Ad Schellevis
f5dade45cc
Revert ""Reset usb on boot" add sleep, since we can't seem to detect the initial usb detection is still active...."
...
This reverts commit a0fb31c652386ef6d4f161950bf8a79c87035624.
2019-02-27 12:21:10 +01:00
Ad Schellevis
464996af84
Authentication framework, catch login, su, sudo pam services
...
- add aliases() to IService, so one service can be used for multiple pam services, eases implementation (pam has an include statement for this purpose)
- move logging to AuthenticationFactory->authenticate() and communicate more about choices taken, eases debugging
- remove OpnsenseAuthTest, Sshd, implemented by System
for https://github.com/opnsense/core/issues/3242
2019-02-27 11:20:29 +01:00
Ad Schellevis
d9eb9cb29a
ACL::hasPrivilege() overlapping variable, related to https://github.com/opnsense/core/issues/3242
2019-02-27 10:41:37 +01:00
Ad Schellevis
538b74ca63
escaping, b24e7acf3f (commitcomment-32490347)
2019-02-27 09:00:48 +01:00
Franco Fichtner
69ff2fa8ad
system: move opnsense-auth to libexec
...
... but keep a symlink for backwards compatibility
2019-02-27 01:26:15 +01:00
Franco Fichtner
64e74ce75b
mvc: more close / cancel, translation
2019-02-27 00:53:05 +01:00
Franco Fichtner
66e6efccd8
firewall: alias close button is really cancel
2019-02-27 00:47:15 +01:00
Franco Fichtner
8724ba878d
mvc: simplify save button label
2019-02-27 00:44:40 +01:00
Franco Fichtner
42e901ce6d
src: another style sweep
2019-02-26 23:57:29 +01:00
Franco Fichtner
46de0646c9
src: style fix
2019-02-26 23:53:14 +01:00
Ad Schellevis
a953a756d9
Merge branch 'mimugmail-master'
2019-02-26 20:58:47 +01:00
Ad Schellevis
ae38c01d5d
Merge branch 'master' of https://github.com/mimugmail/core into mimugmail-master
2019-02-26 20:55:19 +01:00
Ad Schellevis
80d94767a7
firewall_schedule_edit.php, escape issues
2019-02-26 20:16:00 +01:00
Ad Schellevis
b24e7acf3f
legacy_html_escape_form_data() add ENT_QUOTES to avoid certain escaping issues
2019-02-26 19:58:42 +01:00
Ad Schellevis
30931e5d6d
Gateways/edit, escape issue which doesn't seem to add any value anymore
2019-02-26 19:46:54 +01:00
Ad Schellevis
560a6cb79e
MVC/field types, add sorting for list types. closes https://github.com/opnsense/core/issues/3251
...
We should refactor some code later, but there's no rush. issue in https://github.com/opnsense/core/issues/3252
2019-02-26 11:26:05 +01:00
Ad Schellevis
8170be76e6
squid + pam, for https://github.com/opnsense/core/issues/3242
2019-02-25 20:44:34 +01:00
Franco Fichtner
ef17620814
pkg: fix plist
2019-02-25 20:38:28 +01:00
Ad Schellevis
a0fb31c652
"Reset usb on boot" add sleep, since we can't seem to detect the initial usb detection is still active....
...
Sample errors while booting:
--------------------------------------------------------------------------------
usbd_setup_device_desc: getting device descriptor at addr X failed, USB_ERR_IOERROR
usbd_req_re_enumerate: addr=X, set address failed! (USB_ERR_IOERROR, ignored)
2019-02-25 18:38:53 +01:00
Ad Schellevis
6dd8bbe14b
System->Settings->Miscellaneous : add "Reset usb on boot" option
...
While testing 4g modems, it seems that initial device detection isn't flawless leading to USB_ERR_IOERROR failures and non functional modems.
Most likely cause of these issues seems to be that some devices need a bit of time between powering the bus and performing registration.
This option adds an early boot script, which optionally performs a usbconfig reset on boot.
2019-02-25 16:49:25 +01:00
Ad Schellevis
dc7db7084b
configd, python 2 --> 3, simplify search for program path
2019-02-25 10:14:14 +01:00
Franco Fichtner
5335692fb8
pkg: fix plist
2019-02-25 10:08:17 +01:00
Ad Schellevis
22261d6614
configd, python 2 --> 3, type comparison issue (bytes, str) disabling our previous end of line fix
2019-02-25 10:05:19 +01:00
Ad Schellevis
ddca8d4350
web proxy, move pam to template
2019-02-25 09:55:41 +01:00
Franco Fichtner
7a6ccaf029
web proxy: simplify to avoid confusion
2019-02-25 08:41:58 +01:00
Franco Fichtner
8f9a89e643
interfaces: fix permission
2019-02-25 08:28:06 +01:00
Franco Fichtner
75c3100ba7
interfaces: move mpd.script to scripts dir
...
mpd5 is started with -d /var/etc so it expects mpd.script to be there.
