firest
|
e9febf231f
|
fix(ldap): lower the log level of LDAB to `debug`
|
2024-03-13 19:20:40 +08:00 |
|
Thales Macedo Garitezi
|
0dd9990f24
|
Merge remote-tracking branch 'origin/release-55' into sync-r55-r56-20240304
|
2024-03-04 09:44:30 -03:00 |
|
firest
|
b9f644c355
|
fix(ldap): fixed that the connection to the LDAP connector could be disconnected after a period of time
|
2024-02-28 21:46:03 +08:00 |
|
firest
|
f3237a1bf7
|
chore: bump emqx_ldap version
|
2024-02-27 17:48:34 +08:00 |
|
firest
|
5c69500c52
|
fix(ldap): fix that logs of eldap will never be logged
|
2024-02-27 17:48:22 +08:00 |
|
firest
|
da13ec736c
|
chore: bump emqx_ldap version
|
2024-02-27 16:08:47 +08:00 |
|
firest
|
6e73cfa2cf
|
fix(ldap): fix that logs of eldap will never be logged
|
2024-02-27 15:47:46 +08:00 |
|
Zaiming (Stone) Shi
|
46877e979b
|
chore: update copyright-year
|
2024-02-23 08:21:06 +01:00 |
|
JimMoen
|
5e100f52b8
|
style: erlfmt all `rebar.config` files and `bin/nodetool`
|
2023-12-29 09:08:03 +08:00 |
|
Zaiming (Stone) Shi
|
423b586c56
|
fix(dialyzer): fix some dialyzer issues found on otp 26
|
2023-12-06 20:32:49 +01:00 |
|
Ivan Dyachkov
|
9fd2fa95a8
|
chore: bump apps versions
|
2023-11-30 20:01:12 +01:00 |
|
Ivan Dyachkov
|
7c0e345d3a
|
Merge remote-tracking branch 'upstream/release-54'
|
2023-11-14 19:38:21 +01:00 |
|
Ivan Dyachkov
|
28a577ad09
|
chore: bump apps versions
|
2023-11-14 11:02:26 +01:00 |
|
Andrew Mayorov
|
06861e377f
|
feat(ldap): accept wrapped secrets as passwords
|
2023-11-14 16:05:52 +07:00 |
|
Zaiming (Stone) Shi
|
d603de10e6
|
refactor(schema): add namespace/0 to all schema modules
|
2023-11-10 13:41:51 +01:00 |
|
Zaiming (Stone) Shi
|
7b59d46854
|
fix(schema): add namesapce to sso schema
|
2023-11-10 13:41:51 +01:00 |
|
firest
|
cbfd02d1b0
|
refactor(ldap): merge the `ldap-bind` backend as a type for the `ldap` backend
|
2023-10-26 11:04:44 +08:00 |
|
firest
|
9b4def885a
|
chore: change the LDAP integration to opensource
|
2023-10-12 16:37:32 +08:00 |
|
firest
|
e07937a3ef
|
fix(ldap): escape the escape character (\)
|
2023-10-10 13:49:36 +08:00 |
|
Zaiming (Stone) Shi
|
9ab49a7ae3
|
Merge remote-tracking branch 'origin/master' into 0919-auth-refactor
|
2023-10-09 14:18:10 +02:00 |
|
firest
|
b2a6724dc2
|
fix(ldap): improve the filter lex && parse
1. auto escape special chars in the filter
2. fix a bug that the value can't be `dn`
|
2023-10-08 18:39:20 +08:00 |
|
Ilya Averyanov
|
398a62031e
|
chore: update app versions
|
2023-10-05 13:41:50 +03:00 |
|
Ilya Averyanov
|
1eb75b43c4
|
chore(auth): split emqx_authn and emqx_authz apps
|
2023-10-05 13:41:50 +03:00 |
|
Zaiming (Stone) Shi
|
02ef854f0f
|
fix(ldap): no crash when no query result is empty list
|
2023-09-29 08:54:41 +02:00 |
|
Zaiming (Stone) Shi
|
4a4730ad46
|
fix(ldap): handle invalidCredentials in ldap authn
|
2023-09-29 00:51:05 +02:00 |
|
Zaiming (Stone) Shi
|
9ee2cb9c79
|
fix(ldap): return unrecoverable_error if more than on match found
|
2023-09-28 23:58:34 +02:00 |
|
Zaiming (Stone) Shi
|
cc5dab1dc7
|
chore: fix code style
