Ivan Dyachkov
|
28a577ad09
|
chore: bump apps versions
|
2023-11-14 11:02:26 +01:00 |
|
Zaiming (Stone) Shi
|
d603de10e6
|
refactor(schema): add namespace/0 to all schema modules
|
2023-11-10 13:41:51 +01:00 |
|
Zaiming (Stone) Shi
|
7b59d46854
|
fix(schema): add namesapce to sso schema
|
2023-11-10 13:41:51 +01:00 |
|
firest
|
9b4def885a
|
chore: change the LDAP integration to opensource
|
2023-10-12 16:37:32 +08:00 |
|
firest
|
e07937a3ef
|
fix(ldap): escape the escape character (\)
|
2023-10-10 13:49:36 +08:00 |
|
Zaiming (Stone) Shi
|
9ab49a7ae3
|
Merge remote-tracking branch 'origin/master' into 0919-auth-refactor
|
2023-10-09 14:18:10 +02:00 |
|
firest
|
b2a6724dc2
|
fix(ldap): improve the filter lex && parse
1. auto escape special chars in the filter
2. fix a bug that the value can't be `dn`
|
2023-10-08 18:39:20 +08:00 |
|
Ilya Averyanov
|
398a62031e
|
chore: update app versions
|
2023-10-05 13:41:50 +03:00 |
|
Ilya Averyanov
|
1eb75b43c4
|
chore(auth): split emqx_authn and emqx_authz apps
|
2023-10-05 13:41:50 +03:00 |
|
Zaiming (Stone) Shi
|
02ef854f0f
|
fix(ldap): no crash when no query result is empty list
|
2023-09-29 08:54:41 +02:00 |
|
Zaiming (Stone) Shi
|
4a4730ad46
|
fix(ldap): handle invalidCredentials in ldap authn
|
2023-09-29 00:51:05 +02:00 |
|
Zaiming (Stone) Shi
|
9ee2cb9c79
|
fix(ldap): return unrecoverable_error if more than on match found
|
2023-09-28 23:58:34 +02:00 |
|
Zaiming (Stone) Shi
|
cc5dab1dc7
|
chore: fix code style
|
2023-09-28 21:29:59 +02:00 |
|
Zaiming (Stone) Shi
|
922d5a9a83
|
fix(ldap): do not allow multi-matches to proceed
if ldap query returns more than on match
we should reject the auth request instead of picking
the first one
|
2023-09-28 21:20:50 +02:00 |
|
Zaiming (Stone) Shi
|
d858f8af39
|
test: fix openldap docker runs
|
2023-09-28 18:40:03 +02:00 |
|
Zaiming (Stone) Shi
|
b28e781c50
|
fix(ldap-sso): do not log error level when invalid user credentials
|
2023-09-28 18:37:11 +02:00 |
|
firest
|
43ea367df8
|
fix(ldap): use the search result as bind target
|
2023-09-28 18:49:00 +08:00 |
|
JianBo He
|
ece7d5b52a
|
Merge pull request #11690 from lafirest/fix/ldap_parse_cfg
fix(ldap): improve the LDAP `parse_config` function
|
2023-09-28 10:24:52 +08:00 |
|
firest
|
57781d0544
|
fix(ldap): remove the parse_config, it never work
|
2023-09-28 09:38:16 +08:00 |
|
firest
|
b2699c687b
|
fix(sso): support for SSL update && ensure update is atomic
1. support update SSL key and cert files
2. increase connection timeout
3. ensure the update is atomicity, everything will be consistent
|
2023-09-27 15:48:11 +08:00 |
|
firest
|
0c33df3912
|
fix(ldap): improve the LDAP `parse_config` function
|
2023-09-26 23:28:37 +08:00 |
|
firest
|
8135e27586
|
fix: redact sensitive data in SSO and LDAP
|
2023-09-26 11:06:47 +08:00 |
|
Ivan Dyachkov
|
dafd7c6085
|
chore: bump apps versions
|
2023-09-21 10:58:42 +02:00 |
