Peter Bieringer
97875b9514
log status of new/existing log/profile header/content options on startup
2025-12-10 17:50:20 +01:00
Peter Bieringer
dfb932a448
new options [logging] profiling_per_request_header profiling_per_request_xml
2025-12-10 17:48:05 +01:00
Peter Bieringer
b819febeb2
new option [logging] response_header_on_debug
2025-12-10 17:47:09 +01:00
Peter Bieringer
d7f54fbc48
profiling: cosmetics
2025-12-09 08:26:27 +01:00
Peter Bieringer
5fbd838eab
profiling: cosmetics/alignment
2025-12-08 18:41:43 +01:00
Peter Bieringer
2df265617b
profiling: fix for 'none'
2025-12-08 17:55:11 +01:00
Peter Bieringer
15ebb1e647
profiling: default is now 'none' and config option will be checked instantly
2025-12-08 17:54:18 +01:00
Peter Bieringer
3f4d434439
profiling: add support
2025-12-08 12:33:17 +01:00
Peter Bieringer
3c0267c98a
profiling: add options
2025-12-08 12:29:43 +01:00
Peter Bieringer
3abab9cd8e
move: fix detection of HTTP_X_FORWARDED_PORT
2025-12-05 16:24:19 +01:00
Peter Bieringer
f3f73ece15
reactivate IMAP AUTH=LOGIN as fallback replaced by 25402ab641 supporting https://github.com/Kozea/Radicale/issues/1929
2025-12-03 08:24:25 +01:00
Peter Bieringer
9b43b8e3de
catch broken event
2025-12-01 18:52:20 +01:00
Peter Bieringer
da612cfccb
add broken vaddressbook logging similar to vcalendar
2025-12-01 18:52:20 +01:00
Peter Bieringer
56e0362f59
extend broken vcalendar item log
2025-12-01 18:52:20 +01:00
Peter Bieringer
5b2cb5c0bf
add new test cases for broken items
2025-12-01 18:52:20 +01:00
Peter Bieringer
62166eb2cc
fix typo related to collection delete hook, fixes https://github.com/Kozea/Radicale/issues/1920
2025-11-25 20:02:50 +01:00
Peter Bieringer
7ebe5703ac
log remote host+useragent on invalid sync token
2025-11-16 17:06:21 +01:00
Peter Bieringer
1c7ff414a9
extend app calls with remote host+useragent
2025-11-16 17:06:00 +01:00
Peter Bieringer
85f1850b19
make flake8 happy
2025-11-16 17:03:59 +01:00
Peter Bieringer
91cee5e514
extend test with remote host+useragent
2025-11-16 17:02:31 +01:00
Peter Bieringer
03481a1184
add support for remote host+useragent
2025-11-16 17:02:04 +01:00
Peter Bieringer
4980172def
extend copyright
2025-11-16 16:57:31 +01:00
Peter Bieringer
3fecba62e7
fix comment
2025-11-16 16:22:20 +01:00
Peter Bieringer
b2320c607d
test case for invalid-sync token with user
2025-11-16 16:07:13 +01:00
Peter Bieringer
f9697eeda1
log user on invalid sync token
2025-11-16 16:06:53 +01:00
Peter Bieringer
ed849a7271
add support for optional arguments
2025-11-16 16:06:26 +01:00
Peter Bieringer
4c0d216cb9
log path on invalid sync token
2025-11-16 15:50:05 +01:00
Peter Bieringer
3f74ab1cd3
do not log problematic sync token twice
2025-11-16 15:46:50 +01:00
Peter Bieringer
bf8619a41c
add support for http_remote_user
2025-11-15 15:32:13 +01:00
Peter Bieringer
bd1497ca15
catch min/max to avoid issues on 32-bit systems
2025-11-02 18:33:28 +01:00
Peter Bieringer
012e50e3ed
add min_unixtime constant
2025-11-02 18:33:04 +01:00
Peter Bieringer
54bd8023b3
add additional etag related tests
2025-10-20 07:41:27 +02:00
Peter Bieringer
bd0d5038b3
cosmetics
2025-10-20 07:41:12 +02:00
Peter Bieringer
a51e6ff65e
remove duplicate definition
2025-10-19 20:55:10 +02:00
Peter Bieringer
c5633b8325
fix lint
