aboutsummaryrefslogtreecommitdiff
path: root/src/ejabberd_auth_external.erl (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Get rid of ejabberd.hrl headerEvgeniy Khramtsov2018-06-141-1/+0
| | | | | | | | | The header consisted of too many unrelated stuff and macros misuse. Some stuff is moved into scram.hrl and type_compat.hrl. All macros have been replaced with the corresponding function calls. TODO: probably type_compat.hrl is not even needed anymore since we support only Erlang >= OTP 17.5
* Get rid of ?FUNCTION_NAME macro (it's OTP19+ feature)Evgeniy Khramtsov2018-05-081-5/+5
|
* Improve logging of external authentication failuresEvgeniy Khramtsov2018-05-081-8/+9
|
* Improve robustness of external authentication backendsEvgeniy Khramtsov2018-05-071-21/+42
| | | | | | | | | | | | Now all external ports are attached to supervising processes and requests are balanced in round-robin manner until the pool is exhausted. The commit also deprecates `extauth_instances` option and introduces `extauth_pool_size` option instead, with the default value of a number of logical processors (i.e. CPU cores). Fixes #2403
* Update copyright datesEvgeniy Khramtsov2018-01-051-1/+1
|
* Rename is_user_exists -> user_existsEvgeniy Khramtsov2017-05-111-3/+3
|
* Use cache for authentication backendsEvgeniy Khramtsov2017-05-111-242/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The commit introduces the following API incompatibilities: In ejabberd_auth.erl: * dirty_get_registered_users/0 is renamed to get_users/0 * get_vh_registered_users/1 is renamed to get_users/1 * get_vh_registered_users/2 is renamed to get_users/2 * get_vh_registered_users_number/1 is renamed to count_users/1 * get_vh_registered_users_number/2 is renamed to count_users/2 In ejabberd_auth callbacks * plain_password_required/0 is replaced by plain_password_required/1 where the argument is a virtual host * store_type/0 is replaced by store_type/1 where the argument is a virtual host * set_password/3 is now an optional callback * remove_user/3 callback is no longer needed * remove_user/2 now should return `ok | {error, atom()}` * is_user_exists/2 now must only be implemented for backends with `external` store type * check_password/6 is no longer needed * check_password/4 now must only be implemented for backends with `external` store type * try_register/3 is now an optional callback and should return `ok | {error, atom()}` * dirty_get_registered_users/0 is no longer needed * get_vh_registered_users/1 is no longer needed * get_vh_registered_users/2 is renamed to get_users/2 * get_vh_registered_users_number/1 is no longer needed * get_vh_registered_users_number/2 is renamed to count_users/2 * get_password_s/2 is no longer needed * get_password/2 now must only be implemented for backends with `plain` or `scram` store type Additionally, the commit introduces two new callbacks: * use_cache/1 where the argument is a virtual host * cache_nodes/1 where the argument is a virtual host New options are also introduced: `auth_use_cache`, `auth_cache_missed`, `auth_cache_life_time` and `auth_cache_size`.
* Add type specs for Module:opt_type/1Evgeniy Khramtsov2017-05-081-0/+4
|
* Don't validate an option in ejabberd_config:get_option() functionsEvgeniy Khramtsov2017-04-291-15/+5
| | | | | | | | | | | | | The commit introduces the following changes: * Now there is no need to pass validating function in ejabberd_config:get_option() functions, because the configuration keeps already validated values. * New function ejabberd_config:get_option/1 is introduced * Function ejabberd_config:get_option/3 is deprecated. If the function is still called, the second argument (validating function) is simply ignored. * The second argument for ejabberd_config:get_option/2 is now a default value, not a validating function.
