401bf944ef
Use SecurityProtocol to replace UseSSL in LDAP config
...
Initially proposed by #2376 and fixes #3068 as well.
2016-07-08 07:25:09 +08:00
8b35c194ec
Fixes #3110 ( #3136 )
2016-06-27 17:02:39 +08:00
fb970b9d87
Add ServerName to tls.Config in LDAP auth ( #3104 )
...
From https://godoc.org/crypto/tls#Config
ServerName is used to verify the hostname on the returned
certificates unless InsecureSkipVerify is given. It is also included
in the client's handshake to support virtual hosting unless it is
an IP address.
This is needed for certificate validation without InsecureSkipVerify.
2016-06-01 01:11:28 -07:00
ba314a7a36
Support alphanumeric issue style (ABC-1234) for external issue tracker ( #2992 )
2016-04-22 18:28:08 -04:00
ac78bae7b5
Replace uuid module with original package
2016-02-20 18:13:12 -05:00
926e75d721
#2334 strip whitespace for migrate URL
...
Also fix a possible race condition while install
2016-02-20 17:32:34 -05:00
5649556a33
LDAP: Make a bit more detailed log traces
...
This is useful especially to check whether we fetch right attributes, using
right LDAP search base and in right order.
2016-02-20 14:12:32 +01:00
834d92a47b
LDAP: Fetch attributes in Bind DN context option
...
This is feature is workaround for #2628 (JumpCloud) and some other services
that allow LDAP search only under BindDN user account, but not allow any LDAP
search query in logged user DN context.
Such approach is an alternative to minimal permissions security pattern for
BindDN user.
2016-02-20 14:12:32 +01:00
e2f95c2845
LDAP: Use single connection in BindDN mode auth
...
According to RFC 4511 4.2.1. Processing of the Bind Request "Clients may send
multiple Bind requests to change the authentication and/or security
associations or to complete a multi-stage Bind process. Authentication from
earlier binds is subsequently ignored."
Therefore we should not use 2 connections, but single one just sending two bind
requests.
2016-02-20 14:01:47 +01:00
8ab5399e83
Make log path required
2016-02-12 10:10:02 -05:00
a3e8c32a30
Add install option for log path
2016-02-12 09:19:45 -05:00
3808638df1
Fix #2221 LDAP username attribute must be fetched
...
This is fix-up for 573305f
2016-02-07 18:18:29 +01:00
abc5abce30
Allow modification of a release if Content is empty ( fix #2516 )
2016-01-30 13:39:02 +00:00
112a7cab31
#2497 incorrect error handle for team name
2016-01-29 17:06:14 -05:00
0d5dc8a064
typo fix
2016-01-06 22:41:42 +03:00
59c965a5ec
#2156 admin able to edit organization max repo creation
2015-12-11 19:24:57 -05:00
477b4d3b50
#2154 fix form submit error
2015-12-11 18:52:28 -05:00
d0b0d24f22
#2154 disable change user for non-local users
...
- #2153 remove require for gravatar
2015-12-11 15:31:02 -05:00
40f3142264
#2114 External URL for wiki
2015-12-11 04:55:08 -05:00
2a0bb1fa90
#1575 Limit repo creation
2015-12-10 12:37:53 -05:00
b8d48bdb62
#2037 Add "New Mirror" button on Dashboard
2015-12-09 11:24:56 -05:00
120cd4e471
#1984 Better mirror repo management
2015-12-08 20:06:12 -05:00
ae54d878c0
Fix misspelled words
2015-12-06 16:42:23 +02:00
978dc00305
APIs: admin users
2015-12-05 17:13:13 -05:00
e538ff2770
fix #1829 and fix #890
2015-12-04 21:30:33 -05:00
56dd430a10
refactor API routes and some work for #976
2015-12-04 17:16:42 -05:00
573305f3d3
LDAP: Optional user name attribute specification
...
Consider following LDAP search query example:
(&(objectClass=Person)(|(uid=%s)(mail=%s)))
Right now on first login attempt Gogs will use the text supplied on login form
as the newly created user name. In example query above the text matches against
both e-mail or user name. So if user puts the e-mail then the new Gogs user
name will be e-mail which may be undesired.
Using optional user name attribute setting we can explicitly say we want Gogs
user name to be certain LDAP attribute eg. `uid`, so even user will use e-mail
to login 1st time, the new account will receive correct user name.
2015-12-02 00:20:14 +01:00
dcb391d341
Merge branch 'feature/wiki' into develop
2015-11-30 20:46:19 -05:00
e42fcb033d
wiki: finish edit
2015-11-27 01:50:38 -05:00
392f3ee210
wiki: finish new
2015-11-27 00:24:24 -05:00
c50a3503e6
introduce git-shell
2015-11-26 17:33:45 -05:00
aaa3f1b2b9
Use better LDAP lib and should fix #1139
2015-11-26 14:04:58 -05:00
f04d773f4f
UI: long organization name in create repository owner list
2015-11-18 17:42:20 -05:00
18de67380c
fix #1958
2015-11-15 23:52:46 -05:00
f255b1e86d
#1896 fatal when no needed update task
2015-11-04 21:57:10 -05:00
6f0a41b8b2
#1511 Allow local import only for admin users
2015-11-03 18:40:52 -05:00
91c9069c4d
Merge pull request #1862 from nathan7/fix-private
...
Fix the JSON field names for MigrateRepoForm
2015-10-31 11:14:38 -04:00
f1aa4c0524
Fix the JSON field names for MigrateRepoForm
...
For some reason, the field names for Private and Mirror got swapped.
2015-10-30 02:44:45 +01:00
073da3c49d
#470 fix max length of email
2015-10-29 21:12:41 -04:00
7d72c8333e
work on #470 and fix miror JS issue when choose targets on compare and pull
2015-10-29 21:09:48 -04:00
630ebbe6c2
Sanitizing input to LDAP authentication module.
2015-10-26 18:08:59 -07:00
932dbccb67
fix import path, fix #1782
2015-10-15 21:28:12 -04:00
21e13cb51e
#1525 Triggere mailer for admin created accounts
2015-09-25 19:45:44 -04:00
6a1907d994
revert simple LDAP userDN and update example
2015-09-16 12:15:14 -04:00
e4ecbcdf4a
new sign in page
2015-09-14 22:50:44 -04:00
f5c7f22cc8
#1637 able to skip verify for LDAP
2015-09-14 15:48:51 -04:00
2bc3e83e1c
fix simple LDAP userDN
2015-09-14 12:24:37 -04:00
5f1183cecf
#697 add install option
2015-09-13 12:14:32 -04:00
83e747bfda
#697 and #1606 and new admin edit user UI
2015-09-13 11:07:21 -04:00
e5ed5904c6
#1606 GUI bug while adding ldap user
2015-09-13 10:05:18 -04:00
Unknwon
Franz Schmidt
Paul Tötterman
Cosmin Stroe
Adam Strzelecki
Josh Frye
Florian Kaiser
zhuharev
Alex Myasoedov
Nathan Zadoks
Sergio Benitez