Commit Graph

124 Commits

Author SHA1 Message Date
ralf
cbb2b4f5cd get adLDAPUsers::info() to return false again instead of throwing under PHP 8.x 2022-11-09 12:33:41 +01:00
ralf
37c0091e3d read memberships in a single SQL query with a JOIN 2022-11-04 17:49:29 +01:00
ralf
aefe04d3b8 WIP LDAP import 2022-07-11 07:54:16 +02:00
ralf
aab768d87f WIP implement VLV search for LDAP too and also filtering by >=modifyTimestamp used for account-import 2022-07-07 07:57:33 +02:00
ralf
c151f7786f fix not always working instantiation for contacts and accounts objects differing from global configured repository 2022-07-06 21:27:44 +02:00
ralf
6fb464d90b * ActiveDirectory/LDAP: implemented deleting of accounts via full/initial import, periodic import does NOT delete 2022-07-06 17:08:44 +02:00
ralf
9a407d8ebb fix adding/removing group-memberships were not imported as change is on the group not the user 2022-07-04 11:18:02 +02:00
ralf
242e055f53 * ActiveDirectory: allow to configure an optional group-context
also fixes problems with Univention AD storing stock groups (eg. Domain Users) in a different OU=Groups than users
2022-06-30 16:44:51 +02:00
ralf
970c22b2a2 some fixes for LDAP/ADS account import:
- fix not working "Users, groups and memberships" option
- calling add/edit account/group hooks to eg. create home-directories and mail-accounts
2022-06-30 15:17:19 +02:00
ralf
2dd3a25b35 WIP ADS/LDAP account import:
- implement import from groups and memberships
--> ToDo: deleting of accounts and testing with LDAP
2022-06-28 22:21:08 +02:00
ralf
e28329b1d7 WIP ADS/LDAP account-import:
- refactored to a class
- added async import and logging
--> ToDo: groups, deleting of users and testing with LDAP
2022-06-28 16:58:38 +02:00
ralf
ee58655ce6 WIP ADS/LDAP account-sync:
- using (simple) paged result for initial sync
- incremental sync uses modification time
- currently only user and no periodic sync yet
2022-06-27 21:08:34 +02:00
ralf
55a13aa99d refactor VLV and server-side sorting into a trait, so it can be used in Accounts\Ldap too 2022-05-20 21:49:08 +02:00
ralf
ab427562b7 * LDAP: implement optional group-filter
also some code cleanups and fixes
2022-05-20 21:47:02 +02:00
ralf
03099756d7 fix PHP 8.1 Error: Serialization of 'LDAP\Connection' is not allowed 2022-04-27 13:00:10 +02:00
ralf
2d0de5f287 another chunk of fixed PHP Warning: Undefined array key or variable in api 2022-04-26 20:24:37 +02:00
Ralf Becker
b1af39be37 fix big chunk of PHP 8.0 warnings 2021-10-21 10:39:57 +02:00
Ralf Becker
1423616e00 remove some dead code and spelling fixes 2021-07-04 08:52:43 +02:00
nathangray
34ec8e6cb3 Api: Fix accounts list (Sql) would be empty after refresh if there were less than 50 accounts
- Fix some accounts backend were not returning results indexed by account ID
2021-05-21 09:16:25 -06:00
Ralf Becker
8ec590a068 fix some real typos 2021-05-19 18:29:03 +02:00
Ralf Becker
bd95db7609 * AD: fix account-selection type "groupmembers" caused high load on AD
also caching groups now on instance level instead of session
2021-05-19 18:26:55 +02:00
Ralf Becker
aea7a5c0f2 * ADS/LDAP: improve caching of searching/listing 2021-05-16 20:42:47 +02:00
Ralf Becker
9bc7583711 * AD/Login: fix login always reports "account is expired", if account-selection "group-members" is set for AD 2021-05-05 15:45:30 +02:00
Ralf Becker
fed41622c2 fixing all sorts of PHP 8 errors and PHPStorm errors 2021-03-31 17:50:01 +02:00
Ralf Becker
