ralf
aefe04d3b8
WIP LDAP import
2022-07-11 07:54:16 +02:00
ralf
aab768d87f
WIP implement VLV search for LDAP too and also filtering by >=modifyTimestamp used for account-import
2022-07-07 07:57:33 +02:00
ralf
c151f7786f
fix not always working instantiation for contacts and accounts objects differing from global configured repository
2022-07-06 21:27:44 +02:00
ralf
6fb464d90b
* ActiveDirectory/LDAP: implemented deleting of accounts via full/initial import, periodic import does NOT delete
2022-07-06 17:08:44 +02:00
ralf
9a407d8ebb
fix adding/removing group-memberships were not imported as change is on the group not the user
2022-07-04 11:18:02 +02:00
ralf
242e055f53
* ActiveDirectory: allow to configure an optional group-context
...
also fixes problems with Univention AD storing stock groups (eg. Domain Users) in a different OU=Groups than users
2022-06-30 16:44:51 +02:00
ralf
970c22b2a2
some fixes for LDAP/ADS account import:
...
- fix not working "Users, groups and memberships" option
- calling add/edit account/group hooks to eg. create home-directories and mail-accounts
2022-06-30 15:17:19 +02:00
ralf
2dd3a25b35
WIP ADS/LDAP account import:
...
- implement import from groups and memberships
--> ToDo: deleting of accounts and testing with LDAP
2022-06-28 22:21:08 +02:00
ralf
e28329b1d7
WIP ADS/LDAP account-import:
...
- refactored to a class
- added async import and logging
--> ToDo: groups, deleting of users and testing with LDAP
2022-06-28 16:58:38 +02:00
ralf
ee58655ce6
WIP ADS/LDAP account-sync:
...
- using (simple) paged result for initial sync
- incremental sync uses modification time
- currently only user and no periodic sync yet
2022-06-27 21:08:34 +02:00
ralf
55a13aa99d
refactor VLV and server-side sorting into a trait, so it can be used in Accounts\Ldap too
2022-05-20 21:49:08 +02:00
ralf
ab427562b7
* LDAP: implement optional group-filter
...
also some code cleanups and fixes
2022-05-20 21:47:02 +02:00
ralf
03099756d7
fix PHP 8.1 Error: Serialization of 'LDAP\Connection' is not allowed
2022-04-27 13:00:10 +02:00
ralf
2d0de5f287
another chunk of fixed PHP Warning: Undefined array key or variable in api
2022-04-26 20:24:37 +02:00
Ralf Becker
b1af39be37
fix big chunk of PHP 8.0 warnings
2021-10-21 10:39:57 +02:00
Ralf Becker
1423616e00
remove some dead code and spelling fixes
2021-07-04 08:52:43 +02:00
nathangray
34ec8e6cb3
Api: Fix accounts list (Sql) would be empty after refresh if there were less than 50 accounts
...
- Fix some accounts backend were not returning results indexed by account ID
2021-05-21 09:16:25 -06:00
Ralf Becker
8ec590a068
fix some real typos
2021-05-19 18:29:03 +02:00
Ralf Becker
bd95db7609
* AD: fix account-selection type "groupmembers" caused high load on AD
...
also caching groups now on instance level instead of session
2021-05-19 18:26:55 +02:00
Ralf Becker
aea7a5c0f2
* ADS/LDAP: improve caching of searching/listing
2021-05-16 20:42:47 +02:00
Ralf Becker
9bc7583711
* AD/Login: fix login always reports "account is expired", if account-selection "group-members" is set for AD
2021-05-05 15:45:30 +02:00
Ralf Becker
fed41622c2
fixing all sorts of PHP 8 errors and PHPStorm errors
2021-03-31 17:50:01 +02:00
Ralf Becker
0efa9ae141
docu update
2021-03-31 17:50:01 +02:00
Ralf Becker
0faafe8eee
fix "Virtual List View error" caused by not set search attribute
...
