Ad Schellevis
514f87adb8
System: Access: Users - remove support for local passwords
...
Since https://github.com/opnsense/core/issues/998 we support our authenticators for all service types, for backward compatibility reasons we kept default unix authentication available, since this is hardly used anymore, after 8 years it's time to deprecate this option.
2024-12-19 12:59:54 +01:00
Franco Fichtner
7d18b8aa88
system: drop stale link reference
...
Cross-links are nice in theory but in practice these are rarely used
and prone to bitrot like seen here.
2024-11-25 08:05:13 +01:00
Franco Fichtner
c5f02d2a86
system: style update
2024-10-16 09:04:09 +02:00
Franco Fichtner
7eb9e3f541
system: style
2024-10-15 12:09:16 +02:00
Franco Fichtner
986b58d108
system: fix syntax for sshd rekey
2024-10-15 12:05:41 +02:00
Ad Schellevis
2fb7965934
System: Settings: Administration - add RekeyLimit with a limited set of choices. In some regulated environments the openssh defaults are not acceptable, in which case we might need to offer some choices. ( #7970 )
...
Since RekeyLimit specifies both data and time and we don't want to overcomplicate things, it might be best to just offer some (pre validated) options.
2024-10-14 14:22:29 +02:00
Ad Schellevis
f2603ca710
System: Settings: Administration - fix broken link to Trust section, closes https://github.com/opnsense/core/issues/7811
2024-08-23 20:50:46 +02:00
Franco Fichtner
b6352ce80d
system: meh, typo
2024-03-13 09:17:48 +01:00
Franco Fichtner
c149ac2cfb
system: fix syslog access for legacy moves
...
This reverts commit 022ab7ad75a994eb92d8e923ba904e033c593392.
2024-03-13 09:05:50 +01:00
Ad Schellevis
022ab7ad75
System: Settings: Administration - possible issue when syslog container doesn't exist in the config. closes https://github.com/opnsense/core/issues/7323
2024-03-13 08:45:47 +01:00
Stephan de Wit
c94f8fc968
system: typo in previous
2024-03-08 09:32:06 +01:00
Franco Fichtner
a7a842cd08
system: need this too to avoid spurious checked option later on
2024-03-08 09:26:09 +01:00
Franco Fichtner
d5b84cf46e
system: move web GUI error log setting to appropriate page #6830
...
The storage location is wrong but deal with this later.
2024-02-28 12:57:27 +01:00
Franco Fichtner
763d2fd4dd
ui: fix the missing dialog padding in some modals
...
It appears that dialogRef.getModalBody() is one of our
ancient modal implementations and a simple 'message' does
the trick.
2024-01-04 10:47:25 +01:00
Franco Fichtner
25620da2f8
system: fix warnings and SSH fail on empty <ssh/> node
...
PR: https://forum.opnsense.org/index.php?topic=36866.0
2023-11-09 09:08:56 +01:00
lin-xianming
8f9d7e823b
webgui: prevent PHP session gc from running early ( #6499 )
...
With the default PHP settings, there is a 1% chance for the session gc
to trigger upon the start of a session, removing session files with
modification times older than 24 minutes. This can cause sessions to
timeout earlier than indicated by the webgui settings.
2023-04-18 18:23:15 +02:00
Stephan de Wit
2a81e78c41
system: typo
2023-03-03 09:39:10 +01:00
Franco Fichtner
412c0c7b71
system: use system_resolver_configure() everywhere
...
Do not delete system_resolvconf_generate/system_hosts_generate yet.
We may just end up renaming them in order to get external callers
to adapt to the new layout.
2023-03-02 08:35:19 +01:00
Franco Fichtner
7989daa6ac
system: 'ssh' probably empty, issue with PHP 8
...
PR: https://forum.opnsense.org/index.php?topic=30946.0
2022-11-07 10:40:01 +02:00
Franco Fichtner
e82896026c
system: tweak validation message
2022-08-30 08:49:49 +02:00
Ad Schellevis
d31bff3c39
webgui: cipher suites and TLS1.3 validation issues, partial fix for https://github.com/opnsense/core/pull/5993
2022-08-27 11:52:48 +02:00
Franco Fichtner
a256697cbf
system: remove debug mode, disable display errors on runtime for development mode #5889
2022-07-19 16:47:00 +02:00
Josh Soref
20a3c3da38
Spelling ( #5885 )
2022-07-18 13:59:03 +02:00
Franco Fichtner
0819c4232b
system: handle "production" mode without introducing a new type
...
Store debug and deployment and keep production as the implied default
if we want to change this later we can't get out of it without a migration
which we don't have for legacy configuration storage at the moment.
