From a465a5d768c84d0c85eb732829300719c7d07382 Mon Sep 17 00:00:00 2001
From: dcoutadeur <david.coutadeur@gmail.com>
Date: Thu, 19 Dec 2019 19:10:32 +0100
Subject: [PATCH 01/60] Reset Certificate module for v2.0.7 (#1605)

---
 .../Lemonldap/NG/Common/Conf/DefaultValues.pm |  11 +-
 .../lib/Lemonldap/NG/Manager/Attributes.pm    |  40 +
 .../Lemonldap/NG/Manager/Build/Attributes.pm  |  52 ++
 .../NG/Manager/Build/PortalConstants.pm       |   5 +-
 .../lib/Lemonldap/NG/Manager/Build/Tree.pm    |  31 +-
 .../site/htdocs/static/languages/ar.json      |  15 +-
 .../site/htdocs/static/languages/de.json      |  15 +-
 .../site/htdocs/static/languages/en.json      |  13 +
 .../site/htdocs/static/languages/fr.json      |  13 +
 .../site/htdocs/static/languages/it.json      |  15 +-
 .../site/htdocs/static/languages/vi.json      |  15 +-
 .../site/htdocs/static/languages/zh.json      |  15 +-
 .../site/htdocs/static/reverseTree.json       |   2 +-
 .../site/htdocs/static/struct.json            |   2 +-
 .../NG/Portal/CertificateResetByMail/LDAP.pm  |  72 ++
 .../lib/Lemonldap/NG/Portal/Main/Constants.pm |  13 +-
 .../lib/Lemonldap/NG/Portal/Main/Display.pm   |   2 +
 .../lib/Lemonldap/NG/Portal/Main/Plugins.pm   |   2 +
 .../lib/Lemonldap/NG/Portal/Main/Request.pm   |   3 +-
 .../Portal/Plugins/CertificateResetByMail.pm  | 784 ++++++++++++++++++
 .../site/htdocs/static/languages/ar.json      |  10 +-
 .../site/htdocs/static/languages/de.json      |  10 +-
 .../site/htdocs/static/languages/en.json      |   8 +-
 .../site/htdocs/static/languages/es.json      |  10 +-
 .../site/htdocs/static/languages/fi.json      |  10 +-
 .../site/htdocs/static/languages/fr.json      |   8 +-
 .../site/htdocs/static/languages/it.json      |  10 +-
 .../site/htdocs/static/languages/nl.json      |  10 +-
 .../site/htdocs/static/languages/pt.json      |  10 +-
 .../site/htdocs/static/languages/ro.json      |  10 +-
 .../site/htdocs/static/languages/vi.json      |  10 +-
 .../site/htdocs/static/languages/zh.json      |  10 +-
 .../templates/bootstrap/certificateReset.tpl  | 182 ++++
 .../site/templates/bootstrap/standardform.tpl |   7 +
 .../site/templates/common/mail/ar.json        |   3 +-
 .../site/templates/common/mail/en.json        |   1 +
 .../site/templates/common/mail/fi.json        |   3 +-
 .../site/templates/common/mail/fr.json        |   1 +
 .../site/templates/common/mail/it.json        |   3 +-
 .../site/templates/common/mail/vi.json        |   3 +-
 .../site/templates/common/mail/zh_CN.json     |   3 +-
 .../templates/common/mail_certificatReset.tpl |   9 +
 .../t/44-CertificateResetByMail-LDAP.t        | 218 +++++
 43 files changed, 1629 insertions(+), 40 deletions(-)
 create mode 100644 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
 create mode 100644 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
 create mode 100644 lemonldap-ng-portal/site/templates/bootstrap/certificateReset.tpl
 create mode 100644 lemonldap-ng-portal/site/templates/common/mail_certificatReset.tpl
 create mode 100644 lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
index 3f3a153e4..31752af83 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
@@ -27,6 +27,14 @@ sub defaultValues {
         'captcha_size'                   => 6,
         'casAccessControlPolicy'         => 'none',
         'casAuthnLevel'                  => 1,
+        'certificateResetByMailCeaAttribute' => 'description',
+        'certificateResetByMailCertificateAttribute' =>
+          'userCertificate;binary',
+        'certificateResetByMailReplyTo' => 'noreply@example.com',
+        'certificateResetByMailSender'  => 'noreply@example.com',
+        'certificateResetByMailURL' =>
+          'http://auth.example.com/certificateReset',
+        'certificateResetByMailValidityDelay' => 0,
         'checkTime'                      => 600,
         'checkUserHiddenAttributes'      => '_loginHistory _session_id hGroups',
         'checkUserIdRule'                => 1,
@@ -42,7 +50,7 @@ sub defaultValues {
         'corsAllow_Origin'               => '*',
         'corsEnabled'                    => 1,
         'corsExpose_Headers'             => '*',
-        'corsMax_Age'                    => '86400',
+        'corsMax_Age'                    => 86400,
         'cspConnect'                     => '\'self\'',
         'cspDefault'                     => '\'self\'',
         'cspFont'                        => '\'self\'',
@@ -218,6 +226,7 @@ sub defaultValues {
         'portalAntiFrame'                     => 1,
         'portalCheckLogins'                   => 1,
         'portalDisplayAppslist'               => 1,
+        'portalDisplayCertificateResetByMail' => 0,
         'portalDisplayChangePassword'   => '$_auth =~ /^(LDAP|DBI|Demo)$/',
         'portalDisplayGeneratePassword' => 1,
         'portalDisplayLoginHistory'     => 1,
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
index 909551a90..30c4dde50 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@@ -246,6 +246,42 @@ m[^(?:(?:\-+\s*BEGIN\s+(?:PUBLIC\s+KEY|CERTIFICATE)\s*\-+\r?\n)?[a-zA-Z0-9/\+\r\
             'msgFail' => '__authorizedValues__: -1, 0, 1',
             'test'    => qr/^(?:-1|0|1)$/
         },
+         'certificateResetByMailCeaAttribute' => {
+             'default' => 'description',
+             'type'    => 'text'
+         },
+         'certificateResetByMailCertificateAttribute' => {
+             'default' => 'userCertificate;binary',
+             'type'    => 'text'
+         },
+         'certificateResetByMailReplyTo' => {
+             'default' => 'noreply@example.com',
+             'type'    => 'text'
+         },
+         'certificateResetByMailSender' => {
+             'default' => 'noreply@example.com',
+             'type'    => 'text'
+         },
+         'certificateResetByMailStep1Body' => {
+             'type' => 'longtext'
+         },
+         'certificateResetByMailStep1Subject' => {
+             'type' => 'text'
+         },
+         'certificateResetByMailStep2Body' => {
+             'type' => 'longtext'
+         },
+         'certificateResetByMailStep2Subject' => {
+             'type' => 'text'
+         },
+         'certificateResetByMailURL' => {
+             'default' => 'http://auth.example.com/certificateReset',
+             'type'    => 'url'
+         },
+         'certificateResetByMailValidityDelay' => {
+             'default' => 0,
+             'type'    => 'int'
+         },
         'url' => {
             'form'    => 'text',
             'msgFail' => '__badUrl__',
@@ -2410,6 +2446,10 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
             'default' => 1,
             'type'    => 'boolOrExpr'
         },
+        'portalDisplayCertificateResetByMail' => {
+            'default' => 0,
+            'type'    => 'boolOrExpr'
+        },
         'portalDisplayChangePassword' => {
             'default' => '$_auth =~ /^(LDAP|DBI|Demo)$/',
             'type'    => 'boolOrExpr'
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 762f44c7c..3850e5d8b 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -991,6 +991,11 @@ sub attributes {
             type          => 'boolOrExpr',
             documentation => 'Display logout tab in portal',
         },
+        portalDisplayCertificateResetByMail => {
+            type          => 'boolOrExpr',
+            default       => 0,
+            documentation => 'Display Certificate Reset by mail tab in portal',
+        },
         portalDisplayRegister => {
             default       => 1,
             type          => 'bool',
@@ -1453,6 +1458,53 @@ sub attributes {
             default       => 'http://auth.example.com/resetpwd',
             documentation => 'URL of password reset page',
         },
+                   # Certificate reset by mail
+         certificateResetByMailCeaAttribute => {
+             type          => 'text',
+             default       => 'description'
+         },
+         certificateResetByMailCertificateAttribute => {
+             type          => 'text',
+             default       => 'userCertificate;binary',
+ 
+         },
+         certificateResetByMailStep1Body => {
+             type          => 'longtext',
+             documentation => 'Custom Certificate reset mail body',
+         },
+ 
+         certificateResetByMailStep2Body => {
+             type          => 'longtext',
+             documentation => 'Custom confirm Certificate reset mail body',
+         },
+         certificateResetByMailStep2Subject => {
+             type          => 'text',
+             documentation => 'Mail subject for reset confirmation',
+         },
+         certificateResetByMailStep1Subject => {
+             type          => 'text',
+             documentation => 'Mail subject for certificate reset email',
+         },
+ 
+         certificateResetByMailURL => {
+             type          => 'url',
+             default       => 'http://auth.example.com/certificateReset',
+             documentation => 'URL of certificate reset page',
+         },
+         certificateResetByMailSender => {
+             type          => 'text',
+             default       => 'noreply@example.com',
+             documentation => 'URL of certificate reset page',
+         },
+         certificateResetByMailReplyTo => {
+             type          => 'text',
+             default       => 'noreply@example.com',
+             documentation => 'URL of certificate reset page',
+         },
+         certificateResetByMailValidityDelay => {
+             type          => 'int',
+             default       => 0
+         },
 
         # Registration
         registerConfirmSubject => {
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
index dcaf26d10..ce0b9a720 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
@@ -103,7 +103,10 @@ sub portalConstants {
         PE_IMPERSONATION_SERVICE_NOT_ALLOWED => 93,
         PE_ISSUERMISSINGREQATTR              => 94,
         PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED  => 95,
-        PE_BADOTP                            => 96
+        PE_BADOTP                            => 96,
+        PE_RESETCERTIFICATE_INVALIDE         => 97,
+        PE_RESETCERTIFICATE_FOREMPTY         => 98,
+        PE_RESETCERTIFICATE_FIRSTACCESS      => 99
     };
 }
 
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index 109860912..dd27957f9 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -65,7 +65,8 @@ sub tree {
                                         'portalCheckLogins',
                                         'portalDisplayResetPassword',
                                         'passwordResetAllowedRetries',
-                                        'portalDisplayRegister'
+                                        'portalDisplayRegister',
+                                        'portalDisplayCertificateResetByMail'
                                     ]
                                 },
                                 {
@@ -655,6 +656,34 @@ sub tree {
                                     ]
                                 }
                             ]
+                         },
+                          {
+                            title => 'certificateResetByMailManagement',
+                             form  => 'simpleInputContainer',
+                             nodes => [ {
+                                     title => 'certifcateMailContent',
+                                     form  => 'simpleInputContainer',
+                                     nodes => [ 
+                                         'certificateResetByMailSender',
+                                         'certificateResetByMailReplyTo',
+                                         'certificateResetByMailStep1Subject',
+                                         'certificateResetByMailStep1Body',
+                                         'certificateResetByMailStep2Subject',
+                                         'certificateResetByMailStep2Body'
+                                      ]
+                                  },
+  
+                                  {
+                                      title => 'mailOther',
+                                      form  => 'simpleInputContainer',
+                                      nodes => [
+                                          'certificateResetByMailURL',
+                                          'certificateResetByMailCeaAttribute',
+                                          'certificateResetByMailCertificateAttribute',
+                                          'certificateResetByMailValidityDelay'
+                                    ]
+                                 } 
+                             ]
                         },
                         {
                             title => 'register',
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
index 133a2a2e3..e9e2296de 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@@ -142,6 +142,19 @@
 "casStorageOptions":" خيارات وحدة جلسات كاس",
 "categoryName":"اسم الفئة",
 "cda":"نطاقات متعددة",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"السياسة الأمنية للمحتوى",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"تناوب حالة مهلة الجلسة ",
 "samlUseQueryStringSpecific":"استخدام أسلوب query_string المعين",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/de.json b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
index 12cf43f02..d2fc76271 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"CAS sessions module options",
 "categoryName":"Category name",
 "cda":"Mehrere Domains",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index 08b9630e9..a5dc84e86 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"CAS sessions module options",
 "categoryName":"Category name",
 "cda":"Multiple domains",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
index 9524249cf..7b0561d9f 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"Options du module des sessions CAS",
 "categoryName":"Nom de la catégorie",
 "cda":"Domaines multiples",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Politique de sécurité de contenu",
 "contextSwitching":"Endossement d'identité",
 "contextSwitchingHiddenAttributes":"Attributs masqués",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/it.json b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
index e3c585afe..8c9e09a8a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"Opzioni del modulo sessioni CAS",
 "categoryName":"Nome della categoria",
 "cda":"Domini multipli",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Politica di protezione dei contenuti",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Attributi nascosti",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"Timeout di sessione di RelayState",
 "samlUseQueryStringSpecific":"Utilizza il metodo specifico query_string",
 "samlOverrideIDPEntityID":"Sostituisci l'ID entità quando agisce come IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
index a0d672f19..01e5629ab 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"Các tùy chọn mô-đun phiên CAS",
 "categoryName":"Tên thể loại",
 "cda":"Nhiều tên miền",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Chính sách bảo mật nội dung",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"Thời gian hết hạn phiên RelayState ",
 "samlUseQueryStringSpecific":"Sử dụng phương pháp query_string cụ thể",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
index b6bb91edf..1dfcbebed 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"CAS 会话模块选项",
 "categoryName":"分类名称",
 "cda":"Multiple domains",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
index 389a8d6d3..eed0a27fb 100644
--- a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
+++ b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
@@ -1 +1 @@
-{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
+{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","certificateResetByMailCeaAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailCertificateAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailReplyTo":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailSender":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep1Body":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep1Subject":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep2Body":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep2Subject":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailURL":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailValidityDelay":"generalParameters/plugins/certificateResetByMailManagement/mailOther","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index 6c3127c85..f9711b0c6 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"'self'","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certifcateMailContent","title":"certifcateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"'self'","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
new file mode 100644
index 000000000..27c3afede
--- /dev/null
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
@@ -0,0 +1,72 @@
+package Lemonldap::NG::Portal::CertificateResetByMail::LDAP;
+
+use strict;
+use Mouse;
+use Lemonldap::NG::Portal::Main::Constants qw(
+  PE_LDAPCONNECTFAILED
+  PE_LDAPERROR
+  PE_OK
+  PE_ERROR
+);
+
+extends 'Lemonldap::NG::Portal::Lib::LDAP';
+
+our $VERSION = '2.1.0';
+
+# RUNNING METHODS
+
+# PRIVATE METHODS
+sub modifCertificate {
+
+    my $self         = shift;
+    my $newcertif    = shift;
+    my $usercertif   = shift;
+    my $req          = shift;
+    my $ceaAttribute = $self->conf->{certificateResetByMailCeaAttribute}
+      || "description";
+    my $certificateAttribute =
+      $self->conf->{certificateResetByMailCertificateAttribute}
+      || "userCertificate;binary";
+
+    # Set the dn unless done before
+    #
+    #
+    my $dn;
+    if ( $req->userData->{_dn} ) {
+        $dn = $req->userData->{_dn};
+        $self->logger->debug("Get DN from request data: $dn");
+    }
+    else {
+        $dn = $req->sessionInfo->{_dn};
+        $self->logger->debug("Get DN from session data: $dn");
+    }
+    unless ($dn) {
+        $self->logger->error('"dn" is not set, aborting password modification');
+        return PE_ERROR;
+    }
+
+    #my $dn = "uid=" . $req->{user}. "," . $self->conf->{ldapBase};
+
+    my $result = $self->ldap->modify(
+        $dn,
+        replace => [
+            $ceaAttribute           => $newcertif,
+            "$certificateAttribute" => [$usercertif]
+        ]
+    );
+
+    unless ( $result->code == 0 ) {
+        $self->logger->debug( "LDAP modify Error: " . $result->code );
+        $self->ldap->unbind;
+        $self->{flags}->{ldapActive} = 0;
+        $self->ldap->unbind;
+        return PE_LDAPERROR;
+    }
+
+    $self->logger->debug("$ceaAttribute set to $newcertif");
+
+    return PE_OK;
+
+}
+
+1;
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
index 1d9b4e688..57ed6b3ee 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
@@ -100,6 +100,9 @@ use constant {
     PE_ISSUERMISSINGREQATTR              => 94,
     PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED  => 95,
     PE_BADOTP                            => 96,
+    PE_RESETCERTIFICATE_INVALIDE         => 97,
+    PE_RESETCERTIFICATE_FOREMPTY         => 98,
+    PE_RESETCERTIFICATE_FIRSTACCESS      => 99
 };
 
 sub portalConsts {
@@ -195,7 +198,10 @@ sub portalConsts {
         '93' => 'PE_IMPERSONATION_SERVICE_NOT_ALLOWED',
         '94' => 'PE_ISSUERMISSINGREQATTR',
         '95' => 'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
-        '96' => 'PE_BADOTP'
+        '96' => 'PE_BADOTP',
+        '97' => 'PE_RESETCERTIFICATE_INVALIDE', 
+        '98' => 'PE_RESETCERTIFICATE_FOREMPTY', 
+        '99' => 'PE_RESETCERTIFICATE_FIRSTACCESS'
     };
 
