Commit Graph
6237 Commits
Author SHA1 Message Date
Michael Jumper 606c7bd55c GUACAMOLE-1224: Improve readability of JavaDoc by shortening text of hyperlinked enum values. 2022-10-14 16:08:46 -07:00
Michael Jumper a0a5335c4d GUACAMOLE-1224: Further clarify DirectoryObjectEvent, renaming to IdentifiableObjectEvent. 2022-10-14 16:08:46 -07:00
Michael Jumper 9b7982a7f2 GUACAMOLE-1224: Clarify context of getAuthenticationProvider() for DirectoryObjectEvents. 2022-10-14 16:08:46 -07:00
Michael Jumper 93e7422466 GUACAMOLE-1224: Extract base interface for events affecting objects stored in a Directory. 2022-10-14 16:08:46 -07:00
Michael Jumper e5761551e4 GUACAMOLE-1224: Log identifiers of extensions reporting authentication failures. 2022-10-14 16:08:46 -07:00
Michael Jumper 818471ac84 GUACAMOLE-1224: Migrate existing auth-related logging to global event listener. 2022-10-14 16:08:46 -07:00
Michael Jumper b3319b817d GUACAMOLE-1224: Add user session invalidation/logout event. 2022-10-14 16:08:46 -07:00
Michael Jumper 63de886e5d GUACAMOLE-1224: Ensure all user sessions are explicitly invalidated prior to application shutdown. 2022-10-14 16:08:46 -07:00
Michael Jumper 8c36eaf55d GUACAMOLE-1224: Add events for overall webapp startup/shutdown. 2022-10-14 16:07:09 -07:00
Michael Jumper 9bda1b2c19 GUACAMOLE-1224: Add a default, global event listener providing logging. 2022-10-14 16:07:09 -07:00
Michael Jumper 79a1bcb2a3 GUACAMOLE-1224: Extract getName() / setName() into common Nameable interface. 2022-10-14 15:55:17 -07:00
Michael Jumper 417587259f GUACAMOLE-1224: Add CRUD-type events for Directory modifications. 2022-10-14 15:55:17 -07:00
Mike Jumper 0af17df712 GUACAMOLE-1628: Merge changes adding unzip tool required by LOGBACK_LEVEL. 2022-10-03 13:50:30 -07:00
Joshua Lancaster e1794550ef GUACAMOLE-1628: Docker image of guacamole client is missing unzip 2022-10-03 11:09:42 -07:00
Mike Jumper 89c981127a GUACAMOLE-1656: Merge fix for possible NPE if user KSM config is unset. 2022-09-28 21:17:59 -07:00
James Muehlner b8d2a9edc1 GUACAMOLE-1656: Check if user KSM config is null before constructing a client. 2022-09-29 03:12:20 +00:00
Mike Jumper 6c43611f51 GUACAMOLE-1656: Merge support for per-user KSM vaults. 2022-09-28 15:06:40 -07:00
James Muehlner 06d321fe5d GUCAMOLE-1656: Do not expose the KSM config blob through the REST API. 2022-09-28 21:55:32 +00:00
James Muehlner b2d7b83d98 GUACAMOLE-990: Merge change ensuring internal errors are correctly handed and logged. 2022-09-28 12:28:31 -07:00
James Muehlner 4415efa726 GUACAMOLE-1687: Merge change ensuring network will cause keep-alive pings to be sent. 2022-09-28 11:04:41 -07:00
Michael Jumper 7f2ea222bb GUACAMOLE-1687: Clean, document, and clarify usage of tunnel timer reset function. 2022-09-28 10:50:25 -07:00
Michael Jumper 3036c96a1f GUACAMOLE-1687: Leverage network activity to ensure keep-alive pings are sent. 2022-09-27 16:46:25 -07:00
Michael Jumper b7deee427d GUACAMOLE-990: Ensure internal errors during auth reach global error handling/logging. 2022-09-26 11:42:23 -07:00
James Muehlner 8a7bde8e9c GUACAMOLE-1656: Simplify, clean up, and improve documentation of KSM code. 2022-09-23 23:19:41 +00:00
James Muehlner 165bd413c0 GUACAMOLE-990: Merge change ensuring banning occurs before other auth. 2022-09-12 14:58:46 -07:00
Michael Jumper 719e957be1 GUACAMOLE-990: Guarantee auth banning occurs before all other auth processing. 2022-09-12 09:17:32 -07:00
James Muehlner dfc7e6dd90 GUACAMOLE-1656: Simplify auto-refresh behavior in JDBC auth provider. 2022-08-26 18:12:23 +00:00