Some small simplifications along the way.
2019-02-25 08:23:50 +01:00
Franco Fichtner
cfc95122f2
interfaces: move ppp-related scripts to proper location
...
sbin/ is for console-bound binaries.
2019-02-25 08:23:50 +01:00
Franco Fichtner
38be942639
firmware: move duty to return the correct name/id to opnsense-version
...
To be fixed there eventually without a stale note attached.
2019-02-25 08:16:21 +01:00
Franco Fichtner
63ed46dcea
system: small cleanups in session file handling
2019-02-25 07:06:05 +01:00
Franco Fichtner
96683647f5
openvpn: try to "solve" get_failover_interface() issues
...
This seems to be a cosmetic cleanup. get_failover_interface()
is used incorrectly but then merely seems to be used to look
up IPv4 connectivity to make a "smart" decision about resync
duties.
A few annoying and disabled line removals while here.
2019-02-25 05:42:21 +01:00
Franco Fichtner
c52394f2d9
pkg: fix plist
2019-02-25 05:40:21 +01:00
Franco Fichtner
6a4fa40e72
interfaces: small audit of get_failover_interface()
2019-02-24 20:58:36 +01:00
Franco Fichtner
bc1ff2f2f7
firmware: small note for the future
2019-02-24 20:32:10 +01:00
Ad Schellevis
c920004d12
proxy/auth, work in progress https://github.com/opnsense/core/issues/3242 create pam helper for squid
...
todo:
* add userHasPrivilege($user, "user-proxy-auth") replacement
* change squid template to pam, as long as the template isn't changed, this service doesn't do anything
2019-02-24 19:45:38 +01:00
Ad Schellevis
88ee92f63c
Authentication framework, complete interface to support most currently known scenarios, for https://github.com/opnsense/core/issues/3242
...
* using setUserName() --> getUsername() we could support additional services per pam service registration (which would be needed for OpenVPN)
* checkConstraints() can be used to implement current "has group" patterns
2019-02-24 19:31:04 +01:00
Franco Fichtner
5ef4318c6b
pkg: Python 3.6 deps
...
We are now in hybrid mode. Hopefully some day we will be able
to drop CORE_PYTHON2 although chances are that Python 2.7 will
still be needed by a third party dependency. But then again
we can only take care of our code anyway. ;)
2019-02-24 18:12:52 +01:00
Ad Schellevis
40f1662c62
theme, new icon-logo.svg and switch orange #EA7105 with #D94F00 as an experiment.
2019-02-24 11:46:39 +01:00
Franco Fichtner
07a4dea733
pkg: fix plist
2019-02-24 07:49:28 +01:00
Ad Schellevis
91be9a6974
python 2-->3 / configd
...
First (functional) attempt, this needs to stay on devel for some time there might be dragons ;)
src/etc/rc.d/configd --> command_interpreter could cause restart issues after an upgrade, the rc system doesn't like command changes it seems. Maybe not a real world problem, just haven't tried it yet.
unit tests are somewhat functional, although generating all templates will likely fail, since the test config doesn't include all data involved.
2019-02-22 21:03:42 +01:00
Ad Schellevis
47a3b2419d
python 2->3 iteritems() in core templates
2019-02-22 19:23:52 +01:00
Ad Schellevis
9e082449aa
IDS, minor template cleanups using https://github.com/opnsense/core/issues/3100
2019-02-22 16:07:48 +01:00
Ad Schellevis
245513f970
configd, add helpers.empty(), closes https://github.com/opnsense/core/issues/3100
2019-02-22 16:06:42 +01:00
Ad Schellevis
cc2b41bf15
OpenVPN export, add auth-nocache option, closes https://github.com/opnsense/core/issues/3193
2019-02-22 15:29:48 +01:00
Ad Schellevis
a8d89dadc5
mvc/forms, add support for tokenize2 sortable tag, closes https://github.com/opnsense/core/issues/3145
2019-02-22 14:54:10 +01:00
Ad Schellevis
3a361f8e59
auth/pam, better CamelCase for https://github.com/opnsense/core/issues/3242
2019-02-21 21:29:37 +01:00
Ad Schellevis
2e14587955
Auth, add example authentication service and some filename cleansing. for https://github.com/opnsense/core/issues/3242
2019-02-21 21:04:05 +01:00
Ad Schellevis
bdd4c8db03
refresh logo, small scaling issue in previous
2019-02-20 15:08:58 +01:00
Ad Schellevis
63065a9f1f
theme, sharpen our theme a bit
2019-02-20 09:16:19 +01:00
Ad Schellevis
f7213e84ea
psec_mobile.php fix minor escaping issue
2019-02-20 08:44:18 +01:00