pfSense

Remove debug messages that gave away info on why the login failed
add failed and successful login messages to syslog

Remove dead code.

Latest LDAP round from Mark Batchelor
VS: ----------------------------------------------------------------------

Latest version of auth.inc from Mark Batchelor fixing a few misc
LDAP auth issues + local auth issues.

Latest LDAP changes from Mark Batchelor

• Remove trailing blank line
• Make sure $info has data before operating on it

• Remove trailing blank line
• Make sure $search has data before operating on it

Latest eDir / Active Directory tweaks from Mark Batchelor.

Thanks again for him helping us with this project!

Changes to allow Novell eDir to authenticate via LDAP.

Thanks to Mark Batchelor for all of his help with these changes.

Conditional checks use ==, not = !

Check that ldap_connect() exists before calling. For some reason on
bootup the function does not exist but the module is loaded?

• Missing =
• Allow user manager to adhere to admins group

Only check item if it is an array.

Correctly return no groups when the user is not a member of a local group.

Modify isSystemAdmin() to check LDAP for a "admins" group.

Remove the need to define authetnication containers. Now a user can login
anywhere in the LDAP tree and will use the groups to deterimine the access
privs.

Work sponsored-by: Centipede Networks

Only iterate items if it is an array.

Work sponsored-by: Centipede Networks

• Return OU=Users which is built-in to active directory
• Specify that LDAP is Active Directory compatible

Work sponsored-by: Centipede Networks

Correct variable check.

Adding LDAP Authentication container picker.

Work sponsored-by: Centipede Networks

Add Users containers setting where a ; seperated list of LDAP containers
can be specified to authenticate against. Final item will be a graphical
browser that can help the operator populate this box if they are feeling
lazy or do not understand LDAP completely....

Add LDAP test functions to verify that the LDAP settings are correct.
Return the OU's and show to the user after test completion.

Add ldap_get_user_ous() which will return an array of containers that hold
user objects. This will be used by the ldap settings manager to allow the
operator to specify which containers they would like to authenticate from.

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

Ignore ldap items for locally defined users.

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

• Allow LDAP users to login to pfSense.
• Cross reference Active Directory user groups with pfSense groups, apply
  groups where names match
• Clarify some of the settings items and give examples

• Refactor code a bit, split out user property search function
• Bring back filter code

Work sponsored-by: Centipede Networks

Allow multiple groups to be assigned per user.

Work sponsored-by: Centipede Networks

• Hide search base
• Use correct variable name

Work sponsored-by: Centipede Networks

Adding LDAP backend glue.

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

• Correctly report invalid password
• Correctly report invalid username
• Correctly report 401 errors

Correctly show 401 errors.

Remove trailing space / cr

Backport usermanager code from HEAD so I can get it in the snaps and
start testing it properly
There's still some CSS/HTML fixes needed but the code seems to work

• Minior tab alignments
• We're in 2006, toto

• Eliminate dead code
• Fix warnings and errors found by eclipse

restore 1.10

Ticket #598

use admin user when using a special username

Correct comment

Terminate comment correctly

Pointy-hat-to: GeekGod

Duplicate logic to htpasswd_backed_basic_auth()

honour custom username set in webConfigurator page

honour custom username set in webConfigurator page

If there's a PHP_AUTH_* copy it over to AUTH_* (mini sets AUTH_*, lighttpd sets PHP_AUTH_*)

Change realm to .

Ticket #337

Remove trailing space

Better regexp
Courtesy-of: strgout

better regexp

md5's can have '/'s in them apparently...doh

ensure .htpasswd doesn't exist

split out auth types (system passwd vs htpasswd)
PHP_AUTH_* no longer exists, change code to use AUTH_* (I think this will be changing back as I believe we're using the wrong mini_httpd patches now)

Initial commit of PHP side authentication code for pfSense