wiki.splitbrain.org/wiki:development#coding_style) It converts files to UNIX lineendings and removes tabs and trailing whitespace. Not all files were cleaned yet. darcs-hash:20060217222040-7ad00-bba3d2bee3b5aa7cbb5184258abd50805cd071bf.gz
* fixed password mailAndreas Gohr2006-02-17
| | | | | | | There was an error which caused the mail aent on registration to contain the crypted password instead of the cleartext one. darcs-hash:20060217180715-7ad00-88b2e8f74ddbad41300ca53bbf79df3d8d8beebc.gz
* updated auth_punbbAndreas Gohr2006-02-11
| | | | darcs-hash:20060211180240-7ad00-c7c589aa6e5e67f2d7ad54f7e41837f116a91c9c.gz
* MySQL cando updatematthiasgrimm2006-02-08
| | | | | | This patch fixed the cando capabilities array. darcs-hash:20060208185913-7ef76-b6e999ebd2ecfbf3d3b50305cee88d6eb85a3b65.gz
* new way of auth module capability checkingAndreas Gohr2006-02-03
| | | | | | | | | | This changes the way of how the capabilities of the used auth module are checked as suggested as first option in http://www.freelists.org/archives/dokuwiki/01-2006/msg00267.html The MySQL backend WAS NOT TESTED and probably needs some work. darcs-hash:20060203150302-7ad00-c524cafe20499f32e76ad42b4e68d7c635f6a9e9.gz
* optional READ Lockmatthiasgrimm2006-02-01
| | | | | | | | | | | The option TablesToLock is no longer required for read operations. The small risk to feed invalid data into dokuwiki was accepted by the project leader. Nevertheless locks will be used for read operations too, if the option 'TablesToLock' is given. darcs-hash:20060201181422-7ef76-e89c5d9c305ca8c076281a58b6208e60dfce4c9f.gz
* some fix for getUserData in the LDAP auth backendNathan Neulinger2006-01-31
| | | | darcs-hash:20060131222058-effc9-0d09141c02e3698329d038af90588b553fd6a44b.gz
* MySQL canDo() patchmatthiasgrimm2006-01-30
| | | | | | | | | | | | | | | This patch adds a canDo() function to the MySQL backend to give higher program levels the opportunity to find out what functions the MySQL backend provides. Furthermore the option encryptPass was renamed to forwardClearPass because the old name was misleading and not clear. Last but not least the mysql.conf.php was reorganized to make clear which SQL statements enable which functions. darcs-hash:20060130192750-7ef76-2ba9388ea56b17e4f26feda74a66b7d9b8da7333.gz
* MySQL getUserCount() optimizsationmatthiasgrimm2006-01-26
| | | | | | | | The function getUserCount() uses SQL_CALC_FOUND_ROWS now if MySQL v4.0 or later is found. This will speed up this query with big user tables. darcs-hash:20060126205715-7ef76-e3a7009ad6be3659002b562bc055e4fe1cbd904a.gz
* MySQL retrieveUsers() use LIMITmatthiasgrimm2006-01-26
| | | | | | | | The function retrieveUsers() uses the SQL statement LIMIT now to select a subset of tupel out of a result table instead of fetching the whole table and filter in PHP. darcs-hash:20060126195109-7ef76-79af82f95282d43b585a67b495bfa86c2f5e3a15.gz
* ldap auth fixesAndreas Gohr2006-01-26
| | | | | | | Adds a config option for the key using in groups as suggested on the wiki. Makes the debug outputs distinct. Removes commented, nonimplemented functions. darcs-hash:20060126214935-7ad00-e4ab08d9fcaa4f43bad7048e8bb9800107e32432.gz
* oo auth update - remove legacy auth remnants, add auth->canDochris2006-01-25
| | | | darcs-hash:20060125000125-9b6ab-9853f11e04d8ea93235317fa8137cef079eb2641.gz
* MySQL modify user patchmatthiasgrimm2006-01-24
| | | | | | | | | | | | | | | | This patch changed the function modifyUser(). Before this update each data change was applied by deleting and re-adding the complete user entry. The new function uses the UPDATE SQL statement. Furthermore all human readable error messages were removed. The calling procedure is in charge now to inform the user about failures. Internal debug messages were added. They can be enabled in the configuration file. Last but not least the module retrieves the database version now to handle incompatible features between different MySQL versions. darcs-hash:20060124190625-7ef76-f6dffabf230155aa51bf3c8569c31fd444634407.gz
* MySQL backend code cleanup fixmatthiasgrimm2006-01-22
| | | | | | This patch make the MySQL backend work again after Andi's code cleanup ;-) darcs-hash:20060122125327-7ef76-5b7a46fa8bc49fc68a11a44fabddc9753e9a1dfb.gz
* streamlining auth backends :!:Andreas Gohr2006-01-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | This patch is a start to make all the auth backend mor alike in configuration and to update all backend to the new OO method. This patch changed some config placeholders and thus may break existing configs! Here is a list of the new place holders used in MySQL and LDAP: %{user} - the login name %{group} - a group name %{pass} - the password (cleartext or crypted) %{dgroup} - the default group %{guid} - a group id %{uid} - a user id %{name} - full name of a user %{email} - email of a user %{dn} - DN for a user (LDAP only) The LDAP backend was enhanced a little bit. The default group now is always added to the list of returned groups. A different Server Port can be configured. More changes will follow. darcs-hash:20060121181149-7ad00-79de68aa7f87aef87dcff9dd7afd50adda859289.gz
* spellfix for mysql auth backendAndreas Gohr2006-01-21
| | | | darcs-hash:20060121152740-7ad00-80eecea2be4754494fef5f11cc91d7f3e4acf1fb.gz
* external authenticationAndreas Gohr2006-01-10
| | | | | | | | | This patch adds the functionality to override the usual auth_mechanism completely and replace it with your own. This can be used to authenticate against Apache auth mechanisms or third party software cookies. A very basic example for using PunBB's $pun_user variable is included. darcs-hash:20060110092903-6e07b-7c7750da4eb4e9116ddc28c77015488ea500c07d.gz
* mysql class password encryption bugfixmatthiasgrimm2006-01-07
| | | | | | | | A syntax error in the checkpass() function prevented the module from using password encryption by the database. It always did the password encryption by itself - fixed. darcs-hash:20060107114635-7ef76-0eeee13b57844097e83f14d85372502e6b1ce10e.gz
* change username fixmatthiasgrimm2005-11-11
| | | | | | | This patch adds support for changing the username in modifyUser() which is needed by the user manager. darcs-hash:20051111185816-7ef76-062a7d949beaa90981d4fef8dfa70edc9d4723e6.gz
* MySQL OO auth module bug fixMatthias Grimm2005-11-10
| | | | | | | This patch fixes some bugs in the MySQL OO auth module regarding modifying user data. darcs-hash:20051110173812-4145d-384877de723b568ccc456f42738a8a5e012fb84d.gz