38 Commits (4f31b7b9cc2dac060194de2c769b149a2ac861ba)

Author	SHA1	Message	Date
Arthur Schiwon	d0f31c590d	Also invalidate groups after deletion ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	660fbd64e3	ensures mapping of chosen userid ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	1d48c0313c	fix inGroup check, thus make integration tests succeed ... there is not such strange return mode. Having invalid user ids caused this check to fail, and as side effect share limitation to groups to not work. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	c6c8a41d2f	group display name support (service level + ldap) ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Vinicius Cubas Brand	a2c38148e7	Cache cleaning when subadmin adds user to group ... This commit fix an error happening when the subadmin tries to create an user, adding him/her to the group s/he is subadmin of, using a LDAP User/Group plugin. This just forces the cache to be reset after an user is added to a group. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Arthur Schiwon	5dd2207c95	fix nested group retrieval also for 2 other cases ... and also consolidate logic in one method Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Roland Tapken	e7c506cff1	Reduce queries to LDAP by caching nested groups ... Nested groups are now cached in a CappedMemoryCache object to reduce queries to the LDAP backend. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	afb182650e	user_ldap: really resolve nested groups ... The previous patch fixed the problem only for one level of indirection because groupsMatchFilter() had been applied on each recursive call (and thus there would be no second level if the first level fails the check). This new implementation replaces the recursive call with a stack that iterates all nested groups before filtering with groupsMatchFilter(). Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	c2d8a36d9a	user_ldap: Filter groups after nexted groups ... Currently groupsMatchFilter is called before nested groups are resolved. This basicly breaks this feature since it is not possible to inherit membership in a group from another group. Minimal example: Group filter: (&(objectClass=group),(cn=nextcloud)) Nested groups: enabled cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local objectClass: group cn=IT,ou=groups,dn=company,dn=local objectClass: group memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local cn=John Doe,ou=users,dn=company,dn=local objectClass: person memberOf: cn=IT,ou=groups,dn=company,dn=local Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group filter, John wouldn't be a member of group 'nextcloud'. This patch fixes this by filtering the groups after all nested groups have been collected. If nested groups is disabled the result will be the same as without this patch. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Arthur Schiwon	2048872f9e	functions that were checked for are present since PHP 5.4, supported is >=/ ... * so the check from older days is really not necessary anymore * resolves #10923 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	3d8f174774	Resolve all group memberships properly ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	238c3a5201	fix retrieving group members with numerical uids from LDAP ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Morris Jobke	e2974f1133	Simplify return statement ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	2ad2eb38e8	Use type casting instead of *val() method ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	c1e4f9f305	Use type casting instead of *val() method ... It should be up to 6x faster Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Vinicius Cubas Brand	fa565750d1	User_LDAP plugins: smaller fixes ... Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	8 years ago
Vinicius Cubas Brand	10ca793452	Plugins infrastructure in User_LDAP ... Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	8 years ago
Arthur Schiwon	34f9590169	replace hard-coded attribute with the corresponding settings option ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Morris Jobke	89a7b007f2	Fix comments ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Arthur Schiwon	43f451e9e0	Fix usersInGroup retrieval ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	9 years ago
Arthur Schiwon	685faad5ca	fix method name due to changes in master ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	9 years ago
Xuanwo	8db21ad8c8	user_ldap: Add support for gidNumber ... This patch is based on the work of @dleeuw (https://github.com/dleeuw) (See https://github.com/nextcloud/server/issues/2640#issuecomment-269615883 for more details). The difference is user & group data will be written into cache to have better performance, and functions splited from primaryGroupID series to make them more readable. Fixed https://github.com/nextcloud/server/issues/2640 Signed-off-by: Xuanwo <xuanwo@yunify.com>	9 years ago
Morris Jobke	229d17e13b	Change LDAP method names ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	1729e4471f	Update comments to Nextcloud ... * based on PR by @Ardinis * see #4311 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Arthur Schiwon	497ee3e3e6	Add repair steps ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	9 years ago
Andreas Pflug	b64e48335f	Don't try to use memberof on posixgroups, since it doesn't support ... memberUid attributes. Signed-off-by: Andreas Pflug <dev@admin4.org>	9 years ago
Victor Dubiniuk	011d5f554c	Harden empty ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	9 years ago
Joas Schilling	813f0a0f40	Fix apps/	10 years ago
Vincent Petry	c5a6c8b70b	Use array_merge when reading cached groups members	10 years ago
Roeland Jago Douma	dc4fd43f39	Use a capped memory cache for the user/group cache ... For #24403 When upgrading huge installations this can lead to memory problems as the cache will only grow and grow. Capping this memory will make sure we don't run out while during normal operation still basically cache everything.	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Joas Schilling	c807a26bd8	Move Access to PSR-4	10 years ago
Joas Schilling	02d5b75fb4	Move BackendUtility to PSR-4	10 years ago
Joas Schilling	cbba55a26c	Move Group_LDAP and Group_Proxy to PSR-4	10 years ago
blizzz	8ce8a05dab	Fixed dynamic group ldap access (#23450) ... * Fixed dynamic group ldap access getUserGroups: Using $userDN instead of $uid to query LDAP Converting groupDN to group name using API instead of substring Removing cache processing at the end of the method * Fixing group handling added back the cache processing and fixed * fixed possible indention problem spaces -> tab conversion * formatting, white-space changes only	10 years ago
Roeland Douma	5c9103287f	Group fixup (#24621) ... * Move used OC_Group_xx to \OC\Group * Add (deprecated) legacy wrapper in legacy, OC_Group_xx * Replace deprecated use of OC_Group_xx with \OC\Group\xx	10 years ago
Morris Jobke	62a59854f0	Fix LDAP race conditions ... * getFromCache is wrapped in isCached * inbetween the two calls the cache entry hits it's TTL * getFromCache returns null * this fix only checkes if the returned value is null and return only non-null values	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
alexweirig	cd19b648c6	change error logging ... replaced variable with print_r call	10 years ago
alexweirig	f4d4bed10b	Fixed undefined variable $dnGroup and variable name ... I renamed $memberURL into $dynamicGroup and print that variable in the writeLog. I think this makes more sense.	10 years ago
alexweirig	39aac2c66b	Refactored code to avoid performance problem ... Moved the dynamic group processing to the top and removed condition in memberOf processing. Also, changed variable name $value to $memberUrl	10 years ago
Alex Weirig	0d797637f3	code changes for user_ldap Dynamic Group Membership ... Added new setting of “Dynamic Group Member URL” (ldapDynamicGroupMemberURL) - see LDAP settings advanced tab. Added public function getDynamicGroupMembers. Updated function _groupMembers. Updated function getUserGroups.	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Arthur Schiwon	133e3fe89d	remove uselessly used parameter, read all user attributes also when looking up users in groups	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Lukas Reschke	733542a264	Fix style	10 years ago
Frédéric Fortier	f178f612d8	Revert "adjust to nested group fix ... This reverts commit 845485cfe, which fixes #19816 regression.	10 years ago
Arthur Schiwon	2fddb1367a	fix primary group retrieval	10 years ago