Tim Jacomb
292aaddaee
Improve SAML support
...
- Make SAML_WANT_MESSAGE_SIGNED configurable, AzureAD signs the assertion but wouldn't sign the message
- Add support for a name attribute, i.e. 'Tim Jacomb' using `SAML_ATTRIBUTE_NAME`, which will be mapped into the given and surname fields, AzureAD only has displayname
- Add support for group based admin `SAML_ATTRIBUTE_GROUP` and `SAML_GROUP_ADMIN_NAME`
- Add support for group based accounts `SAML_GROUP_TO_ACCOUNT_MAPPING`
- Don't fail if cert and key aren't present
2019-03-03 07:58:01 +00:00
Khanh Ngo
0333f450f1
Update adminlte themes version
2019-03-02 10:17:11 +07:00
Khanh Ngo
10d915ef92
Merge branch 'master' of github.com:ngoduykhanh/PowerDNS-Admin
2018-11-21 10:24:48 +07:00
Khanh Ngo
5f049debe5
Adding Flask-SeaSurf module for CSRF protection.
2018-11-21 10:24:33 +07:00
Balint Csergo
be96921864
support arbitrary db port, pdns_proto and pdns_port
2018-11-12 13:21:04 +01:00
Josh Soref
50e219039b
spelling: retrieve
2018-10-02 07:25:36 +00:00
Josh Soref
83923ebf98
spelling: database
2018-10-02 07:12:41 +00:00
Josh Soref
573291b4f5
spelling: configures
2018-10-02 07:05:42 +00:00
Josh Soref
7875be3b78
spelling: authentication
2018-10-02 07:03:41 +00:00
Khanh Ngo
66e9be8c7a
Update .travis.yml to use mysql for db. Fix RECORDS_ALLOW_EDIT config key
2018-08-22 21:48:57 +07:00
Khanh Ngo
421ea627d8
#237 . Allow LDAP user to use OTP
2018-08-22 09:43:33 +07:00
Khanh Ngo
9506315a46
manage records_allow_to_edit setting in DB
2018-08-22 08:36:53 +07:00
Khanh Ngo
0b7580c82f
Read powerdns api setting from DB
2018-08-20 09:59:19 +07:00
Khanh Ngo
ada6f844ff
Read LDAP config from DB instead of file. Adjustment in site titles
2018-08-18 22:42:18 +07:00
Khanh Ngo
3733cd750c
Merge pull request #329 from icb-/saml-binding
...
Allow specifying SAML2 SSO binding format.
2018-08-13 10:40:38 +07:00
Ian Bobbitt
2e96b41725
Allow specifying SAML2 SSO binding format.
2018-08-11 09:14:16 -04:00
Khanh Ngo
9ed09e92fc
Fix ldap authentication
2018-08-09 16:21:42 +07:00
Khanh Ngo
47d5858fc6
Merge branch 'fix-saml'
2018-08-07 09:09:34 +07:00
Khanh Ngo
ef947aa896
Make A as default record when create a new one
2018-07-05 10:42:46 +07:00
Ian Bobbitt
480989e86a
Manage Account memebership for SAML Users
2018-06-25 12:18:42 +00:00
Ian Bobbitt
17a61d04b5
Merge remote-tracking branch 'upstream/master' into fix-saml
...
Cleaning up conflicts with upstream changes.
2018-06-24 22:31:54 +00:00
Khanh Ngo
646166bbd7
Update sqlite db file path in config template
2018-06-13 09:55:57 +07:00
Jeroen Boonstra
734a6d5b32
Enable bg updates
2018-06-08 11:46:17 +02:00
Thomas M Steenholdt
10f47039ec
Add config option to allow DNSSEC changes only for admins
...
DNSSEC requires changes to the parent domain, which in many cases requires special access to a registry or the like.
For that reason, especially the option to disable DNSSEC can be dangerous - if DNSSEC is disabled in PowerDNS but not in the registry, the domain stops working.