2025-10-19 20:54:00 +02:00
Peter Bieringer
8ef8b767f3
strict_preconditions: new config option / test cases
2025-10-19 18:56:23 +02:00
Peter Bieringer
6df86987c2
test: add support for optional HTTP_IF_MATCH header
2025-10-19 18:55:58 +02:00
Peter Bieringer
c503542c6c
strict_preconditions: new config option / handling
2025-10-19 18:55:36 +02:00
Peter Bieringer
8a53939fae
strict_preconditions: new config option
2025-10-19 18:54:37 +02:00
Peter Bieringer
50a6b8462d
log size of answer if given
2025-10-04 11:48:08 +02:00
Peter Bieringer
120fbb7328
Fix: out-of-range timestamp on 32-bit systems
2025-10-01 20:36:12 +02:00
Peter Marschall
2d9830fb6a
LDAP auth: add my Copyright to radicale/auth/ldap.py
2025-09-29 20:17:16 +02:00
Peter Marschall
f0626a8dde
LDAP auth: change 'ldap_ssl_verify_mode' to NONE for ldapi://
...
For ldapi:// connections, which connect - by definition - to a local UNIX
socket, lower the value of config setting 'ldap_ssl_verify_mode' to "NONE"
to avoid certificate validation failures.
The UNIX socket address can NEVER match any DNS name from a certificate,
making the whole certificate validation moot.
This is a workaround for a limitation of Python's LDAP modules, that do not
consider this edge case.
2025-09-29 20:15:33 +02:00
Peter Marschall
bcba53ed8d
LDAP auth: re-factor handling of 'ldap_ssl_verify_mode'
...
* treat 'ldap_ssl_verify_mode' as string
* perform check for accepted values; fail on illegal ones
* translate to the values nbeeded by the respective LDAP module
when doing the login, based on a module specific dictionary
2025-09-29 20:15:33 +02:00
Peter Marschall
7df4c070e1
LDAP auth: fail on illegal values for config settings
...
Thr config settings 'ldap_security' and 'ldap_ssl_verify_mode' only
accept a specific set of values: fail if other values are provided.
2025-09-29 20:15:33 +02:00
Peter Marschall
b6ee3b6991
LDAP auth: align values when logging config options
...
In addition, log 'ldap_ssl_verify_mode' and 'ldap_ssl_ca_file' unconditionally.
2025-09-29 20:15:33 +02:00
Peter Marschall
44c64d70f5
LDAP auth: _login2: re-bind as user within same connection
...
Python's ldap module, which is modelled along OpenLDAP's API, allows us to
keep the connection and doing a new bind as a different user, superseding
the previous bind.
Use this to simplify the code and avoid duplication.
2025-09-29 20:15:33 +02:00
Peter Marschall
2d7a9b001c
LDAP auth: support TLS & start_tls also with python-ldap
...
Until now, every connection to the LDAP server was silently unencryptedr
when using Python's ldap module instead of the ldap3 module.
I.e. using Python's ldap module was inherently insecure, as there was not
even a hint that the config settings for encryption were ignored.
This commit changes this and brings LDAP authentication based on the ldap
module feature-wise on par with the one based on the ldap3 module.
2025-09-29 20:15:33 +02:00
Peter Marschall
f8b15eb122
LDAP auth: get rid of helper property '_use_encryption'
...
Inferring 'ldap_security' in earlier commits, allows us to get rid of
the helper property '_use_encryption', streamlining the code.
2025-09-29 20:15:33 +02:00
Peter Marschall
b21549b998
LDAP auth: warn if 'ldap_ssl_ca_file' is set without LDAP encryption
2025-09-29 20:15:33 +02:00
