2013-03-08 12:04:44 +01:00
< !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
< html xmlns = "http://www.w3.org/1999/xhtml" xml:lang = "en"
lang="en" dir="ltr">
< head >
< meta http-equiv = "Content-Type" content = "text/html; charset=utf-8" / >
< title > < / title >
<!-- metadata -->
< meta name = "generator" content = "Offline" / >
< meta name = "version" content = "Offline 0.1" / >
<!-- style sheet links -->
< link rel = "stylesheet" media = "all" type = "text/css" href = "../../../css/all.css" / >
< link rel = "stylesheet" media = "screen" type = "text/css" href = "../../../css/screen.css" / >
< link rel = "stylesheet" media = "print" type = "text/css" href = "../../../css/print.css" / >
< / head >
< body >
< div class = "dokuwiki export" >
2015-06-08 16:57:58 +02:00
< h1 class = "sectionedit1" id = "variables" > Variables< / h1 >
2013-03-08 12:04:44 +01:00
< div class = "level1" >
< / div >
2015-06-08 16:57:58 +02:00
<!-- EDIT1 SECTION "Variables" [1 - 25] -->
< h2 class = "sectionedit2" id = "presentation" > Presentation< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
Variables can be used in rules and headers. All rules are concerned:
< / p >
< ul >
< li class = "level1" > < div class = "li" > Access rule in virtual host< / div >
< / li >
2015-06-08 16:57:58 +02:00
< li class = "level1" > < div class = "li" > < abbr title = "Security Assertion Markup Language" > SAML< / abbr > IDP preselection< / div >
2013-03-08 12:04:44 +01:00
< / li >
< li class = "level1" > < div class = "li" > Session opening< / div >
< / li >
< li class = "level1" > < div class = "li" > …< / div >
< / li >
< / ul >
< p >
Variables are stored in the user session. We can distinguish several kind of variables:
< / p >
< ul >
< li class = "level1" > < div class = "li" > internal variables, managed by LemonLDAP::NG< / div >
< / li >
2016-03-22 12:19:17 +01:00
< li class = "level1" > < div class = "li" > < a href = "../../documentation/2.0/exportedvars.html" class = "wikilink1" title = "documentation:2.0:exportedvars" > exported variables< / a > collected from UserDB backend< / div >
2013-03-08 12:04:44 +01:00
< / li >
2016-03-22 12:19:17 +01:00
< li class = "level1" > < div class = "li" > < a href = "../../documentation/2.0/performances.html#macros_and_groups" class = "wikilink1" title = "documentation:2.0:performances" > macro and groups< / a > < / div >
2013-03-08 12:04:44 +01:00
< / li >
< / ul >
< p >
When you know the key of the variable, you just have to prefix it with the dollar sign to use it, for example to test if < code > uid< / code > variable match < code > coudot< / code > :
< / p >
2015-06-08 16:57:58 +02:00
< pre class = "code" > $uid eq " coudot" < / pre >
2013-03-08 12:04:44 +01:00
< p >
< p > < div class = "notetip" > You can inspect a user session with the sessions explorer (in Manager)
< / div > < / p >
< / p >
< p >
Below are documented internal variables.
