Commit graph

192 commits

Author SHA1 Message Date
Peter Bieringer
be43ce5161 change default of authentication type to "denyall" for secure-by-default 2025-03-15 14:34:51 +01:00
Peter Bieringer
dc35d4d0ad script_name: config example 2025-03-02 09:02:37 +01:00
Peter Bieringer
6518f1b63a pam: add to config selector 2025-02-22 17:51:06 +01:00
Peter Bieringer
954ddea006 pam: config 2025-02-22 17:49:13 +01:00
Peter Bieringer
970d4ba468 add oauth2 to example 2025-02-22 16:22:18 +01:00
Peter Bieringer
e28b719233 oauth2 example config 2025-02-02 09:01:40 +01:00
Peter Bieringer
c24659c5ec imap: doc and default config 2025-01-16 06:01:01 +01:00
Peter Bieringer
a93af6f177 update changelog and doc and config for https://github.com/Kozea/Radicale/pull/1678 2025-01-14 08:57:35 +01:00
Peter Bieringer
1c77fd819f add missing dovecot option 2025-01-12 06:09:45 +01:00
Peter Marschall
f9dd3efc3a LDAP auth: remove config option 'ldap_load_groups'
The same effect can be achieved using the option 'ldap_groups_attribute' alone,
if it's default becomes unset instead of 'memberOf'

Benefit: one config option less to deal with.

While at it, also fix header level for 'ldap_user_attribute' in documentation.
2025-01-03 20:47:31 +01:00
Peter Marschall
6c1445d8db LDAP auth: introduce config option 'ldap_groups_attribute'
This attribute is supposed to hold the group membership information
if the config option 'ldap_load_groups' is True.
If not given, it defaults to 'memberOf' for Active Directory.

Introducing this options allows one to use radicale's LDAP auth with groups
even on LDAP servers that keep their group memberships in a different attribute
than 'memberOf', e.g. Novell eDirectory which uses 'groupMembership'.
2025-01-03 20:27:21 +01:00
Peter Bieringer
b0d56f898b
Merge pull request #1668 from pbiering/login-cache
add optional cache for login result and htpasswd + fixes

final  version will be updated to 3.4.0 next
2025-01-03 07:51:06 +00:00
Peter Marschall
99f5ec389d LDAP auth: indroduce config option 'ldap_user_attribute'
This option gives us
- flexible authentication options where the name used for logging on
  does not have to be the account name
  e.g. use ldap_filter = (&(obhjectclass=inetOrgperson)(|(cn={0]})(mail={0})))
  to allow loginng on using the cn or the mail address
- automatically consistent / canonicalized username values
  (i.e. exactly the way the LDAP server returns them)
2025-01-02 12:05:39 +01:00
Peter Bieringer
46fe98f60b make htpasswd cache optional 2025-01-01 16:31:31 +01:00
Peter Bieringer
79ba07e16b change default cache times 2024-12-31 16:13:05 +01:00
Peter Bieringer
74311560c9 add cache_logins* options 2024-12-30 08:17:59 +01:00
Peter Bieringer
1a76e1ad50 cosmetics 2024-12-18 19:40:32 +01:00
Peter Bieringer
5f79b089c8 fix option name 2024-12-15 12:21:39 +01:00
Peter Bieringer
fc7c50b4cb add note about storage verification 2024-12-15 12:20:24 +01:00
Peter Bieringer
4bb00e6070 item-cache-mtime-size: add new option 2024-12-15 11:40:02 +01:00
Peter Bieringer
a7ce8f032c Add: option [debug] storage_cache_action for conditional logging 2024-12-14 16:49:54 +01:00
Peter Bieringer
2bb2d6385b default for filesystem_cache_folder is filesystem_folder 2024-12-10 08:52:51 +01:00
Peter Bieringer
2d8903dc44 add new options 2024-12-10 08:23:32 +01:00
Peter Bieringer
5515d1e790 fix typos 2024-12-08 15:34:33 +01:00
Peter Bieringer
1d241d9e2f use_cache_subfolder_for_item: config 2024-12-03 21:31:28 +01:00
Peter Bieringer
37f7df2786 remove not supported option 2024-11-24 17:57:47 +01:00
Peter Bieringer
82064f823a add doc hint from https://github.com/Kozea/Radicale/pull/913 2024-11-24 16:39:40 +01:00
Peter Bieringer
6fa15dae4a extend hook doc in config 2024-11-24 16:29:48 +01:00
Peter Bieringer
fb904320d2 add support for ssl protocol and ciphersuite 2024-11-14 07:38:03 +01:00
Bishtawi
ee2af306d7 Support loading ldap secret from file 2024-11-05 00:35:36 -08:00
Peter Bieringer
687624a403 fix spelling 2024-11-02 13:23:41 +01:00
Peter Bieringer
dbc939aff2 cosmetic additional new lines 2024-10-12 07:34:23 +02:00
Peter Bieringer
5ec34ed163 add lost option 2024-10-12 07:34:08 +02:00
Peter Bieringer
ba9776d688 change default, remove leftover 2024-09-30 21:43:50 +02:00
Peter Bieringer
973b26b2e9 add new option rights/permit_overwrite_collection 2024-09-30 21:26:24 +02:00
Dipl. Ing. Péter Varkoly
0feca04086 Implementing ssl connection for ldap auth 2024-09-23 10:19:50 +02:00
Dipl. Ing. Péter Varkoly
9945a9f65a Enhance comments.
Remove duplicate entry
2024-09-21 18:37:04 +02:00
Dipl. Ing. Péter Varkoly
606bd30514 Rebase 2024-09-05 10:44:28 +02:00
Peter Bieringer
c63dee71ec Adjustment: option [auth] htpasswd_encryption change default from "md5" to "autodetect" 2024-09-01 17:19:53 +02:00
Peter Bieringer
a79c2ad83e align option name 2024-08-28 08:59:32 +02:00
Peter Bieringer
e852c887d7 Enhancement: add option to toggle debug log of right with doesn't match 2024-08-28 08:03:16 +02:00
Peter Bieringer
107fe1bc53 fix missing newline at the end 2024-08-28 08:02:54 +02:00
Dipl. Ing. Péter Varkoly
d7fa90a976 Adapt based on additional comments. 2024-08-27 17:06:11 +02:00
Dipl. Ing. Péter Varkoly
13d56f0918 Adapt based on additional comments. 2024-08-27 17:04:15 +02:00
Dipl. Ing. Péter Varkoly
5167f12624 Rebase rights/from_file.py.
Apply proposed/asked changes.
2024-08-26 11:21:53 +02:00
Dipl. Ing. Péter Varkoly
19e5972b4f Fix merge conflicts. 2024-08-25 14:11:48 +02:00
Ray
408a03a3c0 Better freebusy occurrence limit handling and added documentation 2024-08-16 14:57:30 -06:00
Peter Bieringer
13b1aaed39 add auth/strip_domain option 2024-07-18 06:50:29 +02:00
Peter Bieringer
51a7136b93 disable extra content by default on debug log level 2024-06-18 17:43:35 +02:00
Peter Bieringer
bbe7088561 change default of "skip_broken_item" to more user-friendly experience 2024-06-18 17:42:49 +02:00