Mozilla's former internal LDAP phonebook
Перейти к файлу
floatingatoll fd64ac4d24
Merge pull request #84 from floatingatoll/pull-2
add mail/ command alongside search/
2017-11-26 15:20:59 -08:00
css add footer links to cards/faces pages to permit easy swapping [#1354301] 2017-11-21 19:11:13 -08:00
fonts update DroidSans to https://github.com/google/fonts/blob/master/apache/droidsans/ and include its LICENSE 2017-05-05 21:51:57 -07:00
img apply aesthetic fixes to the on-page error dialog, remove "broken" gif [#1401767] 2017-11-21 16:52:07 -08:00
js deprecate exact_search in favor of mail/ 2017-11-26 15:13:56 -08:00
templates add new mail/ command, used everywhere we want an exact email lookup 2017-11-26 15:13:56 -08:00
.gitignore Don't check in config-local.php by mistake 2015-04-21 14:00:11 +03:00
Makefile initial framework for SRI support [#1305123] 2016-10-25 23:37:51 -07:00
README.md initial framework for SRI support [#1305123] 2016-10-25 23:37:51 -07:00
config-local.php-dist add support for linking wpr desk numbers to mana [#809128] 2017-11-21 16:53:51 -08:00
config-srihashes.php add footer links to cards/faces pages to permit easy swapping [#1354301] 2017-11-21 19:11:13 -08:00
config.php deprecate exact_search in favor of mail/ 2017-11-26 15:13:56 -08:00
constants.php Added support to display workdayTimezone 2016-09-27 13:55:44 -04:00
contribute.json Add a contribute.json. [#1302874] 2016-09-14 21:19:21 -07:00
country_codes.php Changed TAIWAN, PROVINCE OF CHINA to TAIWAN per bug 695716 2011-10-20 16:23:14 +00:00
edit.php remove executable permission from non-executable files 2017-05-05 22:13:16 -07:00
faces.php remove executable permission from non-executable files 2017-05-05 22:13:16 -07:00
favicon.ico Initial check-in 2009-07-29 01:51:51 +00:00
functions.php initial framework for SRI support [#1305123] 2016-10-25 23:37:51 -07:00
index.php remove executable permission from non-executable files 2017-05-05 22:13:16 -07:00
init.php deprecate exact_search in favor of mail/ 2017-11-26 15:13:56 -08:00
office_cities.php Applied patch per bug 683419 2011-10-03 14:35:21 +00:00
opensearch.xml Add Opensearch XML file for Phonebook search [#607990] 2016-09-23 14:22:47 -07:00
output-html.inc add new mail/ command, used everywhere we want an exact email lookup 2017-11-26 15:13:56 -08:00
output-json.inc Fix handling of search limits. 2016-08-27 22:45:49 +08:00
output-vcard.inc Merge pull request #46 from floatingatoll/bug558940 2016-09-23 13:44:51 -07:00
output.inc remove csv output format 2016-08-25 21:31:03 -07:00
pic.php refuse to load userpics for disabled users 2017-11-21 17:32:22 -08:00
preprocessors-attr.inc Use MEMCACHE_PREFIX everywhere, as to not conflict with a shared memcache cluster. Bug 691929. 2011-10-04 21:55:08 +00:00
search.php deprecate exact_search in favor of mail/ 2017-11-26 15:13:56 -08:00
srihash_files.txt Javascript rewrite. 2017-05-05 19:19:03 -07:00
tree.php remove executable permission from non-executable files 2017-05-05 22:13:16 -07:00
workday_location_map.php Just say "NYC" 2015-09-30 20:10:04 +01:00

README.md

Phonebook

Mozilla's internal phonebook app.

Installation

  • Clone, host on a local, PHP-enabled server, run.
  • Optional: cp config-local.php-dist config-local.php and tweak as needed

Note: The app requires LDAP server access. You probably need a Mozilla-internal VPN connection up and running. Without, you can't currently develop on Phonebook. You can download your VPN certificate at login.mozilla.com.

Apache, Authentication, and LDAP

Previous versions of the app authenticated twice - once to Apache (mod_authnz_ldap), and then again to PHP itself. This is not compatible with more complex auth methods (mod_auth_mellon), which set REMOTE_USER without providing a password for LDAP use.

The app now trusts that Apache is configured with require valid-user. If REMOTE_USER is not set, the app assumes something has gone wrong and refuses to proceed. The app admin is responsible for configuring Apache with a valid auth handler.

This should continue to work correctly under both the classic mod_authnz_ldap and the modern mod_auth_mellon methods, but please pay especial attention to this in future testing.

-- 2016-Apr (atoll)

Contributing

To contribute, file bugs in Bugzilla and use GitHub for code review:

SRI hashes

When committing changes to files listed in srihash_files.txt, please also run make sri and include the resulting autogenerated config-srihashes.php in the same commit. This ensures that sites with SRI enabled (ENABLE_SRIHASH set to true in config-local.php-dist) continue working correctly.