Commit Graph
209 Commits
Author SHA1 Message Date
Michael Jumper 55437faad0 GUACAMOLE-957: Use guacamole.properties for LDAP YAML defaults. 2021-10-23 20:19:51 -07:00
Michael Jumper 160d29df95 GUACAMOLE-957: Define all default LDAP configuration values in central location. 2021-10-23 20:19:51 -07:00
Michael Jumper f322dc3f3e GUACAMOLE-957: Cache LDAP configuration YAML until modified. 2021-10-23 20:19:51 -07:00
Michael Jumper 0fc7c03d70 GUACAMOLE-957: Allow single-element array values for YAML LDAP configuration to be specified as simple strings. 2021-10-23 20:19:51 -07:00
Michael Jumper 91a057cad9 GUACAMOLE-957: Choose LDAP configurations based on usernames. 2021-10-23 20:19:51 -07:00
Michael Jumper 49a4a6c7a0 GUACAMOLE-957: Support reading multiple LDAP server configurations from "ldap-servers.yml". 2021-10-23 20:19:51 -07:00
Michael Jumper 278bfa17ae GUACAMOLE-957: Allow each user to be associated with multiple LDAP servers. 2021-10-23 20:19:51 -07:00
Michael Jumper 07b443257f GUACAMOLE-957: Refactor LDAP configuration such that it may be user-specific. 2021-10-23 20:19:51 -07:00
Virtually Nick d82f0eacf3 GUACAMOLE-1130: Correct logic for attribute search and retrieval, and apply attribute filters to User and Connection searches. 2021-10-08 18:06:28 -04:00
Virtually Nick 59c7d5de34 GUACAMOLE-1130: Correct style issues and simplify the code that builds group attribute arrays. 2021-10-08 17:42:32 -04:00
Edgardo Rodriguez 420ffa175d GUACAMOLE-1130: Only retrieve LDAP attributes that are strictly necessary 2021-10-08 17:42:32 -04:00
Michael Jumper 962696199a GUACAMOLE-996: Always apply LDAP group filter, regardless of whether "ldap-config-base-dn" is set. 2021-07-26 02:19:56 -07:00
Michael Jumper 38c03ddfd7 GUACAMOLE-996: Use "(objectClass=*)" as default group filter. 2021-07-26 01:55:46 -07:00
Edgardo Rodriguez cb61fc8312 GUACAMOLE-996: Add support for configuring group filter. 2021-07-26 01:55:46 -07:00
Michael Jumper 45c2cbf6b8 GUACAMOLE-1364: Remove inconsistent "guac-" prefix from standard extension namespaces. 2021-06-15 00:21:56 -07:00
Virtually Nick a9f0e55958 GUACAMOLE-641: Merge expand extension API to allow properties to be retrieved from key vaults. 2021-05-30 21:28:08 -04:00
Virtually Nick 4ac1d1bb64 GUACAMOLE-944: Allow search bind usernames in non-DN format. 2021-05-30 17:11:24 -04:00
Michael Jumper 4d65105695 GUACAMOLE-641: Migrate existing extensions to singleton LocalEnvironment. 2021-05-20 16:54:45 -07:00
Michael Jumper 6c8a699faa GUACAMOLE-1298: Automatically generate LICENSE and NOTICE files. 2021-03-31 11:42:38 -07:00
Virtually Nick f1783f5dc1 GUACAMOLE-903: Merge improved Chinese internationalization support 2020-12-16 07:02:45 -05:00
XYUU f7b53d34ef GUACAMOLE-903: Improved Chinese internationalization support 2020-12-16 18:54:00 +08:00
Virtually Nick 5da40bd633 GUACAMOLE-1205: Bump Guacamole Client components to version 1.3.0 2020-11-03 18:06:47 -05:00
Michael Jumper 7c44ee2a67 GUACAMOLE-728: Migrate existing enum-based GuacamoleProperty implementations to EnumGuacamoleProperty. 2020-06-10 21:41:31 -07:00
Virtually Nick 211f8e2b25 GUACAMOLE-966: Bump client version numbers to 1.2.0 2020-02-27 14:02:45 -05:00
Virtually Nick b51d2a88b8 Merge staging/1.1.0 changes back to master. 2020-01-26 11:52:17 -05:00
Michael Jumper a8b01895d8 GUACAMOLE-938: Correct typos in createLDAPConnection() documentation and copypasta repeating those typos. 2020-01-26 07:50:55 -08:00
Michael Jumper fe7492292d GUACAMOLE-938: Use STARTTLS for "ldap://..." URLs if main LDAP connection uses STARTTLS. 2020-01-26 07:46:41 -08:00
Michael Jumper cb53b17afb GUACAMOLE-938: Refactor LDAP connect/bind process such that the same code is used for all LDAP connection attempts, including referrals. 2020-01-25 14:36:30 -08:00
Michael Jumper 15b631514d GUACAMOLE-938: Remove disconnect() utility function. Closing an LdapNetworkConnection cannot throw an IOException. 2020-01-24 22:52:17 -08:00
Virtually Nick a9495628af Merge staging/1.1.0 changes back to master. 2020-01-24 04:51:57 -05:00
Michael Jumper 5c2f44ae3a GUACAMOLE-936: Clean up referral logic and logging. Ensure associated LDAP connections are always closed. 2020-01-24 01:12:00 -08:00
Virtually Nick 9dddfdb50c Merge staging/1.1.0 changes back to master. 2020-01-24 02:35:29 -05:00
Michael Jumper 2cb0efeda6 GUACAMOLE-937: Return null on bindAs() failures. Rely on caller to interpret and handle failures.
