740 Commits (83b00a99fa7fed776ceadfbfbb653832c6076688)

Author	SHA1	Message	Date
Morris Jobke	36618b111f	Pass old value to user triggerChange hook ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Arthur Schiwon	518998093f	set the loglevel in context, save the condition ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Vinicius Cubas Brand	61572a5b2e	LDAP plugin: force createUser to return new user's DN ... LDAP plugins must change the createUser method to return the DN, as we need this to update the cache. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Vinicius Cubas Brand	a2c38148e7	Cache cleaning when subadmin adds user to group ... This commit fix an error happening when the subadmin tries to create an user, adding him/her to the group s/he is subadmin of, using a LDAP User/Group plugin. This just forces the cache to be reset after an user is added to a group. Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Vinicius Cubas Brand	c4dbc428f9	fix user creation using LDAP Plugin ... Signed-off-by: Vinicius Cubas Brand <viniciuscb@gmail.com>	7 years ago
Arthur Schiwon	5dd2207c95	fix nested group retrieval also for 2 other cases ... and also consolidate logic in one method Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Roland Tapken	e7c506cff1	Reduce queries to LDAP by caching nested groups ... Nested groups are now cached in a CappedMemoryCache object to reduce queries to the LDAP backend. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	afb182650e	user_ldap: really resolve nested groups ... The previous patch fixed the problem only for one level of indirection because groupsMatchFilter() had been applied on each recursive call (and thus there would be no second level if the first level fails the check). This new implementation replaces the recursive call with a stack that iterates all nested groups before filtering with groupsMatchFilter(). Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Roland Tapken	c2d8a36d9a	user_ldap: Filter groups after nexted groups ... Currently groupsMatchFilter is called before nested groups are resolved. This basicly breaks this feature since it is not possible to inherit membership in a group from another group. Minimal example: Group filter: (&(objectClass=group),(cn=nextcloud)) Nested groups: enabled cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local objectClass: group cn=IT,ou=groups,dn=company,dn=local objectClass: group memberOf: cn=nextcloud,ou=Nextcloud,ou=groups,dn=company,dn=local cn=John Doe,ou=users,dn=company,dn=local objectClass: person memberOf: cn=IT,ou=groups,dn=company,dn=local Since 'cn=IT,ou=groups,dn=company,dn=local' doesn't match the group filter, John wouldn't be a member of group 'nextcloud'. This patch fixes this by filtering the groups after all nested groups have been collected. If nested groups is disabled the result will be the same as without this patch. Signed-off-by: Roland Tapken <roland@bitarbeiter.net>	7 years ago
Arthur Schiwon	792bcb82ae	add LDAP ConfigHandler for external storages and "$home" var ... * handler registered upon OCA\\Files_External::loadAdditionalBackends event as user_ldap is loaded before files_external * new configuration field "ldapExtStorageHomeAttribute" (not in GUI yet) Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	5c10a46445	ensure attribute names are lower cased ... otherwise they will be skipped when the results is being formatted and the lower-cased result keys do not match. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Filis Futsarov	18ae9d267a	Comment fix.	7 years ago
Arthur Schiwon	c868892d2d	iterate over bases instead of doing parallel search ... parallel search is not compatible with paged search, but the letter is usually always applied. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	85f14bc591	LDAP: extend remnants output with "detected on" field ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	fbd4e9e651	add tests for the DUI ... as they are interact with the DB they are more integraiton than unit tests Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	8bacbffe28	do not forgot to store the second displayname portion ... otherwise it causes a chain reaction of system addressbook updates Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	feb5366a42	LDAP clear cache on config modification also when done via API or CLI ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	c32cc4a194	cache users as existing after mapping ... during login they might be cached as non-existing and cause an Exception in the long run reduces some duplication, too Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Daniel Kesselberg	6ce849f7b8	Add return type ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	d17b32afd7	Fix count on string ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Joas Schilling	bb352fb667	Use the defined func()->count() instead of manual counting ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Arthur Schiwon	deec5a70a0	avoid logging of "Partial search results returned: Sizelimit exceeded at" ... LDAP servers respond with that even if a limit was passed with the request. Having this statement logged causes a lot of confusion. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	0c5d9127e8	remove app specific IUserTools and consolidate test ... Just some house keeping. IUserTools with used in even older days for easier creation of Access instances… Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	49456e42f9	do not run into UniqueConstraintViolationException ... … when an unmapped user logs in for the first time when background job mode is ajax and no memcache was configured. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	d47e1513bc	remove unneeded empty search attribute values, fixes #12086 ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	05f909dcf3	fixes wrong variable usage ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	bbe44108b5	only write when the displayname differs, but then announce it ... refs #5212 and fixes #9112 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Arthur Schiwon	2048872f9e	functions that were checked for are present since PHP 5.4, supported is >=/ ... * so the check from older days is really not necessary anymore * resolves #10923 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	b458ed9c82	Properly escape column name in "createFunction" call ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	2d30511fa6	Check if user is null before getUsername ... Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Arthur Schiwon	7807add02d	[LDAP] The WebUI Wizard also should not assign empty config IDs ... With 689df9a843 the behaviour to assign only non-empty config IDs was introduced. Only, this was only effective for CLI and OCS API. Related to #3270. The web UI creates now also a full configuration on first load. This fixes #5094. Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	7 years ago
Morris Jobke	3d8f174774	Resolve all group memberships properly ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Arthur Schiwon	b497b06867	don't force LDAP updates on userExists anymore ... and remove some deprecated code Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	a39c995083	FIX: emit assignedUserId only for users ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Julius Härtl	c2616df541	Only bind if configuration for the first server is available ... Signed-off-by: Julius Härtl <jus@bitgrid.net>	8 years ago
Arthur Schiwon	846ab25fc0	adjust and add more unit tests ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	343036e55c	allow admin to disable fetching of avatars as well as a specific attribute ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	a4dda465c2	let user set avatar in nextcloud von LDAP provides invalid image data ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	cc51a00c93	lower log level for quota manipulation cases ... and simplify the forest of ifs a little bit Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	7a728f2154	LDAP backup server should not be queried when auth fails ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	73cacb8896	check user state when fetching to avoid dealing with offline objects ... fixes #9502 Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roger Szabo	856164e578	Fix "Invalid argument supplied for foreach()" ... Signed-off-by: Roger Szabo <roger.szabo@web.de>	8 years ago
Roger Szabo	8637b90e15	unbound cloned connection fix ... Signed-off-by: Roger Szabo <roger.szabo@web.de>	8 years ago
Arthur Schiwon	38a90130ce	move log constants to ILogger ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	ed5f53bd49	Access needs UserManager, missed to add in #8833 ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	16d4ff4d39	parameter provided to L10N::n() could have been a string ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	f1565336bd	DI for NC's user manager ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	373a1d5391	more consistent naming ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Arthur Schiwon	8fe914f07e	LDAP backend to emit announce and revoke signals on mapping changes ... Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>	8 years ago
Roeland Jago Douma	f4fd0224db	Do not use \OCP\DB anymore ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago