Franco Fichtner
8f9a89e643
interfaces: fix permission
2019-02-25 08:28:06 +01:00
Franco Fichtner
75c3100ba7
interfaces: move mpd.script to scripts dir
...
mpd5 is started with -d /var/etc so it expects mpd.script to be there.
Some small simplifications along the way.
2019-02-25 08:23:50 +01:00
Franco Fichtner
cfc95122f2
interfaces: move ppp-related scripts to proper location
...
sbin/ is for console-bound binaries.
2019-02-25 08:23:50 +01:00
Franco Fichtner
38be942639
firmware: move duty to return the correct name/id to opnsense-version
...
To be fixed there eventually without a stale note attached.
2019-02-25 08:16:21 +01:00
Franco Fichtner
63ed46dcea
system: small cleanups in session file handling
2019-02-25 07:06:05 +01:00
Franco Fichtner
96683647f5
openvpn: try to "solve" get_failover_interface() issues
...
This seems to be a cosmetic cleanup. get_failover_interface()
is used incorrectly but then merely seems to be used to look
up IPv4 connectivity to make a "smart" decision about resync
duties.
A few annoying and disabled line removals while here.
2019-02-25 05:42:21 +01:00
Franco Fichtner
c52394f2d9
pkg: fix plist
2019-02-25 05:40:21 +01:00
Franco Fichtner
6a4fa40e72
interfaces: small audit of get_failover_interface()
2019-02-24 20:58:36 +01:00
Franco Fichtner
bc1ff2f2f7
firmware: small note for the future
2019-02-24 20:32:10 +01:00
Ad Schellevis
c920004d12
proxy/auth, work in progress https://github.com/opnsense/core/issues/3242 create pam helper for squid
...
todo:
* add userHasPrivilege($user, "user-proxy-auth") replacement
* change squid template to pam, as long as the template isn't changed, this service doesn't do anything
2019-02-24 19:45:38 +01:00
Ad Schellevis
88ee92f63c
Authentication framework, complete interface to support most currently known scenarios, for https://github.com/opnsense/core/issues/3242
...
* using setUserName() --> getUsername() we could support additional services per pam service registration (which would be needed for OpenVPN)
* checkConstraints() can be used to implement current "has group" patterns
2019-02-24 19:31:04 +01:00
Franco Fichtner
5ef4318c6b
pkg: Python 3.6 deps
...
We are now in hybrid mode. Hopefully some day we will be able
to drop CORE_PYTHON2 although chances are that Python 2.7 will
still be needed by a third party dependency. But then again
we can only take care of our code anyway. ;)
2019-02-24 18:12:52 +01:00
Ad Schellevis
40f1662c62
theme, new icon-logo.svg and switch orange #EA7105 with #D94F00 as an experiment.
2019-02-24 11:46:39 +01:00
Franco Fichtner
07a4dea733
pkg: fix plist
2019-02-24 07:49:28 +01:00
Ad Schellevis
91be9a6974
python 2-->3 / configd
...
First (functional) attempt, this needs to stay on devel for some time there might be dragons ;)
src/etc/rc.d/configd --> command_interpreter could cause restart issues after an upgrade, the rc system doesn't like command changes it seems. Maybe not a real world problem, just haven't tried it yet.
unit tests are somewhat functional, although generating all templates will likely fail, since the test config doesn't include all data involved.
2019-02-22 21:03:42 +01:00
Ad Schellevis
47a3b2419d
python 2->3 iteritems() in core templates
2019-02-22 19:23:52 +01:00
Ad Schellevis
9e082449aa
IDS, minor template cleanups using https://github.com/opnsense/core/issues/3100
2019-02-22 16:07:48 +01:00
Ad Schellevis
245513f970
configd, add helpers.empty(), closes https://github.com/opnsense/core/issues/3100
2019-02-22 16:06:42 +01:00
Ad Schellevis
cc2b41bf15
OpenVPN export, add auth-nocache option, closes https://github.com/opnsense/core/issues/3193
2019-02-22 15:29:48 +01:00
Ad Schellevis
a8d89dadc5
mvc/forms, add support for tokenize2 sortable tag, closes https://github.com/opnsense/core/issues/3145
2019-02-22 14:54:10 +01:00
Ad Schellevis
3a361f8e59
auth/pam, better CamelCase for https://github.com/opnsense/core/issues/3242
2019-02-21 21:29:37 +01:00
Ad Schellevis
2e14587955
Auth, add example authentication service and some filename cleansing. for https://github.com/opnsense/core/issues/3242
2019-02-21 21:04:05 +01:00
Ad Schellevis
bdd4c8db03
refresh logo, small scaling issue in previous
2019-02-20 15:08:58 +01:00
Ad Schellevis
63065a9f1f
theme, sharpen our theme a bit
2019-02-20 09:16:19 +01:00
Ad Schellevis
f7213e84ea
psec_mobile.php fix minor escaping issue
2019-02-20 08:44:18 +01:00
Ad Schellevis
5123277a85
config access, don't try to open config.xml in write mode when file is not writeable. closes https://github.com/opnsense/core/issues/3241
2019-02-19 16:28:00 +01:00
Ad Schellevis
dd1d8cba05
minor simplification for https://github.com/opnsense/core/issues/3242
2019-02-18 22:11:23 +01:00
Ad Schellevis
0793375e3f
Authentication/pam, initial (working) version to move already implemented pam services into our framework. for https://github.com/opnsense/core/issues/3242
2019-02-18 22:03:50 +01:00
Ad Schellevis
ab3b5b58de
MVC/Exception handling, prevent UserException from being pushed to /tmp/PHP_errors.log
2019-02-18 15:14:59 +01:00
Ad Schellevis
a22e5a7690
php session, fix previous
2019-02-18 14:46:47 +01:00
Ad Schellevis
426b0e1ea6
Revert "php session path, 3eba9a739e"
...
