- Adds the
getDao()
method on the authentication plugin for applications that are using Jelix 1.8.3.
Installer: set automatically the jAuth driver value, even in "noconfigfile" mode.
- no interactive configuration, it is useless
- Fix the ldapdao installer for Jelix 1.7+
- Fix an error during the installation
- Implements jIAuthDriver2 interface available in Jelix 1.6.21+
- Fix password verification: close ldap connection in case of errors
- Fix error message when the loading of user attributes fails
Compatibility with Jelix 1.7.x
remove the dependency to jauth in module.xml, as it is a conflict when jcommunity is installed.
Add more messages into logs when something wrong happens, to ease the debugging of bad connections / authentication / search.
- Improve support of ldaps and STARTTLS, by using ldap uri and ldap_start_tls()
- Fix SQL error during the installation
- Security issue: empty password may be accepted by LDAP servers, as they implement the Unauthenticated Authentication Mecanism, allowing empty password. We don't want such feature, so empty password are now refused.
- Fix user group search: escape parenthesis in values inserted into the searchGroupFilter name.
- Fix user group search: add the user in default groups of the application, in addition to groups corresponding to ldap groups. New configuration parameter searchGroupKeepUserInDefaultGroups to disable this feature.
- fix error during the installation
- fix some unit tests
- Fix: allow the admin user to change his password
- Fix: in some case, the user was recognized only at the first login
- Fix support of jCommunity
- Fix: attributes search were made anonymously, which is not allowed in some LDAP server
- Fix support of attributes declaration having no mapping like
foo:
- Improved the configuration manual
- Fix some unit tests
The login process has changed, to take care of various ldap structure and server configuration.
- support of multiple search filters for users
- support of multiple dn templates to connect users
- move ldap connection parameters (hostname, port, admin login/password) to profiles.ini.php
- Jelix admin login is configurable
- synchronize all ldap groups into jAcl2 rights, if configured
- Fix mispelling variable names
Initial public release.