354 Commits

Author SHA1 Message Date
Nick Daly
0ec794aaa7 Merge pull request #56 from jvalleroy/remove_old_user_db
Remove old user stuff
2013-11-24 20:43:35 -08:00
Nick Daly
16c994b787 Cleaned up missed references to privilegedactions. 2013-11-24 22:07:13 -06:00
Nick Daly
e23650232b Merged async actions. 2013-11-24 18:46:16 -06:00
Nick Daly
0349113e97 Commands can be executed asynchronously and as non-root.
If commands are executed synchronously, they'll return output and
error strings.  If commands are executed asynchronously, nothing is
returned.  We assume you can communicate with asynchronous processes
out-of-band.

Not every command needs to be executed as root, so there's a new
entry-point, *actions.run*, which executes actions as the current
user.
2013-11-24 18:42:15 -06:00
Nick Daly
6567dc1758 Renamed privilegedactions to actions. 2013-11-24 18:29:27 -06:00
James Valleroy
2eb4f8bf1a Fix add/edit links in users module. 2013-11-20 21:37:03 -05:00
James Valleroy
030675b900 Remove old cfg.users_dir. Remove old UserStore class. 2013-11-20 21:29:28 -05:00
James Valleroy
31ffed9323 Remove users database and folder. The user db will be generated in firstboot. 2013-11-20 20:45:17 -05:00
Nick Daly
83b4425a5a Merge pull request #54 from jvalleroy/bugfixes
Bugfixes
2013-11-18 20:18:38 -08:00
Nick Daly
8343946de9 Merged jvalleroy's bcrypt. 2013-11-17 16:45:35 -06:00
Nick Daly
a0a9e96a29 Remove the /plinth/static location.
Otherwise, Apache 500s on the static files.
2013-11-17 16:22:21 -06:00
Nick Daly
33c2cec0ae Merged with upstream. 2013-11-17 16:06:41 -06:00
Nick Daly
0539dfb28a Privileged Actions can take option lists again. 2013-11-17 16:01:12 -06:00
Nick Daly
0426284ecf Merge pull request #55 from petterreinholdtsen/correct-issue-tracker
Correct URL to current upstream github project.
2013-11-17 09:41:03 -08:00
Petter Reinholdtsen
9274ccd814 Correct URL to current upstream github project. 2013-11-17 13:14:43 +01:00
James Valleroy
880e9bd76a Set default paths in auth_page module to begin with server_dir. 2013-11-16 13:21:27 -05:00
James Valleroy
42ab442930 Cosmetic changes to owncloud page. 2013-11-16 07:14:00 -05:00
James Valleroy
ea0f5b8102 Earlier I removed some flexibility from XMPP/Owncloud config forms to get things working. Restoring code that will make it easier to add new parameters in the future. 2013-11-16 07:05:27 -05:00
James Valleroy
6c15728426 Change Owncloud config form to use FormPlugin methods. 2013-11-16 00:10:06 -05:00
James Valleroy
ee8ee9f41f Merge branch 'improve-apps-page' into bugfixes 2013-11-15 23:37:36 -05:00
James Valleroy
579ae89477 Change XMPP server config form to use FormPlugin methods. This works with POST form method. 2013-11-15 23:36:45 -05:00
James Valleroy
4111fca8eb Move owncloud into its own module. 2013-11-14 22:21:17 -05:00
James Valleroy
63508b6bba Fix some bugs in xmpp module. 2013-11-14 19:15:45 -05:00
James Valleroy
a7decf383e Check user db permissions when we redirect to firstboot, instead of trying to check if the file exists. 2013-11-14 18:28:47 -05:00
James Valleroy
3f36781fdf If creating a new user db, make sure it's permission is 640. 2013-11-13 23:45:40 -05:00
James Valleroy
d48ecb6722 Use server_dir as replacement for base_href. 2013-11-13 20:47:33 -05:00
James Valleroy
1127ff4f99 Prepend server_dir to menu items. 2013-11-13 20:38:39 -05:00
James Valleroy
b5591cb008 Fix typo in base template. 2013-11-13 20:05:44 -05:00
Nick Daly
7f3b1a62c8 Added fixme. 2013-11-12 22:05:03 -06:00
Nick Daly
22cce897bc Made security.mdwn a little more explicit wrt bcrypt. 2013-11-12 21:13:02 -06:00
James Valleroy
2f7b56e6a9 No need to have avoid timing side-channel attack in user_add. We're just going to tell you if the user already exists anyway. 2013-11-11 07:34:27 -06:00
James Valleroy
96edae33ed Remove time.clock line in auth module. It wasn't being used. 2013-11-11 07:34:27 -06:00
James Valleroy
292bedebe6 Use POST instead of GET for forms. It seems like it's working now. 2013-11-11 07:34:27 -06:00
James Valleroy
25974bad85 Modify firstboot and user_add forms to use add_user function. 2013-11-11 07:34:27 -06:00
James Valleroy
3a696e0bb9 Fix check for already existing username in add_user. Add documentation of process for storing and validating hashed passwords. 2013-11-11 07:31:53 -06:00
James Valleroy
f7ad1089a5 Update tests for auth module, and fix some bugs discovered in auth module. 2013-11-11 07:31:53 -06:00
James Valleroy
2abe8559e5 Add add_user function to auth module. 2013-11-11 07:31:53 -06:00
James Valleroy
c4b2fb1a60 Use bcrypt to hash passwords for new users in firstboot and user_add forms. Removed references to md5 hashing which was already non-functional. 2013-11-11 07:31:53 -06:00
James Valleroy
41e46d53b5 update model 2013-11-11 07:28:27 -06:00
James Valleroy
4a9177a257 Use bcrypt for login form. Add tests to check that salts and hashes are random, and check handling of invalid passwords or salts. 2013-11-11 07:28:26 -06:00
Nick Daly
8ba1d318ec Hash the password on the server.
This saves us the need of distributing additional client libraries,
and requires us to actually enable proper security instead of
badly-built shims.
2013-11-10 21:54:39 -06:00
Nick Daly
d8ead196eb Added Debug flag (currently unused). 2013-11-10 21:50:09 -06:00
Nick Daly
d08f139c22 Made errors more Python version-independent. 2013-11-10 21:49:55 -06:00
Nick Daly
95fbf9527f Merge pull request #50 from jvalleroy/fix-redirects
Fix redirects
2013-11-10 19:34:34 -08:00
Nick Daly
2958df9f39 Revert 8fd6c607298517e6318ab027da940e3fe5c7830f. 2013-11-10 16:39:43 -06:00
Nick Daly
a9c6b17624 Merge Hostname fix. 2013-11-10 16:34:31 -06:00
Nick Daly
827defed77 Allow Apache to serve Plinth's static files correctly.
When the */plinth/static* configuration is above */plinth*, it doesn't
work.  Move it below the */plinth* configuration so static files will
be served correctly.
2013-11-10 16:31:23 -06:00
Nick Daly
13d8514634 Merge pull request #49 from jvalleroy/fix-hostname-change
Fix parameter for hostname-change
2013-11-10 13:12:46 -08:00
Nick Daly
574edb93cd Merged with upstream. 2013-11-05 22:46:52 -06:00
Nick Daly
1eb5dde1f7 Merge simple config changes. 2013-11-05 22:45:05 -06:00