 }
@@ -295,7 +301,10 @@ our @EXPORT_OK = (
     'PE_IMPERSONATION_SERVICE_NOT_ALLOWED',
     'PE_ISSUERMISSINGREQATTR',
     'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
-    'PE_BADOTP'
+    'PE_BADOTP',
+    'PE_RESETCERTIFICATE_INVALIDE',
+    'PE_RESETCERTIFICATE_FOREMPTY',
+    'PE_RESETCERTIFICATE_FIRSTACCESS'
 );
 our %EXPORT_TAGS = ( 'all' => [ @EXPORT_OK, 'import' ], );
 
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Display.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Display.pm
index 61d7b7740..f50acfbdb 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Display.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Display.pm
@@ -306,6 +306,8 @@ sub display {
             ASK_LOGINS            => $req->param('checkLogins') || 0,
             DISPLAY_RESETPASSWORD => $self->conf->{portalDisplayResetPassword},
             DISPLAY_REGISTER      => $self->conf->{portalDisplayRegister},
+            DISPLAY_UPDATECERTIF  => $self->conf->{portalDisplayCertificateResetByMail},
+            MAILCERTIF_URL        => $self->conf->{certificateResetByMailURL},
             MAIL_URL              => $self->conf->{mailUrl},
             REGISTER_URL          => $self->conf->{registerUrl},
             HIDDEN_INPUTS         => $self->buildHiddenForm($req),
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Plugins.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Plugins.pm
index 15d4c6f96..901275e1d 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Plugins.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Plugins.pm
@@ -77,6 +77,8 @@ sub enabledPlugins {
     # Check if register is enabled
     push @res, '::Plugins::Register'
       if ( $conf->{registerDB} and $conf->{registerDB} ne 'Null' );
+    push @res, '::Plugins::CertificateResetByMail'
+      if ( $conf->{portalDisplayCertificateResetByMail});
 