Throwing GuacamoleInvalidCredentialsException breaks separation of
concerns (bindAs() shouldn't assume that it's being used during login
and that credentials given are the Guacamole user's credentials), and
has unintended side effects (throwing subclasses of
GuacamoleUnauthorizedException causes implicit session invalidation).
2020-01-23 23:24:47 -08:00
Virtually Nick 180253dad3 Merge staging/1.1.0 changes back to master. 2020-01-24 02:20:26 -05:00
Michael Jumper 00327706b0 GUACAMOLE-936: Each LdapNetworkConnection must be closed or threads are leaked, causing Tomcat to fail to shutdown. 2020-01-22 22:07:11 -08:00
Virtually Nick 59c430870d Merge staging/1.1.0 changes back to master. 2020-01-20 03:48:44 -05:00
Michael Jumper 76c1b0f9bb GUACAMOLE-929: Update copyright date to 2020. 2020-01-19 13:39:54 -08:00
Magnus Lewis-Smith ac0b8a9865 GUACAMOLE-300: fix guac-style whitespace issues 2020-01-08 11:50:40 +00:00
Magnus Lewis-Smith 41fec2793d GUACAMOLE-300: conform to guac-style style guidelines
https://guacamole.apache.org/guac-style/
2019-10-23 12:34:23 +01:00
Magnus Lewis-Smith 450af91be9 GUACAMOLE-300: Support posixGroup in LDAP Authentication and Group-based Session Admission
reset/rebase/squash a chaos of commits:
- implement user/group membership search using Apache Directory Ldap module instead of JLDAP
- Retrieve user's group membership if specified by username rather than DN
- New enum 'MemberAttributeType'
- New GuacamoleProperty 'MemberAttributeTypeProperty'
- New configuration property 'ldap-member-attribute-type'
    Specifies what the field specified by 'ldap-member-attribute' actually
    contains -- "dn" (default) or "uid" or ...
2019-10-23 11:10:20 +01:00
Virtually Nick a037146a87 GUACAMOLE-893: Fix issue where just checking for attribute presence. 2019-10-10 20:53:07 -04:00
Virtually Nick 10b3adcd83 GUACAMOLE-893: Fix regression in LDAP causing null filter value to be sent. 2019-10-09 14:53:34 -04:00
Mike Jumper 981adc94e6 GUACAMOLE-699: Merge changes bringing German translations up-to-date. 2019-09-09 18:52:53 -07:00
Nick Couchman 610ed6934e GUACAMOLE-234: Fix bind issue that occurs using try-with-resources. 2019-08-26 11:19:35 -04:00
leetxyz 5ac68c3f72 GUACAMOLE-699: Fix language ordering, add de.json to auth-jdbc-*, fix intendation 2019-08-15 18:09:30 +02:00
Virtually Nick 749da7d29c GUACAMOLE-234: Fix resource leaks in new LDAP code. 2019-08-12 13:03:31 -04:00
Virtually Nick 11f7a7f3c7 GUACAMOLE-234: Update license files. 2019-08-11 18:37:43 -04:00
Virtually Nick 8b172a98fc GUACAMOLE-234: Fix style, debug messages, and logger output. 2019-08-10 22:14:56 -04:00
Virtually Nick 8c1a3f3435 GUACAMOLE-234: Remove stray catch block. 2019-08-10 13:57:51 -04:00
Nick Couchman ed568b1f55 GUACAMOLE-234: Tweaks to handling bind requests/failures. 2019-08-10 13:57:51 -04:00