2022-06-10 14:05:49 +02:00
Stephan
0488d3669a
PHP80: Add deployment options
...
Since PHP80 decided to turn certain notices into warnings, a way to silence these is necessary, which also presents us with the opportunity to make this configurable.
2022-06-08 11:30:22 +02:00
Franco Fichtner
7b1f3d7045
system: support 1500000 baudrate selection for ARM
...
Sticky 115200 when no value was set since it is still the most
common setting.
2022-05-18 07:53:54 +02:00
Franco Fichtner
f5ea62e311
system: usual TAB-dance
2022-01-18 16:48:54 +01:00
Franco Fichtner
17b294b38e
system: generic rewrite of ssh advanced opts
...
o Batch the backend call calling from GUI once and
only if needed from configuration.
o Turn the configuration into a generic loop.
o Move advanced options to the back of the configuration.
o Warning level for both log messages.
2022-01-18 16:42:16 +01:00
Manuel Faux
3b164749d3
Allow to configure SSH setting PubkeyAcceptedAlgorithms via GUI ( #5400 )
...
As OpenSSH 8.8 disables RSA signatures using the SHA-1 hash algorithm
by default some older SSH clients might not be able to connect to
OPNsense anymore. Therefore, it might be needed to manually modify the
PubkeyAcceptedAlgorithms sshd config option.
Prevent generating of invalid configuration values for dynamic
crypto parameters (KexAlgorithms, Ciphers, MACs, HostKeyAlgorithms and
PubkeyAcceptedAlgorithms).
2022-01-18 15:14:59 +01:00
Franco Fichtner
74455307d5
system: prevent use of client certificates in web GUI; closes #3048
2021-07-01 13:18:57 +02:00
Ad Schellevis
2eebd08278
Shell inactivity timeout (for [t]csh). closes https://github.com/opnsense/core/issues/4936
2021-04-22 17:06:50 +02:00
Franco Fichtner
3158956a27
system: fix PHP warning #4474
2020-11-25 08:53:55 +01:00
Franco Fichtner
8fb1a11e33
system: whitespaces :D
2020-11-24 10:33:46 +01:00
Ad Schellevis
96ae155a39
whitespace
2020-11-23 20:09:56 +01:00
Ad Schellevis
d70171bdc5
whitespace system_advanced_admin.php
2020-11-23 20:08:59 +01:00
Ad Schellevis
2c6da85d42
User management: add user OTP seed option in System->Settings->Administration. for https://github.com/opnsense/core/issues/4474
2020-11-23 18:37:35 +01:00
Franco Fichtner
dd526ac8b8
system: small follow-up for correct preset on page load #4373
2020-09-24 14:10:33 +02:00
Ad Schellevis
6cac461e6e
System / Settings / Administration: fix defunct "use default" button on Listen Interfaces
2020-09-24 13:59:56 +02:00
Ad Schellevis
116511910d
sshd: add HostKeyAlgorithms for https://github.com/opnsense/core/issues/3975
2020-03-13 09:54:59 +01:00
Ad Schellevis
5df590cd13
SSH: optional KexAlgorithms, Ciphers and MACs to harden security. closes https://github.com/opnsense/core/issues/3975
2020-03-12 13:47:56 +01:00
Franco Fichtner
6e727e43d2
system: allow an arbitrary group for sudo like ssh login; closes #3407
2019-05-04 10:43:32 +02:00
Franco Fichtner
ba0c82dd54
dhcpd: naming convention, plugins_configure() use
2019-04-29 07:49:26 +02:00
Franco Fichtner
6d66dd81b2
system: avoid short PHP tag
2019-03-04 07:24:31 +01:00
Ad Schellevis
2f919443dc
cherry-pick https://github.com/opnsense/core/pull/3234
2019-03-01 18:35:50 +01:00
Ad Schellevis
4a8e737ced
fix some gettext() + html_safe, discussed c4c7f8d732
2019-02-03 20:04:08 +01:00
Michael Steenbeek
6db6598c00
Fix more incorrect HTML tags ( #3007 )
2018-12-04 10:13:22 +01:00
Franco Fichtner
6bbfcf4b02
system: allow USB-based serial ports; closes #2026
2018-07-15 19:47:43 +02:00
Franco Fichtner
8b73ce3072
system: HSTS option tweaks
2018-05-28 05:12:31 +00:00
Ad Schellevis
4e0ce9b193
webgui, opt-in for htst, for https://github.com/opnsense/core/issues/1722
2018-05-27 20:01:40 +02:00
Franco Fichtner
d13da15cb1
system: move password policy settings to local database server edit #1929
...
A few review spots and regression fixes as well.
2018-05-01 13:44:38 +00:00