7 Commits (ecf9998652b393328fb49757c1818f93a4026982)

Author	SHA1	Message	Date
Selva Nair	7d078dd151	PLAP: Add an option to register the COM dll ... - ShellExecute with runas is used to elevate - This Option is hidden if PLAP dll is not found in the install_path bin folder - Depends on the presence of openvpn-plap-install.reg and openvpn-plap-uninstall.reg in the install-path bin folder. Signed-off-by: Selva Nair <selva.nair@gmail.com>	2 years ago
Selva Nair	56ee704501	Use C standrad compliant printf specifications ... %S --> %hs in wide format strings, %ls otherwise %s --> %ls in wide format strings, unchanged otherwise %c --> %lc in wide format strings Resource files together have about 970 lines affected and were edited by looping through all with sed -i 's/%S/%hs/g' $file sed -i 's/%s/%ls/g' $file All other files were manually changed (about 85 lines). Recent versions of mingw-w64 implicitly turns on __USE_MINGW_ANSI_STDIO if _GNU_SOURCE, _XOPEN_SOURCE etc are defined (which we do usei). This breaks non-standard spec such as %S. Anyway, we have been gradually getting rid of those. MSVC builds should not be affected. v2: multiple occurrences in same line was missed in v1 (/g missing in sed expression). Fixed. Signed-off-by: Selva Nair <selva.nair@gmail.com>	3 years ago
Lev Stipakov	d6a622a023	URL profile import: allow specifying owner window of message box ... This will be used later when parent window needs to be disabled when message box is displayed. Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Selva Nair	c3e4247e30	Close token handle in GetProcessTokenGroups() ... Signed-off-by: Selva Nair <selva.nair@gmail.com>	8 years ago
Selva Nair	921a4ed535	Check group membership without needing connection to DC ... Current approach of querying the group membership of DOMAIN\username fails for domain users if no DC is reachable. Instead authorize the user if (i) admin groups are found in the process token (ii) or the SID of the user is a member of the admin groups The second check is needed to support adding the user to the ovpn_admin_group when GUI is running, as such changes in group membership will not be reflected in the token. Signed-off-by: Selva Nair <selva.nair@gmail.com>	8 years ago
Selva Nair	6d9ab8122c	Ensure group name in shell-execute cmdline is clean ... - Also fix typo in a comment. Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Selva Nair	43d0ef3a5a	Handle interactive service policy restrictions ... When a connection is attempted using a config in a location that would fail, offer an option to add the user to the "OpenVPN Administrators" group. This is done using shell-execute which will show a UAC prompt for elevation. If it fails (due to user chooses NO or the UAC dialog fails) the connection is not started. v2 Changes - Rebase to master - Automaticlaly add the admin group if it doesn't exist - Allow unicode strings in debug output - Use domain\username to identify user - Fix the PrintDebug macro Minor changes based on user feedback - Bring the window back to foreground after UAC prompt completion - Show a message if another connection is tried during authorization - Do not add user to ovpn_admin_group if it is same as the built-in admin group Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago