GitHub user mike-jumper opened a pull request:
https://github.com/apache/incubator-guacamole-client/pull/165
GUACAMOLE-284: Apply database account restrictions when a database account
is required.
These changes modify the enforcement of database account restrictions
(disabled accounts, scheduling, password expiration) such that they apply even
if authentication did not come from the database, so long as [the
`mysql-user-required` or `postgresql-user-required`
properties](http://guacamole.incubator.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-restrict)
are set.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mike-jumper/incubator-guacamole-client
apply-database-restrictions
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-guacamole-client/pull/165.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #165
----
commit 45ee895044cd7a4e5489ed0d4bd818368522a8ca
Author: Michael Jumper <[email protected]>
Date: 2017-06-04T20:32:52Z
GUACAMOLE-284: Veto authentication result if a database account is required
but unavailable.
commit 0eef629a9dad12ad6d60a0d045e845236761be88
Author: Michael Jumper <[email protected]>
Date: 2017-06-04T20:42:28Z
GUACAMOLE-284: Move enforcement of account restrictions into
AuthenticationProviderService.
commit c87ec1bf5d6545cb8f4ed631257f4ba9667bdceb
Author: Michael Jumper <[email protected]>
Date: 2017-06-04T21:04:56Z
GUACAMOLE-284: Reverse structure of restriction enforcement such that the
default action is to deny access.
commit f4fce6a07a94a6a4f8919df5bffe171e82aa3081
Author: Michael Jumper <[email protected]>
Date: 2017-06-04T21:08:49Z
GUACAMOLE-284: Add convenience methods for determining whether a user
account is disabled/expired.
commit 862e2c398aaa346d59766f7cc3bec61c2e4a4639
Author: Michael Jumper <[email protected]>
Date: 2017-06-04T21:15:47Z
GUACAMOLE-284: Clarify semantics of disabled user accounts.
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