     # Check if custom plugins are required
     # TODO: change this name
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
index fb47386aa..d2022db7e 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
@@ -92,6 +92,7 @@ sub error_type {
                 PE_MAILOK,          PE_LOGOUT_OK,
                 PE_MAILFIRSTACCESS, PE_PASSWORDFIRSTACCESS,
                 PE_MAILCONFIRMOK,   PE_REGISTERFIRSTACCESS,
+                PE_RESETCERTIFICATE_FIRSTACCESS,
             )
         )
       );
@@ -108,7 +109,7 @@ sub error_type {
                 PE_CONFIRM,                       PE_MAILFORMEMPTY,
                 PE_MAILCONFIRMATION_ALREADY_SENT, PE_PASSWORDFORMEMPTY,
                 PE_CAPTCHAEMPTY,                  PE_REGISTERFORMEMPTY,
-                PE_PP_CHANGE_AFTER_RESET
+                PE_PP_CHANGE_AFTER_RESET,         PE_RESETCERTIFICATE_FOREMPTY,
             )
         )
       );
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
new file mode 100644
index 000000000..b8ef82be2
--- /dev/null
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
@@ -0,0 +1,784 @@
+package Lemonldap::NG::Portal::Plugins::CertificateResetByMail;
+
+use strict;
+use Encode;
+use Mouse;
+use Net::SSLeay;
+use DateTime::Format::RFC3339;
+use Digest::SHA qw(sha256_hex);
+use MIME::Base64;
+use POSIX qw(strftime);
+use Lemonldap::NG::Common::FormEncode;
+use Lemonldap::NG::Portal::Main::Constants qw(
+  PE_BADCREDENTIALS
+  PE_BADMAILTOKEN
+  PE_CAPTCHAEMPTY
+  PE_CAPTCHAERROR
+  PE_MAILCONFIRMATION_ALREADY_SENT
+  PE_MAILCONFIRMOK
+  PE_MAILERROR
+  PE_MAILFIRSTACCESS
+  PE_MAILFORMEMPTY
+  PE_MAILNOTFOUND
+  PE_MAILOK
+  PE_MALFORMEDUSER
+  PE_NOTOKEN
+  PE_OK
+  PE_PASSWORDFIRSTACCESS
+  PE_PASSWORDFORMEMPTY
+  PE_PASSWORD_OK
+  PE_TOKENEXPIRED
+  PE_USERNOTFOUND
+  PE_RESETCERTIFICATE_INVALID
+  PE_RESETCERTIFICATE_FORMEMPTY
+  PE_RESETCERTIFICATE_FIRSTACCESS
+);
+
+our $VERSION = '2.1.0';
+
+extends 'Lemonldap::NG::Portal::Main::Plugin',
+  'Lemonldap::NG::Portal::Lib::SMTP', 'Lemonldap::NG::Portal::Lib::_tokenRule';
+
+# PROPERTIES
+
+# Mail timeout token generator
+# Form timout token generator (used even if requireToken is not set)
+has ott => (
+    is      => 'rw',
+    lazy    => 1,
+    default => sub {
+        my $ott =
+          $_[0]->{p}->loadModule('Lemonldap::NG::Portal::Lib::OneTimeToken');
+        $ott->timeout( $_[0]->conf->{formTimeout} );
+        return $ott;
+    }
+);
+
+# Sub module (Demo, LDAP,...)
+has registerModule => ( is => 'rw' );
+
+# Captcha generator
+has captcha => ( is => 'rw' );
+
+# certificate reset url
+has certificateResetUrl => (
+    is      => 'rw',
+    lazy    => 1,
+    default => sub {
+        my $p = $_[0]->conf->{portal};
+        $p =~ s#/*$##;
+        return "$p/certificateReset";
+    }
+);
+
+# Mail timeout token generator
+has mailott => (
+    is      => 'rw',
+    lazy    => 1,
+    default => sub {
+        my $ott =
+          $_[0]->{p}->loadModule('Lemonldap::NG::Portal::Lib::OneTimeToken');
+        $ott->cache(0);
+        $ott->timeout( $_[0]->conf->{registerTimeout}
+              || $_[0]->conf->{timeout} );
+        return $ott;
+    }
+);
+
+# INITIALIZATION
+
+sub init {
+    my ($self) = @_;
+
+    # Declare REST route
+    $self->addUnauthRoute(
+        certificateReset => 'certificateReset',
+        [ 'POST', 'GET' ]
+    );
+
+    # Initialize Captcha if needed
+    if ( $self->conf->{captcha_mail_enabled} ) {
+        $self->captcha( $self->p->loadModule('::Lib::Captcha') ) or return 0;
+    }
+
+    # Load registered module
+    $self->registerModule(
+        $self->p->loadPlugin(
+            '::CertificateResetByMail::' . $self->conf->{registerDB}
+        )
+    ) or return 0;
+    return 1;
+}
+
+# RUNNIG METHODS
+
+# Handle reset requests
+sub certificateReset {
+    my ( $self, $req ) = @_;
+
+    $self->p->controlUrl($req);
+
+    # Check parameters
+    $req->error( $self->_certificateReset($req) );
+
+    # Display form
+    my ( $tpl, $prms ) = $self->display($req);
+    return $self->p->sendHtml( $req, $tpl, params => $prms );
+}
+
+sub _certificateReset {
+    my ( $self, $req ) = @_;
+    my ( $mailToken, %tplPrms );
+
+    # CertificatReset FORM => modifyCertificate()
+    if ( $req->method =~ /^POST$/i
+        and ( $req->uploads->{certif} ) )
+    {
+        my $upload = $req->uploads->{certif};
+
+        return $self->modifyCertificate($req);
+    }
+
+    # FIRST FORM
+    $mailToken = $req->data->{mailToken} = $req->param('mail_token');
+    unless ( $req->param('mail') || $mailToken ) {
+        $self->setSecurity($req);
+        return PE_MAILFIRSTACCESS if ( $req->method eq 'GET' );
+        return PE_MAILFORMEMPTY;
+    }
+
+    my $searchByMail = 1;
+
+    # OTHER FORMS
+    if ($mailToken) {
+        $self->logger->debug("Token given for certificate reset: $mailToken");
+
+        # Check if token is valid
+        my $mailSession =
+          $self->p->getApacheSession( $mailToken, kind => "TOKEN" );
+        unless ($mailSession) {
+            $self->userLogger->warn('Bad reset token');
+            return PE_BADMAILTOKEN;
+        }
+
+        $req->{user} = $mailSession->data->{user};
+        $req->data->{mailAddress} =
+          $mailSession->data->{ $self->conf->{mailSessionKey} };
+        $self->logger->debug( 'User associated to: ' . $req->{user} );
+
+        # Restore pdata if any
+        $req->pdata( $mailSession->data->{_pdata} || {} );
+        $mailSession->remove;
+        $searchByMail = 0 unless ( $req->{user} =~ /\@/ );
+    }
+
+    # Check for posted values
+    else {
+
+        # Use submitted value
+        $req->{user} = $req->param('mail');
+
+        # Check if token exists
+        my $token;
+        if ( $self->ottRule->( $req, {} ) or $self->captcha ) {
+            $token = $req->param('token');
+            unless ($token) {
+                $self->setSecurity($req);
+                $self->userLogger->warn('Reset try without token');
+                return PE_NOTOKEN;
+            }
+        }
+
+        # Captcha for register form
+        if ( $self->captcha ) {
+            my $captcha = $req->param('captcha');
+
+            unless ($captcha) {
+                $self->userLogger->notice('Reset try with captcha not filled');
+
+                # Set captcha or token
+                $self->setSecurity($req);
+                return PE_CAPTCHAEMPTY;
+            }
+
+            # Check captcha
+            unless ( $self->captcha->validateCaptcha( $token, $captcha ) ) {
+                $self->userLogger->info('Captcha failed: wrong code');
+
+                # Set captcha or token
+                $self->setSecurity($req);
+                return PE_CAPTCHAERROR;
+            }
+            $self->logger->debug('Captcha code verified');
+        }
+        elsif ( $self->ottRule->( $req, {} ) ) {
+            unless ( $self->ott->getToken($token) ) {
+                $self->setSecurity($req);
+                $self->userLogger->warn('Reset try with expired/bad token');
+                return PE_TOKENEXPIRED;
+            }
+        }
+        unless ( $req->{user} =~ /$self->{conf}->{userControl}/o ) {
+            $self->setSecurity($req);
+            return PE_MALFORMEDUSER;
+        }
+    }
+
+    # Search user in database
+    $req->steps( [
+            'getUser',                  'setSessionInfo',
+            'setMacros',                'setGroups',
+            'setPersistentSessionInfo', 'setLocalGroups'
+        ]
+    );
+    if ( my $error = $self->p->process( $req, useMail => $searchByMail ) ) {
+        if ( $error == PE_USERNOTFOUND or $error == PE_BADCREDENTIALS ) {
+            $self->userLogger->warn( 'Reset asked for an unvalid user ('
+                  . $req->param('mail')
+                  . ')' );
+
+            # To avoid mail enumeration, return OK
+            # unless portalErrorOnMailNotFound is set
+
+            if ( $self->conf->{portalErrorOnMailNotFound} ) {
+                $self->setSecurity($req);
+                return PE_MAILNOTFOUND;
+            }
+
+            my $mailTimeout =
+              $self->conf->{mailTimeout} || $self->conf->{timeout};
+            my $expTimestamp = time() + $mailTimeout;
+            $req->data->{expMailDate} =
+              strftime( '%d/%m/%Y', localtime $expTimestamp );
+            $req->data->{expMailTime} =
+              strftime( '%H:%M', localtime $expTimestamp );
+            return PE_MAILCONFIRMOK;
+        }
+        return $error;
+    }
+
+    # Build temporary session
+    my $mailSession = $self->getCertificateSession( $req->{user} );
+    unless ( $mailSession or $mailToken ) {
+
+        # Create a new session
+
+        my $infos = {};
+
+        # Set _utime for session autoremove
+        # Use default session timeout and mail session timeout to compute it
+        my $time        = time();
+        my $timeout     = $self->conf->{timeout};
+        my $mailTimeout = $self->conf->{mailTimeout} || $timeout;
+
+        $infos->{_utime} = $time + ( $mailTimeout - $timeout );
+
+        # Store expiration timestamp for further use
+        $infos->{mailSessionTimeoutTimestamp} = $time + $mailTimeout;
+
+        # Store start timestamp for further use
+        $infos->{mailSessionStartTimestamp} = $time;
+
+        # Store mail
+        $infos->{ $self->conf->{mailSessionKey} } =
+          $self->p->getFirstValue(
+            $req->{sessionInfo}->{ $self->conf->{mailSessionKey} } );
+
+        # Store user
+        $infos->{user} = $req->{user};
+
+        # Store type
+        $infos->{_type} = 'certificate';
+
+        # Store pdata
+        $infos->{_pdata} = $req->pdata;
+
+        # create session
+        $mailSession =
+          $self->p->getApacheSession( undef, kind => "TOKEN", info => $infos );
+
+        $req->id( $mailSession->id );
+    }
+    elsif ($mailSession) {
+        $self->logger->debug( 'Mail session found: ' . $mailSession->id );
+        $req->id( $mailSession->id );
+        $req->data->{mailAlreadySent} = 1;
+    }
+
+    # Send confirmation mail
+    unless ($mailToken) {
+
+        # Mail session expiration date
+        my $expTimestamp = $mailSession->data->{mailSessionTimeoutTimestamp};
+
+        $self->logger->debug("Mail expiration timestamp: $expTimestamp");
+
+        $req->data->{expMailDate} =
+          strftime( '%d/%m/%Y', localtime $expTimestamp );
+        $req->data->{expMailTime} =
+          strftime( '%H:%M', localtime $expTimestamp );
+
+        # Mail session start date
+        my $startTimestamp = $mailSession->data->{mailSessionStartTimestamp};
+
+        $self->logger->debug("Mail start timestamp: $startTimestamp");
+        $req->data->{startMailDate} =
+          strftime( '%d/%m/%Y', localtime $startTimestamp );
+        $req->data->{startMailTime} =
+          strftime( '%H:%M', localtime $startTimestamp );
+
+        # Ask if user wants an another confirmation email
+        if ( $req->data->{mailAlreadySent}
+            and not $req->param('resendconfirmation') )
+        {
+            $self->userLogger->notice(
+                'Reset mail already sent to ' . $req->{user} );
+
+            # Return mail already sent only if it is allowed at previous step
+            if ( $self->conf->{portalErrorOnMailNotFound} ) {
+                $self->setSecurity($req);
+                return PE_MAILCONFIRMATION_ALREADY_SENT;
+            }
+        }
+
+        # Get mail address
+        $req->data->{mailAddress} ||=
+          $self->p->getFirstValue(
+            $req->{sessionInfo}->{ $self->conf->{mailSessionKey} } );
+        return PE_MAILERROR unless ( $req->data->{mailAddress} );
+
+        # Build confirmation url
+        my $req_url = $req->data->{_url};
+        my $skin    = $self->p->getSkin($req);
+        my $url =
+          $self->certificateResetUrl . '?'
+          . build_urlencoded(
+            mail_token => $req->{id},
+            skin       => $skin,
+            ( $req_url ? ( url => $req_url ) : () ),
+          );
+
+        # Build mail content
+        $tplPrms{MAIN_LOGO} = $self->conf->{portalMainLogo};
+        my $tr      = $self->translate($req);
+        my $subject = $self->conf->{certificateResetByMailStep1Subject};
+        unless ($subject) {
+            $subject = 'certificateResetByMailStep1Subject';
+            $tr->( \$subject );
+        }
+        my $body;
+        my $html;
+        if ( $self->conf->{certificateResetByMailStep1Body} ) {
+
+            # We use a specific text message, no html
+            $body = $self->conf->{certificateResetByMailStep1Body};
+        }
+        else {
+
+            # Use HTML template
+            $body = $self->loadTemplate(
+                'mail_confirm',
+                filter => $tr,
+                params => \%tplPrms
+            );
+            $html = 1;
+        }
+
+        # Replace variables in body
+        $body =~ s/\$expMailDate/$req->data->{expMailDate}/ge;
+        $body =~ s/\$expMailTime/$req->data->{expMailTime}/ge;
+        $body =~ s/\$url/$url/g;
+        $body =~ s/\$(\w+)/$req->{sessionInfo}->{$1} || ''/ge;
+
+        # Send mail
+        unless (
+            $self->sendmail(
+                $req->data->{mailAddress}, $subject, $body, $html
+            )
+          )
+        {
+            $self->logger->debug('Unable to send reset mail');
+
+            # Don't return an error here to avoid enumeration
+        }
+        return PE_MAILCONFIRMOK;
+    }
+
+    # User has a valid mailToken, allow to reset certificate
+    # A token is required
+    $self->ott->setToken(
+        $req,
+        {
+            %{ $req->sessionInfo }, certificateResetAllowed => 1
+        }
+    );
+    return PE_RESETCERTIFICATE_FIRSTACCESS if ( $req->method eq 'GET' );
+    return PE_RESETCERTIFICATE_FORMEMPTY;
+}
+
+sub modifyCertificate {
+    my ( $self, $req ) = @_;
+    my %tplPrms;
+    my $nbio;
+    my $x509;
+    my $notAfter;
+
+    $self->logger->debug('Change your Certificate form response');
+
+    if ( my $token = $req->param('token') ) {
+        $req->sessionInfo( $self->ott->getToken($token) );
+        unless ( $req->sessionInfo ) {
+            $self->userLogger->warn(
+'User tries to change certificate with an invalid or expired token'
+            );
+            return PE_NOTOKEN;
+        }
+    }
+
+    # These 2 cases means that a user tries to reset certificate without
+    # following valid links!!!
+    else {
+        $self->userLogger->error(
+            'User tries to reset certificate without token');
+        return PE_NOTOKEN;
+    }
+
+    unless ( $req->sessionInfo->{certificateResetAllowed} ) {
+        $self->userLogger->error(
+            'User tries to use another token to reset certificate');
+        return PE_NOTOKEN;
+    }
+
+    #Updload certificate
+    my $upload = $req->uploads->{certif};
+    unless ( $upload->size > 0 ) { return PE_RESETCERTIFICATE_FORMEMPTY; }
+
+    # Get Certificate
+
+    my $file = $upload->path;
+    $self->userLogger->debug( "Temporaly file " . $file );
+
+    # Convert certificate file uploaded on DER format with openssl library
+
+    #my $certifbase64 =`openssl x509 -outform der -in $file -out $file`;
+
+    # load certificate from file with openssl library
+    $nbio = Net::SSLeay::BIO_new_file( $file, 'r' ) or die $!;
+
+    # for PEM certificate
+    $x509 = Net::SSLeay::PEM_read_bio_X509($nbio);
+
+    Net::SSLeay::BIO_free($nbio);
+    unless ($x509) {
+        $self->userLogger->debug( "Unable to decode certificate for user  "
+              . Net::SSLeay::ERR_error_string( Net::SSLeay::ERR_get_error() ) );
+
+        #return PE_CERTIFICATE_INVALID;
+        return PE_RESETCERTIFICATE_INVALID;
+    }
+    $self->userLogger->debug("Certificate decoded successfully");
+    $notAfter = Net::SSLeay::P_ASN1_TIME_get_isotime(
+        Net::SSLeay::X509_get_notAfter($x509) );
+
+    my $x509issuer = Net::SSLeay::X509_NAME_oneline(
+        Net::SSLeay::X509_get_issuer_name($x509) );
+
+    my $x509serial = Net::SSLeay::P_ASN1_INTEGER_get_hex(
+        Net::SSLeay::X509_get_serialNumber($x509) );
+
+    $self->userLogger->debug(
+"Certificate will expire after $notAfter, Issuer  $x509issuer and serialNumber $x509serial"
+    );
+
+    # Check Certificate Validity before store
+    if (
+        $self->checkCertificateValidity( $notAfter,
+            $self->conf->{certificateResetByMailValidityDelay} ) == 0
+      )
+    {
+        $self->userLogger->debug(
+"Your cettificate is no longer valid in $self->conf->{certificateValidityDelay}"
+        );
+        return PE_RESETCERTIFICATE_INVALID;
+
+        #return PE_PASSWORD_MISMATCH;
+    }
+
+    # Build serial number hex: example f3:08:52:63:28:29:fa:e2
+
+    my @numberstring = split //, lc($x509serial);
+    my $serial       = "";
+    for ( my $i = 0 ; $i <= $#numberstring ; $i += 2 ) {
+        $serial = $serial . $numberstring[$i] . $numberstring[ $i + 1 ];
+        if ( $i + 2 < $#numberstring ) { $serial = $serial . ":"; }
+    }
+
+# format issuer in the good format example "CN=CA,OU=CISIRH,O=MINEFI,L=Paris,ST=France,C=FR"
+
+    my @issuertab = split /\//, $x509issuer;
+    shift(@issuertab);
+    my $issuer = join( ",", reverse(@issuertab) );
+
+    #$issuer = lc($issuer);
+
+    my $certificatExactAssertion =
+      '{ serialNumber ' . $serial . ', issuer rdnSequence:"' . $issuer . '" }';
+    $self->userLogger->debug( "Description::  " . $certificatExactAssertion );
+
+    # Get attribut userCertificate;binary  value
+    my $cert = $self->certificateHash($file);
+
+    # modif the ldap certificate attribute
+    $req->user( $req->{sessionInfo}->{_user} );
+    my $result =
+      $self->registerModule->modifCertificate( $certificatExactAssertion,
+        $cert, $req );
+    $self->{user} = undef;
+
+    # Mail token can be used only one time, delete the session if all is ok
+    #
+    return $result unless ( $result == PE_OK );
+
+    # Send mail to notify the certificate reset sucessfully
+    $req->data->{mailAddress} ||=
+      $self->p->getFirstValue(
+        $req->{sessionInfo}->{ $self->conf->{mailSessionKey} } );
+
+    # Build mail content
+    $tplPrms{MAIN_LOGO} = $self->conf->{portalMainLogo};
+    my $tr      = $self->translate($req);
+    my $subject = $self->conf->{certificateResetByMailStep2Subject};
+    unless ($subject) {
+        $subject = 'certificateResetByMailStep2Subject';
+        $tr->( \$subject );
+    }
+    my $body;
+    my $html;
+    if ( $self->conf->{certificateResetByMailStep2Body} ) {
+
+        # We use a specific text message, no html
+        $body = $self->conf->{certificateResetByMailStep2Body};
+    }
+    else {
+
+        # Use HTML template
+        $body = $self->loadTemplate(
+            'mail_certificatReset',
+            filter => $tr,
+            params => \%tplPrms
+        );
+        $html = 1;
+    }
+
+    # Replace variables in body
+    $body =~ s/\$(\w+)/$req->{sessionInfo}->{$1} || ''/ge;
+
+    # Send mail
+    return PE_MAILERROR
+      unless $self->sendmail( $req->data->{mailAddress}, $subject, $body,
+        $html );
+
+    return PE_MAILOK;
+}
+
+sub setSecurity {
+    my ( $self, $req ) = @_;
+    if ( $self->captcha ) {
+        $self->captcha->setCaptcha($req);
+    }
+    elsif ( $self->ottRule->( $req, {} ) ) {
+        $self->ott->setToken($req);
+    }
+    return 1;
+}
+
+sub display {
+    my ( $self, $req ) = @_;
+    $self->logger->debug( 'Display called with code: ' . $req->error );
+    my %tplPrm = (
+        SKIN_PATH       => $self->conf->{staticPrefix},
+        SKIN            => $self->p->getSkin($req),
+        SKIN_BG         => $self->conf->{portalSkinBackground},
+        MAIN_LOGO       => $self->conf->{portalMainLogo},
+        AUTH_ERROR      => $req->error,
+        AUTH_ERROR_TYPE => $req->error_type,
+        AUTH_URL        => $req->data->{_url},
+        CHOICE_VALUE    => $req->{_authChoice},
+        EXPMAILDATE     => $req->data->{expMailDate},
