Commit Graph
204 Commits
Author SHA1 Message Date
Michael Jumper fe7492292d GUACAMOLE-938: Use STARTTLS for "ldap://..." URLs if main LDAP connection uses STARTTLS. 2020-01-26 07:46:41 -08:00
Michael Jumper cb53b17afb GUACAMOLE-938: Refactor LDAP connect/bind process such that the same code is used for all LDAP connection attempts, including referrals. 2020-01-25 14:36:30 -08:00
Michael Jumper 15b631514d GUACAMOLE-938: Remove disconnect() utility function. Closing an LdapNetworkConnection cannot throw an IOException. 2020-01-24 22:52:17 -08:00
Michael Jumper 5c2f44ae3a GUACAMOLE-936: Clean up referral logic and logging. Ensure associated LDAP connections are always closed. 2020-01-24 01:12:00 -08:00
Michael Jumper 2cb0efeda6 GUACAMOLE-937: Return null on bindAs() failures. Rely on caller to interpret and handle failures.
Throwing GuacamoleInvalidCredentialsException breaks separation of
concerns (bindAs() shouldn't assume that it's being used during login
and that credentials given are the Guacamole user's credentials), and
has unintended side effects (throwing subclasses of
GuacamoleUnauthorizedException causes implicit session invalidation).
2020-01-23 23:24:47 -08:00
Michael Jumper 00327706b0 GUACAMOLE-936: Each LdapNetworkConnection must be closed or threads are leaked, causing Tomcat to fail to shutdown. 2020-01-22 22:07:11 -08:00
Michael Jumper 76c1b0f9bb GUACAMOLE-929: Update copyright date to 2020. 2020-01-19 13:39:54 -08:00
Virtually Nick a037146a87 GUACAMOLE-893: Fix issue where just checking for attribute presence. 2019-10-10 20:53:07 -04:00
Virtually Nick 10b3adcd83 GUACAMOLE-893: Fix regression in LDAP causing null filter value to be sent. 2019-10-09 14:53:34 -04:00
Mike Jumper 981adc94e6 GUACAMOLE-699: Merge changes bringing German translations up-to-date. 2019-09-09 18:52:53 -07:00
Nick Couchman 610ed6934e GUACAMOLE-234: Fix bind issue that occurs using try-with-resources. 2019-08-26 11:19:35 -04:00
leetxyz 5ac68c3f72 GUACAMOLE-699: Fix language ordering, add de.json to auth-jdbc-*, fix intendation 2019-08-15 18:09:30 +02:00
Virtually Nick 749da7d29c GUACAMOLE-234: Fix resource leaks in new LDAP code. 2019-08-12 13:03:31 -04:00
Virtually Nick 11f7a7f3c7 GUACAMOLE-234: Update license files. 2019-08-11 18:37:43 -04:00
Virtually Nick 8b172a98fc GUACAMOLE-234: Fix style, debug messages, and logger output. 2019-08-10 22:14:56 -04:00
Virtually Nick 8c1a3f3435 GUACAMOLE-234: Remove stray catch block. 2019-08-10 13:57:51 -04:00
Virtually Nick 5ea518a390 GUACAMOLE-234: Update to latest available Apache Directory API. 2019-08-10 13:57:51 -04:00
Nick Couchman ed568b1f55 GUACAMOLE-234: Tweaks to handling bind requests/failures. 2019-08-10 13:57:51 -04:00
Nick Couchman 742b0c4e65 GUACAMOLE-234: Correctly handle bind failure. 2019-08-10 13:57:51 -04:00
Nick Couchman 791cfeabbb GUACAMOLE-234: Only try LDAP bind if user authenticated with LDAP. 2019-08-10 13:57:51 -04:00
Nick Couchman fc5c4c538e GUACAMOLE-234: Don't close the connection after bind. 2019-08-10 13:57:51 -04:00
Nick Couchman d7d622051f GUACAMOLE-234: Change EqualityNode to PresenceNode for wildcard objectClass. 2019-08-10 13:57:51 -04:00
Nick Couchman 72dad76d42 GUACAMOLE-234: Adjust LDAP filters. 2019-08-10 13:57:51 -04:00
Nick Couchman 7825f57b99 GUACAMOLE-234: Correct counter for referral hops. 2019-08-10 13:57:51 -04:00
Nick Couchman 7a17b7f935 GUACAMOLE-234: Add storage for the LDAP Bind DN to LDAPAuthenticateduser. 2019-08-10 13:57:51 -04:00
Nick Couchman d0b1d7639e GUACAMOLE-234: Clean up comments, instanceof, and type-casting. 2019-08-10 13:57:09 -04:00
