Changeset 7525

Show
Ignore:
Timestamp:
03/13/09 20:33:09 (4 years ago)
Author:
p_lindheimer
Message:

Merged revisions 7417-7418,7420-7431,7433-7457,7460-7476,7478-7518,7520-7523 via svnmerge from
http://svn.freepbx.org/modules/branches/2.5

........

r7473 | ethans | 2009-03-10 12:55:44 -0700 (Tue, 10 Mar 2009) | 3 lines


New module: detects weak SIP secrets and sets security notifications

........

r7474 | ethans | 2009-03-10 14:29:05 -0700 (Tue, 10 Mar 2009) | 3 lines


Support for IAX trunks. Shows differentiation between trunks/extensions and trunk tech. Tabular display. Shortened notification messages with extended
details.

........

r7475 | ethans | 2009-03-10 14:46:56 -0700 (Tue, 10 Mar 2009) | 2 lines


verbiage

........

r7476 | mickecarlsson | 2009-03-10 23:53:00 -0700 (Tue, 10 Mar 2009) | 1 line


Localized module, added .pot file

........

r7480 | p_lindheimer | 2009-03-11 18:10:41 -0700 (Wed, 11 Mar 2009) | 1 line


fixes #3526 puts from-internal-custom before prarkedcalls context

........

r7481 | mickecarlsson | 2009-03-12 05:27:18 -0700 (Thu, 12 Mar 2009) | 1 line


More localization for weakpasswords

........

r7516 | p_lindheimer | 2009-03-12 17:04:29 -0700 (Thu, 12 Mar 2009) | 1 line


fixes #3350 don't include app-daynight in from-internal

........

r7517 | ethans | 2009-03-13 09:45:32 -0700 (Fri, 13 Mar 2009) | 3 lines


Merged individiual security notifications into one all encompassing security notification. This will hopefully alleviate interface slowdown when a large deployment has multiple weak
passwords.

........

r7518 | mickecarlsson | 2009-03-13 10:24:27 -0700 (Fri, 13 Mar 2009) | 1 line


Updated localization files for weakpasswords

........

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • modules/branches/2.6

    • Property svnmerge-integrated changed from /modules/branches/2.5:1-7416,7419-7472,7477 to /modules/branches/2.5:1-7524

  • modules/branches/2.6/core/etc/extensions.conf

    r7411 r7525  
    293293; What to do on hangup.                                          
    294294[macro-hangupcall] 
    295 exten => s,1,ResetCDR(w) 
     295exten => s,1,ResetCDR(vw) 
    296296exten => s,n,NoCDR() 
    297297  
    …… 
    560560[from-internal-xfer] 
    561561; applications are now mostly all found in from-internal-additional in _custom.conf 
     562include => from-internal-custom 
    562563include => parkedcalls 
    563 include => from-internal-custom 
    564564;allow phones to dial other extensions 
    565565include => ext-fax 

  • modules/branches/2.6/daynight/functions.inc.php

    r7155 r7525  
    167167 
    168168      $id = "app-daynight"; // The context to be included 
    169       $ext->addInclude('from-internal-additional', $id); // Add the include from from-internal 
    170169 
    171170      $list = daynight_list(); 

  • modules/branches/2.6/weakpasswords/functions.inc.php

    r7476 r7525  
    2626      $weak = weakpasswords_get_users(); 
    2727      if(sizeof($weak) > 0)  { 
     28        $extended_text = _("Warning: The use of SIP/IAX passwords that are weak can allow hackers to make brute force registrations and possibly make calls through your PBX.  It is strongly recommended, you choose strong secrets.")."<br>";  
     29        $count = 0; 
    2830        foreach($weak as $details)  { 
    29           $extended_text = sprintf(_("Warning: The use of SIP/IAX passwords that are weak can allow hackers to make brute force registrations and possibly make calls through your PBX.  It is strongly recommended, you choose strong secrets. %s %s  has a weak secret of %s: %s"), $details['deviceortrunk'], $details['name'], $details['secret'], $details['message']); 
    30           $nt->add_security("weakpasswords", $details['name'], $details['deviceortrunk']." ".$details['name'].": ".$details['message'],$extended_text); 
     31          $extended_text .= sprintf(_("%s %s has a weak secret of %s: %s<br>"), $details['deviceortrunk'], $details['name'], $details['secret'], $details['message']); 
     32          $count++; 
    3133        } 
     34        $nt->add_security("weakpasswords", "all", $count." "._("extensions/trunks has weak secrets"),$extended_text); 
     35 
    3236 
    3337      } 
    …… 
    5256 
    5357    if($id == $name)  { 
    54       $deviceortrunk = "Extension"; 
     58      $deviceortrunk = _("Extension"); 
    5559    } 
    5660    else  { 
    57       $deviceortrunk = "$tech Trunk"; 
     61      $deviceortrunk = sprintf(_("%s Trunk"), $tech); 
    5862    } 
    5963    $reversed = strrev($secret); 

