summaryrefslogtreecommitdiff
path: root/src/ejabberd_auth_ldap.erl (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Fix errors and warnings for "rebar3 edoc"Badlop2022-05-171-1/+0
|
* Update copyright year to 2022Badlop2022-02-111-1/+1
|
* Update newest copyright year to 2021 (#3464)Badlop2021-01-271-1/+1
|
* Add reload handler to ejabberd_auth_ldapPaweł Chmielowski2020-03-041-1/+6
| | | | | | | This will restart ldap process with new options, and should made it recognize new values. This fixes issue #3181
* Update copyright to 2020 (#3149)Badlop2020-01-281-1/+1
|
* Fix typos using codespellEvgeny Khramtsov2019-07-161-1/+1
|
* Process unexpected messages uniformlyEvgeny Khramtsov2019-07-121-4/+9
|
* Use new ets_cache API in ejabberd_authEvgeny Khramtsov2019-06-301-12/+11
|
* Use new configuration validatorEvgeny Khramtsov2019-06-141-63/+12
|
* Update copyright to 2019 (#2756)Badlop2019-01-081-1/+1
|
* Fix some dialyzer warningsEvgeny Khramtsov2018-09-091-4/+1
|
* Get rid of ejabberd.hrl headerEvgeniy Khramtsov2018-06-141-1/+0
| | | | | | | | | The header consisted of too many unrelated stuff and macros misuse. Some stuff is moved into scram.hrl and type_compat.hrl. All macros have been replaced with the corresponding function calls. TODO: probably type_compat.hrl is not even needed anymore since we support only Erlang >= OTP 17.5
* Update copyright datesEvgeniy Khramtsov2018-01-051-1/+1
|
* Rename is_user_exists -> user_existsEvgeniy Khramtsov2017-05-111-4/+4
|
* Use cache for authentication backendsEvgeniy Khramtsov2017-05-111-47/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The commit introduces the following API incompatibilities: In ejabberd_auth.erl: * dirty_get_registered_users/0 is renamed to get_users/0 * get_vh_registered_users/1 is renamed to get_users/1 * get_vh_registered_users/2 is renamed to get_users/2 * get_vh_registered_users_number/1 is renamed to count_users/1 * get_vh_registered_users_number/2 is renamed to count_users/2 In ejabberd_auth callbacks * plain_password_required/0 is replaced by plain_password_required/1 where the argument is a virtual host * store_type/0 is replaced by store_type/1 where the argument is a virtual host * set_password/3 is now an optional callback * remove_user/3 callback is no longer needed * remove_user/2 now should return `ok | {error, atom()}` * is_user_exists/2 now must only be implemented for backends with `external` store type * check_password/6 is no longer needed * check_password/4 now must only be implemented for backends with `external` store type * try_register/3 is now an optional callback and should return `ok | {error, atom()}` * dirty_get_registered_users/0 is no longer needed * get_vh_registered_users/1 is no longer needed * get_vh_registered_users/2 is renamed to get_users/2 * get_vh_registered_users_number/1 is no longer needed * get_vh_registered_users_number/2 is renamed to count_users/2 * get_password_s/2 is no longer needed * get_password/2 now must only be implemented for backends with `plain` or `scram` store type Additionally, the commit introduces two new callbacks: * use_cache/1 where the argument is a virtual host * cache_nodes/1 where the argument is a virtual host New options are also introduced: `auth_use_cache`, `auth_cache_missed`, `auth_cache_life_time` and `auth_cache_size`.
* Add type specs for Module:opt_type/1Evgeniy Khramtsov2017-05-081-0/+4
|
* Don't validate an option in gen_mod:get*opt() functionsEvgeniy Khramtsov2017-04-301-30/+5
| | | | | | | | | | | | | | The changes are very similar to those from previous commit: * Now there is no need to pass validating function in gen_mod:get_opt() and gen_mod:get_module_opt() functions, because the modules' configuration keeps already validated values. * New functions gen_mod:get_opt/2 and gen_mod:get_module_opt/3 are introduced. * Functions gen_mod:get_opt/4 and get_module_opt/5 are deprecated. If the functions are still called, the "function" argument is simply ignored. * Validating callback Mod:listen_opt_type/1 is introduced to validate listening options at startup.
