Configuration
overview
Connect to the manager with your browser (for example
http://manager.example.com) to
start configure your WebSSO.
You have to set at least some parameters:
General
parameters
- Authentication parameters -> portal URL to access to the
authentication portal.
- Domain: the cookie domain. All protected VirtualHosts have to be
under it.
- LDAP parameters -> LDAP Server.
- LDAP parameters -> LDAP Accout and password: required only if
anonymous binds are not accepted.
- Session Storage -> Apache::Session module: how to store user
sessions. You can use all module that inherit from Apache::Session like
Apache::Session::MySQL.
- Session Storage -> Apache::Session Module parameters: see
Apache::Session::<Choosen module>.
User groups
Use the "New Group" button to add your first
group. On the left, set the keyword which will be used later and set on
the right the corresponding rule. You can use :
- an LDAP filter (it will be tested with the user uid)
or
- a Perl condition enclosed with {}. All variables declared in
"General parameters -> LDAP attributes" can be used with a "$". For
example: MyGroup / { $uid eq "foo" or $uid eq "bar" }
Virtual hosts
You have to create a virtual host for each Apache
host (virtual or real) protected by Lemonldap::NG even if just a
sub-directory is protected. Else, user who want to access to the protected
area will be rejected with a "500 Internal Server Error" message and the
apache logs will explain the problem.
Each virtual host has 2 groups of parameters:
- Headers: the headers added to the apache request. Default: Auth-User
=> $uid.
- Rules: subdivised in 2 categories:
- default: the default rule
- personalized rules: association of a Perl regular expression and
a condition. For example: ^/restricted.*$ / $groups =~
/bMyGroupb/