summaryrefslogtreecommitdiffstats
path: root/ipsilon/login
Commit message (Collapse)AuthorAgeFilesLines
...
* Add 500 Error handler for krb moduleSimo Sorce2014-05-071-0/+2
| | | | | | | If mod_auth_kerb encounters an internal error, catch it so we can fall back to the next authentication module, if any, or return a proper failure message. Signed-off-by: Simo Sorce <simo@redhat.com>
* Make SELinux happySimo Sorce2014-05-011-0/+9
| | | | | | | | | | Add proper context to shared state directories so that httpd can write there. Relax SElinux boolans to allow use of pam modules This allows running Ipsilon in fully enforcing mode when pam auth using the python-pam modules is used. Signed-off-by: Simo Sorce <simo@redhat.com>
* Make it easy to install mutiple server instancesSimo Sorce2014-04-211-13/+10
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Refactor login plugin enablement codeSimo Sorce2014-03-281-12/+60
| | | | | | | This allows us to finally implement the plugin enable/disable configuration buttons and enable/disable plugins on the fly. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add PAM configuration codeSimo Sorce2014-03-201-3/+24
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Krb configuration codeSimo Sorce2014-03-201-0/+66
|
* Add server-install plugin configuration supportSimo Sorce2014-03-203-0/+44
| | | | | | | Automatically find plugins installed in the system and exposes their installation and configuration functions through the installer. Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove unused import and fix syntaxSimo Sorce2014-03-191-2/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to return Kerberos nameid if availableSimo Sorce2014-03-021-2/+4
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to save user data after loginSimo Sorce2014-03-021-1/+7
| | | | | | | The login manager that successfully authenticated the user can now pass data to be stored in the user facility of the session. Signed-off-by: Simo Sorce <simo@redhat.com>
* Use cherrypy handlers to render error pagesSimo Sorce2014-02-241-2/+1
| | | | | | | Replaces custom code to render 401 Unauthorized page as well as adds 400 and 500 handlers Signed-off-by: Simo Sorce <simo@redhat.com>
* Better session management at loginSimo Sorce2014-02-241-8/+16
| | | | | | | | | Save data bout the prformed authentication Do not destroy the whole session at login, providers may need to store data before the user is authenticate and retrieve it later if authentication ws successful. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add _debug facility to the Page classSimo Sorce2014-02-241-7/+3
| | | | | | | Use this instead of th misleading "_log" name. These really are just debugging statements not normal logging. Signed-off-by: Simo Sorce <simo@redhat.com>
* Log available login managersSimo Sorce2014-02-241-0/+3
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Initialize plugins in order defined in DBPetr Vobornik2014-02-171-3/+3
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* PAM pagePetr Vobornik2014-02-171-20/+41
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Unauthorized pagePetr Vobornik2014-02-171-3/+3
| | | | | Signed-off-by: Petr Vobornik <pvoborni@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add help text to be shown on form based login pageSimo Sorce2014-01-271-0/+10
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Kerberos Negotiate auth pluginSimo Sorce2014-01-241-0/+80
| | | | | | | | | | | | | | | | | | | | | | | | This plugin depends on the proper configuration of mod_auth_kerb The mod_auth_kerb plugin should be configured with a <Location> directive like the folowing: <Location /idp/login/krb/negotiate> AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on KrbMethodK5Passwd off KrbServiceName HTTP KrbAuthRealms $REALM_NAME Krb5KeyTab $KEYTAB_NAME KrbSaveCredentials off KrbConstrainedDelegation off Require valid-user ErrorDocument 401 /idp/login/krb/unauthorized </Location> Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample pam based login pluginSimo Sorce2014-01-241-0/+114
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Implement login plugin infrastructureSimo Sorce2014-01-242-0/+114
Signed-off-by: Simo Sorce <simo@redhat.com>
generated by cgit (git 2.34.1) at 2024-09-22 23:47:54 +0000