+        EXPMAILTIME     => $req->data->{expMailTime},
+        STARTMAILDATE   => $req->data->{startMailDate},
+        STARTMAILTIME   => $req->data->{startMailTime},
+        MAILALREADYSENT => $req->data->{mailAlreadySent},
+        MAIL            => (
+            $self->p->checkXSSAttack( 'mail', $req->{user} )
+            ? ''
+            : $req->{user}
+        ),
+        DISPLAY_FORM            => 0,
+        DISPLAY_RESEND_FORM     => 0,
+        DISPLAY_CONFIRMMAILSENT => 0,
+        DISPLAY_MAILSENT        => 0,
+        DISPLAY_CERTIF_FORM     => 0,
+    );
+    if ( $req->data->{mailToken}
+        and
+        not $self->p->checkXSSAttack( 'mail_token', $req->data->{mailToken} ) )
+    {
+        $tplPrm{MAIL_TOKEN} = $req->data->{mailToken};
+    }
+
+    # Display captcha if it's enabled
+    if ( $req->captcha ) {
+        $tplPrm{CAPTCHA_SRC}  = $req->captcha;
+        $tplPrm{CAPTCHA_SIZE} = $self->conf->{captcha_size};
+    }
+    if ( $req->token ) {
+        $tplPrm{TOKEN} = $req->token;
+    }
+
+    # Display form the first time
+    if ( (
+               $req->error == PE_MAILFORMEMPTY
+            or $req->error == PE_MAILFIRSTACCESS
+            or $req->error == PE_MAILNOTFOUND
+            or $req->error == PE_CAPTCHAERROR
+            or $req->error == PE_CAPTCHAEMPTY
+        )
+        and not $req->data->{mailToken}
+      )
+    {
+        $self->logger->debug('Display form');
+        $tplPrm{DISPLAY_FORM} = 1;
+    }
+
+    # Display mail confirmation resent form
+    elsif ( $req->error == PE_MAILCONFIRMATION_ALREADY_SENT ) {
+        $self->logger->debug('Display resend form');
+        $tplPrm{DISPLAY_RESEND_FORM} = 1;
+    }
+
+    # Display confirmation mail sent
+    elsif ( $req->error == PE_MAILCONFIRMOK ) {
+        $self->logger->debug('Display "confirm mail sent"');
+        $tplPrm{DISPLAY_CONFIRMMAILSENT} = 1;
+    }
+
+    # Display mail sent
+    elsif ( $req->error == PE_MAILOK ) {
+        $self->logger->debug('Display "mail sent"');
+        $tplPrm{DISPLAY_MAILSENT} = 1;
+    }
+
+    # Display Certificate Reset form
+    elsif ( $req->data->{mailToken}
+        and $req->error != PE_MAILERROR
+        and $req->error != PE_BADMAILTOKEN
+        and $req->error != PE_MAILOK )
+    {
+        $self->logger->debug('Display certificate reset form');
+        $tplPrm{DISPLAY_CERTIF_FORM} = 1;
+    }
+
+    # Display Certificate Reset form again if certificate invalid
+    elsif ($req->error == PE_RESETCERTIFICATE_FORMEMPTY
+        || $req->error == PE_RESETCERTIFICATE_INVALID )
+    {
+        $self->logger->debug('Display Certificate Reset form');
+        $tplPrm{DISPLAY_CERTIF_FORM} = 1;
+    }
+
+    return 'certificateReset', \%tplPrm;
+}
+
+#tring getCertifResetSession (string mail)
+# Check if a certificate reset session exists
+# @param mail the value of the mail key in session
+# @return the first session id found or nothing if no session
+sub getCertificateSession {
+    my ( $self, $user ) = @_;
+
+    my $moduleOptions = $self->conf->{globalStorageOptions} || {};
+    $moduleOptions->{backend} = $self->conf->{globalStorage};
+    my $module = "Lemonldap::NG::Common::Apache::Session";
+
+    # Search on modifyaccount sessions
+    my $sessions = $module->searchOn( $moduleOptions, "user", $user );
+
+    # Browse found sessions to check if it's a modifyaccount session
+    foreach my $id ( keys %$sessions ) {
+        my $certificateResetSession =
+          $self->p->getApacheSession( $id, ( kind => "TOKEN" ) );
+        next unless ($certificateResetSession);
+        return $certificateResetSession
+          if (  $certificateResetSession->data->{_type}
+            and $certificateResetSession->data->{_type} =~ /^certificate$/ );
+    }
+
+    # No modifyaccount session found, return empty string
+    return "";
+}
+
+# Use Certificate Update parameter to send mail
+
+sub sendmail {
+
+    my ( $self, $mail, $subject, $body, $html ) = @_;
+
+    $self->{mailFrom}    = $self->conf->{certificateResetByMailSender};
+    $self->{mailReplyTo} = $self->conf->{certificateResetByMailReplyTo};
+
+    return $self->send_mail( $mail, $subject, $body, $html );
+}
+
+sub checkCertificateValidity {
+
+    my ( $self, $notAfter, $delay ) = @_;
+    my $dtNow;    # now in format DateTime
+    my $days;     # difference between NotAfter and now
+
+    my $f = DateTime::Format::RFC3339->new();
+
+    my $dtNotAfter = $f->parse_datetime($notAfter);
+    $self->userLogger->debug("Not After Date: $dtNotAfter");
+
+    $dtNow = DateTime->now;
+    $days  = $dtNotAfter->delta_days($dtNow)->delta_days;
+    $dtNow->add_duration( DateTime::Duration->new( days => $delay ) );
+
+    # test if ( now + $validity ) > certificate_expiration
+    if ( DateTime::compare( $dtNow, $dtNotAfter ) >= 0 ) {
+
+        # certificate is about to expire
+        $self->userLogger->debug(
+            "Certificate is about to expire or already expired");
+        return 0;
+    }
+    else {
+        # certificate is still valid
+        $self->userLogger->debug("Certificate is still valid for $days days");
+        return 1;
+    }
+}
+
+sub certificateHash {
+
+    my ( $self, $file ) = @_;
+    my $cert;
+
+    {
+        local $/ = undef;    # Slurp mode
+        open CERT, "$file" or die;
+        $cert = <CERT>;
+        close CERT;
+    }
+
+    # Normalize certificate
+    $cert =~ s/-----(BEGIN|END) CERTIFICATE-----//gi;
+    $cert =~ s/["]//gi;
+    $cert = decode_base64($cert);
+
+    #$self->userLogger->debug( "UserBinary::".$cert);
+    return $cert;
+}
+
+1;
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/ar.json b/lemonldap-ng-portal/site/htdocs/static/languages/ar.json
index 617dbfd13..86322b4e2 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/ar.json
@@ -86,6 +86,9 @@
 "PE94":"السمة المطلوبة غير متوفرة",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"قبول",
 "accessDenied":"ليس لديك إذن بالدخول لهذا التطبيق",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/de.json b/lemonldap-ng-portal/site/htdocs/static/languages/de.json
index 4724ad689..4fc31e7af 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/de.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"Dieser Dienst benötigt Zwei-Faktor-Authentifizierung. Bitte legen Sie ein Gerät an und gehen dann zum Portal zurück.",
 "accept":"Akzeptieren",
 "accessDenied":"Sie haben keine Zugriffsberechtigung für diese Anwendung",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/en.json b/lemonldap-ng-portal/site/htdocs/static/languages/en.json
index 98289ad3a..b8e2745e1 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/en.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Accept",
 "accessDenied":"You have no access authorization for this application",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
 }
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/es.json b/lemonldap-ng-portal/site/htdocs/static/languages/es.json
index 5c34f8062..979e5e393 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/es.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/es.json
@@ -86,6 +86,9 @@
 "PE94":"Un atributo obligatorio no está presente",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"Este servicio necesita la autenticación de dos factores. Registre un dispositivo ahora, luego reingrese al portal.",
 "accept":"Aceptar",
 "accessDenied":"No está autorizado a acceder a esta aplicación",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Su llave TOTP",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/fi.json b/lemonldap-ng-portal/site/htdocs/static/languages/fi.json
index e7586e539..c67d96c19 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/fi.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/fi.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Hyväksy",
 "accessDenied":"Sinulla ei ole käyttöoikeutta tähän sovellukseen",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/fr.json b/lemonldap-ng-portal/site/htdocs/static/languages/fr.json
index e75c7d91f..02816503f 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/fr.json
@@ -86,6 +86,9 @@
 "PE94":"Un attribut exigé n'est pas disponible",
 "PE95":"Accès non autorisé au service de déchiffrement",
 "PE96":"Code de sécurité invalide",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"Ce service requiert une authentification à deux facteurs. Enregistrez un équipement ici et retournez au portail.",
 "accept":"Accepter",
 "accessDenied":"Vous n'avez pas les droits d'accès à cette application",
@@ -287,5 +290,8 @@
 "yourPhone":"Connaître votre numéro de téléphone",
 "yourProfile":"Connaître vos informations personnelles",
 "yourTotpKey":"Votre clef TOTP",
-"yubikey2f":"Yubikey"
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
 }
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/it.json b/lemonldap-ng-portal/site/htdocs/static/languages/it.json
index c69ef96cb..7f11fdc29 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/it.json
@@ -86,6 +86,9 @@
 "PE94":"Attributo richiesto non disponibile",
 "PE95":"Accesso non concesso sul servizio DECRYPT",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"Questo servizio richiede un'autenticazione a doppio fattore. Registrare un dispositivo ora, quindi tornare al portale.",
 "accept":"Accetta",
 "accessDenied":"Non hai un'autorizzazione di accesso per questa applicazione",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"La tua chiave TOTP",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/nl.json b/lemonldap-ng-portal/site/htdocs/static/languages/nl.json
index 52d63bf41..e01845e1d 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/nl.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/nl.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Accept",
 "accessDenied":"You have no access authorization for this application",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/pt.json b/lemonldap-ng-portal/site/htdocs/static/languages/pt.json
index 57f806801..9b28ac46a 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/pt.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/pt.json
@@ -86,6 +86,9 @@
 "PE94":"Um atributo exigido não está disponível",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Accept",
 "accessDenied":"You have no access authorization for this application",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/ro.json b/lemonldap-ng-portal/site/htdocs/static/languages/ro.json
index 8305f2c28..7c58bd81f 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/ro.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/ro.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Accept",
 "accessDenied":"You have no access authorization for this application",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/vi.json b/lemonldap-ng-portal/site/htdocs/static/languages/vi.json
index 7457a894d..3b6e18ead 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/vi.json
@@ -86,6 +86,9 @@
 "PE94":"Một thuộc tính bắt buộc không có sẵn",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Chấp nhận",
 "accessDenied":"Bạn không có quyền truy cập vào ứng dụng này",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/zh.json b/lemonldap-ng-portal/site/htdocs/static/languages/zh.json
index 42431b98c..71f8ed48d 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/zh.json
@@ -86,6 +86,9 @@
 "PE94":"A required attribute is not available",
 "PE95":"Access not granted on DECRYPT service",
 "PE96":"Invalid verification code",
+"PE97":"Your certificate is invalid or expires soon",
+"PE98":"Please select your new certificate",
+"PE99":"Please select your new certificate",
 "2fRegRequired":"This service requires a double factor authentication. Register a device now, then go back to the portal.",
 "accept":"Accept 方法",
 "accessDenied":"您无权访问此应用",
@@ -287,5 +290,8 @@
 "yourPhone":"Know your phone number",
 "yourProfile":"Know your profile",
 "yourTotpKey":"Your TOTP key",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}
diff --git a/lemonldap-ng-portal/site/templates/bootstrap/certificateReset.tpl b/lemonldap-ng-portal/site/templates/bootstrap/certificateReset.tpl
new file mode 100644
index 000000000..9f3274254
--- /dev/null
+++ b/lemonldap-ng-portal/site/templates/bootstrap/certificateReset.tpl
@@ -0,0 +1,182 @@
+<TMPL_INCLUDE NAME="header.tpl">
+
+<div id="mailcontent" class="container">
+
+  <TMPL_IF NAME="AUTH_ERROR">
+    <div class="message message-<TMPL_VAR NAME="AUTH_ERROR_TYPE"> alert">
+    <span trmsg="<TMPL_VAR NAME="AUTH_ERROR">"></span>
+    </div>
+  </TMPL_IF>
+
+  <TMPL_IF NAME="DISPLAY_FORM">
+  <div class="card">
+    <form action="#" method="post" class="login" role="form">
+    <div class="form">
+
+      <input type="hidden" name="skin" value="<TMPL_VAR NAME="SKIN">" />
+      <input type="hidden" name="url" value="<TMPL_VAR NAME="AUTH_URL">" />
+      <TMPL_IF NAME="CHOICE_VALUE">
+        <input type="hidden" id="authKey" name="<TMPL_VAR NAME="CHOICE_PARAM">" value="<TMPL_VAR NAME="CHOICE_VALUE">" />
+      </TMPL_IF>
+
+      <h3 trspan="certificateReset"> Reset Your Certificate</h3>
+
+      <div class="input-group mb-3">
+        <div class="input-group-prepend">
+          <span class="input-group-text"><i class="fa fa-envelope"></i> </span>
+        </div>
+        <input name="mail" type="text" value="<TMPL_VAR NAME="MAIL">" class="form-control" trplaceholder="mail" required />
+      </div>
+
+      <TMPL_IF NAME=CAPTCHA_SRC>
+        <div class="form-group">
+          <img src="<TMPL_VAR NAME=CAPTCHA_SRC>" class="img-thumbnail" />
+        </div>
+        <div class="input-group mb-3">
+          <div class="input-group-prepend">
+            <span class="input-group-text"><i class="fa fa-eye"></i> </span>
+          </div>
+          <input type="text" name="captcha" size="<TMPL_VAR NAME=CAPTCHA_SIZE>" class="form-control" trplaceholder="captcha" required autocomplete="off" />
+        </div>
+      </TMPL_IF>
+      <TMPL_IF NAME="TOKEN">
+        <input type="hidden" name="token" value="<TMPL_VAR NAME="TOKEN">" />
+      </TMPL_IF>
+
+      <button type="submit" class="btn btn-success">
+        <span class="fa fa-envelope-open"></span>
+        <span trspan="sendPwd">Send me a link</span>
+      </button>
+
+    </div>
+    </form>
+  </div>
+  </TMPL_IF>
+
+  <TMPL_IF NAME="DISPLAY_RESEND_FORM">
+  <div class="card">
+    <form action="#" method="post" class="login" role="form">
+    <div class="form">
+
+      <input type="hidden" name="skin" value="<TMPL_VAR NAME="SKIN">" />
+      <input type="hidden" name="url" value="<TMPL_VAR NAME="AUTH_URL">" />
+      <TMPL_IF NAME="CHOICE_VALUE">
+        <input type="hidden" id="authKey" name="<TMPL_VAR NAME="CHOICE_PARAM">" value="<TMPL_VAR NAME="CHOICE_VALUE">" />
+      </TMPL_IF>
+      <TMPL_IF NAME="MAIL">
+        <input type="hidden" value="<TMPL_VAR NAME="MAIL">" name="mail">
+      </TMPL_IF>
+
+      <TMPL_IF NAME="TOKEN">
+        <input type="hidden" name="token" value="<TMPL_VAR NAME="TOKEN">" />
+      </TMPL_IF>
+
+      <h3 trspan="resendConfirmMail">Resend confirmation mail?</h3>
+
+      <p class="alert alert-info">
+        <span trspan="pwdResetAlreadyIssued">A Certificate reset request was already issued on</span>
+        <TMPL_VAR NAME="STARTMAILDATE">.
+        <span trspan="resentConfirm">Do you want the confirmation mail to be resent?</span>
+      </p>
+
+      <TMPL_IF NAME=CAPTCHA_SRC>
+        <div class="form-group">
+          <img src="<TMPL_VAR NAME=CAPTCHA_SRC>" class="img-thumbnail" />
+        </div>
+        <div class="input-group mb-3">
+          <div class="input-group-prepend">
+            <span class="input-group-text"><i class="fa fa-eye"></i> </span>
+          </div>
+          <input type="text" name="captcha" size="<TMPL_VAR NAME=CAPTCHA_SIZE>" class="form-control" trplaceholder="captcha" required autocomplete="off"/>
+        </div>
+      </TMPL_IF>
+
+      <div class="input-group mb-3">
+        <div class="input-group-prepend">
+          <div class="input-group-text">
+            <input id="resendconfirmation" type="checkbox" name="resendconfirmation" aria-describedby="resendconfirmationlabel" />
+          </div>
+        </div>
+        <p class="form-control">
+          <label for="resendconfirmation" id="resendconfirmationlabel" trspan="confirmPwd">Yes , resend the mail</label>
+        </p>
+      </div>
+
+      <button type="submit" class="btn btn-success">
+        <span class="fa fa-envelope-open"></span>
+        <span trspan="submit">Submit</span>
+      </button>
+
+    </div>
+    </form>
+  </div>
+  </TMPL_IF>
+
+  <TMPL_IF NAME="DISPLAY_CERTIF_FORM">
+    <div class="card" id="password">
+      <form action="#" method="post" enctype="multipart/form-data"  class="password" role="form">
+      <div class="form">
+
+        <input type="hidden" name="skin" value="<TMPL_VAR NAME="SKIN">" />
+        <input type="hidden" name="url" value="<TMPL_VAR NAME="AUTH_URL">" />
+        <TMPL_IF NAME="CHOICE_VALUE">
+          <input type="hidden" id="authKey" name="<TMPL_VAR NAME="CHOICE_PARAM">" value="<TMPL_VAR NAME="CHOICE_VALUE">" />
+        </TMPL_IF>
+
+        <TMPL_IF NAME="TOKEN">
+          <input type="hidden" id="token" name="token" value="<TMPL_VAR NAME="TOKEN">" />
+        </TMPL_IF>
+
+        <h3 trspan="certificateReset">Reset your Certificate</h3>
+
+        <div class="input-group mb-3">
+          <div class="input-group-prepend">
+            <span class="input-group-text"><i class="fa fa-upload"></i> </span>
+          </div>
+              <input name="certif" type="file" class="form-control" accept=".pem, .crt,application/x-pem-file", trplaceholder="UploadCertificate" required />
+        </div>
+
+        <button type="submit" class="btn btn-success">
+          <span class="fa fa-envelope-open"></span>
+          <span trspan="submit">Submit</span>
+        </button>
+
+      </div>
+      </form>
+    </div>
+  </TMPL_IF>
+
+  <TMPL_IF NAME="DISPLAY_CONFIRMMAILSENT">
+    <div class="card">
+    <form action="#" method="post" class="login" role="form">
+      <div class="form">
+        <h3 trspan="mailSent2">A message has been sent to your mail address.</h3>
+        <p class="alert alert-info">
+          <span trspan="linkValidUntilCertif">This message contains a link to reset your certificate. This link is valid until </span>
+          <TMPL_VAR NAME="EXPMAILDATE">.
+        </p>
+      </div>
+    </form>
+    </div>
+  </TMPL_IF>
+
+  <TMPL_IF NAME="DISPLAY_MAILSENT">
+    <div class="card">
+    <form action="#" method="post" class="login" role="form">
+      <div class="form">
+        <h3 trspan="resetCertificateOK">A confirmation has been sent to your mail address.</h3>
+      </div>
+    </form>
+    </div>
+  </TMPL_IF>
+
+  <div class="buttons">
+    <a href="<TMPL_VAR NAME="PORTAL_URL">?skin=<TMPL_VAR NAME="SKIN"><TMPL_IF NAME="CHOICE_VALUE">&<TMPL_VAR NAME="CHOICE_PARAM">=<TMPL_VAR NAME="CHOICE_VALUE"></TMPL_IF><TMPL_IF NAME="AUTH_URL">&url=<TMPL_VAR NAME="AUTH_URL"></TMPL_IF>" class="btn btn-primary" role="button">
+      <span class="fa fa-home"></span>
+      <span trspan="back2Portal">Go back to portal</span>
+    </a>
+  </div>
+
+</div>
+
+<TMPL_INCLUDE NAME="footer.tpl">
diff --git a/lemonldap-ng-portal/site/templates/bootstrap/standardform.tpl b/lemonldap-ng-portal/site/templates/bootstrap/standardform.tpl
index 87ab215a9..00a7d8485 100644
--- a/lemonldap-ng-portal/site/templates/bootstrap/standardform.tpl
+++ b/lemonldap-ng-portal/site/templates/bootstrap/standardform.tpl
@@ -45,6 +45,13 @@
     <span trspan="resetPwd">Reset my password</span>
   </a>
   </TMPL_IF>
+ 
+  <TMPL_IF NAME="DISPLAY_UPDATECERTIF">
+     <a class="btn btn-primary" href="<TMPL_VAR NAME="MAILCERTIF_URL">?skin=<TMPL_VAR NAME="SKIN"><TMPL_IF NAME="key">&<TMPL_VAR NAME="CHOICE_PARAM">=<TMPL_VAR NAME="key"></TMPL_IF><TMPL_IF NAME="AUTH_URL">&url=<TMPL_VAR NAME="AUTH_URL"></TMPL_IF>">
+        <span class="fa fa-refresh"></span>
+        <span trspan="certificateReset">Reset my certificate</span>
+     </a>
+   </TMPL_IF>
 