* Start/stop auth modules when host is added/deletedEvgeniy Khramtsov2017-02-231-1/+5
|
* Use ejabberd_config:get_option/2 instead of ejabberd_config:get_local_option/2Peter Lemenkov2017-02-161-1/+1
| | | | Signed-off-by: Peter Lemenkov <lemenkov@gmail.com>
* Update copyright date automatically (#1442)Badlop2017-01-021-1/+1
|
* ejabberd_auth*: Fix indentationHolger Weiss2016-05-241-7/+9
|
* Get rid of "internal" DB type. This also fixes #1092Evgeniy Khramtsov2016-04-271-21/+21
|
* Merge commit 'refs/pull/524/head' of github.com:processone/ejabberd into ↵Evgeniy Khramtsov2016-03-251-23/+27
|\ | | | | | | sasl-api-change
| * Use SASL PLAIN authzid as client identity if auth module permits itBen Langfeld2015-05-061-25/+29
| | | | | | | | | | | | This allows the authentication modules to perform SASL proxy authentication. It puts the onus on them to authorize the authcid to masquerade as the authzid. Doesn't currently implement such functionality in existing auth modules, since they cannot currently codify a relationship between the two identities. Does not permit the authzid to use a domain differently from the one of the connection. Note: digest might not work, but I have no interest in it, being deprecated.
* | Fixed type specifications for 'rebar doc'Elias Rohrer2016-03-071-2/+2
| | | | | | | | | | - Fixed type @specs and -specs to remove 'rebar doc' errors - Removed a lot of wrong and deprecated documentation in ejabberd_piefxis.erl
* | Update copyright to 2016 (#901)Badlop2016-01-131-1/+1
| |
* | More now() replacementsPaweł Chmielowski2015-12-071-2/+1
| |
* | cosmetic cleanupChristophe Romain2015-10-071-1/+0
| |
* | Fix regression introduced when code was binarized (EJAB-641)Badlop2015-09-241-1/+3
| |
* | Comment unused type, unused termQuan Zhuo2015-09-161-1/+1
| |
* | Add config validation at startupEvgeniy Khramtsov2015-06-011-3/+12
|/
* Update copyright dates to 2015 (EJAB-1733)Badlop2015-01-081-1/+1
|
* Don't use cached passwords if "extauth_cache: 0"Holger Weiss2014-05-201-0/+2
| | | | | | | Regarding "extauth_cache", the guide says: "The integer 0 (zero) enables caching for statistics, but doesn't use that cached information to authenticate users." Make sure the cached password isn't used even if the user is currently logged in with another resource.
* Webadmin with extauth requires internal to run at least once (issue #201)Badlop2014-05-071-4/+2
|
* extauth_cache can have value 0Badlop2014-05-051-1/+1
|
* Accept "extauth_cache: false"Holger Weiss2014-04-161-1/+3
| | | | | | Don't log a "configuration problem" message if "extauth_cache: false" is explicitly specified, as that's a valid configuration setting as per the documentation.
* Merge pull request #146 from jamielinux/masterbadlop2014-04-111-4/+3
|\ | | | | Update FSF address
| * Update FSF addressJamie Nguyen2014-02-221-4/+3
| |
* | Update copyright dates to 2014 (EJAB-1679)Badlop2014-03-131-1/+1
|/
* Change configuration file format to YAMLEvgeniy Khramtsov2013-08-211-2/+2
|
* Switch to rebar build toolEvgeniy Khramtsov2013-06-131-0/+1
| | | | | | | | | | | | | | | | Use dynamic Rebar configuration Make iconv dependency optional Disable transient_supervisors compile option Add hipe compilation support Only compile ibrowse and lhttpc when needed Make it possible to generate an OTP application release Add --enable-debug compile option Add --enable-all compiler option Add --enable-tools configure option Add --with-erlang configure option. Add --enable-erlang-version-check configure option. Add lager support Improve the test suite
