downtownallday
445cd812e6
Check system logs for errors
2020-09-10 17:07:33 -04:00
downtownallday
c6816d5641
Fix comment
2020-09-10 17:05:56 -04:00
downtownallday
ba85b6fd7b
Ignore named connection reset error and reduce reported slapd log output
2020-09-10 16:35:19 -04:00
downtownallday
5852a7aabb
Add QA tests for TOTP
2020-09-10 15:24:47 -04:00
downtownallday
24ae913d68
Merge remote-tracking branch 'fspoettel/admin-panel-2fa' into totp
...
# Conflicts:
# management/auth.py
# management/daemon.py
# setup/mail-users.sh
# setup/management.sh
# setup/migrate.py
2020-09-10 15:23:27 -04:00
downtownallday
b10f82152a
Add message regarding errors during roundcube carddav refresh
2020-09-06 09:26:42 -04:00
Felix Spöttel
2ea97f0643
Do not log failed login attempts for MissingToken errors
...
* Due to the way that the /login UI works, this persists at least one failed login each time a user logs into the admin panel. This in turn triggers fail2ban at some point.
2020-09-06 13:08:44 +02:00
Felix Spöttel
4791c2fc62
Safeguard against empty mru_token column
...
* hmac.compare_digest() expects arguments of type string, make sure we don't pass None
* Currently, this cannot happen but we might not want to store `mru_token` during setup
2020-09-06 13:03:54 +02:00
Felix Spöttel
49c333221a
Use hmac.compare_digest() to compare mru_token
2020-09-06 12:54:45 +02:00
Felix Spöttel
481a333dc0
Address review feedback, thanks @hija
2020-09-04 20:28:15 +02:00
Felix Spöttel
b0df35eba0
conn.close() if mru_token update can't .commit()
2020-09-03 20:39:03 +02:00
Felix Spöttel
08ae3d2b7f
Rename internal validate_two_factor_secret => validate_two_factor_secret
2020-09-03 19:48:54 +02:00
Felix Spöttel
7c4eb0fb70
Add sqlite migration
2020-09-03 19:39:29 +02:00
Felix Spöttel
ee01eae55e
Decouple totp from users table by moving to totp_credentials table
...
* this allows implementation of other mfa schemes in the future (webauthn)
* also makes key management easier and enforces one totp credentials per user on db-level
2020-09-03 19:07:21 +02:00
Felix Spöttel
89b301afc7
Update OpenApi docs, rename /2fa/ => /mfa/
2020-09-03 13:54:28 +02:00
Felix Spöttel
ce70f44c58
Extract TOTPStrategy class to totp.py
...
* this decouples `TOTP` validation and storage logic from `auth` and moves it to `totp`
* reduce `pyotp.validate#valid_window` from `2` to `1`
2020-09-03 11:19:19 +02:00
Felix Spöttel
6594e19a1f
Autofocus otp input when logging in, update layout
2020-09-02 20:30:08 +02:00
Felix Spöttel
8597646a12
Update API route naming, update setup page
...
* Rename /two-factor-auth/ => /2fa/
* Nest totp routes under /2fa/totp/
* Update ids and methods in panel to allow for different setup types
2020-09-02 19:41:06 +02:00
Felix Spöttel
f205c48564
Use pyotp for validating TOTP codes
...
* also implements resynchronisation support via `pyotp`'s `valid_window option
2020-09-02 19:12:15 +02:00
Felix Spöttel
3c3683429b
implement two factor check during login
2020-09-02 17:23:32 +02:00
Felix Spöttel
a7a66929aa
add user interface for managing 2fa
...
* update user schema with 2fa columns
2020-09-02 16:48:23 +02:00
downtownallday
caf90702cc
Wording changes
2020-08-29 06:57:33 -04:00
downtownallday
da7468a6b3
Fix unbound variable
2020-08-28 18:14:14 -04:00
downtownallday
f49590d52a
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
...
# Conflicts:
# README.md
2020-08-26 16:17:28 -04:00
Joshua Tauberer
0d72566c99
Merge v0.48 point release branch
2020-08-26 14:11:56 -04:00
Joshua Tauberer
62db58eaaf
v0.48
2020-08-26 14:11:01 -04:00
Joshua Tauberer
891de8d6c3
Upgrade Roundcube to 1.4.8
...
Merges #1809
2020-08-26 14:10:04 -04:00
Downtown Allday
52aa77f624
Merge pull request #2 from downtownallday/user-displayname
...
Add a display name field to user accounts
2020-08-25 17:11:06 -04:00
downtownallday
07d83d1e5c
Make installed state comparisons ignore new user and alias attributes when comparing MiaB to MiaB-LDAP
2020-08-25 16:36:01 -04:00
downtownallday
5eb008cae9
Skip system updates if SKIP_SYSTEM_UPDATE environment variable is set to "1"
2020-08-25 16:34:56 -04:00
downtownallday
2b2856b517
Fix wording
2020-08-25 16:33:20 -04:00
downtownallday
191b575ab2
Add a display name for users, saved as 'cn' in LDAP
2020-08-25 16:33:06 -04:00
downtownallday
05f4164793
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
2020-08-25 12:37:37 -04:00
Downtown Allday
17048a624d
Merge pull request #1 from downtownallday/alias-comments
...
Add comment/description for aliases
2020-08-25 12:36:42 -04:00
downtownallday
1fb9316904
spaces -> tabs
2020-08-25 12:21:11 -04:00
downtownallday
22bfef6f59
Display and allow chaninging a comment/description for aliases. Change the default comment for required aliases to "Required alias".
2020-08-25 12:00:55 -04:00
Richard Willis
62b9b1f15f
Add OpenAPI HTTP spec ( #1804 )
2020-08-22 15:44:19 -04:00
downtownallday
2b981db1d9
Remove nextcloud cron job when miab nextcloud is disabled
2020-08-21 11:52:24 -04:00
downtownallday
d0d12fbc1c
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
2020-08-09 12:13:31 -04:00
David Duque
94da7bb088
status_checks.py: Properly terminate the process pools ( #1795 )
...
* Only spawn a thread pool when strictly needed
For --check-primary-hostname, the pool is not used.
When exiting, the other processes are left alive and will hang.
* Acquire pools with the 'with' statement
2020-08-09 11:42:39 -04:00
downtownallday
ac35bdc544
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
2020-07-29 10:34:47 -04:00
Joshua Tauberer
65983b8ac7
Merge v0.47 point release branch
2020-07-29 10:27:06 -04:00
hija
56d0289ed9
v0.47
2020-07-29 10:24:56 -04:00
Marcus Bointon
f253c40012
[backport] Add rate limiting of SSH in the firewall ( #1770 )
...
See #1767 . Backport of cfc8fb484c
2020-07-29 10:24:23 -04:00
Joshua Tauberer
4bbe4af377
Update CHANGELOG
2020-07-29 10:23:02 -04:00
Hilko
2c34a6df2b
Update roundcube to 1.4.7
2020-07-29 10:15:12 -04:00
Hilko
1098e2b48e
Add noindex to www_default meta tags ( #1791 )
2020-07-29 10:03:33 -04:00
Richard Willis
c50170b816
Update "Remove Alias" modal title ( #1800 )
2020-07-29 10:01:20 -04:00
downtownallday
a24cf104e4
Merge branch 'master' of https://github.com/mail-in-a-box/mailinabox
2020-07-27 07:04:06 -04:00
Marcus Bointon
cd518e6820
Raise Dovecot per user connection limit ( #1799 )
2020-07-27 06:37:52 -04:00
