summaryrefslogtreecommitdiffstats
path: root/apps/user_ldap
Commit message (Collapse)AuthorAgeFilesLines
* [tx-robot] updated from transifexNextcloud bot2019-07-052-2/+94
|
* Merge pull request #15741 from mxss/fix/phpdoc-fixesMorris Jobke2019-07-021-0/+28
|\ | | | | misc phpdoc fixes
| * misc phpdoc fixesMax Kovalenko2019-05-271-0/+28
| | | | | | | | Signed-off-by: Max Kovalenko <mxss1998@yandex.ru>
* | Also invalidate groups after deletionArthur Schiwon2019-06-271-2/+11
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | invalidates user when plugin reported deletion successArthur Schiwon2019-06-262-5/+26
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | Merge pull request #16055 from nextcloud/design/native-fontsJan-Christoph Borchardt2019-06-261-1/+1
|\ \ | | | | | | Use native font stack
| * | Use native font stackJan-Christoph Borchardt2019-06-241-1/+1
| | | | | | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
| * | Move font from Nunito to Noto SansJan-Christoph Borchardt2019-06-221-1/+1
| | | | | | | | | | | | Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>
* | | fixes LDAP Wizard forgetting groups on select with searchArthur Schiwon2019-06-213-44/+32
|/ / | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | Merge pull request #15964 from nextcloud/enh/noid/user-creation-optionsblizzz2019-06-214-6/+39
|\ \ | | | | | | Opt-in for generation userid, requiring email addresses
| * | ensures mapping of chosen useridArthur Schiwon2019-06-194-6/+39
| | | | | | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | fixes return type in php docArthur Schiwon2019-06-191-1/+1
| | | | | | | | | | | | | | | | | | * the backend already expects and works with the string Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | | fixes returning the base when multiple are specifiedArthur Schiwon2019-06-192-19/+82
|/ / | | | | | | | | | | | | | | | | | | | | * reading the config directly will return the value with line breaks * using the proper accessor gives us all bases in an array * returns the first matching one * having user id provided for the group base is strange and does not let us operate like this. here we return the first one. might change in future, a backportable fix won't have an API change however. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | caches the displayname after an LDAP plugin set itArthur Schiwon2019-06-182-4/+30
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | fix inGroup check, thus make integration tests succeedArthur Schiwon2019-06-141-1/+0
| | | | | | | | | | | | | | there is not such strange return mode. Having invalid user ids caused this check to fail, and as side effect share limitation to groups to not work. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | [tx-robot] updated from transifexNextcloud bot2019-06-142-2/+2
| |
* | [tx-robot] updated from transifexNextcloud bot2019-05-292-60/+58
| |
* | [tx-robot] updated from transifexNextcloud bot2019-05-284-8/+18
| |
* | group display name support (service level + ldap)Arthur Schiwon2019-05-275-2/+80
|/ | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Merge pull request #15604 from ↵blizzz2019-05-224-6/+6
|\ | | | | | | | | nextcloud/fix/12682/fix-possible-override-of-uniquemember fixes possible override of uniqueMember by autodetection
| * fixes possible override of uniqueMember by autodetectionArthur Schiwon2019-05-174-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | * uniqueMember was the default so we did not know whether this setting is desired or the initial value * autodetection of the user-group association attribute runs only when it was not set (as far as we knew) * the default is now empty * thus LDAPProvider might return this value as well (in exceptional cases) * if a group base is given (edge case), use this instead of general base * resolves #12682 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | [tx-robot] updated from transifexNextcloud bot2019-05-212-2/+2
|/
* [tx-robot] updated from transifexNextcloud bot2019-05-072-2/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-05-012-0/+4
|
* [tx-robot] updated from transifexNextcloud bot2019-04-292-0/+6
|
* [tx-robot] updated from transifexNextcloud bot2019-04-182-0/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-04-162-0/+2
|
* Bump versions of server and the requirements of appsJoas Schilling2019-04-111-2/+2
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Pass old value to user triggerChange hookMorris Jobke2019-04-111-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* [tx-robot] updated from transifexNextcloud bot2019-04-112-2/+4
|
* [tx-robot] updated from transifexNextcloud bot2019-04-062-2/+2
|
* set the loglevel in context, save the conditionArthur Schiwon2019-04-021-3/+1
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* [tx-robot] updated from transifexNextcloud bot2019-03-2610-26/+34
|
* LDAP plugin: force createUser to return new user's DNVinicius Cubas Brand2019-03-211-1/+2
| | | | | | | LDAP plugins must change the createUser method to return the DN, as we need this to update the cache. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>
* Cache cleaning when subadmin adds user to groupVinicius Cubas Brand2019-03-211-0/+2
| | | | | | | | | | | This commit fix an error happening when the subadmin tries to create an user, adding him/her to the group s/he is subadmin of, using a LDAP User/Group plugin. This just forces the cache to be reset after an user is added to a group. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>
* fix user creation using LDAP PluginVinicius Cubas Brand2019-03-213-4/+12
| | | | Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>
* [tx-robot] updated from transifexNextcloud bot2019-03-21108-310/+108
|
* Fix showpassword loadsRoeland Jago Douma2019-03-181-3/+0
| | | | | | | This is bundled by default. So trying to load it throws a warning in the logs. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* [tx-robot] updated from transifexNextcloud bot2019-03-162-2/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-03-1410-4/+16
|
* remove unused use statementArthur Schiwon2019-03-061-1/+0
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix nested group retrieval also for 2 other casesArthur Schiwon2019-03-053-84/+111
| | | | | | and also consolidate logic in one method Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Fixed unit test: groupsMatchFilter will not be called multiple times anymore.Roland Tapken2019-03-051-1/+1
| | | | Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* Reduce queries to LDAP by caching nested groupsRoland Tapken2019-03-051-6/+18
| | | | | | | Nested groups are now cached in a CappedMemoryCache object to reduce queries to the LDAP backend. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* user_ldap: really resolve nested groupsRoland Tapken2019-03-051-14/+19
| | | | | | | | | | | The previous patch fixed the problem only for one level of indirection because groupsMatchFilter() had been applied on each recursive call (and thus there would be no second level if the first level fails the check). This new implementation replaces the recursive call with a stack that iterates all nested groups before filtering with groupsMatchFilter(). Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* user_ldap: Filter groups after nexted groupsRoland Tapken2019-03-051-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently groupsMatchFilter is called before nested groups are resolved. This basicly breaks this feature since it is not possible to inherit membership in a group from another group. Minimal example: Group filter: (&(objectClass=group),(cn=nextcloud)) Nested groups: enabled cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local objectClass: group cn=IT,ou=groups,dn=company,dn=local objectClass: group memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local cn=John Doe,ou=users,dn=company,dn=local objectClass: person memberOf: cn=IT,ou=groups,dn=company,dn=local Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group filter, John wouldn't be a member of group 'nextcloud'. This patch fixes this by filtering the groups after all nested groups have been collected. If nested groups is disabled the result will be the same as without this patch. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* Fix testsJulius Härtl2019-03-011-4/+6
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* [tx-robot] updated from transifexNextcloud bot2019-03-014-30/+32
|
* [tx-robot] updated from transifexNextcloud bot2019-02-282-0/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-02-272-0/+2
|