71 Commits

Author	SHA1	Message	Date
Jeff Mitchell	f5f9c098b7	Some fixups around error/warning in LDAP	2016-04-02 13:33:00 -04:00
Jeff Mitchell	aca4e79ac6	If no group DN is configured, still look for policies on local users and ... return a warning, rather than just trying to do an LDAP search on an empty string.	2016-04-02 13:11:36 -04:00
Jeff Mitchell	8926a7c7c7	Check for nil connection back from go-ldap, which apparently can happen even with no error ... Ping #1262	2016-03-29 10:00:04 -04:00
leon	8ebacbc563	- updated LDAP group search by iterating through all the attributes and searching for CN value instead of assuming the CN is always the first attribute from the RDN list	2016-03-21 19:44:08 +02:00
leon	df96234ac9	- added another method to search LDAP groups by querying the userDN for memberOf attribute	2016-03-21 16:55:38 +02:00
Jeff Mitchell	a2aad0bbd6	Properly escape filter values. ... Fixes #1030	2016-02-19 13:16:52 -05:00
Hanno Hecker	ba9b20d275	discover bind dn with anonymous binds	2016-01-27 17:06:27 +01:00
Hanno Hecker	a702f849bc	fix stupid c&p error	2016-01-26 16:15:25 +01:00
Hanno Hecker	11aee85c0b	add binddn/bindpath to search for the users bind DN	2016-01-26 15:56:41 +01:00
Bradley Girardeau	7b6547abf7	Clean up naming and add documentation	2015-07-30 17:36:40 -07:00
Bradley Girardeau	5afc6115c7	ldap: add mfa to LDAP login	2015-07-27 21:14:00 -07:00
Bradley Girardeau	709b91fbd1	ldap: change setting user policies to setting user groups	2015-07-20 11:33:39 -07:00
Bradley Girardeau	7ee2419323	ldap: add ability to set policies based on username as well as groups	2015-07-14 15:46:15 -07:00
Bradley Girardeau	cbb6b64ce6	ldap: add ability to login with a userPrincipalName (user@upndomain)	2015-07-14 15:37:46 -07:00
Armon Dadgar	6a9dc00e57	Remove SetLogger, and unify on framework.Setup	2015-06-30 17:45:20 -07:00
Armon Dadgar	22f543f837	Updating for backend API change	2015-06-30 17:36:12 -07:00
Armon Dadgar	de6ce89c39	Fixing merge conflict	2015-06-29 14:50:55 -07:00
Giovanni Bajo	4a9be1fb5f	auth/ldap: move username into the path (to allow per-user revokation on the path)	2015-05-09 22:06:28 +02:00
Giovanni Bajo	9e8b045308	auth/ldap: implement login renew	2015-05-09 22:04:20 +02:00
Giovanni Bajo	ab269aef60	auth/ldap: add configuration path for groups	2015-05-09 22:04:20 +02:00
Giovanni Bajo	230fc30ea2	Initial implementation of the LDAP credential backend	2015-05-09 22:04:19 +02:00