also retry without VLV control in that case
2021-03-23 13:55:17 +01:00
Ralf Becker
ab9c089f70
fix PHP 8 Fatal error Array and string offset access syntax with curly braces is no longer supported
2021-03-21 21:13:07 +01:00
Ralf Becker
a41865209c
stop SQL error, when using account-type with name2id($name, "person_id", "u")
2021-02-26 21:57:11 +02:00
Ralf Becker
b960a24c32
implement UDM_REST_INSECURE environment variable to UCS appliance with no valid cert yet
2020-10-07 10:22:27 +02:00
Ralf Becker
9f9cce88b2
* ActiveDirectory: fix account-selection type groupmembers (applies only to non-admins!) and ignore Domain Users group
...
not setting caseIgnoreMatch for sorting, as its not supported for Windows ActiveDirectory
2020-09-08 15:29:51 +02:00
Ralf Becker
5afe7ddbca
* ActiveDirectory: support huge directories by using server-side sorted and limited queries and no caching in session
2020-09-05 13:11:26 +02:00
Ralf Becker
c3000beb5f
* ActiveDirectory: implement addtional user or group filter
2020-09-02 14:14:11 +02:00
Ralf Becker
46a3818e92
* ActiveDirectory: consider security local groups as groups too
2020-05-13 13:16:08 +02:00
Ralf Becker
19a7894269
some pending changes
2020-03-04 20:19:08 +01:00
Ralf Becker
44d9fcc790
Revert "* CalDAV/OutlookSynchronizer: reject invitations when client deletes then without appropriate rights in his calendar"
...
This reverts commit 4c6e41d479
.
2020-03-04 19:16:50 +01:00
Ralf Becker
4c6e41d479
* CalDAV/OutlookSynchronizer: reject invitations when client deletes then without appropriate rights in his calendar
2020-03-04 16:58:38 +01:00
Ralf Becker
5a9bc1a98a
UCS 4.4 Rest API gives an error creating group "Default"
...
claiming a user or group with that name exists, which is not the case
(probably because other LDAP objects with cn=Default exist)
we work around that by creating it as DefaultX and rename it in LDAP to Default for now
2019-10-18 16:23:50 +02:00
Ralf Becker
5dcf1e842f
fix for stable Univention 4.4-2 REST API
2019-09-30 12:37:48 +02:00
Ralf Becker
4f367e6bf1
* Univention: fix "Must change password upon next login" feature
2019-09-16 10:06:57 +02:00
Ralf Becker
a45c63d5ec
setting a timeout of 30 seconds, as recommended by Univention
2019-07-31 12:48:59 +02:00
Ralf Becker
45d3def574
fix "405 Method not allowed" error updating users and retrying on connection failure once
2019-07-31 12:10:35 +02:00
Ralf Becker
f4840d1d87
fix PHP Warning: count(): Parameter must be an array or an object that implements Countable
2019-07-31 10:55:46 +02:00
Ralf Becker
9370dbf116
fix Argument 2 passed to EGroupware\Api\Accounts\Univention\Udm::user2udm() must be of the type array, null given
...
GET to users/user/$dn returns just the entry
2019-07-30 19:44:22 +02:00
Ralf Becker
02c21fe2f9
remove commented out fixing of policies as object
2019-07-30 18:27:29 +02:00
Ralf Becker
26a287b7d9
use new Univention UDM Rest Api, instead of univention-directory-manager cli
2019-07-22 11:18:28 +02:00
Ralf Becker
54df2bcb6b
allow to specify host[:port] for active-directory host
2019-03-09 12:37:05 +01:00
Ralf Becker
685fc58564
allow to get account_id from email for LDAP backend
2019-01-30 17:28:42 +01:00
Ralf Becker
e6dab124ee
* Univention: fix not working password change (setting Kerberos credentials)
2018-07-13 09:58:38 +02:00
Ralf Becker
18a048e5c8
finish migration AD to new UCS domain via EGroupware
2018-07-03 22:25:08 +02:00
Ralf Becker
b29f89cf16
migrate AD accounts incl. mail-attributes to SQL
2018-06-20 15:25:44 +02:00
Ralf Becker
84b715c5af
* Admin: allow to show last login, IP and password change in list
2018-06-01 14:46:52 +02:00
Ralf Becker
e578e64926
ActiveDirectory: additional allow accountExpires=0 for never expires
...
(beside attribute is not set or has value 9223372036854775807)
2018-03-09 19:51:49 +01:00