summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* In dist-git / Fedora CI testing, we also need the proper SELinux configuration.HEADmasterJan Pazdziora2022-07-082-1/+5
|
* Add testing on CentOS 9 Stream.Jan Pazdziora2022-07-082-0/+2
|
* Tagging 1.2.0 release.mod_intercept_form_submit-1.2.0Jan Pazdziora2022-02-171-1/+5
|
* In mod_authnz_pam 1.2.3, the default redirect status was changed from 307 to ↵Jan Pazdziora2022-02-171-3/+3
| | | | | | | 303. So the actual result we get in tests depends on the mod_authnz_pam version in given distribution.
* Add test for InterceptFormLoginSkip.Jan Pazdziora2022-01-303-0/+6
|
* Add test of EXTERNAL_AUTH_ERROR.Jan Pazdziora2022-01-303-3/+5
|
* Check that password is redacted in the POSTed data even if authentication ↵Jan Pazdziora2022-01-301-0/+1
| | | | failed.
* Use the httpd-provided ap_unescape_urlencoded to parse data.Jan Pazdziora2022-01-301-48/+5
|
* Not all systems support badname.Jan Pazdziora2022-01-302-6/+17
|
* Test input encoding handling.Jan Pazdziora2022-01-302-0/+6
|
* No redacting beyond EOS.Jan Pazdziora2022-01-301-0/+3
|
* When we start looking for new fragment, the last fragment_start_bucket is ↵Jan Pazdziora2022-01-301-0/+1
| | | | irrelevant as well.
* No need to play with two brigades.Jan Pazdziora2022-01-301-6/+4
|
* Data was allocated via apr_pstrcat, it is a pool bucket.Jan Pazdziora2022-01-301-1/+1
|
* Do fragment allocation using pool.Jan Pazdziora2022-01-301-9/+10
|
* Minimize packages that have to be pulled in.Jan Pazdziora2022-01-301-2/+2
|
* Catch warnings.Jan Pazdziora2022-01-301-1/+1
|
* Ensure we do not work with memory that was already freed (and reused).Jan Pazdziora2022-01-301-0/+5
| | | | | | | | | When mod_authnz_pam does redirect for AuthPAMExpiredRedirect, the remaining input gets slurped from the r->input_filters by ap_send_error_response() and ctx->cached_brigade is cleared from our filter and memory reclaimed. The ctx->password_fragment_start_bucket is then no longer valid because the memory was released and reclaimed, and there is no point attempting to redact the password.
* Add test for AuthPAMExpiredRedirect behaviour.Jan Pazdziora2022-01-302-0/+15
|
* Add basic testing of the mod_intercept_form_submit modules.Jan Pazdziora2022-01-309-0/+140
| | | | The chmod g+r /etc/shadow approach is obviously only for testing.
* https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Req ↵Jan Pazdziora2018-02-231-1/+5
| | | | uires
* Tagging 1.1.0 release.mod_intercept_form_submit-1.1.0Jan Pazdziora2016-11-231-1/+4
|
* Put the name of the module to the start of the message on Apache 2.4.Jan Pazdziora2016-11-231-15/+26
|
* Prefer ap_log_rerror for messages related to a particular request.Jan Pazdziora2016-11-231-14/+14
|
* Add InterceptGETOnSuccess on|off.mod_intercept_form_submit-1.0.1Jan Pazdziora2016-05-064-12/+59
| | | | | | | | When the authentication using the POST data passes, the method of the request is internally changed to GET. This stops applications and frameworks that insist on running their own authentication on POST irrespective of REMOTE_USER value to think that they process GET method.
* 1319094 - the Requires(pre) httpd does not seem to be needed.mod_intercept_form_submit-1.0.0Jan Pazdziora2016-03-211-2/+4
|
* Tagging 0.9.8 release.mod_intercept_form_submit-0.9.8Jan Pazdziora2014-06-301-1/+6
|
* 1109923 - For Apache 2.4, separate module loading from configuration.Jan Pazdziora2014-06-303-9/+14
|
* Document the runtime dependency on pam_authenticate_with_login_password.Jan Pazdziora2014-05-141-0/+22
|
* Removal of forgotten commented piece of code.Jan Pazdziora2014-05-141-1/+0
|
* Update .spec for 0.9.7.mod_intercept_form_submit-0.9.7Jan Pazdziora2014-05-131-1/+6
|
* The latest lookup_identity_hook is fixups/APR_HOOK_LAST while we are ↵Jan Pazdziora2014-05-122-19/+2
| | | | fixups/APR_HOOK_MIDDLE, no need to call explicitly.
* Compile to C99.Jan Pazdziora2014-05-091-1/+1
| | | | | | Addressing warning: ISO C90 forbids specifying subobject to initialize warning: ISO C90 forbids mixed declarations and code
* Fixing typo in documentation.Jan Pazdziora2014-04-161-1/+1
|
* Add support for InterceptFormLoginRealms.mod_intercept_form_submit-0.9.6Jan Pazdziora2014-04-153-2/+58
|
* Make the comment for filter_provides_in clearer.Jan Pazdziora2014-04-151-1/+2
| | | | | | | | | | MUST: Packages must not provide RPM dependency information when that information is not global in nature, or are otherwise handled (e.g. through a virtual provides system). e.g. a plugin package containing a binary shared library must not "provide" that library unless it is accessible through the system library paths. https://fedoraproject.org/wiki/Packaging:AutoProvidesAndRequiresFiltering#Summary
* Adding email address to changelog per ↵mod_intercept_form_submit-0.9.5Jan Pazdziora2014-01-301-34/+3
| | | | https://fedoraproject.org/wiki/Packaging:Guidelines#Changelogs.
* Using default Fedora build flags.Jan Pazdziora2014-01-301-1/+1
|
* Being specific about %files filename.Jan Pazdziora2014-01-301-1/+1
|
* Depend on httpd-mmn per ↵Jan Pazdziora2014-01-301-1/+2
| | | | https://fedoraproject.org/wiki/PackagingDrafts/ApacheHTTPModules#Run-Time_Dependencies.
* Dropping dot from summary per ↵Jan Pazdziora2014-01-301-1/+1
| | | | https://fedoraproject.org/wiki/Packaging:Guidelines#Tags.
* Amend documentation to show mod_authnz_pam loading.mod_intercept_form_submit-0.9.4Jan Pazdziora2014-01-163-5/+17
|
* Move the processing to the middle of the fixup phase to allow mod_headers to ↵mod_intercept_form_submit-0.9.3Jan Pazdziora2014-01-152-7/+12
| | | | process the result.
* If pam_authenticate_with_login_password is not available, skip calling it.mod_intercept_form_submit-0.9.2Jan Pazdziora2014-01-092-2/+11
|
* Declare all functions static for proper isolation.Jan Pazdziora2014-01-091-12/+12
|
* Use pam_authenticate_with_login_password from mod_authnz_pam.mod_intercept_form_submit-0.9.1Jan Pazdziora2014-01-093-62/+28
|
* In the log message, show the module name.Jan Pazdziora2013-12-061-2/+2
|
* Update .spec for version 0.9.mod_intercept_form_submit-0.9Jan Pazdziora2013-12-051-1/+5
|
* Strip parameters like charset from request's Content-Type.Jan Pazdziora2013-12-051-6/+14
|
* Unify the error reporting of PAM failures.Jan Pazdziora2013-11-211-18/+11
|