< / p >
< / div >
2015-06-08 16:57:58 +02:00
<!-- EDIT2 SECTION "Presentation" [26 - 794] -->
< h2 class = "sectionedit3" id = "modules" > Modules< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
Register what module was used for authentication, user data, password, …
< / p >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit4" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 centeralign" > _auth < / td > < td class = "col1 leftalign" > Authentication module < / td >
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 centeralign" > _userDB < / td > < td class = "col1 leftalign" > User module < / td >
< / tr >
< tr class = "row3 rowodd" >
< td class = "col0 centeralign" > _passwordDB < / td > < td class = "col1 leftalign" > Password module < / td >
< / tr >
< tr class = "row4 roweven" >
< td class = "col0 centeralign" > _issuerDB < / td > < td class = "col1 leftalign" > Issuer module (can be multivalued) < / td >
< / tr >
< tr class = "row5 rowodd" >
2016-03-22 12:19:17 +01:00
< td class = "col0 centeralign" > _authChoice < / td > < td class = "col1 leftalign" > User choice done if < a href = "../../documentation/2.0/authchoice.html" class = "wikilink1" title = "documentation:2.0:authchoice" > authentication choice< / a > was used < / td >
2013-03-08 12:04:44 +01:00
< / tr >
2015-10-05 16:53:35 +02:00
< tr class = "row6 roweven" >
< td class = "col0 centeralign" > _authMulti < / td > < td class = "col1 leftalign" > Full name of authentication module (with < code > #label< / code > ) used in Multi < / td >
< / tr >
< tr class = "row7 rowodd" >
< td class = "col0 centeralign" > _userDBMulti < / td > < td class = "col1 leftalign" > Full name of user module (with < code > #label< / code > ) used in Multi < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT4 TABLE [891 - 1328] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT3 SECTION "Modules" [795 - 1328] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit5" id = "connection" > Connection< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
2013-10-25 15:19:21 +02:00
Datas concerning the first connection to the portal
2013-03-08 12:04:44 +01:00
< / p >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit6" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
2015-06-08 16:57:58 +02:00
< td class = "col0 leftalign" > ipAddr < / td > < td class = "col1 leftalign" > < abbr title = "Internet Protocol" > IP< / abbr > of the user (can be the X Forwarded For < abbr title = "Internet Protocol" > IP< / abbr > if trusted proxies are configured) < / td >
2013-03-08 12:04:44 +01:00
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > _timezone < / td > < td class = "col1" > Timezone of the user, set with javascript from standard login form (will be empty if other authentication methods are used) < / td >
< / tr >
< tr class = "row3 rowodd" >
2015-06-08 16:57:58 +02:00
< td class = "col0 leftalign" > _url < / td > < td class = "col1 leftalign" > < abbr title = "Uniform Resource Locator" > URL< / abbr > used before being redirected to the portal (empty if portal was used as entry point) < / td >
2013-03-08 12:04:44 +01:00
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT6 TABLE [1406 - 1770] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT5 SECTION "Connection" [1329 - 1771] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit7" id = "authentication" > Authentication< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
2013-10-25 15:19:21 +02:00
Datas around the authentication process.
2013-03-08 12:04:44 +01:00
< / p >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit8" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > _session_id < / td > < td class = "col1 leftalign" > Session identifier (carried in cookie) < / td >
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > _user < / td > < td class = "col1 leftalign" > User found from login process < / td >
< / tr >
< tr class = "row3 rowodd" >
2016-03-22 12:19:17 +01:00
< td class = "col0 leftalign" > _password < / td > < td class = "col1 leftalign" > Password found from login process (only if < a href = "../../documentation/2.0/passwordstore.html" class = "wikilink1" title = "documentation:2.0:passwordstore" > password store in session< / a > is configured) < / td >
2013-03-08 12:04:44 +01:00
< / tr >
< tr class = "row4 roweven" >
< td class = "col0 leftalign" > authenticationLevel < / td > < td class = "col1 leftalign" > Authentication level < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT8 TABLE [1842 - 2139] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT7 SECTION "Authentication" [1772 - 2140] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit9" id = "dates" > Dates< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit10" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > _utime < / td > < td class = "col1 leftalign" > Timestamp of session creation < / td >
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > startTime < / td > < td class = "col1 leftalign" > Date of session creation < / td >
< / tr >
< tr class = "row3 rowodd" >
< td class = "col0 leftalign" > updateTime < / td > < td class = "col1 leftalign" > Date of session last modification < / td >
< / tr >
< tr class = "row4 roweven" >
< td class = "col0" > _lastAuthnUTime < / td > < td class = "col1 leftalign" > Timestamp of last authentication time < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT10 TABLE [2160 - 2387] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT9 SECTION "Dates" [2141 - 2388] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit11" id = "saml" > SAML< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
2015-06-08 16:57:58 +02:00
Datas related to < abbr title = "Security Assertion Markup Language" > SAML< / abbr > protocol
2013-03-08 12:04:44 +01:00
< / p >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit12" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > _idp < / td > < td class = "col1 leftalign" > Name of IDP used for authentication < / td >
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > _idpConfKey < / td > < td class = "col1 leftalign" > Configuration key of IDP used for authentication < / td >
< / tr >
< tr class = "row3 rowodd" >
2015-06-08 16:57:58 +02:00
< td class = "col0 leftalign" > _samlToken < / td > < td class = "col1 leftalign" > < abbr title = "Security Assertion Markup Language" > SAML< / abbr > token < / td >
2013-03-08 12:04:44 +01:00
< / tr >
< tr class = "row4 roweven" >
< td class = "col0 leftalign" > _lassoSessionDump < / td > < td class = "col1 leftalign" > Lasso session dump < / td >
< / tr >
< tr class = "row5 rowodd" >
< td class = "col0 leftalign" > _lassoIdentityDump < / td > < td class = "col1 leftalign" > Lasso identity dump < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT12 TABLE [2439 - 2704] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT11 SECTION "SAML" [2389 - 2705] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit13" id = "notifications" > Notifications< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit14" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > _notification_< em > id< / em > < / td > < td class = "col1 leftalign" > Date of validation of the notification < em > id< / em > < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT14 TABLE [2733 - 2833] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT13 SECTION "Notifications" [2706 - 2834] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit15" id = "login_history" > Login history< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit16" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > loginHistory < / td > < td class = "col1 leftalign" > HASH of login success and failures < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT16 TABLE [2862 - 2943] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT15 SECTION "Login history" [2835 - 2944] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit17" id = "ldap" > LDAP< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
< p >
2015-06-08 16:57:58 +02:00
Only with UserDB LDAP.