This reverts commit 545f29a7d2a883696f4923286bbb21dd9e5618d6.
2019-02-18 14:43:42 +01:00
Ad Schellevis
545f29a7d2
php session path, 3eba9a739e
2019-02-18 14:03:55 +01:00
Ad Schellevis
7d5b9df0d9
php, session.savepath, add to recover as discussed 3eba9a739e (commitcomment-32356556)
2019-02-18 11:50:00 +01:00
nhirokinet
895d6bb5b2
remove "show certificate info" on certificate list from pending CSR ( #3243 )
2019-02-18 11:36:09 +01:00
Ad Schellevis
3eba9a739e
php, move session files into it's own directory
2019-02-17 18:37:51 +01:00
Ad Schellevis
969f4523d5
certs.inc, make sure create_temp_openssl_config() can't wrap lines
2019-02-17 15:57:31 +01:00
Ad Schellevis
02b16dcc03
ids, rule-updater.py, cleanup unused
2019-02-16 11:51:11 +01:00
Ad Schellevis
4337e25521
Merge branch 'fredronnv-dev/ipfwcaptiveportal'
2019-02-15 19:32:03 +01:00
Ad Schellevis
3a02d1ab3e
Merge branch 'dev/ipfwcaptiveportal' of https://github.com/fredronnv/core into fredronnv-dev/ipfwcaptiveportal
2019-02-15 19:30:41 +01:00
Franco Fichtner
90c0c395a5
interfaces: check for valid alias IP #3197
...
Suggested by: @tbandixen
2019-02-15 11:26:14 +01:00
Franco Fichtner
8e9ae38fdc
Revert "interfaces: remove arp flush from dhclient-script #3197 "
...
This reverts commit a1dbbb5ef132487c88b2b144ac67eeedb00a576c.
2019-02-15 11:22:07 +01:00
Ad Schellevis
621f84e900
legacy_config_get_interfaces, let's make sure we don't stumble over an empty interface, closes https://github.com/opnsense/core/issues/3231
2019-02-15 11:01:40 +01:00
Fredrik Rönnvall
6c263d4349
Revert "ipfw: there's no need to loop over cp_interfaces"
...
This reverts commit 6178310af241221faf94e9515235b002a12dfbdf.
Don't want to risk opening 53 on wan
2019-02-15 08:27:36 +01:00
Fredrik Rönnvall
6178310af2
ipfw: there's no need to loop over cp_interfaces
...
We can allow traffic to this host via all.
2019-02-15 08:15:00 +01:00
Fredrik Rönnvall
f2da545261
ipfw: only allow traffic to/from me via cp_interfaces
2019-02-15 08:09:05 +01:00
Franco Fichtner
b6cdbaa400
interfaces: do not do background ifconfig call
2019-02-14 19:02:26 +01:00
Franco Fichtner
156d6f7287
openvpn: daemon is already in the config #3223
2019-02-14 18:58:59 +01:00
Franco Fichtner
bbe0592b83
system: syslog doesn't need background job
...
The foreground option is -F so we double-background it...
2019-02-14 18:57:42 +01:00
Franco Fichtner
c217bee6f2
openvpn: proper daemonize instead of background job #3223
2019-02-14 18:37:36 +01:00
Franco Fichtner
f10b710a58
openvpn: remove stale PID file as well
...
PR: https://github.com/opnsense/core/issues/3223
Suggested by: @marjohn56
2019-02-14 18:22:18 +01:00