For this reason, adding an option to disable DNSSEC changes for non-admins seems reasonable.
(cherry picked from commit 5cdfc0263b07f4658d51cf7c038fea9a8911152a)
2018-06-06 08:53:44 -02:00
Ian Bobbitt
73d5215d3a
Improve SAML support
...
Accept IdP EntityID to use when metadata contains more than one IdP.
Allow specifying attribute names to get given name, surname, and email address.
Allow specifying NameIDFormat to request.
Allow specifying whether to get username from a named attribute, or NameID.
Allow getting administrator state from attribute.
2018-05-02 22:56:22 +00:00
Khanh Ngo
0826702537
Update config template
2018-04-06 13:22:09 +07:00
Khanh Ngo
17a892b18d
Resolve the conflicts for #228
2018-04-02 13:38:53 +07:00
Khanh Ngo
bfb54e8bda
Add LDAP_ENABLE in config file
2018-04-01 15:08:55 +07:00
Khanh Ngo
27074e688e
Update development config
2018-04-01 07:05:57 +07:00
Khanh Ngo
41d691e2db
Merge remote-tracking branch 'maysara/master' into development
2018-04-01 07:01:00 +07:00
Khanh Ngo
c668c21fc9
Adjustment to prevent exception in Google/Github authentication when local user cannot be created
2018-03-30 17:43:34 +07:00
Khanh Ngo
896abdbdbc
Merge remote-tracking branch 'dkeightley/ns-record-support' into development
2018-03-30 15:49:35 +07:00
Khanh Ngo
26f7a4bacb
Merge pull request #195 from toxicvengeance/toxicvengeance-changed-default-records
...
Add CAA and SRV record to config_template.py
2018-03-30 14:16:08 +07:00
Khanh Ngo
b5b3b77acb
Adjustment to work with Python3
2018-03-30 13:49:35 +07:00
unknown
51fb50667f
SOA type missing in editable records.
2018-02-18 12:03:09 +02:00
unknown
b832fc1768
Reverse zone PTR type entries not shown bug fix. Added NS, LOC and TXT types in reverse zones. Added LOC type in forward zone.
2018-02-16 21:02:16 +02:00
thomasDOTde
92d7ca3870
added application certificate handling for signed SAML messages
2018-01-20 17:17:02 +01:00
thomasDOTde
60086d5d15
added standard SAML logout method using metadata
2017-12-05 00:14:31 +01:00
NomenNescio
47cf1aff4a
added configurable logout redirect URL
2017-12-04 14:43:58 +01:00
Thomas
aef0868788
Merge pull request #10 from toxicvengeance/toxicvengeance-changed-default-records
...
Updated config_template.py
2017-11-03 00:33:00 +01:00
Thomas
2354eb69c3
Merge branch 'master' into ldap_group_security
2017-11-02 23:23:36 +01:00
thomasDOTde
63632996db
updated travis and config_template
2017-11-02 02:32:51 +01:00
Thomas
83a0396350
Merge branch 'master' into feature-google-oauth
2017-11-01 22:18:43 +01:00
thomasDOTde
12cb6f28fb
implemented dynamic metadata lookup
...
removed saml json-templates
2017-11-01 17:31:51 +01:00
thomasDOTde
f3093fe794
updated documentation and config-template
2017-10-31 23:45:24 +01:00
thomasDOTde
933d678e83
added SAML auth basics and metadata
2017-10-31 19:21:22 +01:00
patito
b8e7eea8b9
Changed redirect URI
2017-09-28 15:05:52 +01:00
patito
a4b9722d47
Google OAuth
2017-09-22 15:28:09 +01:00
Maysara Abdulhaq
18df0ce4c9
document LDAP_BIND_TYPE in config_template.py
2017-09-03 14:31:50 -04:00
Maysara Abdulhaq
28c7a195e8
add LDAP direct binding and GROUP_SECURITY
2017-09-03 14:23:18 -04:00