Nick Couchman 4aa4489b78 GUACAMOLE-234: Correct LDAP filter mispelling. 2019-08-10 13:56:12 -04:00
Nick Couchman 288fcb5e13 GUACAMOLE-234: Exclude slf4j from Apache Directory dependency. 2019-08-10 13:56:11 -04:00
Nick Couchman 41e3b8ca56 GUACAMOLE-234: Clean up comments. 2019-08-10 13:56:11 -04:00
Nick Couchman 5777d93fdc GUACAMOLE-234: Clean up some LDAP implementation details. 2019-08-10 13:56:11 -04:00
Nick Couchman 2f1fac51af GUACAMOLE-234: Convert LDAP extension to use Apache Directory LDAP API. 2019-08-10 13:56:11 -04:00
Virtually Nick 9c26a7613c GUACAMOLE-579: Remove unnecessary JUnit dependencies. 2019-06-22 20:02:46 -04:00
Virtually Nick a6601a2bfd GUACAMOLE-579: Change fromAttribute to canonicalize 2019-06-21 12:54:42 -04:00
Virtually Nick d8db630dbd GUACAMOLE-579: Clean up comments, implement convenience method for tokens without a prefix, and remove unneeded classes. 2019-06-20 20:41:41 -04:00
Nick Couchman 55c4144fbf GUACAMOLE-579: Parse tokens from attributes provided by the CAS server. 2019-06-20 19:52:06 -04:00
Michael Jumper 1c1fac700c GUACAMOLE-807: Correct handling of parameter tokens within LDAP.
Parameter tokens are intended to be interpreted by the connections
stored within LDAP. This was previously done through explicitly using a
TokenFilter and the StandardTokens class, however usage of
StandardTokens is now deprecated and the values of tokens to be applied
are now expected to be received through connect(). Usage of
StandardTokens was removed from LDAP with commit 1210d56, but this is
insufficient. An additional parameter must also be provided to the
SimpleConnection constructor to enable its automatic token handling
behavior.
2019-06-07 08:39:30 -07:00
Michael Jumper c3fbf44f70 GUACAMOLE-729: Bump version numbers to 1.1.0. 2019-02-09 11:08:28 -08:00
Joel Best 93d80418ba GUACAMOLE-717: Handle LDAPException gracefully when processing LDAP search results 2019-01-25 20:36:43 -05:00
Nick Couchman af2ef32fc3 GUACAMOLE-693: Update copyright year to 2019. 2019-01-23 17:12:45 -05:00
James Muehlner d4f58f2c0d Merge changes from 1.0.0 back to master. 2018-11-08 22:18:28 -08:00
Michael Jumper 95b5fdccdc GUACAMOLE-656: Explicitly depend on maven-surefire-plugin 3.0.0-M1 due to SUREFIRE-1588. 2018-11-08 22:09:35 -08:00
James Muehlner 756ec2fcc4 Merge 1.0.0 changes back to master. 2018-11-08 21:26:43 -08:00
Michael Jumper b355106c77 GUACAMOLE-220: Remove unnecessary explicit type parameters. 2018-11-08 20:11:17 -08:00
Michael Jumper a4d6f62df0 GUACAMOLE-220: Reword description of getGroupSearchFilter() to be less brain-meltingly difficult to read. 2018-11-08 19:55:49 -08:00
Michael Jumper 83033cad65 GUACAMOLE-220: Use JavaDoc "{@link Map}" to point to Map interface. 2018-11-08 19:45:25 -08:00
Michael Jumper d10256e151 GUACAMOLE-220: Deprecate built-in support for storage of permissions in SimpleUser. Add convenience constructors for SimpleObjectPermissionSet. 2018-11-03 13:58:50 -07:00
Michael Jumper aa0c654231 GUACAMOLE-220: Retrieve user groups from LDAP. Take immediate group membership into account. 2018-11-03 12:41:54 -07:00
Michael Jumper bdc792603d GUACAMOLE-220: Add configuration property for setting the attributes which uniquely identify user groups within LDAP. 2018-11-03 12:41:54 -07:00
Michael Jumper 7c57b448bb GUACAMOLE-220: Define generic service for executing LDAP queries. Refactor existing services to remove common code. 2018-11-03 12:41:54 -07:00
Michael Jumper 13e2b06666 GUACAMOLE-524: Switch to "LDAP_" prefix for LDAP user attribute tokens. 2018-10-05 12:54:00 -07:00