summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* First install script commitSimo Sorce2014-03-203-1/+36
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix minor syntax issues in saml2 providerSimo Sorce2014-03-192-2/+2
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove unused import and fix syntaxSimo Sorce2014-03-191-2/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample spec fileSimo Sorce2014-03-131-0/+60
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix default and example pathsSimo Sorce2014-03-134-12/+10
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix install of data files.Simo Sorce2014-03-131-4/+16
| | | | | | | Move doc and examples under appropriate directory. Crate data directry for templates and ui static files. Signed-off-by: Simo Sorce <simo@redhat.com>
* Better handling of configuration fileSimo Sorce2014-03-131-1/+11
| | | | | | | allow to pass it on the command line or to look for it in well known locations. Signed-off-by: Simo Sorce <simo@redhat.com>
* Improve exceptions for saml2 providersSimo Sorce2014-03-023-20/+26
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add ability to strip domain/realm per providerSimo Sorce2014-03-022-2/+9
| | | | | | | | | This allows to return (hopefully) the same name whether the user authenticated via ESSO or form based authentication. Crude for now, may be augmented with some regex configuration in the future. Signed-off-by: Simo Sorce <simo@redhat.com>
* Unsplit checking functionsSimo Sorce2014-03-021-12/+6
| | | | | | Easier to deal with stuff if they are a single validation function. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add a way to return the email address of the userSimo Sorce2014-03-023-0/+20
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to return Kerberos nameid if availableSimo Sorce2014-03-022-3/+8
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to save user data after loginSimo Sorce2014-03-021-1/+7
| | | | | | | The login manager that successfully authenticated the user can now pass data to be stored in the user facility of the session. Signed-off-by: Simo Sorce <simo@redhat.com>
* Create a user facility in the sessionSimo Sorce2014-03-021-9/+13
| | | | | | | This way all identification data about the user can be managed in a single place and be erased/replaced at login time. Signed-off-by: Simo Sorce <simo@redhat.com>
* Check the NameID policy during authenticationSimo Sorce2014-03-022-7/+33
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Service Provider classSimo Sorce2014-02-264-4/+153
| | | | | | This class allows to represent a service provider and its associated policy Signed-off-by: Simo Sorce <simo@redhat.com>
* Add authentication exception supportSimo Sorce2014-02-261-5/+30
| | | | | | This also add code to return an error code to the SP. Signed-off-by: Simo Sorce <simo@redhat.com>
* Initial SAML2 providerSimo Sorce2014-02-245-2/+379
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to tell if the session is anonymousSimo Sorce2014-02-241-0/+6
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add provider plugins loaderSimo Sorce2014-02-246-1/+166
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Use cherrypy handlers to render error pagesSimo Sorce2014-02-247-34/+92
| | | | | | | Replaces custom code to render 401 Unauthorized page as well as adds 400 and 500 handlers Signed-off-by: Simo Sorce <simo@redhat.com>
* Better session management at loginSimo Sorce2014-02-241-8/+16
| | | | | | | | | Save data bout the prformed authentication Do not destroy the whole session at login, providers may need to store data before the user is authenticate and retrieve it later if authentication ws successful. Signed-off-by: Simo Sorce <simo@redhat.com>
* Improve handing of session dataSimo Sorce2014-02-241-2/+31
| | | | | | | Add functions to store data in an organized way so that multiple plugins can store data w/o stomping on each other. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add _debug facility to the Page classSimo Sorce2014-02-242-7/+7
| | | | | | | Use this instead of th misleading "_log" name. These really are just debugging statements not normal logging. Signed-off-by: Simo Sorce <simo@redhat.com>
* Move default template arguments to its own functionSimo Sorce2014-02-241-1/+11
| | | | | | | This way it is clearer what the defaults are, plus subclasses can override the defaults if they so choose. Signed-off-by: Simo Sorce <simo@redhat.com>
* Log available login managersSimo Sorce2014-02-241-0/+3
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix master-admin template upper left corner hrefSimo Sorce2014-02-241-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add initial design documentSimo Sorce2014-02-241-0/+57
| | | | | | | For now, very high level direction of the project and intended high level architecture. Signed-off-by: Simo Sorce <simo@redhat.com>
* Apply patternfly to administration pagesPetr Vobornik2014-02-174-78/+110
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Initialize plugins in order defined in DBPetr Vobornik2014-02-171-3/+3
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Krb pagePetr Vobornik2014-02-171-20/+7
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* PAM pagePetr Vobornik2014-02-172-55/+83
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Login root pagePetr Vobornik2014-02-171-24/+6
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Unauthorized pagePetr Vobornik2014-02-174-3/+43
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Root pagesPetr Vobornik2014-02-173-66/+43
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Master templatePetr Vobornik2014-02-171-0/+28
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Signed-off-by: Simo Sorce <simo@redhat.com>
* Add imagesPetr Vobornik2014-02-174-0/+68
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove old CSSPetr Vobornik2014-02-171-42/+0
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Regenerate CSSPetr Vobornik2014-02-172-0/+2
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Make CSS from LESSPetr Vobornik2014-02-171-0/+13
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add own stylesPetr Vobornik2014-02-173-0/+232
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add 3rd party Javascript librariesPetr Vobornik2014-02-173-0/+11
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add PatternFly filesPetr Vobornik2014-02-178-0/+1045
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add Boostrap filesPetr Vobornik2014-02-1740-0/+7395
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add help text to be shown on form based login pageSimo Sorce2014-01-272-0/+13
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add infrastructure to configure serverSimo Sorce2014-01-247-2/+215
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample apache configurationSimo Sorce2014-01-241-0/+26
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Kerberos Negotiate auth pluginSimo Sorce2014-01-242-0/+100
| | | | | | | | | | | | | | | | | | | | | | | | This plugin depends on the proper configuration of mod_auth_kerb The mod_auth_kerb plugin should be configured with a <Location> directive like the folowing: <Location /idp/login/krb/negotiate> AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on KrbMethodK5Passwd off KrbServiceName HTTP KrbAuthRealms $REALM_NAME Krb5KeyTab $KEYTAB_NAME KrbSaveCredentials off KrbConstrainedDelegation off Require valid-user ErrorDocument 401 /idp/login/krb/unauthorized </Location> Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample pam based login pluginSimo Sorce2014-01-242-0/+147
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Implement login plugin infrastructureSimo Sorce2014-01-2410-24/+239
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>