pfSense

Cleanup the tab format of the system user/group/server management pages.
The edges were square instead of rounded like most pfSense pages. Also
make sure tabs and cancel buttons are present in the add privilege and
add certificate pages.

Change the text in the privilege table row to read "Assigned Privileges"
instead of "Effective Privileges". This is in contrast to the user page
which also lists group privilege inheritance.

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority...

Add a right arrow icon supplied by hoba. This compliments the existing
left arrow icon. Use the left and right arrow icons instead of the plus
and x icons for moving users and groups between selection lists in the
user and group manager screens.

Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.

Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named...

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

Continue interface improvements

Correctly save pages with . in the ACL.

Add cg2

Remove blank page

Rename Hidden: Exec to Command

Correctly save pages.

Speed product correctly

Noticed-by: Martin

s/package/Package/CVS: ----------------------------------------------------------------------

Add other misc areas.

Add other custom pkg.php areas.

• Add CARP Settings custom pkg handler

• Remove blank trailing line
• Allow custom urls that include pkg.php to be saved

Add custom priv for granting access to the user manager.

Turn Pages Accessible field foreground to white.

touch up text

Ticket #1569

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

List opt interfaces correctly.

Add multi user firewall nat port forward capabilities.

• Add PPTP, IPSEC and PPPOE
• Check for access to firewall interface tabs correctly

Add firewall rules edit interface entries.

Remove confusing *

Add check all and check none buttons

If the groupname is in use, do not allow the name to be edited.

Add other helper pages

• Restore previous user manager, it works.
• Remove #!/usr/local/bin/php from m0n0wall version of group manager page

Define more pages

Minor nitpick: make : ": ".

Clarify a few of the manually added descriptions.

Ignore a number of misc pages.

Switch icon locations to pfSense style themes.

Switch over to array style page titles. Obtained-from: m0n0wall

Make group manager tree work again
Correctly toggles items on/off
Removes checkbox which served no real value
Split group manager into multiple files like most other screens
refactored tree generation code

Known bugs:
Initial page display incorrectly displays all tree items as allowed...

fix html alignment and pgtitle

Backport usermanager code from HEAD so I can get it in the snaps and
start testing it properly
There's still some CSS/HTML fixes needed but the code seems to work