   <TMPL_IF NAME="DISPLAY_REGISTER">
   <a class="btn btn-secondary" href="<TMPL_VAR NAME="REGISTER_URL">?skin=<TMPL_VAR NAME="SKIN"><TMPL_IF NAME="key">&<TMPL_VAR NAME="CHOICE_PARAM">=<TMPL_VAR NAME="key"></TMPL_IF><TMPL_IF NAME="AUTH_URL">&url=<TMPL_VAR NAME="AUTH_URL"></TMPL_IF>">
diff --git a/lemonldap-ng-portal/site/templates/common/mail/ar.json b/lemonldap-ng-portal/site/templates/common/mail/ar.json
index eac6cfc46..21049c384 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/ar.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/ar.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"تم إنشاء حسابك و إرسال كلمة المرور المؤقتة إلى  بريدك الإلكتروني.",
 "autoMail":"تم إرسال هذا البريد تلقائيا ",
 "click2Register":"انقر هنا لتأكيد تسجيل حسابك",
@@ -15,4 +16,4 @@
 "requestIssuedFromIP":"الطلب قد أرسل من عنوان الآي بي",
 "yourLoginCodeIs":"Your login code is",
 "yourLoginIs":"تسجيل الدخول الخاص بك هو"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/templates/common/mail/en.json b/lemonldap-ng-portal/site/templates/common/mail/en.json
index 811c051e0..3259dc06f 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/en.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/en.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"Your account has been created, your temporary password has been sent to your mail address.",
 "autoMail":"This mail was sent automatically",
 "click2Register":"Click here to confirm your account registration",
diff --git a/lemonldap-ng-portal/site/templates/common/mail/fi.json b/lemonldap-ng-portal/site/templates/common/mail/fi.json
index 2bfa99ab4..c43304b57 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/fi.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/fi.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"Tunnus on luotu, väliaikainen salasana on lähetetty sähköpostiisi.",
 "autoMail":"Tämä sähköpostiviesti lähetetään automaattisesti",
 "click2Register":"Klikkaa tästä vahvistaaksesi käyttäjätunnuksesi rekisteröinnin",
@@ -15,4 +16,4 @@
 "requestIssuedFromIP":"The request was issued from IP",
 "yourLoginCodeIs":"Your login code is",
 "yourLoginIs":"Your login is"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/templates/common/mail/fr.json b/lemonldap-ng-portal/site/templates/common/mail/fr.json
index 02891d3ac..3a87d52d1 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/fr.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/fr.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"Votre compte a été créé, un mot de passe temporaire a été envoyé à votre adresse mail.",
 "autoMail":"Ceci est un message automatique",
 "click2Register":"Cliquez ici pour confirmer l'enregistrement de votre compte",
diff --git a/lemonldap-ng-portal/site/templates/common/mail/it.json b/lemonldap-ng-portal/site/templates/common/mail/it.json
index 9977a8825..6545cf568 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/it.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/it.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"Il tuo account è stato creato, una password temporanea è stata inviata al tuo indirizzo di posta elettronica.",
 "autoMail":"Questa mail é stata inviata automaticamente",
 "click2Register":"Clicca qui per confermare la registrazione del tuo account",
@@ -15,4 +16,4 @@
 "requestIssuedFromIP":"La richiesta è stata emessa da IP",
 "yourLoginCodeIs":"Il tuo codice di accesso è",
 "yourLoginIs":"Il tuo login é"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/templates/common/mail/vi.json b/lemonldap-ng-portal/site/templates/common/mail/vi.json
index 8ae1f45e8..f6d45809e 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/vi.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/vi.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"Tài khoản của bạn đã được tạo, mật khẩu tạm thời vừa được gửi đến địa chỉ thư điện tử của bạn.",
 "autoMail":"Thư này đã được gửi tự động",
 "click2Register":"Nhấn ở đây để xác nhận việc đăng ký tài khoản của bạn",
@@ -15,4 +16,4 @@
 "requestIssuedFromIP":"Yêu cầu được gửi đi từ địa chỉ IP",
 "yourLoginCodeIs":"Your login code is",
 "yourLoginIs":"Đăng nhập của bạn là"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/templates/common/mail/zh_CN.json b/lemonldap-ng-portal/site/templates/common/mail/zh_CN.json
index 9c920f2db..8eff6297e 100644
--- a/lemonldap-ng-portal/site/templates/common/mail/zh_CN.json
+++ b/lemonldap-ng-portal/site/templates/common/mail/zh_CN.json
@@ -1,4 +1,5 @@
 {
+"resetCertificat":"Your certificate was reset",
 "accountCreated":"您的账户已被创建，初始密码已发送至您的邮箱",
 "autoMail":"此邮件是自动发送的",
 "click2Register":"请点击此处已确认您的账户注册",
@@ -15,4 +16,4 @@
 "requestIssuedFromIP":"此请求来自IP地址",
 "yourLoginCodeIs":"Your login code is",
 "yourLoginIs":"您登陆的账户是"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/templates/common/mail_certificatReset.tpl b/lemonldap-ng-portal/site/templates/common/mail_certificatReset.tpl
new file mode 100644
index 000000000..ca0fb5b5e
--- /dev/null
+++ b/lemonldap-ng-portal/site/templates/common/mail_certificatReset.tpl
@@ -0,0 +1,9 @@
+<TMPL_INCLUDE NAME="mail_header.tpl">
+
+<p>
+<span trspan="hello">Hello</span> $cn,<br />
+<br />
+<span trspan="certificatReset">Your certificate was reset sucessfully.</span> 
+</p>
+
+<TMPL_INCLUDE NAME="mail_footer.tpl">
diff --git a/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t b/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t
new file mode 100644
index 000000000..2acc0a89a
--- /dev/null
+++ b/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t
@@ -0,0 +1,218 @@
+#!/usr/bin/perl
+
+use Test::More;
+use strict;
+use IO::String;
+use File::Copy;
+
+BEGIN {
+    eval {
+        require 't/test-lib.pm';
+        require 't/smtp.pm';
+    };
+}
+
+my ( $res, $user );
+my $maintests = 6;
+
+SKIP: {
+    eval
+      'require Email::Sender::Simple; use GD::SecurityImage;use Image::Magick;';
+    if ($@) {
+        skip 'Missing dependencies ' . $@, $maintests;
+
+    }
+
+    skip 'LLNGTESTLDAP is not set', $maintests unless ( $ENV{LLNGTESTLDAP} );
+    require 't/test-ldap.pm';
+
+    my $client = LLNG::Manager::Test->new( {
+            ini => {
+                logLevel              => 'debug',
+                useSafeJail           => 1,
+                portalDisplayRegister => 1,
+                authentication        => 'SSL',
+                userDB                => 'LDAP',
+                passwordDB            => 'LDAP',
+                registerDB            => 'LDAP',
+                ldapServer            => 'ldap://127.0.0.1:19389/',
+                ldapBase              => 'ou=users,dc=example,dc=com',
+                managerDn             => 'cn=admin,dc=example,dc=com',
+                managerPassword       => 'admin',
+                captcha_mail_enabled  => 0,
+                portalDisplayCertificateResetByMail => 1,
+                certificateResetByMailCeaAttribute  => 'description',
+                certificateResetByMailCertificateAttribute =>
+                  'userCertificate;binary',
+                certificateResetByMailStep1Body =>
+'Click here <a href="$url">  to confirm your mail. It will expire $expMailDate',
+                certificateResetByMailStep2Body =>
+                  'Certificate Reset sucessfully!',
+                certificateValidityDelay => 30
+
+            }
+        }
+    );
+
+    # Test form
+    # ------------------------
+    ok( $res = $client->_get( '/certificateReset', accept => 'text/html' ),
+        'Reset form', );
+    my ( $host, $url, $query ) = expectForm( $res, '#', undef, 'mail' );
+
+    $query = 'mail=dwho%40badwolf.org';
+
+    # Post email
+    ok(
+        $res = $client->_post(
+            '/certificateReset', IO::String->new($query),
+            length => length($query),
+            accept => 'text/html'
+        ),
+        'Post mail'
+    );
+
+    ok( mail() =~ m#a href="http://auth.example.com/certificateReset\?(.*?)"#,
+        'Found link in mail' );
+    $query = $1;
+    my $querymail = $query;
+    ok(
+        $res = $client->_get(
+            '/certificateReset',
+            query  => $query,
+            accept => 'text/html'
+        ),
+        'Post mail token received by mail'
+    );
+
+    # print STDERR Dumper($res);
+
+    ( $host, $url, $query ) = expectForm( $res, '#', undef, 'token' );
+    ok( $res->[2]->[0] =~ /certif/s, ' Ask for a new certificate file' );
+
+    #print STDERR Dumper($query);
+    my %inputs   = split( /[=&]/, $query );
+    my %querytab = split( /[=&]/, $querymail );
+
+    # Create the certificate  file
+    my $cert = "-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----";
+
+    open my $FH2, '>', '/tmp/v296ZJQ_kG';
+    print {$FH2} "$cert";
+    close $FH2;
+
+    $res = $client->app->( {
+            'plack.request.query' => bless( {
+                    'skin'       => $querytab{'skin'},
+                    'mail_token' => $querytab{'mail_token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'PATH_INFO' => '/certificateReset',
+            'HTTP_ACCEPT' =>
+'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3',
+            'REQUEST_METHOD'       => 'POST',
+            'HTTP_ORIGIN'          => 'http://auth.example.com',
+            'HTTP_ACCEPT_LANGUAGE' => 'fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3',
+            'REQUEST_SCHEME'       => 'http',
+            'HTTP_CACHE_CONTROL'   => 'max-age=0',
+
+            'plack.request.merged' => bless( {
+                    'skin'       => $querytab{'skin'},
+                    'mail_token' => $querytab{'mail_token'},
+                    'url'        => '',
+                    'token'      => $inputs{'token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'REMOTE_PORT'                    => '36674',
+            'QUERY_STRING'                   => $querymail,
+            'SERVER_SIGNATURE'               => '',
+            'psgix.input.buffered'           => 1,
+            'HTTP_UPGRADE_INSECURE_REQUESTS' => '1',
+            'CONTENT_TYPE' =>
+'multipart/form-data; boundary=----WebKitFormBoundarybabRY9u6K9tERoLr',
+            'plack.request.upload' => bless( {
+                    'certif' => bless( {
+                            'headers' => bless( {
+                                    'content-disposition' =>
+'form-data; name="certif"; filename="user.pem"',
+                                    'content-type' =>
+                                      'application/x-x509-ca-cert',
+                                    '::std_case' => {
+                                        'content-disposition' =>
+                                          'Content-Disposition'
+                                    }
+                                },
+                                'HTTP::Headers'
+                            ),
+                            'filename' => 'user.pem',
+                            'tempname' => '/tmp/v296ZJQ_kG',
+                            'size'     => 1261
+                        },
+                        'Plack::Request::Upload'
+                    )
+                },
+                'Hash::MultiValue'
+            ),
+            'psgi.streaming'     => 1,
+            'plack.request.body' => bless( {
+                    'skin'  => 'bootstrap',
+                    'url'   => '',
+                    'token' => $inputs{'token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'SCRIPT_URL'   => '/certificateReset',
+            'SERVER_NAME'  => 'auth.example.com',
+            'HTTP_REFERER' => 'http://auth.example.com/certificateReset?'
+              . $querymail,
+            'HTTP_CONNECTION'     => 'close',
+            'CONTENT_LENGTH'      => '1759',
+            'SCRIPT_URI'          => 'http://auth.example.com/certificateReset',
+            'plack.cookie.parsed' => {
+                'llnglanguage' => 'fr'
+            },
+            'SERVER_PORT'     => '80',
+            'SERVER_NAME'     => 'auth.example.com',
+            'SERVER_PROTOCOL' => 'HTTP/1.1',
+            'SCRIPT_NAME'     => '',
+            'HTTP_USER_AGENT' =>
+              'Mozilla/5.0 (VAX-4000; rv:36.0) Gecko/20350101 Firefox',
+            'HTTP_COOKIE'         => 'llnglanguage=fr',
+            'REMOTE_ADDR'         => '127.0.0.1',
+            'REQUEST_URI'         => '/certificateReset?' . $querymail,
+            'plack.cookie.string' => 'llnglanguage=fr',
+            'SERVER_ADDR'         => '127.0.0.1',
+            'psgi.url_scheme'     => 'http',
+            'psgix.harakiri'      => '',
+            'HTTP_HOST'           => 'auth.example.com'
+        }
+    );
+
+    ok( mail() =~ /Certificate Reset sucessfully/, 'Certificate was changed' );
+
+}
+count($maintests);
+stopLdapServer() if $ENV{LLNGTESTLDAP};
+done_testing( count() );

