759 Commits (4f31b7b9cc2dac060194de2c769b149a2ac861ba)

Author	SHA1	Message	Date
Arthur Schiwon	ef237f8e36	fix check for null ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	a2c5ab2f8b	adjusts LDAP's home handler to use the correct user object ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Julius Härtl	72aaf2e5fb	files_external: Make sure the correct user context is used in substitution of variables ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	7 years ago
Arthur Schiwon	40c9a743fa	adds an --update flag to check-user for manual sync of the ldap record ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Joas Schilling	6d71e471e1	Update shipped implementations of the INotifier ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Arthur Schiwon	d0f31c590d	Also invalidate groups after deletion ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	108227ca6c	invalidates user when plugin reported deletion success ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	660fbd64e3	ensures mapping of chosen userid ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	0b34085f24	fixes return type in php doc ... * the backend already expects and works with the string Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	8a7b0a68a5	fixes returning the base when multiple are specified ... * reading the config directly will return the value with line breaks * using the proper accessor gives us all bases in an array * returns the first matching one * having user id provided for the group base is strange and does not let us operate like this. here we return the first one. might change in future, a backportable fix won't have an API change however. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	a1f2dbe29c	caches the displayname after an LDAP plugin set it ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	1d48c0313c	fix inGroup check, thus make integration tests succeed ... there is not such strange return mode. Having invalid user ids caused this check to fail, and as side effect share limitation to groups to not work. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	c6c8a41d2f	group display name support (service level + ldap) ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Max Kovalenko	a83b79c5f8	misc phpdoc fixes ... Signed-off-by: Max Kovalenko <mxss1998@yandex.ru>	7 years ago
Arthur Schiwon	3372bcc7fc	fixes possible override of uniqueMember by autodetection ... * uniqueMember was the default so we did not know whether this setting is desired or the initial value * autodetection of the user-group association attribute runs only when it was not set (as far as we knew) * the default is now empty * thus LDAPProvider might return this value as well (in exceptional cases) * if a group base is given (edge case), use this instead of general base * resolves #12682 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	36618b111f	Pass old value to user triggerChange hook ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Arthur Schiwon	518998093f	set the loglevel in context, save the condition ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Vinicius Cubas Brand	61572a5b2e	LDAP plugin: force createUser to return new user's DN ... LDAP plugins must change the createUser method to return the DN, as we need this to update the cache. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Vinicius Cubas Brand	a2c38148e7	Cache cleaning when subadmin adds user to group ... This commit fix an error happening when the subadmin tries to create an user, adding him/her to the group s/he is subadmin of, using a LDAP User/Group plugin. This just forces the cache to be reset after an user is added to a group. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Vinicius Cubas Brand	c4dbc428f9	fix user creation using LDAP Plugin ... Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Peter Kubica	3ed1d158bc	LDAP Password Modify Extended Operation support ... Signed-off-by: Peter Kubica <peter@kubica.ch>	7 years ago
Arthur Schiwon	5dd2207c95	fix nested group retrieval also for 2 other cases ... and also consolidate logic in one method Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Roland Tapken	e7c506cff1	Reduce queries to LDAP by caching nested groups ... Nested groups are now cached in a CappedMemoryCache object to reduce queries to the LDAP backend. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	afb182650e	user_ldap: really resolve nested groups ... The previous patch fixed the problem only for one level of indirection because groupsMatchFilter() had been applied on each recursive call (and thus there would be no second level if the first level fails the check). This new implementation replaces the recursive call with a stack that iterates all nested groups before filtering with groupsMatchFilter(). Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	c2d8a36d9a	user_ldap: Filter groups after nexted groups ... Currently groupsMatchFilter is called before nested groups are resolved. This basicly breaks this feature since it is not possible to inherit membership in a group from another group. Minimal example: Group filter: (&(objectClass=group),(cn=nextcloud)) Nested groups: enabled cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local objectClass: group cn=IT,ou=groups,dn=company,dn=local objectClass: group memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local cn=John Doe,ou=users,dn=company,dn=local objectClass: person memberOf: cn=IT,ou=groups,dn=company,dn=local Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group filter, John wouldn't be a member of group 'nextcloud'. This patch fixes this by filtering the groups after all nested groups have been collected. If nested groups is disabled the result will be the same as without this patch. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Arthur Schiwon	792bcb82ae	add LDAP ConfigHandler for external storages and "$home" var ... * handler registered upon OCA\\Files_External::loadAdditionalBackends event as user_ldap is loaded before files_external * new configuration field "ldapExtStorageHomeAttribute" (not in GUI yet) Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	5c10a46445	ensure attribute names are lower cased ... otherwise they will be skipped when the results is being formatted and the lower-cased result keys do not match. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Filis Futsarov	18ae9d267a	Comment fix.	7 years ago
Arthur Schiwon	c868892d2d	iterate over bases instead of doing parallel search ... parallel search is not compatible with paged search, but the letter is usually always applied. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	85f14bc591	LDAP: extend remnants output with "detected on" field ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	fbd4e9e651	add tests for the DUI ... as they are interact with the DB they are more integraiton than unit tests Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	8bacbffe28	do not forgot to store the second displayname portion ... otherwise it causes a chain reaction of system addressbook updates Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	feb5366a42	LDAP clear cache on config modification also when done via API or CLI ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	c32cc4a194	cache users as existing after mapping ... during login they might be cached as non-existing and cause an Exception in the long run reduces some duplication, too Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Daniel Kesselberg	6ce849f7b8	Add return type ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	d17b32afd7	Fix count on string ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Joas Schilling	bb352fb667	Use the defined func()->count() instead of manual counting ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Arthur Schiwon	deec5a70a0	avoid logging of "Partial search results returned: Sizelimit exceeded at" ... LDAP servers respond with that even if a limit was passed with the request. Having this statement logged causes a lot of confusion. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	0c5d9127e8	remove app specific IUserTools and consolidate test ... Just some house keeping. IUserTools with used in even older days for easier creation of Access instances… Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	49456e42f9	do not run into UniqueConstraintViolationException ... … when an unmapped user logs in for the first time when background job mode is ajax and no memcache was configured. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	d47e1513bc	remove unneeded empty search attribute values, fixes #12086 ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	05f909dcf3	fixes wrong variable usage ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	bbe44108b5	only write when the displayname differs, but then announce it ... refs #5212 and fixes #9112 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	2048872f9e	functions that were checked for are present since PHP 5.4, supported is >=/ ... * so the check from older days is really not necessary anymore * resolves #10923 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	b458ed9c82	Properly escape column name in "createFunction" call ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	2d30511fa6	Check if user is null before getUsername ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Arthur Schiwon	7807add02d	[LDAP] The WebUI Wizard also should not assign empty config IDs ... With 689df9a843 the behaviour to assign only non-empty config IDs was introduced. Only, this was only effective for CLI and OCS API. Related to #3270. The web UI creates now also a full configuration on first load. This fixes #5094. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	3d8f174774	Resolve all group memberships properly ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Arthur Schiwon	b497b06867	don't force LDAP updates on userExists anymore ... and remove some deprecated code Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	a39c995083	FIX: emit assignedUserId only for users ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago