We noticed that the current default settings perform very poorly under
load. We managed to literally take down Greenlight during a larger event
when people where accessing the landing page for rooms and when doing
some tests, I was more or less able to DoS Greenlight on my own.
This patch adds a default worker configuration which significantly
improves the situation. The small, 4 core machine I was testing on could
handle about thrice the amount of requests.
While the new default configuration should be reasonably well suited for
most deployments, this patch further allows users to easily configure
the worker pool on their own in the environment file.
This patch allows anonymous and user based authentication to LDAP
servers. This change is based on a patch against bn-ldap-authentication:
- https://github.com/blindsidenetworks/bn-ldap-authentication/pull/2
The patch introduces a new environment variable `LDAP_AUTH` which
controls the authentication method used against the LDAP server:
- `anonymous` enables an anonymous bind to the LDAP with no password
being used.
- `user` uses the user's own credentials to search for his data,
enabling authenticated login to LDAP without the need for a user with
global read privileges.
The default still remains at using a bind user, allowing for a seamless
upgrade path from the previous version.
This fixes#1082
Co-authored-by: Jesus Federico <jesus@123it.ca>
* make help link configurable
* change default help url
* use default help url in setups without env var
Co-authored-by: Jesus Federico <jesus@123it.ca>
* Added option to specify different redirect url for google auth
* Made the redirect url generic so it works with 365
Co-authored-by: Jesus Federico <jesus@123it.ca>
* Added the ability to invite users
* Small bug fix
* Added the ability to approve/decline users
* Small bug fixes
* More bug fixes
* More minor changes
* Final changes
* implement first version of the recording authentication, redirecting to the playback URL with the jwt token
* set default recording visibility by environment variable
* use the http header, if present, to determine the client ip address
* fix email verification when disabled
* revert playback component to link_to, change method to get
* remove unnecessary variable
* Added "Add to Google Calendar" button on Room page
* Added Google Calendar button enable to env.sample
* Updated CSS for the Google Calendar Button row
* Added correct translation when copying room link
* Fixed new Google Calendar button mobile display
* GRN-80: Allow local accounts on multitenant (#428)
* Changed the way the omniauth providers are declared
* Allow local authentication for multitenant mode based on customer settings
* Cleanead up code mandated by rubocop
* Completed implementation for signin and added the one for signup
* Fixed issue with rubocop
* Renamed customer_name to lb_user
* Renamed lb_user -> user_domain, fixed issue with signup controller, email verification WAS NOT implemented
* Completed implementation of email_verification
* Fixed rubocop issue
* Final update
* Fix for test with loadbalancer
* Make sure loadbalancer mockup is only used when env defined
* Fix for test on rooms_controller
* Fixed most of the test failing on multitenant env
* Fixed issue detected by rubocop
* Fixed issue with activation tockens not working on resend
* Fixed new issue found by rubocop
* Updated travis script
* Harcoded credentials for mockup
* Updated expectation on start_session
* Fixed issue with duplication of home room
* Updated script for rubocop
* Restored Gemfile
* Update sample.env
* Update sample.env
* Added the administrator role and functionality that comes with it (#403)
* GRN-20: Added roles to the user model
* GRN-75: Added a view for admins to see their users
* GRN-77: Added Edit/Delete/Promote ability for admins
* GRN-71: Added admin account by default
* Changed the way locales are shown
* Updated the rest of the locales
* Changed the way available_locales are defined
* Updated locales in Russian
* Updated locaales for German
* Update user.rb
* Update admins.js
* GRN-15: Added the ability to change color and image from admin interface (#425)
* GRN-20: Added roles to the user model
* GRN-75: Added a view for admins to see their users
* GRN-77: Added Edit/Delete/Promote ability for admins
* GRN-71: Added admin account by default
* Changed the way locales are shown
* Updated the rest of the locales
* Changed the way available_locales are defined
* Updated locales in Russian
* Updated locaales for German
* GRN-15: Added the ability for admins to customize color and image
* Update user.rb
* Update user.rb
* Update routes.rb
* Update admins_controller.rb
* GRN-87:Added a super admin role and made changes to how to the design works (#430)
* GRN-20: Added roles to the user model
* GRN-75: Added a view for admins to see their users
* GRN-77: Added Edit/Delete/Promote ability for admins
* GRN-71: Added admin account by default
* Changed the way locales are shown
* Updated the rest of the locales
* Changed the way available_locales are defined
* Updated locales in Russian
* Updated locaales for German
* GRN-15: Added the ability for admins to customize color and image
* Added the super admin and completed the design tab
* Update user.rb
* Update themes_controller_spec.rb
* Update routes.rb
* Update admins_controller.rb
* Removed duplicated code that broke the build after last merge
* GRN-78: Restructured some of the views to make the UI more consistent and responsive (#435)
* GRN-20: Added roles to the user model
* GRN-75: Added a view for admins to see their users
* GRN-77: Added Edit/Delete/Promote ability for admins
* GRN-71: Added admin account by default
* GRN-15: Added the ability for admins to customize color and image
* Added the super admin and completed the design tab
* GRN-78: Cleaned up buttons and moved signin to its own page
* GRN-78: Moved the Rooms and Recordings link to nav bar
* Merge fix
* Views restructure fix (#458)
* Added cache to gitlab-ci.yml
* Restructured seed
* GRN2-99 -> GRN2-106: UI cleanup and refactoring (#478)
* GRN2-98: Change Fullname to Full name
* GRN2-105: Changed View Users to Manage Users
* GRN2-101/103: Updated email to match branding
* GRN2-100: Updated Email Sent flash to be more descriptive
* GRN2-104: Redirect user to sign in page w/ flash after clicking activation link
* GRN2-102: Changed the wording in the verification email
* GRN2-99: Added email form validation
* GRN2-106: Cleaned up Users list front end
* Fixes to rake and admin password validator for passing rubocop
* GRN2-113: Fixed issues with admin panel (#479)
* GRN2-116: Code clean up after restructure of views (#482)
* Removed unused references
* Rubocop
* Added pagination to admin view (#483)
* GRN2-114: Added the ability for admins to ban/unban users (#487)
* Added the ability for admins to ban and unban users
* Update sessions_helper.rb
* Merge branch 'master' into admin-panel (#492)
* Updated rubocop gem
* Updated rubocop and fixed issues (#490)
* Rubocop fixes
* GRN2-122: Updated sign in flow for admins and switch design tab to site settings (#489)
* Switched design tab to site settings
* Update _header with spaces instead of tabs
* Added more test cases to increase coverage (#494)
* Added fix for multitenant error
* Fixed issue with room lock when using ldap
* Fixed test cases
* Fixed rubocop issue
* Included internal documentation for LDAP ENV variables