6516 Commits

Author SHA1 Message Date
Ad Schellevis
ff8632c2c8 (pam) work in progress: pam helper skip for non local users, for non existing users pam should proceed to the next option.
When our pam modules is used, we set local auth to disabled (locked) for our users, non local users should automatically use normal unix auth.
For this to work, we should pass PAM_USER_UNKNOWN as return value in our pam module when the user is not local to us and unauthenticated.
2016-12-18 13:51:23 +01:00
Ad Schellevis
92d7bce2f0 (openvpn export) make sure we remove the top level temp dir for Viscosity exports 2016-12-18 12:22:34 +01:00
Fabian Franz
41b9d3feac fix proxy strings 'X-Forwarded-For' 2016-12-18 10:57:49 +01:00
Franco Fichtner
8cfbc3c218 rc: wrap this around for consistency
Early installer is really about an untained system, so
we defer *all* system setup and only keep the loopback
configuration above it.  This way, after config import
from the installer system_login_configure() is up-to-date.
2016-12-17 16:49:28 +01:00
Franco Fichtner
4ad78901d6 rc: start loopback earlier, omits manual installer glue 2016-12-17 12:43:51 +01:00
Ad Schellevis
1d32531244 (ipsec) add clone phase 2 option to ease duplication/modification, closes https://github.com/opnsense/core/issues/1305 2016-12-17 11:41:27 +01:00
Franco Fichtner
d3ddbf5f46 rc: small tweaks 2016-12-16 09:17:15 +01:00
Ad Schellevis
af7aab3a78 (bootgrid) return to current page after action, for https://github.com/opnsense/core/issues/1303 2016-12-14 04:21:01 +01:00
Ad Schellevis
feb11e59a8 (list_arp.py) only parse lease sections https://forum.opnsense.org/index.php?topic=4086.0 2016-12-14 03:05:15 +01:00
Franco Fichtner
6124cdc41f dhcp: style fix 2016-12-15 18:30:53 +01:00
Franco Fichtner
26d9815df0 system: fix loading of crypto/thermal modules
PR: https://forum.opnsense.org/index.php?topic=4094
2016-12-15 06:35:34 +01:00
Franco Fichtner
339f130190 pkg: correct bind version according to ABI 2016-12-14 07:59:43 +01:00
Franco Fichtner
3c393d98f3 config: repair installer for 17.1-BETA
The installer user is injected for install media login, but
we authenticate against our database now instead.  This has
larger consequences that require a persistent installer user,
which is not so easy to disable/defang after installation.

Hopefully this is temporary.
2016-12-14 07:57:46 +01:00
Ad Schellevis
1dbaaca2b6 (proxy, acl download) minor performance improvments + python3 compatibility additions 2016-12-13 10:29:20 +01:00
Franco Fichtner
c5fe0e4c4f interfaces: remove netgraph now that plugins habe stubs, closes #1188 2016-12-13 10:23:23 +01:00
Franco Fichtner
2ee77e70fa interfaces: further defang netgraph for #1188 2016-12-13 10:10:07 +01:00
Franco Fichtner
9d372e0c22 filter: add more reload progress; closes #526 2016-12-13 08:19:41 +01:00
Ad Schellevis
52b95b80c0 (legacy) cancel button behaviour, closes https://github.com/opnsense/core/issues/1099 2016-12-12 21:34:03 +01:00
Ad Schellevis
2c44b83a26 (configd/templates) add "template cleanup" command, closes https://github.com/opnsense/core/issues/1238 2016-12-12 21:13:09 +01:00
Franco Fichtner
3df938602c firmware: pkg will receive a license query fix soon :) 2016-12-12 07:21:12 +01:00
Franco Fichtner
276f7bdb1c src: whitespace and style sweesrc: whitespace and style sweepp 2016-12-11 17:17:32 +01:00
Franco Fichtner
8842b092b5 pkg: fix plist 2016-12-11 17:03:43 +01:00
Ad Schellevis
ec4458d181 (traffic shaper) add flush all and reload action, closes https://github.com/opnsense/core/issues/1297 2016-12-07 15:16:46 +01:00
Ad Schellevis
20df3371e4 (vlan's) fix error handling, add description, closes https://github.com/opnsense/core/issues/1247 2016-12-07 14:39:21 +01:00
Franco Fichtner
89c2f17e01 pkg: fix plist 2016-12-10 19:30:02 +01:00
Franco Fichtner
101fc8449d templates: remove files in the way of directories
Way better fix for the squid file transition.  Does not require
a manual restart anymore.
2016-12-10 19:27:47 +01:00
Franco Fichtner
a8f0e8419f pkg: add fingerprint for 17.1 2016-12-10 11:20:43 +01:00
Franco Fichtner
a6a604a58c interfaces: another small issue 2016-12-09 19:55:28 +01:00
Franco Fichtner
ef8671d253 interfaces: fix logic in previous 2016-12-09 19:43:44 +01:00
Ad Schellevis
21ca2f32b5 (mvc) minor performance and style fixes 2016-12-07 07:07:40 +01:00
Franco Fichtner
d9e3f6a26d rc: better cron start print style and start it later 2016-12-09 15:22:58 +01:00
Franco Fichtner
f91abe8dd6 interfaces: print glitch in previous 2016-12-09 15:19:23 +01:00
Franco Fichtner
e23647da77 console: fix port assignment on WAN <-> LAN switch; closes #1272 2016-12-09 15:12:24 +01:00
Franco Fichtner
493ee561aa unbound: "remove" edns support
edns flag was added in 2014, but it could never be set.
Remove buffer size override along with it to further
simplify the situation.

