pfSense

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority...

Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.

Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named...

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Remove the statement Only Supports one Container Currently!!!

Add Edir, etc to the LDAP other description.

Make select button really a button intead of HTML <a href>

Make form more user friendly:

"Active Directory"

hide:
LDAP Filter (use default: (samaccountname=$username))
LDAP Naming Attribute (use default: samaccountname)
Group Membership Attribute Name (use default: memberOf)

"eDirectory"

hide:
LDAP Filter (use default: (cn=$username))...

Latest eDir / Active Directory tweaks from Mark Batchelor.

Thanks again for him helping us with this project!

Add back ldap auth caontainer picker.

• Hide password field
• Remove session timeout graphic
• Allow session timeout to remain blank

Remove the need to define authetnication containers. Now a user can login
anywhere in the LDAP tree and will use the groups to deterimine the access
privs.

Work sponsored-by: Centipede Networks

• Return OU=Users which is built-in to active directory
• Specify that LDAP is Active Directory compatible

Work sponsored-by: Centipede Networks

Adding LDAP Authentication container picker.

Work sponsored-by: Centipede Networks

Add Users containers setting where a ; seperated list of LDAP containers
can be specified to authenticate against. Final item will be a graphical
browser that can help the operator populate this box if they are feeling
lazy or do not understand LDAP completely....

Make the LDAP settings screen look better.

Work sponsored-by: Centipede Networks

Add LDAP test functions to verify that the LDAP settings are correct.
Return the OU's and show to the user after test completion.

Clarify the notes/examples for each of the ldap options. This should make
it pretty clear until I finish the fancy LDAP tree viewer control.

I should also note that as of this commit the LDAP auth functions are now
working beautifully against a Windows 2000 Server Active Directory!...

• Allow LDAP users to login to pfSense.
• Cross reference Active Directory user groups with pfSense groups, apply
  groups where names match
• Clarify some of the settings items and give examples

• Hide search base
• Use correct variable name

Work sponsored-by: Centipede Networks

Adding LDAP options:

• Binding username
• Binding password
• Filter
• Search base

Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>

Adding LDAP settings:

• Authentication backend
• LDAP Server:port

Work sponsored-by: Centipede Networks

Remove XXX, it is fixed.

Minor fixes

Unset the session timeout if it is 0 or blank.

Add more input validation to settings screen.

• Do not allow < 1
• Do not allow > 999
• Turn longs into integers

Switch over to array style page titles. Obtained-from: m0n0wall

fix html alignment and pgtitle

Backport usermanager code from HEAD so I can get it in the snaps and
start testing it properly
There's still some CSS/HTML fixes needed but the code seems to work