5964 Commits

Author SHA1 Message Date
Franco Fichtner
07278b08ac pkg: firmware reload requires initialised PHP 2016-09-22 17:42:33 +02:00
Franco Fichtner
5024813216 system: fixes in previous 2016-09-22 19:58:20 +02:00
Franco Fichtner
29dcbf58f6 rc: more loader.conf changes 2016-09-22 19:43:45 +02:00
Ad Schellevis
52c78955b8 cleanup in services_dnsmasq_configure, remove duplicate code, for https://github.com/opnsense/core/issues/1182 2016-09-21 19:19:13 +02:00
Franco Fichtner
17b3374c8b system: fix setting net.link.bridge.pfil_member; closes #1180 2016-09-21 18:48:19 +02:00
Franco Fichtner
f88210b49e rc: if -devel package allow phar for unit testing 2016-09-21 08:19:14 +02:00
Franco Fichtner
fed56b4ad6 rc: revamp rc.loader
We only merge chunks for loader.conf leaveraging a priority scheme
in order to be able to override standard modifications made by e.g.
core or plugins (in case of user changes).

Start to work on its scripts, but 20-console is dynamic so it needs
more work in the actual PHP code.

Discussed with: @adschellevis
2016-09-21 07:28:39 +02:00
Franco Fichtner
9a117cd0ff rc: syshook print improvements 2016-09-21 07:10:08 +02:00
Avi H. D
e6f5a19190 Add CSV capability information to 'SSL no bump sites' form tool tip 2016-09-19 09:56:04 +02:00
Franco Fichtner
5a21a07ab4 interfaces: fix missing help toggle in settings
Reported by: Simon Brunet
2016-09-19 08:56:07 +02:00
Franco Fichtner
d569a8e180 access: allow root disable and prevent to disable own user
PR: https://forum.opnsense.org/index.php?topic=3684
2016-09-19 07:49:35 +02:00
Franco Fichtner
2f5468ae66 firewall: not my day :) 2016-09-18 20:26:33 +02:00
Franco Fichtner
1a2ab2afe5 src: whitespace sweep 2016-09-18 20:14:33 +02:00
Franco Fichtner
d27cdb4351 firewall: and another one 2016-09-18 20:08:26 +02:00
Franco Fichtner
1334374b61 firewall: fix typo 2016-09-18 20:07:22 +02:00
Franco Fichtner
0cd0c89575 firewall: tweak previous changes, '[+]' ASCII art will be confusing
Expand / join the descriptive text and explain floating rules a bit more.
2016-09-18 20:03:28 +02:00
Franco Fichtner
8f243538ad consistent fix for 64f3742fb3 2016-09-18 18:34:02 +02:00
Ad Schellevis
86996d7bf7 (unbound) get_interface_subnet(v6) can return null, ignore network in that case.
Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily
2016-09-18 12:18:48 +02:00
Ad Schellevis
ffbb29e414 (interfaces.inc) move single used find_interface_subnetv6() into get_interface_subnetv6() 2016-09-18 12:13:25 +02:00
Franco Fichtner
4461ea2391 rc: order syshooks by name 2016-09-16 17:09:06 +02:00
Franco Fichtner
4e16a07515 auth: parse for "\0", allow empty password for #998 2016-09-16 16:55:02 +02:00
Franco Fichtner
803af49280 interfaces: defang netgraph attach/detach for #1188
We don't particularly need this code and the utility as netgraph
is always attached on load as long as we don't detach and the
attach per interface is a custom feature that requires a kernel
patch we don't want to keep around for 17.1.

Only thing we need to measure is the performance impact of not
detaching netgraph.  This only pertains to ethernet devices
anyway.

We do, however, keep interface_netgraph_needed() around for
reference as it's harmless by default.
2016-09-16 15:27:30 +02:00
Franco Fichtner
250a1493d8 pkg: it's ok for -devel to pull in the PAM glue now 2016-09-16 09:46:22 +02:00
Franco Fichtner
0cdd609ec6 pkg: omit spurious delete 2016-09-16 09:18:47 +02:00
Ad Schellevis
0be295ac38 (firewall, nati) wrong validation 2016-09-15 19:36:36 +02:00
Ad Schellevis
cdf0573539 (captive portal) also remove unactive zones on CP stop 2016-09-15 15:58:04 +02:00
Ad Schellevis
cc18336d35 (captive portal) when using multiple zones, uninstall the correct zone directories 2016-09-15 15:48:55 +02:00
Ad Schellevis
190ac1064d Merge pull request #1186 from evbevz/ldap-auth-fix
LDAP fix: handle legal boolean return result from searchUsers()
2016-09-15 15:26:04 +02:00
Ad Schellevis
f107116e7d ditch load_mac_manufacturer_table, replace with configd call 2016-09-15 15:21:04 +02:00
Ad Schellevis
5ad7adc60a remove duplicate checks in interfaces.inc 2016-09-15 14:46:33 +02:00
Ad Schellevis
0db74efff4 lets not try to hide issues with a NIC, 11 year old code. 2016-09-15 14:30:40 +02:00
Ad Schellevis
2f86048748 Merge pull request #1187 from opnsense/carp_improvements
Carp improvements
2016-09-15 11:51:16 +02:00
Ad Schellevis
dcd0e06867 small style changes 2016-09-15 11:29:49 +02:00
Ad Schellevis
2c25e3e31c oops, wrong block... 2016-09-15 11:18:44 +02:00
Ad Schellevis
75e7e0e44d cleanup carp_status.php 2016-09-15 11:15:38 +02:00
Ad Schellevis
51aec445ec fix typo 2016-09-15 10:33:13 +02:00
Ad Schellevis
5497ae4e78 revert carp to BSD standards 2016-09-15 10:27:38 +02:00
evbevz
652089dd78 LDAP fix: handle legal boolean return result from searchUsers() 2016-09-15 10:26:38 +03:00
Ad Schellevis
c782d9e813 remove unused link_ip_to_carp_interface in interfaces.inc 2016-09-14 21:30:47 +02:00
Ad Schellevis
5c6a2ef883 remove duplicate code in interfaces.inc 2016-09-14 21:23:50 +02:00
Ad Schellevis
87011debbf (vips) remove odd logic 2016-09-14 21:21:09 +02:00
Ad Schellevis
1ccf6b4527 remove idletimeout requirement for ondemand connections 2016-09-14 20:08:37 +02:00
Ad Schellevis
b56bcf8392 wrap gettext() , closes https://github.com/opnsense/core/issues/1181 2016-09-14 10:29:50 +02:00
Ad Schellevis
ac8eba7d0f another test 2016-09-13 20:28:30 +02:00
Ad Schellevis
bc2765ea86 bring vips down when interface is down, fix carp setup order. 2016-09-12 20:50:52 +02:00
Ad Schellevis
b90babbfd2 add opnsense-auth helper for pam support, https://github.com/opnsense/core/issues/998 2016-09-12 20:38:48 +02:00
Ad Schellevis
7b59e10cf8 (openvpn, auth) remove dead code 2016-09-12 18:36:11 +02:00
Ad Schellevis
9ba2b2f620 (ipsec, xauth) cleanup ipsec.auth-user.php script before moving to pam.
The old script had a lot of unused code in it, either stuff that couldn't be configured from OPNsense or dead code.
2016-09-12 18:16:46 +02:00
Ad Schellevis
f4e6e6f457 add some comments 2016-09-09 21:09:49 +02:00
Ad Schellevis
c7b1e46219 (interfaces/qinq) fix typo's 2016-09-09 18:02:48 +02:00