From 1a6a2e50eeb98947315a392b66fd497d6f75c855 Mon Sep 17 00:00:00 2001
From: dcoutadeur <david.coutadeur@gmail.com>
Date: Thu, 19 Dec 2019 20:16:38 +0100
Subject: [PATCH 02/60] fix some typos for Reset Certificate module for v2.0.7
 (#1605)

---
 .../Lemonldap/NG/Manager/Build/Attributes.pm  | 91 +++++++++----------
 .../lib/Lemonldap/NG/Manager/Build/Tree.pm    |  2 +-
 .../site/htdocs/static/languages/tr.json      | 15 ++-
 .../site/htdocs/static/languages/tr.json      | 10 +-
 4 files changed, 68 insertions(+), 50 deletions(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 3850e5d8b..290a33f31 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -1459,52 +1459,51 @@ sub attributes {
             documentation => 'URL of password reset page',
         },
                    # Certificate reset by mail
-         certificateResetByMailCeaAttribute => {
-             type          => 'text',
-             default       => 'description'
-         },
-         certificateResetByMailCertificateAttribute => {
-             type          => 'text',
-             default       => 'userCertificate;binary',
- 
-         },
-         certificateResetByMailStep1Body => {
-             type          => 'longtext',
-             documentation => 'Custom Certificate reset mail body',
-         },
- 
-         certificateResetByMailStep2Body => {
-             type          => 'longtext',
-             documentation => 'Custom confirm Certificate reset mail body',
-         },
-         certificateResetByMailStep2Subject => {
-             type          => 'text',
-             documentation => 'Mail subject for reset confirmation',
-         },
-         certificateResetByMailStep1Subject => {
-             type          => 'text',
-             documentation => 'Mail subject for certificate reset email',
-         },
- 
-         certificateResetByMailURL => {
-             type          => 'url',
-             default       => 'http://auth.example.com/certificateReset',
-             documentation => 'URL of certificate reset page',
-         },
-         certificateResetByMailSender => {
-             type          => 'text',
-             default       => 'noreply@example.com',
-             documentation => 'URL of certificate reset page',
-         },
-         certificateResetByMailReplyTo => {
-             type          => 'text',
-             default       => 'noreply@example.com',
-             documentation => 'URL of certificate reset page',
-         },
-         certificateResetByMailValidityDelay => {
-             type          => 'int',
-             default       => 0
-         },
+        certificateResetByMailCeaAttribute => {
+            type          => 'text',
+            default       => 'description'
+        },
+        certificateResetByMailCertificateAttribute => {
+            type          => 'text',
+            default       => 'userCertificate;binary',
+        },
+        certificateResetByMailStep1Body => {
+            type          => 'longtext',
+            documentation => 'Custom Certificate reset mail body',
+        },
+
+        certificateResetByMailStep2Body => {
+            type          => 'longtext',
+            documentation => 'Custom confirm Certificate reset mail body',
+        },
+        certificateResetByMailStep2Subject => {
+            type          => 'text',
+            documentation => 'Mail subject for reset confirmation',
+        },
+        certificateResetByMailStep1Subject => {
+            type          => 'text',
+            documentation => 'Mail subject for certificate reset email',
+        },
+
+        certificateResetByMailURL => {
+            type          => 'url',
+            default       => 'http://auth.example.com/certificateReset',
+            documentation => 'URL of certificate reset page',
+        },
+        certificateResetByMailSender => {
+            type          => 'text',
+            default       => 'noreply@example.com',
+            documentation => 'URL of certificate reset page',
+        },
+        certificateResetByMailReplyTo => {
+            type          => 'text',
+            default       => 'noreply@example.com',
+            documentation => 'URL of certificate reset page',
+        },
+        certificateResetByMailValidityDelay => {
+            type          => 'int',
+            default       => 0
+        },
 
         # Registration
         registerConfirmSubject => {
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index dd27957f9..2c2557cca 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -661,7 +661,7 @@ sub tree {
                             title => 'certificateResetByMailManagement',
                              form  => 'simpleInputContainer',
                              nodes => [ {
-                                     title => 'certifcateMailContent',
+                                     title => 'certificateMailContent',
                                      form  => 'simpleInputContainer',
                                      nodes => [ 
                                          'certificateResetByMailSender',
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
index 59b7e6d4d..5fa9f1567 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@@ -142,6 +142,19 @@
 "casStorageOptions":"CAS oturumları modül seçenekleri",
 "categoryName":"Kategori ismi",
 "cda":"Çoklu alan adları",
+"certificateMailContent":"Certificate mail content",
+"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailURL":"Reset page URL",
+"certificateResetByMailCeaAttribute":"Certificate attibute name",
+"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailSender":"Mail sender",
+"certificateResetByMailReplyTo":"Reply address",
+"certificateResetByMailStep1Subject":"Certificate reset mail subject",
+"certificateResetByMailStep1Body":"Certificate reset mail content",
+"certificateResetByMailStep2Subject":"Confirmation mail subject",
+"certificateResetByMailStep2Body":"Confirmation mail content",
+"certificateResetByMailValidityDelay":"Minimum duration before expiration",
+"portalDisplayCertificateResetByMail":"Reset your Certificate",
 "contentSecurityPolicy":"İçerik güvenlik ilkesi",
 "contextSwitching":"İçeriği başka bir kullanıcıyla değiştir",
 "contextSwitchingHiddenAttributes":"Gizli nitelikler",
@@ -1089,4 +1102,4 @@
 "samlRelayStateTimeout":"RelayState oturum zaman aşımı",
 "samlUseQueryStringSpecific":"Spesifik query_string metodu kullan",
 "samlOverrideIDPEntityID":"IDP olarak davrandığında Varlık ID'yi geçersiz kıl"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-portal/site/htdocs/static/languages/tr.json b/lemonldap-ng-portal/site/htdocs/static/languages/tr.json
index 850a9e04e..668b8fadf 100644
--- a/lemonldap-ng-portal/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-portal/site/htdocs/static/languages/tr.json
@@ -86,6 +86,9 @@
 "PE94":"Gerekli bir nitelik mevcut değil",
 "PE95":"DECRYPT servisine erişime izin verilmedi",
 "PE96":"Geçersiz doğrulama kodu",
+"PE97":"Please select your new certificate",
+"PE98":"Please select your new certificate",
+"PE99":"Your certificate is invalid or expires soon",
 "2fRegRequired":"Bu servis iki adımlı kimlik doğrulama gerektiriyor. Şimdi bir cihaz ekleyin ve ardından portala geri dönün",
 "accept":"Kabul Et",
 "accessDenied":"Bu uygulamaya erişim yetkiniz yok",
@@ -287,5 +290,8 @@
 "yourPhone":"Telefon numaranı bil",
 "yourProfile":"Profilini bil",
 "yourTotpKey":"TOTP anahtarınız",
-"yubikey2f":"Yubikey"
-}
\ No newline at end of file
+"yubikey2f":"Yubikey",
+"resetCertificateOK":"Your certificate was reset sucessfully",
+"linkValidUntilCertif":"This message contains a link to reset your certificate, this link is valid until ",
+"certificateReset":"Reset my certificate"
+}

From dbe82fc94cfcce8af6e9126e1029b34cad8978bd Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 9 Jul 2019 11:17:51 +0200
Subject: [PATCH 03/60] Add JSON::XS to BuildRequires (follow up to 3750e9fd4)

---
 rpm/lemonldap-ng.spec | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index bb2a970a2..f4a3a61f2 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -125,6 +125,7 @@ BuildRequires:  perl(IO::Select)
 BuildRequires:  perl(IO::Socket::INET)
 BuildRequires:  perl(IO::String)
 BuildRequires:  perl(JSON)
+BuildRequires:  perl(JSON::XS)
 %if 0%{?fedora}
 BuildRequires:  perl(Lasso)
 BuildRequires:  perl(Glib)

From 45f5e25d2284e112ddc3f578adc3ace97a4421e0 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 9 Jul 2019 11:20:16 +0200
Subject: [PATCH 04/60] Use plain make rather than __make macro

---
 rpm/lemonldap-ng.spec | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index f4a3a61f2..50e971b16 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -373,16 +373,16 @@ This package installs the authentication portal.
 # Building
 #==============================================================================
 %build
-%{__make} %{?_smp_mflags} configure \
+make %{?_smp_mflags} configure \
     STORAGECONFFILE=%{lm_storagefile} \
     PERLOPTIONS="INSTALLDIRS=vendor"
-%{__make} %{?_smp_mflags}
+make %{?_smp_mflags}
 
 #==============================================================================
 # Installation
 #============================================================================
 %install
-%{__make} %{?_smp_mflags} install \
+make %{?_smp_mflags} install \
     DESTDIR=%{buildroot} \
     PREFIX=%{lm_prefix} \
     BINDIR=%{lm_bindir} \
@@ -504,7 +504,7 @@ chmod 644 %{buildroot}/usr/share/lemonldap-ng/test/cas.php
 %check
 sed -i 's:^dirName.*:dirName = %{buildroot}%{lm_vardir}/conf:' \
     %{buildroot}%{lm_storagefile}
-%{__make} %{?_smp_mflags} test \
+make %{?_smp_mflags} test \
     LLNG_DEFAULTCONFFILE=%{buildroot}%{lm_storagefile}
 sed -i 's:^dirName.*:dirName = %{lm_vardir}/conf:' \
     %{buildroot}%{lm_storagefile}

From 77651a3ea3386721286305d70e67d74879594b1e Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 9 Jul 2019 11:26:19 +0200
Subject: [PATCH 05/60] Remove non Fedora conditionals

It wouldn't build anyway because of the other Fedora-isms in the spec.
---
 rpm/lemonldap-ng.spec | 26 --------------------------
 1 file changed, 26 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 50e971b16..dbacd192c 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -19,27 +19,14 @@
 %global lm_sbindir %{_libexecdir}/%{name}/sbin
 
 # Apache configuration directory
-%if 0%{?rhel}%{?fedora}
 %global apache_confdir %{_sysconfdir}/httpd/conf.d
-%else
-%global apache_confdir %{_sysconfdir}/apache2/conf.d
-%endif
 
 # Apache User and Group
-%if 0%{?rhel}%{?fedora}
 %global lm_apacheuser apache
 %global lm_apachegroup apache
-%else
-%global lm_apacheuser wwwrun
-%global lm_apachegroup www
-%endif
 
 # Apache version
-%if 0%{?fedora} || 0%{?rhel} >= 7
 %global apache_version 2.4
-%else
-%global apache_version 2
-%endif
 
 %global lm_dnsdomain example.com
 
@@ -214,13 +201,8 @@ Requires:       perl(Apache::Session)
 Requires:       perl(IO::String)
 Requires:       perl(Lemonldap::NG::Common) = %{version}-%{release}
 Requires:       perl(mod_perl2)
-%if 0%{?rhel}%{?fedora}
 Requires(post): httpd
 Requires:       mod_fcgid
-%else
-Requires(post): apache2
-Requires:       apache2-mod_fcgid
-%endif
 
 %description conf
 This package contains the main storage configuration.
@@ -240,9 +222,7 @@ This package contains HTML documentation.
 #==============================================================================
 %package handler
 Summary:        LemonLDAP-NG handler
-%if 0%{?rhel}%{?fedora}
 Requires:       crontabs
-%endif
 Requires:       lemonldap-ng-conf = %{version}-%{release}
 Requires:       perl(Lemonldap::NG::Handler) = %{version}-%{release}
 
@@ -265,9 +245,7 @@ This package deploys the administration interface and sessions explorer.
 #==============================================================================
 %package portal
 Summary:        LemonLDAP-NG authentication portal
-%if 0%{?rhel}%{?fedora}
 Requires:       crontabs
-%endif
 Requires:       lemonldap-ng-conf = %{version}-%{release}
 Requires:       perl(Lemonldap::NG::Portal) = %{version}-%{release}
 
@@ -290,11 +268,7 @@ This package deploys small test applications.
 %package fastcgi-server
 Summary:        LemonLDAP-NG FastCGI Server
 Requires:       lemonldap-ng-conf = %{version}-%{release}
-%if 0%{?rhel}%{?fedora}
 Requires:       mod_fcgid
-%else
-Requires:       apache2-mod_fcgid
-%endif
 Requires:       perl(FCGI::ProcManager)
 
 %description fastcgi-server

From 3bd89a6c588262d533bff12a5d1375d4231520fa Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 9 Jul 2019 11:30:38 +0200
Subject: [PATCH 06/60] Don't mix code branches in %%changelog

---
 rpm/lemonldap-ng.spec | 42 ------------------------------------------
 1 file changed, 42 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index dbacd192c..942d4d1be 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -653,9 +653,6 @@ fi
 * Sun May 12 2019 Clement Oudot <clem.oudot@gmail.com> - 2.0.4-1
 - Update to 2.0.4
 
-* Sun May 12 2019 Clement Oudot <clem.oudot@gmail.com> - 1.9.19-1
-- Update to 1.9.19
-
 * Thu Apr 11 2019 Clement Oudot <clem.oudot@gmail.com> - 2.0.3-1
 - Update to 2.0.3
 
@@ -674,39 +671,15 @@ fi
 * Fri Nov 30 2018 Clement Oudot <clem.oudot@gmail.com> - 2.0.0-1
 - Update to 2.0.0
 
-* Fri Oct 05 2018 Clement Oudot <clem.oudot@gmail.com> - 1.9.18-1
-- Update to 1.9.18
-
 * Fri Jul 20 2018 Clement Oudot <clem.oudot@gmail.com> - 2.0.0~beta1-1
 - First beta version for 2.0.0
 
-* Sun Jun 17 2018 Clement Oudot <clem.oudot@gmail.com> - 1.9.17-1
-- Update to 1.9.17
-
-* Fri Mar 16 2018 Clement Oudot <clem.oudot@gmail.com> - 1.9.16-1
-- Update to 1.9.16
-
 * Fri Jan 26 2018 Clement Oudot <clem.oudot@gmail.com> - 2.0.0~alpha3-1
 - Third alpha version for 2.0.0
 
-* Tue Jan 23 2018 Clement Oudot <clem.oudot@gmail.com> - 1.9.15-1
-- Update to 1.9.15
-
-* Fri Nov 24 2017 Clement Oudot <clem.oudot@gmail.com> - 1.9.14-1
-- Update to 1.9.14
-
-* Fri Sep 29 2017 Clement Oudot <clem.oudot@gmail.com> - 1.9.13-1
-- Update to 1.9.13
-
 * Thu Sep 14 2017 Clement Oudot <clem.oudot@gmail.com> - 2.0.0~alpha2-1
 - Second alpha version for 2.0.0
 
-* Tue Sep 12 2017 Clement Oudot <clem.oudot@gmail.com> - 1.9.12-1
-- Update to 1.9.12
-
-* Fri Sep 01 2017 Clement Oudot <clem.oudot@gmail.com> - 1.9.11-1
-- Update to 1.9.11
-
 * Mon Jul 10 2017 Clement Oudot <clem.oudot@gmail.com> - 2.0.0~alpha1-1
 - First alpha version for 2.0.0
 
@@ -725,36 +698,21 @@ fi
 * Fri Oct 14 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.6-1
 - Update to 1.9.6
 
-* Mon Oct 10 2016 Clement Oudot <clem.oudot@gmail.com> - 1.4.11-1
-- Update to 1.4.11
-
 * Wed Jul 13 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.5-1
 - Update to 1.9.5
 
-* Wed Jul 13 2016 Clement Oudot <clem.oudot@gmail.com> - 1.4.10-1
-- Update to 1.4.10
-
 * Tue Jun 14 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.4-1
 - Update to 1.9.4
 
 * Tue Jun 07 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.3-1
 - Update to 1.9.3
 
-* Fri Jun 03 2016 Clement Oudot <clem.oudot@gmail.com> - 1.4.9-1
-- Update to 1.4.9
-
 * Sun May 01 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.2-1
 - Update to 1.9.2
 
-* Wed Apr 27 2016 Clement Oudot <clem.oudot@gmail.com> - 1.4.8-1
-- Update to 1.4.8
-
 * Thu Mar 31 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.1-1
 - Update to 1.9.1
 
-* Thu Mar 17 2016 Clement Oudot <clem.oudot@gmail.com> - 1.4.7-1
-- Update to 1.4.7
-
 * Wed Mar 02 2016 Clement Oudot <clem.oudot@gmail.com> - 1.9.0-1
 - Update to 1.9.0
 

From 076096f85f455be2ca3f190902440660d462ecae Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 9 Jul 2019 11:34:31 +0200
Subject: [PATCH 07/60] Remove outdated comments

---
 rpm/lemonldap-ng.spec | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 942d4d1be..f7ad639d9 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -1,11 +1,3 @@
-#==============================================================================
-# Specification file for LemonLDAP::NG
-#
-# Install LemonLDAP::NG modules, htdocs and scripts
-# Authority: dries
-# Upstream: Xavier Guimard <x,guimard$free,fr>
-#==============================================================================
-
 #==============================================================================
 # Variables
 #==============================================================================