|
firest
|
61311081d8
|
fix(sso): fix RBAC test errors && spellcheck
|
2023-09-20 10:42:17 +08:00 |
|
firest
|
285e529766
|
fix(sso): fix sso errors found when manual test
|
2023-09-19 19:15:52 +08:00 |
|
firest
|
0846939760
|
fix(ldap): remove unused code and mark sensitive field
|
2023-09-15 10:13:07 +08:00 |
|
firest
|
afbf13b8a2
|
feat(ldap): integrate authentication with LDAP bind operation
|
2023-09-14 14:10:43 +08:00 |
|
Zaiming (Stone) Shi
|
18c6bfec97
|
chore: bump app vsns
|
2023-09-06 11:12:56 +02:00 |
|
firest
|
6085442958
|
fix(ldap): expose request_timeout to prevent infinite hang
|
2023-08-24 16:50:38 +08:00 |
|
lafirest
|
7b8a599d17
|
Merge pull request #11486 from lafirest/fix/ldap_autn_wrong_pw
fix(ldap): Return correct reason code when password is wrong
|
2023-08-22 18:53:17 +08:00 |
|
lafirest
|
f8f39bf223
|
Merge pull request #11490 from lafirest/fix/absent_pw
fix(authn): quickly return when the password is absent in password-based authentication
|
2023-08-22 18:52:58 +08:00 |
|
firest
|
184e03387a
|
fix(ldap): fix status detection and auto reconnecting errors
|
2023-08-22 17:06:00 +08:00 |
|
firest
|
b0c5b447a4
|
fix(authn): quickly return when the password is absent in password-based authentication
|
2023-08-22 11:49:32 +08:00 |
|
firest
|
037b0a7599
|
fix(ldap): Return correct reason code when password is wrong
|
2023-08-22 09:42:04 +08:00 |
|
Ilya Averyanov
|
ed67303281
|
Merge pull request #11382 from savonarola/0801-auth-refactor
Auth refactor stage 1
|
2023-08-21 00:24:15 +03:00 |
|
Ilya Averyanov
|
abcdf18ca4
|
chore(auth): update ldap authn test
|
2023-08-16 20:41:05 +03:00 |
|
firest
|
0b066fa20c
|
fix(ldap): fix dependency problem
|
2023-08-14 16:59:37 +08:00 |
|
firest
|
177ec161a1
|
fix(ldap): improve configuration name and docs
|
2023-08-09 09:39:57 +08:00 |
|
firest
|
0571fd8cac
|
feat(ldap-authz): integrate the LDAP authorization
|
2023-08-04 18:14:01 +08:00 |
|
firest
|
7055eafb91
|
fix(ldap): fix license date and some minor problems
|
2023-08-04 11:01:13 +08:00 |
|
firest
|
efff585b82
|
feat(ldap-authn): add test suite for the LDAP authenticator
|
2023-08-03 18:56:41 +08:00 |
|
firest
|
18b3db336a
|
fix(ldap-authn): remove slat-related configs since they conflict with RFC 3123
|
2023-08-03 11:00:42 +08:00 |
|
firest
|
c041216ec0
|
feat(authn): integrate the LDAP authentication
|
2023-08-02 19:19:17 +08:00 |
|
firest
|
9bb5c9de33
|
fix(ldap): make elvis happy
|
2023-08-02 11:02:02 +08:00 |
|
firest
|
b2f3ac9967
|
fix(ldap): fix newline error && correcting files header
|
2023-08-02 10:07:27 +08:00 |
|
firest
|
f98f97f37e
|
feat(ldap): set test env and add test suites
|
2023-08-01 18:49:54 +08:00 |
|
firest
|
8c9b136d15
|
fix(ldap): integrate parser and fix lexer errors
|
2023-08-01 18:49:54 +08:00 |
|
firest
|
fa6343cc80
|
feat(ldap): add LDAP connector
|
2023-08-01 18:49:54 +08:00 |