Merge pull request #14659 from nextcloud/backport/14644/stable14

[stable14] Remove sensitive SMB arguments from exception log

Remove sensitive SMB arguments from exception log

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14598 from nextcloud/backport/14425/stable14

[stable14] Do not calculate folder size for parent that also needs proper scan, fixes #3524

Merge pull request #14592 from nextcloud/backport/14464/stable14

[stable14] resolve user and groups in nested groups first before filtering the results

Merge pull request #14595 from nextcloud/backport/14587/stable14

[stable14] Remove Google+ from Social Sharing Bundle

Merge pull request #14600 from nextcloud/backport/14585/stable14

[stable14] Mention Open Cloud Mesh in Federated User Settings

Mention Open Cloud Mesh in Federated User Settings

Signed-off-by: Marius Blüm <marius@lineone.io>

Avoid calculating folder size for parent that needs scan.

Signed-off-by: Ari Selseng <ari@selseng.net>

Remove Google+ from Social Sharing Bundle (2)

Signed-off-by: Marius Blüm <marius@lineone.io>

Remove "socialsharing_googleplus" from Social Sharing Bundle

Signed-off-by: Marius Blüm <marius@lineone.io>

remove unused use statement

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

add missing config bits to integration tests

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

with LDAP server set offline, config cannot be controlled via ocs anymore

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

fix nested group retrieval also for 2 other cases

and also consolidate logic in one method

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fixed unit test: groupsMatchFilter will not be called multiple times anymore.

Signed-off-by: Roland Tapken <roland@bitarbeiter.net>

Reduce queries to LDAP by caching nested groups

Nested groups are now cached in a CappedMemoryCache object to reduce
queries to the LDAP backend.

Signed-off-by: Roland Tapken <roland@bitarbeiter.net>

user_ldap: really resolve nested groups

The previous patch fixed the problem only for one level of indirection
because groupsMatchFilter() had been applied on each recursive call (and
thus there would be no second level if the first level fails the check).

This new implementation replaces the recursive call with a stack that
iterates all nested groups before filtering with groupsMatchFilter().

Signed-off-by: Roland Tapken <roland@bitarbeiter.net>

user_ldap: Filter groups after nexted groups

Currently groupsMatchFilter is called before nested groups are resolved.
This basicly breaks this feature since it is not possible to inherit
membership in a group from another group.

Minimal example:

  Group filter: (&(objectClass=group),(cn=nextcloud))
  Nested groups: enabled

  cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local
    objectClass: group

  cn=IT,ou=groups,dn=company,dn=local
    objectClass: group
    memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local

  cn=John Doe,ou=users,dn=company,dn=local
    objectClass: person
    memberOf: cn=IT,ou=groups,dn=company,dn=local

Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group
filter, John wouldn't be a member of group 'nextcloud'.

This patch fixes this by filtering the groups after all nested groups
have been collected. If nested groups is disabled the result will be the
same as without this patch.

Signed-off-by: Roland Tapken <roland@bitarbeiter.net>

Merge pull request #14547 from nextcloud/backport/14373/stable14

[stable14] Add test for updated CA bundle

DRONE_BRANCH is the target branch. DRONE_COMMIT_REFSPEC should work.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Add test for updated CA bundle

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14543 from nextcloud/backport/14451/stable14

[stable14] Check if password can be changed for the users backend in OCS api

Merge pull request #14417 from nextcloud/backport/14343/stable14

[stable14] Parse multiple navigation items

Check if password can be changed for the users backend in OCS api

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #14533 from nextcloud/backport/14528/stable14

[stable14] Fix database configuration

Fix whitespaces

Signed-off-by: Joas Schilling <coding@schilljs.com>

Fix database configuration

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14513 from nextcloud/smb-3.0.2-14

update icewind/smb to 3.0.2

Merge pull request #14504 from nextcloud/backport/stable14/14390

[stable14] Fix expire date change eventhandler

update icewind/smb to 3.0.2

Signed-off-by: Robin Appelman <robin@icewind.nl>

Add handler for change event of the expire date field

Signed-off-by: Julius Härtl <jus@bitgrid.net>

Merge pull request #14498 from nextcloud/backport/14494/stable14

[stable14] Make header.feature more robust by running it on apache

Merge pull request #14496 from nextcloud/backport/14440/stable14

[stable14] Run tests that fail with "no such process" over to apache server

Make header.feature more robust by running it on apache

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Run tests that fail with "no such process" over to apache server

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14491 from nextcloud/backport/14489/stable14