From 240fee1041eb6e935b05f5e200dc9433ca5b5c29 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 5 Nov 2019 14:17:55 +0100
Subject: [PATCH 08/60] Factorize Requires filtering

---
 rpm/lemonldap-ng.spec | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index f7ad639d9..5c9c65bdc 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -168,14 +168,9 @@ Requires: lemonldap-ng-portal = %{version}-%{release}
 Requires: lemonldap-ng-test = %{version}-%{release}
 
 # Setup requires filtering
-%if 0%{?rhel} >= 7
 %{?perl_default_filter}
-%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven
-%endif
+%{?el7:%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven}
 
-%if 0%{?fedora}
-%{?perl_default_filter}
-%endif
 
 %description
 LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It

From 228642f3786023a7cc7a30b80824c7ff3c39ee01 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 5 Nov 2019 14:31:46 +0100
Subject: [PATCH 09/60] Add Requires filtering for EL8

---
 rpm/lemonldap-ng.spec | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 5c9c65bdc..a0a88537d 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -170,6 +170,7 @@ Requires: lemonldap-ng-test = %{version}-%{release}
 # Setup requires filtering
 %{?perl_default_filter}
 %{?el7:%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven}
+%{?el8:%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven}
 
 
 %description

From 4d94f941f72b12f5770ba8dac0787fddf2992c57 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Tue, 5 Nov 2019 14:33:13 +0100
Subject: [PATCH 10/60] Enable Sentry::Raven and Web::ID for EL8

---
 rpm/lemonldap-ng.spec | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index a0a88537d..1720a958d 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -134,7 +134,7 @@ BuildRequires:  perl(Regexp::Assemble)
 BuildRequires:  perl(Regexp::Common)
 BuildRequires:  perl(Safe)
 BuildRequires:  perl(Scalar::Util)
-%if 0%{?fedora}
+%if 0%{?fedora}%{?el8}
 BuildRequires:  perl(Sentry::Raven)
 %endif
 BuildRequires:  perl(SOAP::Lite)
@@ -151,7 +151,7 @@ BuildRequires:  perl(URI::Escape)
 BuildRequires:  perl(URI::URL)
 BuildRequires:  perl(utf8)
 BuildRequires:  perl(warnings)
-%if 0%{?fedora}
+%if 0%{?fedora}%{?el8}
 BuildRequires:  perl(Web::ID)
 %endif
 BuildRequires:  perl(XML::LibXML)
@@ -170,7 +170,7 @@ Requires: lemonldap-ng-test = %{version}-%{release}
 # Setup requires filtering
 %{?perl_default_filter}
 %{?el7:%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven}
-%{?el8:%global __requires_exclude perl\\(Lasso|perl\\(Web::ID|perl\\(Sentry::Raven}
+%{?el8:%global __requires_exclude perl\\(Lasso}
 
 
 %description

From b9e2151fcb52eb2546afda76c8ed2f37be14bec2 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Fri, 8 Nov 2019 13:50:59 +0100
Subject: [PATCH 11/60] Explicitely declare some BR:s that were pulled in
 implicitely

---
 rpm/lemonldap-ng.spec | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 1720a958d..f955c939d 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -74,6 +74,7 @@ BuildRequires:  perl(Crypt::OpenSSL::RSA)
 BuildRequires:  perl(Crypt::OpenSSL::X509)
 BuildRequires:  perl(Crypt::Rijndael)
 BuildRequires:  perl(Crypt::URandom)
+BuildRequires:  perl(Cwd)
 BuildRequires:  perl(Data::Dumper)
 BuildRequires:  perl(DBI)
 BuildRequires:  perl(Digest::HMAC_SHA1)
@@ -99,10 +100,14 @@ BuildRequires:  perl(Getopt::Std)
 BuildRequires:  perl(GSSAPI)
 BuildRequires:  perl(HTML::Template)
 BuildRequires:  perl(HTTP::Headers)
+BuildRequires:  perl(HTTP::Message)
 BuildRequires:  perl(HTTP::Request)
+BuildRequires:  perl(Image::Magick)
+BuildRequires:  perl(IO::Pipe)
 BuildRequires:  perl(IO::Select)
 BuildRequires:  perl(IO::Socket::INET)
 BuildRequires:  perl(IO::String)
+BuildRequires:  perl(IPC::Run)
 BuildRequires:  perl(JSON)
 BuildRequires:  perl(JSON::XS)
 %if 0%{?fedora}
@@ -144,6 +149,7 @@ BuildRequires:  perl(String::Random)
 BuildRequires:  perl(Sys::Syslog)
 BuildRequires:  perl(Test::MockObject)
 BuildRequires:  perl(Test::Pod) >= 1.00
+BuildRequires:  perl(Text::Unidecode)
 BuildRequires:  perl(Time::Local)
 BuildRequires:  perl(Unicode::String)
 BuildRequires:  perl(URI)

From 581d766ddd701499922687fefae11455e4789e64 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Fri, 8 Nov 2019 13:54:41 +0100
Subject: [PATCH 12/60] Add some optional BR:s and corresponding Requires:.

---
 rpm/lemonldap-ng.spec | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index f955c939d..c05933652 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -50,6 +50,7 @@ BuildRequires:  perl(Apache2::RequestUtil)
 BuildRequires:  perl(Apache2::ServerRec)
 BuildRequires:  perl(Apache2::ServerUtil)
 BuildRequires:  perl(Apache::Session)
+BuildRequires:  perl(Apache::Session::Browseable)
 BuildRequires:  perl(Apache::Session::Generate::MD5)
 BuildRequires:  perl(APR::Table)
 BuildRequires:  perl(AuthCAS)
@@ -121,9 +122,13 @@ BuildRequires:  perl(MIME::Base64)
 BuildRequires:  perl(MIME::Entity)
 BuildRequires:  perl(mod_perl2)
 BuildRequires:  perl(Mouse)
+# Not packaged
+# BuildRequires:  perl(Net::Facebook::Oauth2)
 BuildRequires:  perl(Net::LDAP)
 BuildRequires:  perl(Net::LDAP::Extension::SetPassword)
 BuildRequires:  perl(Net::LDAP::Util)
+BuildRequires:  perl(Net::OAuth)
+BuildRequires:  perl(Net::OpenID::Consumer)
 BuildRequires:  perl(Net::OpenID::Server)
 BuildRequires:  perl(Plack)
 BuildRequires:  perl(Plack::Handler::CGI)
@@ -192,6 +197,7 @@ So you can have a full AAA protection for your web space as described below.
 %package conf
 Summary:        LemonLDAP-NG configuration
 Requires:       perl(Apache::Session)
+Requires:       perl(Apache::Session::Browseable)
 Requires:       perl(IO::String)
 Requires:       perl(Lemonldap::NG::Common) = %{version}-%{release}
 Requires:       perl(mod_perl2)
@@ -242,6 +248,10 @@ Summary:        LemonLDAP-NG authentication portal
 Requires:       crontabs
 Requires:       lemonldap-ng-conf = %{version}-%{release}
 Requires:       perl(Lemonldap::NG::Portal) = %{version}-%{release}
+# Not packaged
+#Requires:       perl(Net::Facebook::Oauth2)
+Requires:       perl(Net::OAuth)
+Requires:       perl(Net::OpenID::Consumer)
 
 %description portal
 This package deploys the authentication portal.

From b03479d75475c071552ad44325b3913fa4c54906 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Fri, 6 Dec 2019 16:54:16 +0100
Subject: [PATCH 13/60] Bump release and add changelog entry

---
 rpm/lemonldap-ng.spec | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index c05933652..9e380b9ad 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -29,7 +29,7 @@
 #==============================================================================
 Name:           lemonldap-ng
 Version:        2.0.6
-Release:        %{?pre_release:0.}1%{?pre_release:.%{pre_release}}%{?dist}
+Release:        %{?pre_release:0.}2%{?pre_release:.%{pre_release}}%{?dist}
 Summary:        LemonLDAP-NG WebSSO
 License:        GPLv2+
 URL:            http://lemonldap-ng.org
@@ -645,6 +645,11 @@ fi
 # Changelog
 #==============================================================================
 %changelog
+* Fri Dec 06 2019 Xavier Bachelot <xavier@bachelot.org> - 2.0.6-2
+- Tweak for EL8.
+- Enhance BuildRequires and Requires.
+- Spec clean up.
+
 * Tue Sep 24 2019 Clement Oudot <clem.oudot@gmail.com> - 2.0.6-1
 - Update to 2.0.6
 

From 17e77d90b63ad673bd850a37d12cd2f3da6dc3c8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Fri, 20 Dec 2019 11:31:48 +0100
Subject: [PATCH 14/60] Test if redirect URI in an OIDC RP is defined before
 saving configuration (#2040)

---
 .../lib/Lemonldap/NG/Manager/Conf/Tests.pm    | 22 ++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Tests.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Tests.pm
index 06d36dd0d..46c22ea75 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Tests.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Tests.pm
@@ -4,7 +4,7 @@ use utf8;
 use Lemonldap::NG::Common::Regexp;
 use Lemonldap::NG::Handler::Main;
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 
 ## @method hashref tests(hashref conf)
 # Return a hash ref where keys are the names of the tests and values
@@ -719,6 +719,26 @@ sub tests {
             return 1;
         },
 
+        # OIDC redirect URI must not be empty
+        oidcRPRedirectURINotEmpty => sub {
+            return 1
+              unless ( $conf->{oidcRPMetaDataOptions}
+                and %{ $conf->{oidcRPMetaDataOptions} } );
+            my @msg;
+            my $res = 1;
+            foreach my $oidcRpId ( keys %{ $conf->{oidcRPMetaDataOptions} } ) {
+                unless ( $conf->{oidcRPMetaDataOptions}->{$oidcRpId}
+                    ->{oidcRPMetaDataOptionsRedirectUris} )
+                {
+                    push @msg,
+                      "$oidcRpId OpenID Connect RP has no redirect URI defined";
+                    $res = 0;
+                    next;
+                }
+            }
+            return ( $res, join( ', ', @msg ) );
+        },
+
     };
 }
 

From 4c8d565b333c09c37d80d8b90df315039502411e Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Fri, 20 Dec 2019 12:02:02 +0100
Subject: [PATCH 15/60] Workaround for adfd86d7f

---
 rpm/lemonldap-ng.spec | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 9e380b9ad..a5222efa6 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -541,12 +541,16 @@ fi
 %config(noreplace) %{apache_confdir}/z-lemonldap-ng-manager.conf
 %config(noreplace) %{apache_confdir}/z-lemonldap-ng-portal.conf
 %{_mandir}/man1/convertConfig*
+%if "%{version}" >= "2.0.7"
 %{_mandir}/man1/convertSessions*
+%endif
 %dir %{_libexecdir}/%{name}
 %dir %{lm_sbindir}
 %dir %{lm_bindir}
 %{lm_bindir}/convertConfig
+%if "%{version}" >= "2.0.7"
 %{lm_bindir}/convertSessions
+%endif
 %{lm_bindir}/importMetadata
 %{lm_bindir}/lmMigrateConfFiles2ini
 %{lm_bindir}/rotateOidcKeys

From ab0cf6f59aa1b5506b3bb2caaa3902192749944d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Fri, 20 Dec 2019 15:56:37 +0100
Subject: [PATCH 16/60] Set release 2.0.7 in RPM spec file

---
 rpm/lemonldap-ng.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index a5222efa6..919e3c904 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -28,7 +28,7 @@
 # Main package
 #==============================================================================
 Name:           lemonldap-ng
-Version:        2.0.6
+Version:        2.0.7
 Release:        %{?pre_release:0.}2%{?pre_release:.%{pre_release}}%{?dist}
 Summary:        LemonLDAP-NG WebSSO
 License:        GPLv2+

From ace32efe4aa832f092ba71ac5c422ba54ca6c192 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Fri, 20 Dec 2019 16:07:52 +0100
Subject: [PATCH 17/60] Change defaut value for cspFormAction (#2024)

---
 fastcgi-server/man/llng-fastcgi-server.8p     | 22 +++++++++++--------
 .../Lemonldap/NG/Common/Conf/DefaultValues.pm |  2 +-
 .../lib/Lemonldap/NG/Manager/Attributes.pm    |  2 +-
 .../Lemonldap/NG/Manager/Build/Attributes.pm  |  2 +-
 .../site/htdocs/static/js/conftree.min.js     |  3 ++-
 .../site/htdocs/static/js/conftree.min.js.map |  2 +-
 .../site/htdocs/static/js/sessions.min.js     |  3 ++-
 .../site/htdocs/static/js/sessions.min.js.map |  2 +-
 .../site/htdocs/static/struct.json            |  2 +-
 .../htdocs/static/common/js/portal.min.js     |  3 ++-
 .../htdocs/static/common/js/portal.min.js.map |  2 +-
 .../static/common/js/totpregistration.min.js  |  3 ++-
 .../common/js/totpregistration.min.js.map     |  2 +-
 .../t/28-AuthChoice-with-rules.t              |  4 ++--
 lemonldap-ng-portal/t/test-lib.pm             | 14 +++++++-----
 15 files changed, 40 insertions(+), 28 deletions(-)