  • modules/branches/2.6/weakpasswords/i18n/sv_SE/LC_MESSAGES/weakpasswords.po

    r7476 r7525  
    33# This file is distributed under the same license as the PACKAGE package. 
    44# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. 
    5 #Copyright (C) 2009 Ethan Schreoder (ethan.schroeder@schmoozecom.com) 
     5# Copyright (C) 2009 Ethan Schreoder (ethan.schroeder@schmoozecom.com) 
    66# 
    7 #This program is free software; you can redistribute it and/or 
    8 #modify it under the terms of version 2 of the GNU General Public 
    9 #License as published by the Free Software Foundation. 
     7# This program is free software; you can redistribute it and/or 
     8# modify it under the terms of version 2 of the GNU General Public 
     9# License as published by the Free Software Foundation. 
    1010# 
    11 #This program is distributed in the hope that it will be useful, 
    12 #but WITHOUT ANY WARRANTY; without even the implied warranty of 
    13 #MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
    14 #GNU General Public License for more details. 
     11# This program is distributed in the hope that it will be useful, 
     12# but WITHOUT ANY WARRANTY; without even the implied warranty of 
     13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
     14# GNU General Public License for more details. 
    1515# 
    1616msgid "" 
    …… 
    1818"Project-Id-Version: FreePBX weakpasswords\n" 
    1919"Report-Msgid-Bugs-To: \n" 
    20 "POT-Creation-Date: 2009-03-11 07:33+0100\n" 
     20"POT-Creation-Date: 2009-03-13 18:17+0100\n" 
    2121"PO-Revision-Date: 2009-03-11 07:44+0100\n" 
    2222"Last-Translator: Mikael Carlsson <mickecamino@gmail.com>\n" 
    …… 
    2828"X-Poedit-Country: Sweden\n" 
    2929 
    30 #: functions.inc.php:30 
     30#: functions.inc.php:28 
     31msgid "" 
     32"Warning: The use of SIP/IAX passwords that are weak can allow hackers to " 
     33"make brute force registrations and possibly make calls through your PBX.  It " 
     34"is strongly recommended, you choose strong secrets." 
     35msgstr "" 
     36"Varning: Att anvÀnda korta eller osÀkra lösenord kan innebÀra att hackare kan " 
     37"anvÀnda lösenordsgissing för att registrera telefoner i ditt system och eventuellt " 
     38"genomföra samtal genom vÀxeln pÃ¥ din bekostnad. Det Àr mycket viktigt att anvÀnda sÀkra lösenord." 
     39 
     40#: functions.inc.php:31 
    3141#, php-format 
    32 msgid "Warning: The use of SIP/IAX passwords that are weak can allow hackers to make brute force registrations and possibly make calls through your PBX.  It is strongly recommended, you choose strong secrets. %s %s  has a weak secret of %s: %s" 
    33 msgstr "Varning: Om lösenorden för SIP/AIX Àr korta eller samma som anknytningsnumret kan hackare registrera telefoner pÃ¥ dessa anknytningar och skapa samtal ut ur din vÀxel. Det rekommenderas starkt att du vÀljer sÀkra lösenord. %s %s har svagt lösenord pÃ¥ %s: %s" 
     42msgid "%s %s has a weak secret of %s: %s<br>" 
     43msgstr "%s %s har ett osÀkert lösenord pÃ¥ %s: %s" 
    3444 
    35 #: functions.inc.php:63 
     45#: functions.inc.php:34 
     46msgid "extensions/trunks has weak secrets" 
     47msgstr "anknytning/trunk har ett svagt lösenord" 
     48 
     49#: functions.inc.php:58 
     50msgid "Extension" 
     51msgstr "Anknytning" 
     52 
     53#: functions.inc.php:61 
     54#, php-format 
     55msgid "%s Trunk" 
     56msgstr "%s trunk" 
     57 
     58#: functions.inc.php:66 
    3659msgid "Secret has sequential digits" 
    3760msgstr "Lösenordet har sekventiella siffror" 
    3861 
    39 #: functions.inc.php:66 
     62#: functions.inc.php:69 
    4063msgid "Secret same as device" 
    4164msgstr "Lösenordet Àr samma som anknytningen" 
    4265 
    43 #: functions.inc.php:69 
     66#: functions.inc.php:72 
    4467msgid "Secret has consecutive digit " 
    45 msgstr "Lösenordet har samma siffror i följd" 
     68msgstr "Lösenordet har samma siffror i följd " 
    4669 
    47 #: functions.inc.php:72 
     70#: functions.inc.php:75 
    4871msgid "Secret less than 6 digits" 
    4972msgstr "Lösenordet har mindre Àn 6 siffror" 
    …… 
    7295msgid "No weak secrets detected on this system." 
    7396msgstr "Inga svaga lösenord detekterades i vÀxeln" 
    74  