See: https://github.com/pfsense/pfsense/commit/3b95d9e
2016-12-09 14:47:17 +01:00
Franco Fichtner
6922394d13 rc: extensive console muting on bootup; closes #1256 2016-12-09 12:28:14 +01:00
Franco Fichtner
81bcdb73e3 rc: $verbose conversion for interfaces_configure() 2016-12-09 12:12:41 +01:00
Franco Fichtner
4346d549ca rc: $verbose conversion for OpenVPN 2016-12-09 10:55:49 +01:00
Franco Fichtner
c1bd019603 rc: unwind nested calls and $verbose for system_resolvconf_generate() 2016-12-09 09:48:07 +01:00
Franco Fichtner
836a07c56e interfaces: stray line break in previous 2016-12-09 00:09:04 +01:00
Franco Fichtner
28dccacf78 interfaces: simplify help strings for dhcp config overrides
People who use these know what they are doing, for everybody else
this is just plain confusing.
2016-12-09 00:01:24 +01:00
Franco Fichtner
f31e556078 dnsmasq: since this was always based on a hardwired /etc/hosts...
The regdhcp conditional option never really worked in the first place.
Dhcplease registration is controlled by regdhcp and regdhcpstatic
elsewhere already and we always need to include this file.

PR: https://forum.opnsense.org/index.php?topic=4041
2016-12-08 23:18:11 +01:00
Franco Fichtner
cd6cdba1bf dnsmasq: work around unclear permission situation on hosts file 2016-12-08 08:00:22 +01:00
Franco Fichtner
afa861d0cd rc: more $verbose conversion 2016-12-07 22:46:52 +01:00
Franco Fichtner
f783f5c4e2 system: adjust LDAP container message a bit more 2016-12-07 19:14:05 +01:00
Franco Fichtner
041702d215 dyndns: fix a crash report 2016-12-07 09:10:47 +01:00
Franco Fichtner
c25259d6b1 rc: remove spurious boot code
Right now, kern.hz is 1000 by default, and, more surprisingly,
net.inet.tcp.rexmit_min is 30 in FreeBSD too...
2016-12-07 08:09:04 +01:00
Franco Fichtner
2a45301e48 rc: $verbose conversion, simplify services_routing_enable() 2016-12-06 20:27:14 +01:00
Ad Schellevis
daaf3acd2e (ui) upgrade bootstrap-datepicker to v1.6.4 2016-12-05 23:19:19 +01:00
Ad Schellevis
4e95a0645e (menu) minor performance changes 2016-12-05 19:08:57 +01:00
Ad Schellevis
902b94312a (openvpn, export) add reneg-sec, closes https://github.com/opnsense/core/issues/1147 2016-12-05 17:43:28 +01:00