0efa9ae141 docu update 2021-03-31 17:50:01 +02:00
Ralf Becker
0faafe8eee fix "Virtual List View error" caused by not set search attribute
also retry without VLV control in that case
2021-03-23 13:55:17 +01:00
Ralf Becker
ab9c089f70 fix PHP 8 Fatal error Array and string offset access syntax with curly braces is no longer supported 2021-03-21 21:13:07 +01:00
Ralf Becker
a41865209c stop SQL error, when using account-type with name2id($name, "person_id", "u") 2021-02-26 21:57:11 +02:00
Ralf Becker
b960a24c32 implement UDM_REST_INSECURE environment variable to UCS appliance with no valid cert yet 2020-10-07 10:22:27 +02:00
Ralf Becker
9f9cce88b2 * ActiveDirectory: fix account-selection type groupmembers (applies only to non-admins!) and ignore Domain Users group
not setting caseIgnoreMatch for sorting, as its not supported for Windows ActiveDirectory
2020-09-08 15:29:51 +02:00
Ralf Becker
5afe7ddbca * ActiveDirectory: support huge directories by using server-side sorted and limited queries and no caching in session 2020-09-05 13:11:26 +02:00
Ralf Becker
c3000beb5f * ActiveDirectory: implement addtional user or group filter 2020-09-02 14:14:11 +02:00
Ralf Becker
46a3818e92 * ActiveDirectory: consider security local groups as groups too 2020-05-13 13:16:08 +02:00
Ralf Becker
19a7894269 some pending changes 2020-03-04 20:19:08 +01:00
Ralf Becker
44d9fcc790 Revert "* CalDAV/OutlookSynchronizer: reject invitations when client deletes then without appropriate rights in his calendar"
This reverts commit 4c6e41d479.
2020-03-04 19:16:50 +01:00
Ralf Becker
4c6e41d479 * CalDAV/OutlookSynchronizer: reject invitations when client deletes then without appropriate rights in his calendar 2020-03-04 16:58:38 +01:00
Ralf Becker
5a9bc1a98a UCS 4.4 Rest API gives an error creating group "Default"
claiming a user or group with that name exists, which is not the case
(probably because other LDAP objects with cn=Default exist)
we work around that by creating it as DefaultX and rename it in LDAP to Default for now
2019-10-18 16:23:50 +02:00
Ralf Becker
5dcf1e842f fix for stable Univention 4.4-2 REST API 2019-09-30 12:37:48 +02:00
Ralf Becker
4f367e6bf1 * Univention: fix "Must change password upon next login" feature 2019-09-16 10:06:57 +02:00
Ralf Becker
a45c63d5ec setting a timeout of 30 seconds, as recommended by Univention 2019-07-31 12:48:59 +02:00
Ralf Becker
45d3def574 fix "405 Method not allowed" error updating users and retrying on connection failure once 2019-07-31 12:10:35 +02:00
Ralf Becker
f4840d1d87 fix PHP Warning: count(): Parameter must be an array or an object that implements Countable 2019-07-31 10:55:46 +02:00
Ralf Becker
9370dbf116 fix Argument 2 passed to EGroupware\Api\Accounts\Univention\Udm::user2udm() must be of the type array, null given
GET to users/user/$dn returns just the entry
2019-07-30 19:44:22 +02:00
Ralf Becker
02c21fe2f9 remove commented out fixing of policies as object 2019-07-30 18:27:29 +02:00
Ralf Becker
26a287b7d9 use new Univention UDM Rest Api, instead of univention-directory-manager cli 2019-07-22 11:18:28 +02:00
Ralf Becker
54df2bcb6b allow to specify host[:port] for active-directory host 2019-03-09 12:37:05 +01:00
Ralf Becker
685fc58564 allow to get account_id from email for LDAP backend 2019-01-30 17:28:42 +01:00
Ralf Becker
e6dab124ee * Univention: fix not working password change (setting Kerberos credentials) 2018-07-13 09:58:38 +02:00
Ralf Becker
