aboutsummaryrefslogtreecommitdiffstats
path: root/apps/user_ldap
Commit message (Collapse)AuthorAgeFilesLines
* remove unused use statementArthur Schiwon2019-03-061-1/+0
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* fix nested group retrieval also for 2 other casesArthur Schiwon2019-03-053-84/+111
| | | | | | and also consolidate logic in one method Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Fixed unit test: groupsMatchFilter will not be called multiple times anymore.Roland Tapken2019-03-051-1/+1
| | | | Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* Reduce queries to LDAP by caching nested groupsRoland Tapken2019-03-051-6/+18
| | | | | | | Nested groups are now cached in a CappedMemoryCache object to reduce queries to the LDAP backend. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* user_ldap: really resolve nested groupsRoland Tapken2019-03-051-14/+19
| | | | | | | | | | | The previous patch fixed the problem only for one level of indirection because groupsMatchFilter() had been applied on each recursive call (and thus there would be no second level if the first level fails the check). This new implementation replaces the recursive call with a stack that iterates all nested groups before filtering with groupsMatchFilter(). Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* user_ldap: Filter groups after nexted groupsRoland Tapken2019-03-051-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently groupsMatchFilter is called before nested groups are resolved. This basicly breaks this feature since it is not possible to inherit membership in a group from another group. Minimal example: Group filter: (&(objectClass=group),(cn=nextcloud)) Nested groups: enabled cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local objectClass: group cn=IT,ou=groups,dn=company,dn=local objectClass: group memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local cn=John Doe,ou=users,dn=company,dn=local objectClass: person memberOf: cn=IT,ou=groups,dn=company,dn=local Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group filter, John wouldn't be a member of group 'nextcloud'. This patch fixes this by filtering the groups after all nested groups have been collected. If nested groups is disabled the result will be the same as without this patch. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>
* Fix testsJulius Härtl2019-03-011-4/+6
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* [tx-robot] updated from transifexNextcloud bot2019-03-014-30/+32
|
* [tx-robot] updated from transifexNextcloud bot2019-02-282-0/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-02-272-0/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-02-2612-0/+12
|
* [tx-robot] updated from transifexNextcloud bot2019-02-2522-22/+0
|
* Fixed grammarrakekniven2019-02-221-1/+1
| | | | | Reported at Transifex. Signed-off-by: Mark Ziegler <mark.ziegler@rakekniven.de>
* [tx-robot] updated from transifexNextcloud bot2019-02-212-0/+10
|
* [tx-robot] updated from transifexNextcloud bot2019-02-194-8/+16
|
* [tx-robot] updated from transifexNextcloud bot2019-02-186-0/+10
|
* [tx-robot] updated from transifexNextcloud bot2019-02-1712-2/+24
|
* add GUI option to set the $home placeholderArthur Schiwon2019-02-142-1/+15
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* add LDAP ConfigHandler for external storages and "$home" varArthur Schiwon2019-02-1412-3/+230
| | | | | | | | * handler registered upon OCA\\Files_External::loadAdditionalBackends event as user_ldap is loaded before files_external * new configuration field "ldapExtStorageHomeAttribute" (not in GUI yet) Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* ensure attribute names are lower casedArthur Schiwon2019-02-142-15/+19
| | | | | | | otherwise they will be skipped when the results is being formatted and the lower-cased result keys do not match. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* [tx-robot] updated from transifexNextcloud bot2019-02-142-46/+46
|
* [tx-robot] updated from transifexNextcloud bot2019-02-082-4/+4
|
* [tx-robot] updated from transifexNextcloud bot2019-02-064-12/+12
|
* Comment fix.Filis Futsarov2019-01-301-1/+1
|
* iterate over bases instead of doing parallel searchArthur Schiwon2019-01-281-5/+28
| | | | | | | parallel search is not compatible with paged search, but the letter is usually always applied. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* [tx-robot] updated from transifexNextcloud bot2019-01-262-4/+4
|
* [tx-robot] updated from transifexNextcloud bot2019-01-242-2/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-01-232-0/+2
|
* [tx-robot] updated from transifexNextcloud bot2019-01-164-8/+8
|
* [tx-robot] updated from transifexNextcloud bot2019-01-152-98/+98
|
* [tx-robot] updated from transifexNextcloud bot2019-01-142-36/+36
|
* [tx-robot] updated from transifexNextcloud bot2019-01-132-2/+2
|
* Npmize (vendor) scriptsChristoph Wurst2019-01-091-3/+0
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* [tx-robot] updated from transifexNextcloud bot2019-01-052-4/+4
|
* Merge pull request #13138 from ↵Morris Jobke2019-01-044-32/+184
|\ | | | | | | | | nextcloud/enhancement/noid/ldap-remnants-detected-field register and show when an LDAP user was detected as unavailable/deleted
| * ensure db is pristine before starting the testsArthur Schiwon2019-01-041-0/+3
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * LDAP: extend remnants output with "detected on" fieldArthur Schiwon2018-12-213-26/+57
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * add tests for the DUIArthur Schiwon2018-12-212-6/+124
| | | | | | | | | | | | as they are interact with the DB they are more integraiton than unit tests Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | [tx-robot] updated from transifexNextcloud bot2019-01-042-110/+110
| |
* | [tx-robot] updated from transifexNextcloud bot2018-12-312-6/+6
| |
* | [tx-robot] updated from transifexNextcloud bot2018-12-282-0/+24
| |
* | [tx-robot] updated from transifexNextcloud bot2018-12-272-10/+10
| |
* | [tx-robot] updated from transifexNextcloud bot2018-12-242-2/+34
|/
* do not forgot to store the second displayname portionArthur Schiwon2018-12-201-1/+1
| | | | | | otherwise it causes a chain reaction of system addressbook updates Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* [tx-robot] updated from transifexNextcloud bot2018-12-192-4/+4
|
* [tx-robot] updated from transifexNextcloud bot2018-12-182-0/+2
|
* Merge pull request #12693 from nextcloud/fix/11474/fix-first-ldap-loginblizzz2018-12-174-15/+49
|\ | | | | fix exception on LDAP mapping during login
| * LDAP clear cache on config modification also when done via API or CLIArthur Schiwon2018-12-173-1/+19
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
| * cache users as existing after mappingArthur Schiwon2018-11-271-14/+30
| | | | | | | | | | | | | | | | | | during login they might be cached as non-existing and cause an Exception in the long run reduces some duplication, too Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | [tx-robot] updated from transifexNextcloud bot2018-12-142-0/+6
| |
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-27 21:00:05 +0000