  • modules/branches/2.6/weakpasswords/i18n/weakpasswords.pot

    r7476 r7525  
    33# This file is distributed under the same license as the PACKAGE package. 
    44# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. 
    5 #Copyright (C) 2009 Ethan Schreoder (ethan.schroeder@schmoozecom.com) 
    6 # 
    7 #This program is free software; you can redistribute it and/or 
    8 #modify it under the terms of version 2 of the GNU General Public 
    9 #License as published by the Free Software Foundation. 
    10 # 
    11 #This program is distributed in the hope that it will be useful, 
    12 #but WITHOUT ANY WARRANTY; without even the implied warranty of 
    13 #MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the 
    14 #GNU General Public License for more details. 
    155# 
    166#, fuzzy 
    …… 
    199"Project-Id-Version: PACKAGE VERSION\n" 
    2010"Report-Msgid-Bugs-To: \n" 
    21 "POT-Creation-Date: 2009-03-11 07:33+0100\n" 
     11"POT-Creation-Date: 2009-03-13 18:17+0100\n" 
    2212"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" 
    2313"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" 
    …… 
    2717"Content-Transfer-Encoding: 8bit\n" 
    2818 
    29 #: functions.inc.php:30 
    30 #, php-format 
     19#: functions.inc.php:28 
    3120msgid "" 
    3221"Warning: The use of SIP/IAX passwords that are weak can allow hackers to " 
    3322"make brute force registrations and possibly make calls through your PBX.  It " 
    34 "is strongly recommended, you choose strong secrets. %s %s  has a weak secret " 
    35 "of %s: %s" 
     23"is strongly recommended, you choose strong secrets." 
    3624msgstr "" 
    3725 
    38 #: functions.inc.php:63 
     26#: functions.inc.php:31 
     27#, php-format 
     28msgid "%s %s has a weak secret of %s: %s<br>" 
     29msgstr "" 
     30 
     31#: functions.inc.php:34 
     32msgid "extensions/trunks has weak secrets" 
     33msgstr "" 
     34 
     35#: functions.inc.php:58 
     36msgid "Extension" 
     37msgstr "" 
     38 
     39#: functions.inc.php:61 
     40#, php-format 
     41msgid "%s Trunk" 
     42msgstr "" 
     43 
     44#: functions.inc.php:66 
    3945msgid "Secret has sequential digits" 
    4046msgstr "" 
    4147 
    42 #: functions.inc.php:66 
     48#: functions.inc.php:69 
    4349msgid "Secret same as device" 
    4450msgstr "" 
    4551 
    46 #: functions.inc.php:69 
     52#: functions.inc.php:72 
    4753msgid "Secret has consecutive digit " 
    4854msgstr "" 
    4955 
    50 #: functions.inc.php:72 
     56#: functions.inc.php:75 
    5157msgid "Secret less than 6 digits" 
    5258msgstr "" 

  • modules/branches/2.6/weakpasswords/module.xml

    r7473 r7525  
    22  <rawname>weakpasswords</rawname> 
    33  <name>Weak Password Detection</name> 
    4   <version>2.5.0.0</version> 
     4  <version>2.5.0.1</version> 
    55  <type>setup</type> 
    66  <category>Internal Options &amp; Configuration</category> 
    77  <changelog> 
     8    *2.5.0.1* Consolidated individual security notices to a single notice with all details in extended text 
    89    *2.5.0.0* Initial release 
    910  </changelog>