* Accumulated patch to binarize and indent codeBadlop2013-03-141-146/+144
|
* Update copyright datesAlexey Shchepin2013-01-241-1/+1
|
* Merge SQL and Mnesia code into one module (EJAB-1560)Evgeniy Khramtsov2012-04-271-14/+7
|
* Update copyright datesAlexey Shchepin2012-02-231-1/+1
|
* Fix and improve support for SCRAM auth method (EJAB-1196)Badlop2011-08-161-2/+2
|
* Preliminary patch for SASL SCRAM-SHA-1 (thanks to Stephen Röttger)(EJAB-1196)Badlop2011-08-161-0/+4
|
* update copyright up to 2011Christophe Romain2011-02-141-1/+1
|
* Fix detection of mod_last at server start (EJAB-641)Badlop2010-12-031-3/+15
|
* Fix typo (thanks to Evgeniy Khramtsov)Badlop2010-07-231-1/+1
|
* Optionally cache extauth users in mnesia (EJAB-641)Badlop2010-05-101-18/+223
|
* Update year of ProcessOne copyright from 2009 to 2010 (EJAB-1159)Badlop2010-01-121-1/+1
| | | | SVN Revision: 2891
* * src/cyrsasl.erl: Change API of check_password: pass a functionBadlop2009-04-221-1/+1
| | | | | | | | | | | | | | | | | to generate the digest (thanks to Graham Whitted)(EJAB-863) * src/cyrsasl_anonymous.erl: Likewise * src/cyrsasl_digest.erl: Likewise * src/cyrsasl_plain.erl: Likewise * src/ejabberd_auth.erl: Likewise * src/ejabberd_auth_anonymous.erl: Likewise * src/ejabberd_auth_external.erl: Likewise * src/ejabberd_auth_internal.erl: Likewise * src/ejabberd_auth_ldap.erl: Likewise * src/ejabberd_auth_odbc.erl: Likewise * src/ejabberd_auth_pam.erl: Likewise * src/ejabberd_c2s.erl: Likewise SVN Revision: 2033
* * src/ejabberd_auth.erl: If anonymous auth is enabled, whenBadlop2009-03-041-1/+6
| | | | | | | | | | | | | checking if the account already exists in other auth methods, take into account if the auth method failed (EJAB-882) * src/ejabberd_auth_anonymous.erl: Likewise * src/ejabberd_auth_external.erl: Likewise * src/ejabberd_auth_internal.erl: Likewise * src/ejabberd_auth_ldap.erl: Likewise * src/ejabberd_auth_odbc.erl: Likewise * src/ejabberd_auth_pam.erl: Likewise SVN Revision: 1966
* * doc/guide.tex: Update copyright date 2008 to 2009 (EJAB-842)Badlop2009-01-121-2/+2
| | | | | | | | * doc/guide.html: Likewise * src/*/*.erl: Likewise * src/*/*.erl: Remove unneeded blankspaces in license text SVN Revision: 1804
* * src/mod_register.erl: Change password using mod_register alwaysBadlop2008-08-181-1/+4
| | | | | | | | | | returns success regardless of real result (EJAB-723) * src/ejabberd_auth.erl: Likewise * src/ejabberd_auth_external.erl: Likewise * src/ejabberd_auth_internal.erl: Likewise * src/ejabberd_auth_odbc.erl: Likewise SVN Revision: 1530
* * doc/guide.tex: Update Process-one name to ProcessOne (EJAB-708)Badlop2008-07-311-1/+1
| | | | | | | | | | | * doc/guide.html: Likewise * doc/api/overview.edoc: Likewise * src/*/*.erl: Likewise * src/*/*.hrl: Likewise * src/*/*.c: Likewise * src/odbc/*.sql: Likewise SVN Revision: 1499
* * src/ejabberd_config.erl: dirty_get_registered_users now correctly returns ↵Mickaël Rémond2008-02-191-0/+2
| | | | | | | | | | | | all users for all vhosts no matter which back-end is used (EJAB-527) * src/ejabberd_auth_odbc.erl: Likewise * src/ejabberd_auth_internal.erl: Likewise * src/ejabberd_auth.erl: Likewise * src/ejabberd_auth_external.erl: Likewise * src/ejabberd_auth_ldap.erl: Likewise SVN Revision: 1198