2013-03-08 12:04:44 +01:00
< / p >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit18" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > dn < / td > < td class = "col1" > Distinguished name < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT18 TABLE [2987 - 3041] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT17 SECTION "LDAP" [2945 - 3042] -->
2015-06-08 16:57:58 +02:00
< h2 class = "sectionedit19" id = "openid" > OpenID< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit20" > < table class = "inline" >
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > _openid_< em > id< / em > < / td > < td class = "col1 leftalign" > Consent to share attribute < em > id< / em > trough OpenID < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT20 TABLE [3063 - 3159] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-10-05 16:53:35 +02:00
<!-- EDIT19 SECTION "OpenID" [3043 - 3160] -->
2016-02-10 11:17:35 +01:00
< h2 class = "sectionedit21" id = "openid_connect" > OpenID Connect< / h2 >
2013-03-08 12:04:44 +01:00
< div class = "level2" >
2015-06-08 16:57:58 +02:00
< div class = "table sectionedit22" > < table class = "inline" >
2016-02-10 11:17:35 +01:00
< thead >
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
< / thead >
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > OpenIDConnect_IDToken < / td > < td class = "col1 leftalign" > ID Token < / td >
< / tr >
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > OpenIDConnect_OP < / td > < td class = "col1 leftalign" > Configuration key of OP used for authentication < / td >
< / tr >
< tr class = "row3 rowodd" >
< td class = "col0 leftalign" > OpenIDConnect_access_token < / td > < td class = "col1 leftalign" > OAuth2 Access Token used to get UserInfo data < / td >
< / tr >
< tr class = "row4 roweven" >
< td class = "col0" > _oidc_consent_scope_< em > rp< / em > < / td > < td class = "col1 leftalign" > Scope for which consent was given for RP < em > rp< / em > < / td >
< / tr >
< tr class = "row5 rowodd" >
< td class = "col0" > _oidc_consent_time_< em > rp< / em > < / td > < td class = "col1 leftalign" > Time when consent was given for RP < em > rp< / em > < / td >
< / tr >
< / table > < / div >
<!-- EDIT22 TABLE [3189 - 3564] -->
< / div >
<!-- EDIT21 SECTION "OpenID Connect" [3161 - 3565] -->
< h2 class = "sectionedit23" id = "other" > Other< / h2 >
< div class = "level2" >
< div class = "table sectionedit24" > < table class = "inline" >
2015-06-08 16:57:58 +02:00
< thead >
2013-03-08 12:04:44 +01:00
< tr class = "row0 roweven" >
< th class = "col0 centeralign" > Key < / th > < th class = "col1 centeralign" > Description < / th >
< / tr >
2015-06-08 16:57:58 +02:00
< / thead >
2013-03-08 12:04:44 +01:00
< tr class = "row1 rowodd" >
< td class = "col0 leftalign" > appsListOrder < / td > < td class = "col1 leftalign" > Order of categories in the menu < / td >
< / tr >
2016-02-10 11:17:35 +01:00
< tr class = "row2 roweven" >
< td class = "col0 leftalign" > _session_kind < / td > < td class = "col1 leftalign" > Type of session (< abbr title = "Single Sign On" > SSO< / abbr > , Persistent, …) < / td >
< / tr >
2015-06-08 16:57:58 +02:00
< / table > < / div >
2016-02-10 11:17:35 +01:00
<!-- EDIT24 TABLE [3585 - 3725] -->
2013-03-08 12:04:44 +01:00
< / div >
2015-06-08 16:57:58 +02:00
< / div > <!-- closes <div class="dokuwiki export"> -->