|
2023-09-28 21:29:59 +02:00 |
|
Zaiming (Stone) Shi
|
922d5a9a83
|
fix(ldap): do not allow multi-matches to proceed
if ldap query returns more than on match
we should reject the auth request instead of picking
the first one
|
2023-09-28 21:20:50 +02:00 |
|
Zaiming (Stone) Shi
|
d858f8af39
|
test: fix openldap docker runs
|
2023-09-28 18:40:03 +02:00 |
|
Zaiming (Stone) Shi
|
b28e781c50
|
fix(ldap-sso): do not log error level when invalid user credentials
|
2023-09-28 18:37:11 +02:00 |
|
firest
|
43ea367df8
|
fix(ldap): use the search result as bind target
|
2023-09-28 18:49:00 +08:00 |
|
JianBo He
|
ece7d5b52a
|
Merge pull request #11690 from lafirest/fix/ldap_parse_cfg
fix(ldap): improve the LDAP `parse_config` function
|
2023-09-28 10:24:52 +08:00 |
|
firest
|
57781d0544
|
fix(ldap): remove the parse_config, it never work
|
2023-09-28 09:38:16 +08:00 |
|
firest
|
b2699c687b
|
fix(sso): support for SSL update && ensure update is atomic
1. support update SSL key and cert files
2. increase connection timeout
3. ensure the update is atomicity, everything will be consistent
|
2023-09-27 15:48:11 +08:00 |
|
firest
|
0c33df3912
|
fix(ldap): improve the LDAP `parse_config` function
|
2023-09-26 23:28:37 +08:00 |
|
firest
|
8135e27586
|
fix: redact sensitive data in SSO and LDAP
|
2023-09-26 11:06:47 +08:00 |
|
Ivan Dyachkov
|
dafd7c6085
|
chore: bump apps versions
|
2023-09-21 10:58:42 +02:00 |
|
firest
|
61311081d8
|
fix(sso): fix RBAC test errors && spellcheck
|
2023-09-20 10:42:17 +08:00 |
|
firest
|
285e529766
|
fix(sso): fix sso errors found when manual test
|
2023-09-19 19:15:52 +08:00 |
|
firest
|
0846939760
|
fix(ldap): remove unused code and mark sensitive field
|
2023-09-15 10:13:07 +08:00 |
|
firest
|
afbf13b8a2
|
feat(ldap): integrate authentication with LDAP bind operation
|
2023-09-14 14:10:43 +08:00 |
|
Zaiming (Stone) Shi
|
18c6bfec97
|
chore: bump app vsns
|
2023-09-06 11:12:56 +02:00 |
|
firest
|
6085442958
|
fix(ldap): expose request_timeout to prevent infinite hang
|
2023-08-24 16:50:38 +08:00 |
|
lafirest
|
7b8a599d17
|
Merge pull request #11486 from lafirest/fix/ldap_autn_wrong_pw
fix(ldap): Return correct reason code when password is wrong
|
2023-08-22 18:53:17 +08:00 |
|
lafirest
|
f8f39bf223
|
Merge pull request #11490 from lafirest/fix/absent_pw
fix(authn): quickly return when the password is absent in password-based authentication
|
2023-08-22 18:52:58 +08:00 |
|
firest
|
184e03387a
|
fix(ldap): fix status detection and auto reconnecting errors
|
2023-08-22 17:06:00 +08:00 |
|
firest
|
b0c5b447a4
|
fix(authn): quickly return when the password is absent in password-based authentication
|
2023-08-22 11:49:32 +08:00 |
|
firest
|
037b0a7599
|
fix(ldap): Return correct reason code when password is wrong
|
2023-08-22 09:42:04 +08:00 |
|
Ilya Averyanov
|
ed67303281
|
Merge pull request #11382 from savonarola/0801-auth-refactor
Auth refactor stage 1
|
2023-08-21 00:24:15 +03:00 |
|
Ilya Averyanov
|
abcdf18ca4
|
chore(auth): update ldap authn test
|
2023-08-16 20:41:05 +03:00 |