18a048e5c8 finish migration AD to new UCS domain via EGroupware 2018-07-03 22:25:08 +02:00
Ralf Becker
b29f89cf16 migrate AD accounts incl. mail-attributes to SQL 2018-06-20 15:25:44 +02:00
Ralf Becker
84b715c5af * Admin: allow to show last login, IP and password change in list 2018-06-01 14:46:52 +02:00
Ralf Becker
e578e64926 ActiveDirectory: additional allow accountExpires=0 for never expires
(beside attribute is not set or has value 9223372036854775807)
2018-03-09 19:51:49 +01:00
nathangray
cf2b759054 * Admin - fix group list filter & sort
- Remove created & modified columns since they're not stored for groups
- Fix email sort
- Fix search returned all results
2018-01-30 11:28:27 -07:00
Ralf Becker
bff3b0215e * LDAP/ActiveDirectory: fix sorting accounts by anything other then account-name fails 2018-01-29 12:47:57 +01:00
Ralf Becker
79750d22a5 fix fatal error if sambaadmin is not installed, but was before 2017-07-12 18:29:01 +02:00
Ralf Becker
e65812d07d * Admin: fix email address for groups could not be stored for accounts in SQL 2016-08-03 18:24:14 +02:00
Ralf Becker
f4521e3401 fix missing slash in path of adLDAP.php 2016-07-15 14:24:30 +02:00
Ralf Becker
b2ac90fec6 fix some Scrutinizer "bugs" 2016-07-15 08:17:54 +02:00
Ralf Becker
e1f8fa7799 * ActiveDirectory: using adLDAP now from adldap2/adldap2=4.0.4 via composer 2016-07-15 07:39:53 +02:00
Ralf Becker
a80cb15d66 * LDAP/UCS: groups not found when searching for them eg. in custom fields (account-type=both) 2016-07-11 15:08:51 +02:00
Ralf Becker
d5a97279a7 * Univention: fix not working 16.1 install in UCS: Account not found! (acc_id=1) 2016-07-04 15:36:49 +02:00
Ralf Becker
72c22fbd44 fix Scrutinizer "bugs" 2016-07-02 11:47:25 +02:00
Ralf Becker
4165c649ae adding missing adLDAP stuff, support for https and ssh checkouts and (un)tagging to .mrconfig 2016-05-25 12:18:47 +02:00
Ralf Becker
e34fe9a4e7 using Acl::(ADD|READ|EDIT|DELETE|PRIVAT) constants instead old EGW_ACL_* defines and fix some namespace errors found by doc/check_namespace.php 2016-05-11 19:23:14 +00:00
Ralf Becker
c15fcdfb52 WIP egw installs now without phpgwapi and allows to login 2016-05-02 22:26:40 +00:00
Ralf Becker
834cc466f5 to allow installing api or EGroupware without phpgwapi, old exceptions which we have to extend in order allow old apps to catch exceptions thrown from new api, have to reside in api/inc and get autoloaded 2016-05-02 16:57:50 +00:00
Ralf Becker
8fb9063157 moving common::(next|last)_id methods to Api\Accounts\Ldap, storing ids now in egw_config instead of egw_nextid table (which will be droped), also fix "Protocol error" on creating new accouts r55591 on 14.x 2016-04-01 08:07:03 +00:00
Ralf Becker
082884007e move acl class to api 2016-03-31 18:52:09 +00:00
Ralf Becker
00abda4682 moving emailadmin to api and admin, only emailadmin_hooks and tables still need moving 2016-03-28 18:51:38 +00:00
Ralf Becker
77c5102792 fixed more namespace issues found by doc/check_namespace.php I wrote and forgot about it ;-) 2016-03-21 21:21:40 +00:00
Ralf Becker
564b2b0fd7 fixes and first successful tests with Ldap backend 2016-03-08 08:13:26 +00:00
Ralf Becker
f116751110 move auth classes to Api\Auth, only Sql is currently tested! 2016-03-06 20:48:37 +00:00
Ralf Becker
b95727bb6f move auth classes to Api\Auth, only Sql is currently tested! 2016-03-06 20:47:10 +00:00
Ralf Becker
d407b9aae1 moved accounts classes to Api\Accounts 2016-03-06 15:54:07 +00:00