[stable14] Add accessibility translations

Add accessibility translations

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

[tx-robot] updated from transifex

Merge pull request #14415 from nextcloud/backport/13844/stable14

[stable14] Bugfix for issue 10862: Trash-bin ignores trashbin_retention_obligation

[tx-robot] updated from transifex

Merge pull request #14421 from nextcloud/version/noid/14.0.8

14.0.8

14.0.8

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

two item => two items

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Generate id for navigation item

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Parse multiple navigation items

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Fix for issue 10862: calculation of free space ignores external storage (doesn't count towards quota)

Signed-off-by: Felix Nieuwenhuizen <felix@tdlrali.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #14375 from nextcloud/version/noid/14.0.8RC2

14.0.8 RC 2

14.0.8 RC 2

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14372 from nextcloud/backport/14369/stable14

[stable14] Use latest ca-bundle.crt from https://curl.haxx.se/docs/caextract.html

Use latest ca-bundle.crt from https://curl.haxx.se/docs/caextract.html

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #14305 from nextcloud/version/noid/14.0.8RC1

14.0.8 RC 1

14.0.8 RC 1

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Merge pull request #14284 from nextcloud/backport/14194/stable14

[stable14] Correctly determinate the owner in case of shared external storages

Correctly determinate the owner in case of shared external storages

Signed-off-by: Joas Schilling <coding@schilljs.com>

Merge pull request #14278 from nextcloud/backport/14234/stable14

[stable14] Catch Request exception in testRemoteUrl

Catch Request exception in testRemoteUrl

Else the background job fails hard if the remote has for example an
invalid certificate.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #14226 from nextcloud/backport/14221/stable14

[stable14] Remove trailing spaces from localized strings

Remove trailing spaces from localized strings

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

[tx-robot] updated from transifex

Merge pull request #14196 from nextcloud/backport/14185/stable14

[stable14] Fix recent files

Merge pull request #14086 from nextcloud/backport/14023/stable14

[stable14] Fix: Check if `$this->params['user']` is an array

Merge pull request #14206 from nextcloud/backport/14200/stable14

[stable14] ensure attribute names are lower cased

Merge pull request #14202 from nextcloud/backport/14160/stable14

[stable14] Update CRL to contain revoked files_external_dropbox, passman & payback

Merge pull request #14205 from nextcloud/backport/14177/stable14

[stable14] Fix small glitches in update notification page

ensure attribute names are lower cased

otherwise they will be skipped when the results is being formatted and the
lower-cased result keys do not match.

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

Fix style of warning for EoL version

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Fix border in update notification section

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Update CRL to contain revoked files_external_dropbox, passman & payback

* see https://github.com/nextcloud/app-certificate-requests/pull/221
* see https://github.com/nextcloud/app-certificate-requests/pull/219#issuecomment-463577509

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

Merge pull request #14188 from nextcloud/dependabot/npm_and_yarn/build/stable14/handlebars-4.1.0

[Security] Bump handlebars from 4.0.11 to 4.1.0 in /build

Filter out versions and trashbin

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Loop for the recent search

Else it might happen that less entries than requested are returned

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

We need to initialize the storage else the jailed path is always null

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[Security] Bump handlebars from 4.0.11 to 4.1.0 in /build

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.0.11 to 4.1.0. **This update includes security fixes.**
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/wycats/handlebars.js/blob/v4.1.0/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.0.11...v4.1.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #14152 from nextcloud/backport/14149/stable14

[stable14] Fix the thorrtler whitelist bitmask

Fix the thorrtler whitelist bitmask

Before we actually didn't check each bit of the bitmask. Now we do.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

[tx-robot] updated from transifex

Merge pull request #14096 from nextcloud/dependabot/npm_and_yarn/apps/updatenotification/stable14/lodash-4.17.11

[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/updatenotification

Merge pull request #14092 from nextcloud/dependabot/npm_and_yarn/apps/oauth2/stable14/lodash-4.17.11

[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/oauth2

Merge pull request #14090 from nextcloud/dependabot/npm_and_yarn/apps/accessibility/stable14/lodash-4.17.11

[Security] Bump lodash from 4.17.10 to 4.17.11 in /apps/accessibility

Merge pull request #14091 from nextcloud/dependabot/npm_and_yarn/build/stable14/lodash-4.17.11

[Security] Bump lodash from 4.17.10 to 4.17.11 in /build

[Security] Bump lodash in /apps/updatenotification

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.10 to 4.17.11. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Changelog](https://github.com/lodash/lodash/blob/master/CHANGELOG)
- [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.11)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>