James Muehlner 3790d76fc9 GUACAMOLE-1656: Force refresh the user context on updateUserContext to ensure that any modified user attributes are picked up. 2022-08-26 18:12:21 +00:00
James Muehlner e882a08486 GUACAMOLE-1656: Ensure the preferences page refreshes on save in case a one-time-token was updated. 2022-08-26 18:11:42 +00:00
James Muehlner 33f2b499ef GUACAMOLE-1656: Fall back to user KSM config for single value fetch. 2022-08-26 18:11:40 +00:00
James Muehlner 87cd7fbe22 GUACAMOLE-1656: Remove user attributes header; it does not look good. 2022-08-26 18:07:46 +00:00
James Muehlner e4c65cba19 GUACAMOLE-1656: Add per-user KSM vault functionality. 2022-08-26 18:07:43 +00:00
Mike Jumper 6b03b113a9 GUACAMOLE-1661: Merge support for indexing KSM records by user domain. 2022-08-25 09:07:45 -07:00
James Muehlner c7bb1cb50c GUACAMOLE-1661: Parse config only once when iterating records. 2022-08-25 00:03:18 +00:00
James Muehlner 2b997a9992 GUACAMOLE-1661: Restore logic to not index records by login if hostname is already defined. 2022-08-24 19:03:16 +00:00
James Muehlner e0a9364dde GUACAMOLE-1661: Simplify and clarify KSM domain search code. 2022-08-24 18:53:21 +00:00
James Muehlner a99a76568b GUACAMOLE-990: Merge new guacamole-auth-ban extension to block brute-force auth attempts. 2022-08-22 15:57:33 -07:00
Michael Jumper 2e5d3f4faf GUACAMOLE-990: Disable tracking if max addresses is not a positive integer. 2022-08-22 15:16:46 -07:00
Michael Jumper 584db45a4f GUACAMOLE-990: Enabled/disable auth failure tracking via implementations of a common interface. 2022-08-22 15:16:46 -07:00
Michael Jumper a9ed4c2982 GUACAMOLE-990: Revise guacamole-auth-ban log levels to generally always notify of problematic addresses. 2022-08-22 15:16:46 -07:00
Michael Jumper 8b981d9213 GUACAMOLE-990: Add Docker image support for guacamole-auth-ban. 2022-08-22 15:16:45 -07:00
Michael Jumper 43f65357c8 GUACAMOLE-990: Limit maximum number of tracked addresses. 2022-08-22 15:16:45 -07:00
Michael Jumper 2b19bc95da GUACAMOLE-990: Use translation string for "too many failed attempts" error. 2022-08-22 15:16:45 -07:00
Michael Jumper f9d8abcfde GUACAMOLE-990: Clear out any previous authentication token that is known to be invalid. 2022-08-22 15:16:45 -07:00
James Muehlner 843add93a5 GUACAMOLE-1614: Merge inclusion of chromium-driver in Docker build for JS unit tests. 2022-08-22 14:26:56 -07:00
Michael Jumper ffb023c6c3 GUACAMOLE-1614: Include chromium-driver in Docker build for sake of JS unit tests. 2022-08-22 11:41:10 -07:00
Michael Jumper 275b5bee13 GUACAMOLE-990: Add extension for automatically blocking brute-force auth attempts. 2022-08-22 09:59:06 -07:00
Michael Jumper e6a61b7223 GUACAMOLE-990: Fire auth success/failure events only after authentication has absolutely succeeded or failed, including the details of any failure.
Previously, these events were fired only after the user's identity had
been determined (or failed to be determined). If we don't wait until
after the user contexts have also been successfully obtained (or failed
to be obtained), then things like MFA will not be taken into account
for auth events.
2022-08-22 09:59:06 -07:00
Michael Jumper 0e5a3cb74f GUACAMOLE-990: The UserContext passed to redecorate() should NOT be the internal DecoratedUserContext wrapper. 2022-08-18 12:26:55 -07:00
James Muehlner 593cfaaffe GUACAMOLE-1661: Match by both user and domain when using KEEPER_USER_ tokens. 2022-08-10 23:49:59 +00:00