* Don't re-define validation functions in multiple placesEvgeniy Khramtsov2017-04-281-20/+4
|
* Rename aux.erl as misc.erlChristophe Romain2017-04-111-2/+2
| | | | Thanks Microsoft Windows to not support some filenames
* Deprecate jlib.erl in favor of aux.erlEvgeniy Khramtsov2017-03-301-2/+2
| | | | | Since the main goal of jlib.erl is lost, all auxiliary functions are now moved to aux.erl, and the whole jlib.erl is now deprecated.
* Improve startup procedureEvgeniy Khramtsov2017-02-241-3/+3
|
* Start/stop auth modules when host is added/deletedEvgeniy Khramtsov2017-02-231-1/+1
|
* Fix some dialyzer warningsEvgeniy Khramtsov2017-02-181-2/+2
|
* Update copyright date automatically (#1442)Badlop2017-01-021-1/+1
|
* ejabberd_auth*: Fix indentationHolger Weiss2016-05-241-9/+8
|
* Merge commit 'refs/pull/524/head' of github.com:processone/ejabberd into ↵Evgeniy Khramtsov2016-03-251-4/+8
|\ | | | | | | sasl-api-change
| * Use SASL PLAIN authzid as client identity if auth module permits itBen Langfeld2015-05-061-11/+15
| | | | | | | | | | | | This allows the authentication modules to perform SASL proxy authentication. It puts the onus on them to authorize the authcid to masquerade as the authzid. Doesn't currently implement such functionality in existing auth modules, since they cannot currently codify a relationship between the two identities. Does not permit the authzid to use a domain differently from the one of the connection. Note: digest might not work, but I have no interest in it, being deprecated.
* | Update copyright to 2016 (#901)Badlop2016-01-131-1/+1
| |
* | Move JID related functions to jid.erl (#847)Evgeniy Khramtsov2015-11-241-2/+2
| |
* | Remove unused validation codeEvgeniy Khramtsov2015-06-031-66/+1
| |
* | Add config validation at startupEvgeniy Khramtsov2015-06-011-5/+95
| |
* | Do not try to fetch module options via eldap_utilsEvgeniy Khramtsov2015-06-011-4/+4
|/
* Update copyright dates to 2015 (EJAB-1733)Badlop2015-01-081-1/+1
|
* Fix parsing of "ldap_dn_filter" optionHolger Weiss2014-11-221-1/+1
|
* Merge pull request #146 from jamielinux/masterbadlop2014-04-111-4/+3
|\ | | | | Update FSF address
| * Update FSF addressJamie Nguyen2014-02-221-4/+3
| |
* | Update copyright dates to 2014 (EJAB-1679)Badlop2014-03-131-1/+1
|/
* Change configuration file format to YAMLEvgeniy Khramtsov2013-08-211-1/+3
|
* Switch to rebar build toolEvgeniy Khramtsov2013-06-131-3/+2
| | | | | | | | | | | | | | | | Use dynamic Rebar configuration Make iconv dependency optional Disable transient_supervisors compile option Add hipe compilation support Only compile ibrowse and lhttpc when needed Make it possible to generate an OTP application release Add --enable-debug compile option Add --enable-all compiler option Add --enable-tools configure option Add --with-erlang configure option. Add --enable-erlang-version-check configure option. Add lager support Improve the test suite
* Accumulated patch to binarize and indent codeBadlop2013-03-141-292/+258
|
* Update copyright datesAlexey Shchepin2013-01-241-1/+1
|
* Update copyright datesAlexey Shchepin2012-02-231-1/+1
|
* New option support: ldap_deref_aliases (EJAB-639)Evgeniy Khramtsov2011-09-191-8/+19
|
* Fix and improve support for SCRAM auth method (EJAB-1196)Badlop2011-08-161-2/+2
|
* Preliminary patch for SASL SCRAM-SHA-1 (thanks to Stephen Röttger)(EJAB-1196)Badlop2011-08-161-0/+4
|
* Add ldap_tls_cacertfile and ldap_tls_depth options (EJAB-1299)Evgeniy Khramtsov2011-07-131-1/+5
|
* Log an error when an LDAP filter is incorrect (EJAB-1395)Evgeniy Khramtsov2011-06-151-2/+5
|
* update copyright up to 2011Christophe Romain2011-02-141-1/+1
|
* new option ldap_tls_verify is added (EJAB-1229)Evgeniy Khramtsov2010-05-101-14/+16
|
* allow inband password change (EJAB-199)Evgeniy Khramtsov2010-04-191-2/+8
|