diff --git a/fastcgi-server/man/llng-fastcgi-server.8p b/fastcgi-server/man/llng-fastcgi-server.8p
index b3db70536..f9910c337 100644
--- a/fastcgi-server/man/llng-fastcgi-server.8p
+++ b/fastcgi-server/man/llng-fastcgi-server.8p
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man 4.09 (Pod::Simple 3.35)
+.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35)
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -54,16 +54,20 @@
 .\" Avoid warning from groff about undefined register 'F'.
 .de IX
 ..
-.if !\nF .nr F 0
-.if \nF>0 \{\
-.    de IX
-.    tm Index:\\$1\t\\n%\t"\\$2"
+.nr rF 0
+.if \n(.g .if rF .nr rF 1
+.if (\n(rF:(\n(.g==0)) \{\
+.    if \nF \{\
+.        de IX
+.        tm Index:\\$1\t\\n%\t"\\$2"
 ..
-.    if !\nF==2 \{\
-.        nr % 0
-.        nr F 2
+.        if !\nF==2 \{\
+.            nr % 0
+.            nr F 2
+.        \}
 .    \}
 .\}
+.rr rF
 .\"
 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
 .\" Fear.  Run.  Save yourself.  No user-serviceable parts.
@@ -129,7 +133,7 @@
 .\" ========================================================================
 .\"
 .IX Title "llng-fastcgi-server 8"
-.TH llng-fastcgi-server 8 "2019-11-08" "perl v5.26.1" "User Contributed Perl Documentation"
+.TH llng-fastcgi-server 8 "2019-12-11" "perl v5.28.1" "User Contributed Perl Documentation"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
index 3f3a153e4..405996df0 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
@@ -46,7 +46,7 @@ sub defaultValues {
         'cspConnect'                     => '\'self\'',
         'cspDefault'                     => '\'self\'',
         'cspFont'                        => '\'self\'',
-        'cspFormAction'                  => '\'self\'',
+        'cspFormAction'                  => '*',
         'cspImg'                         => '\'self\' data:',
         'cspScript'                      => '\'self\'',
         'cspStyle'                       => '\'self\'',
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
index 909551a90..81415befb 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@@ -1013,7 +1013,7 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
             'type'    => 'text'
         },
         'cspFormAction' => {
-            'default' => '\'self\'',
+            'default' => '*',
             'type'    => 'text'
         },
         'cspImg' => {
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 762f44c7c..3313f41d5 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -835,7 +835,7 @@ sub attributes {
         },
         cspFormAction => {
             type    => 'text',
-            default => "'self'",
+            default => "*",
             documentation =>
               'Form action destination for Content-Security-Policy',
         },
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
index bcbb45f8a..160c7fec9 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
@@ -1 +1,2 @@
-function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
\ No newline at end of file
+function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
+//# sourceMappingURL=lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
index 23f1b0857..f2e0f8531 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,SAASA,UAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,MAAO,CACR,CACGE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,gCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,sCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,4BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,+BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,OAAW,CACR,CACGC,EAAM,qBACNC,EAAM,sBAET,CACGD,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,yBAEb,CACGE,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,mCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,+CAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,OAAW,CACR,CACGC,EAAM,QACNC,EAAM,iBAET,CACGD,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,sBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,QAAY,GACZO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGL,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,UAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,YAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,+BACNC,EAAM,gCAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,OAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,cACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,iBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,iBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,gBAEb,CACGH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,OAAW,CACR,CACGC,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,MACNC,EAAM,OAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,eACNC,EAAM,gBAET,CACGD,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,yBAIb,QACE,MAAO,IAIX,SAASQ,aAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,QAASA,WAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,QAEEE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,iCAGVG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,uCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,6BAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,gCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,SAEMC,EAAM,qBACNC,EAAM,uBAGND,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,0BAGVE,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,oCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,SAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,gDAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,SAEMC,EAAM,QACNC,EAAM,kBAGND,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,sBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,WACAO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,2BAGTC,SAEML,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,WAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,aAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,WACNC,EAAM,aAGND,EAAM,+BACNC,EAAM,iCAGND,EAAM,WACNC,EAAM,aAGND,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,2BAGTC,SAEMA,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,QAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,cACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,kBAGTL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,kBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,iBAGVH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,SAEMC,EAAM,YACNC,EAAM,cAGND,EAAM,MACNC,EAAM,QAGND,EAAM,SACNC,EAAM,WAGND,EAAM,WACNC,EAAM,aAGND,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,WAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,eACNC,EAAM,iBAGND,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,wBAIb,SACE,UAIJ,QAASQ,cAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG","file":"lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js b/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js
index b4dc762c8..30d7af55a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js
@@ -1 +1,2 @@
-(function(){var M,s,f,h;h={_whatToTrace:[function(e,t){return"groupBy=substr("+e+",1)"},function(e,t){return e+"="+t+"*&groupBy="+e},function(e,t){return e+"="+t}],ipAddr:[function(e,t){return"groupBy=net("+e+",16,1)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",32,2)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",48,3)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",128,4)"},function(e,t){return e+"="+t+"&groupBy=_whatToTrace"},function(e,t,n){return n.replace(/\&groupBy.*$/,"")+"&_whatToTrace="+t}],_startTime:[function(e,t){return"groupBy=substr("+e+",8)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",10)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",11)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",12)"},function(e,t){return e+"="+t+"*&groupBy=_whatToTrace"},function(e,t,n){return console.log(e),console.log(t),console.log(n),n.replace(/\&groupBy.*$/,"")+"&_whatToTrace="+t}],doubleIp:[function(e,t){return e},function(e,t){return"_whatToTrace="+t+"&groupBy=ipAddr"},function(e,t,n){return n.replace(/\&groupBy.*$/,"")+"&ipAddr="+t}],_session_uid:[function(e,t){return"groupBy=substr("+e+",1)"},function(e,t){return e+"="+t+"*&groupBy="+e},function(e,t){return e+"="+t}]},f={_whatToTrace:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),1===n&&t.length>o?e+"="+t+"*&groupBy=substr("+e+","+(n+o+1)+")":null},ipAddr:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),0<n&&n<4&&!t.match(/^\d+\.\d/)&&o<2?e+"="+t+"*&groupBy=net("+e+","+(16*n+4*(o+1))+","+(1+n+o)+")":null},_startTime:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),3<n?e+"="+t+"*&groupBy=substr("+e+","+(10+n+o)+")":null},_session_uid:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),1===n&&t.length>o?e+"="+t+"*&groupBy=substr("+e+","+(n+o+1)+")":null}},M={dateTitle:["_utime","_startTime","_updateTime","_lastAuthnUTime","_lastSeen"],connectionTitle:["ipAddr","_timezone","_url"],authenticationTitle:["_session_id","_user","_password","authenticationLevel"],modulesTitle:["_auth","_userDB","_passwordDB","_issuerDB","_authChoice","_authMulti","_userDBMulti"],saml:["_idp","_idpConfKey","_samlToken","_lassoSessionDump","_lassoIdentityDump"],groups:["groups","hGroups"],ldap:["dn"],BrowserID:["_browserIdAnswer","_browserIdAnswerRaw"],OpenIDConnect:["_oidc_id_token","_oidc_OP","_oidc_access_token"],sfaTitle:["_2fDevices"],oidcConsents:["_oidcConsents"]},s={session:[{title:"deleteSession",icon:"trash"}],home:[]},angular.module("llngSessionsExplorer",["ui.tree","ui.bootstrap","llApp"]).controller("SessionsExplorerCtrl",["$scope","$translator","$location","$q","$http",function(H,t,i,e,o){var d,n,r,g;return H.links=links,H.menulinks=menulinks,H.staticPrefix=staticPrefix,H.scriptname=scriptname,H.formPrefix=formPrefix,H.impPrefix=impPrefix,H.sessionTTL=sessionTTL,H.availableLanguages=availableLanguages,H.waiting=!0,H.showM=!1,H.showT=!0,H.data=[],H.currentScope=null,H.currentSession=null,H.menu=s,H.translateP=t.translateP,H.translate=t.translate,H.translateTitle=function(e){return t.translateField(e,"title")},g="global",H.menuClick=function(e){if(e.popup)window.open(e.popup);else switch(e.action||(e.action=e.title),typeof e.action){case"function":e.action(H.currentNode,H);break;case"string":H[e.action]();break;default:console.log(typeof e.action)}return H.showM=!1},H.deleteOIDCConsent=function(e,t){return angular.element(".data-"+t).remove(),H.waiting=!0,o.delete(scriptname+"sessions/OIDCConsent/"+g+"/"+H.currentSession.id+"?rp="+e+"&epoch="+t).then(function(e){return H.waiting=!1},function(e){return H.waiting=!1}),H.showT=!1},H.deleteSession=function(){return H.waiting=!0,o.delete(scriptname+"sessions/"+g+"/"+H.currentSession.id).then(function(e){return H.currentSession=null,H.currentScope.remove(),H.waiting=!1},function(e){return H.currentSession=null,H.currentScope.remove(),H.waiting=!1})},H.stoggle=function(e){var t;return 0===(t=e.$modelValue).nodes.length&&H.updateTree(t.value,t.nodes,t.level,t.over,t.query,t.count),e.toggle()},H.displaySession=function(e){var t,n;return n=function(s){var e,t,n,o,r,i,u,l,a,c,p,d,g,f,h,_,m,T,y,w,v,S,$,B,b,D,L,A,P,x,C,I,k,O,R,E;for(g in e=function(e,t){var n,o,r,i;for(n in r=[],o=new RegExp(e),s)i=s[n],n.match(o)&&i&&(r.push({title:n,value:i}),delete s[n]);if(0<r.length)return P.push({title:t,nodes:r})},k=s._utime,c=s._session_id,s)(E=s[g])?("string"==typeof s&&E.match(/; /)&&(s[g]=E.split("; ")),"object"!=typeof s[g]&&("_password".match(new RegExp("\b"+g+"\b"))?s[g]="********":g.match(/^(_utime|_lastAuthnUTime|_lastSeen|notification)$/)?s[g]=H.localeDate(E):g.match(/^(_startTime|_updateTime)$/)&&(s[g]=H.strToLocaleDate(E)))):delete s[g];for(r in P=[],M){for(I=[],a=0,h=(o=M[r]).length;a<h;a++)if(n=o[a],s[n])if(s[n].toString().match(/"type":\s*"(?:TOTP|U2F|UBK)"/)){for(I.push({title:"type",value:"name",epoch:"date",td:"0"}),p=0,_=(t=JSON.parse(s[n])).length;p<_;p++){for(g in x=t[p])E=x[g],"type"===g&&(O=E),"name"===g&&(S=E),"epoch"===g&&(l=E);I.push({title:O,value:S,epoch:l,td:"1"})}delete s[n]}else if(s[n].toString().match(/"rp":\s*"[\w-]+"/)){for(I.push({title:"rp",value:"scope",epoch:"date",td:"0"}),d=0,m=(t=JSON.parse(s[n])).length;d<m;d++){for(g in B=t[d])E=B[g],"rp"===g&&(O=E),"scope"===g&&(S=E),"epoch"===g&&(l=E);I.push({title:O,value:S,epoch:l,td:"2"})}delete s[n]}else s[n].toString().match(/\w+/)&&I.push({title:n,value:s[n],epoch:""}),delete s[n];else delete s[n];0<I.length&&P.push({title:"__"+r+"__",nodes:I})}if(e("^openid","OpenID"),e("^notification_(.+)","__notificationsDone__"),s._loginHistory){if(R=[],s._loginHistory.successLogin)for(v=0,T=(L=s._loginHistory.successLogin).length;v<T;v++){for(g in i="",f=L[v])E=f[g],g.match(/^(_utime|ipAddr|error)$/)||(i+=", "+g+" : "+E);R.push({t:f._utime,title:H.localeDate(f._utime),value:"Success (IP "+f.ipAddr+")"+i})}if(s._loginHistory.failedLogin)for($=0,y=(A=s._loginHistory.failedLogin).length;$<y;$++){for(g in i="",f=A[$])E=f[g],g.match(/^(_utime|ipAddr|error)$/)||(i+=", "+g+" : "+E);R.push({t:f._utime,title:H.localeDate(f._utime),value:"Error "+f.error+" (IP "+f.ipAddr+")"+i})}delete s._loginHistory,R.sort(function(e,t){return t.t-e.t}),P.push({title:"__loginHistory__",nodes:R})}for(g in R=[],s)E=s[g],R.push({title:g,value:E});for(R.sort(function(e,t){return e.title>t.title?1:e.title<t.title?-1:0}),D=[],C=[],b=0,w=R.length;b<w;b++)(u=R[b]).title.match(new RegExp("^"+H.impPrefix+".+$"))?(console.log(u,"-> real attribute"),D.push(u)):C.push(u);return R=C.concat(D),P.push({title:"__attributesAndMacros__",nodes:R}),{_utime:k,id:c,nodes:P}},t=(H.currentScope=e).$modelValue.session,o.get(scriptname+"sessions/"+g+"/"+t).then(function(e){return H.currentSession=n(e.data)}),H.showT=!1},H.localeDate=function(e){return new Date(1e3*e).toLocaleString()},H.isValid=function(e,t){var n,o,r;return r=i.path(),o=Date.now()/1e3,console.log("Path",r),console.log("Session epoch",e),console.log("Current date",o),console.log("Session TTL",sessionTTL),n=o-e<sessionTTL||i.path().match(/^\/persistent/),"msg"===t?(console.log("Return msg"),n?"info":"warning"):"style"===t?(console.log("Return style"),n?{}:{color:"#627990","font-style":"italic"}):(console.log("Return isValid"),n)},H.strToLocaleDate=function(e){var t;return(t=e.match(/^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})$/)).length?new Date(t[1]+"-"+t[2]+"-"+t[3]+"T"+t[4]+":"+t[5]+":"+t[6]).toLocaleString():e},H.getLanguage=function(e){return H.lang=e,H.form="white",H.init(),H.showM=!1},r=function(e,t,n){var o;return o=t.match(/#!?\/(\w+)/),g="global",null===o?H.type="_whatToTrace":o[1].match(/^(persistent|offline)$/)?(g=RegExp.$1,H.type="_session_uid"):H.type=o[1],H.init()},H.$on("$locationChangeSuccess",r),d=0,H.updateTree=function(s,u,l,a,e,t){var c,p,n;return H.waiting=!0,p=h[H.type]?h[H.type]:"_updateTime"===H.type?h._startTime:h._whatToTrace,c=p[l](H.type,s,e),25<t&&f[H.type]&&(n=f[H.type](H.type,s,l,a,e))?(a++,c=n,l-=1):a=0,o.get(scriptname+"sessions/"+g+"?"+c).then(function(e){var t,n,o,r,i;if((t=e.data).result){for(n=0,o=(i=t.values).length;n<o;n++)r=i[n],d++,r.id="node"+d,l<p.length-1&&(r.nodes=[],r.level=l+1,r.query=c,r.over=a,H.type.match(/^(?:start|update)Time$/)&&(r.title=r.value.replace(/^(\d{8})(\d{2})(\d{2})$/,"$2:$3").replace(/^(\d{8})(\d{2})(\d)$/,"$2:$30").replace(/^(\d{8})(\d{2})$/,"$2h").replace(/^(\d{4})(\d{2})(\d{2})/,"$1-$2-$3"))),u.push(r);""===s&&(H.total=t.total)}return H.waiting=!1},function(e){return H.waiting=!1})},H.init=function(){return H.waiting=!0,H.data=[],H.currentScope=null,H.currentSession=null,e.all([t.init(H.lang),H.updateTree("",H.data,0,0)]).then(function(){return H.waiting=!1},function(e){return H.waiting=!1}),H.activeModule="sessions",H.myStyle={color:"#ffb84d"}},n=i.path().match(/^\/(\w+)/),H.type=n?n[1]:"_whatToTrace"}])}).call(this);
\ No newline at end of file
+(function(){var e,t,n,o,r,i,s;o=25,s={_whatToTrace:[function(e,t){return"groupBy=substr("+e+",1)"},function(e,t){return e+"="+t+"*&groupBy="+e},function(e,t){return e+"="+t}],ipAddr:[function(e,t){return"groupBy=net("+e+",16,1)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",32,2)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",48,3)"},function(e,t){return t.match(/:/)||(t+="."),e+"="+t+"*&groupBy=net("+e+",128,4)"},function(e,t){return e+"="+t+"&groupBy=_whatToTrace"},function(e,t,n){return n.replace(/\&groupBy.*$/,"")+"&_whatToTrace="+t}],_startTime:[function(e,t){return"groupBy=substr("+e+",8)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",10)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",11)"},function(e,t){return e+"="+t+"*&groupBy=substr("+e+",12)"},function(e,t){return e+"="+t+"*&groupBy=_whatToTrace"},function(e,t,n){return console.log(e),console.log(t),console.log(n),n.replace(/\&groupBy.*$/,"")+"&_whatToTrace="+t}],doubleIp:[function(e,t){return e},function(e,t){return"_whatToTrace="+t+"&groupBy=ipAddr"},function(e,t,n){return n.replace(/\&groupBy.*$/,"")+"&ipAddr="+t}],_session_uid:[function(e,t){return"groupBy=substr("+e+",1)"},function(e,t){return e+"="+t+"*&groupBy="+e},function(e,t){return e+"="+t}]},i={_whatToTrace:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),1===n&&t.length>o?e+"="+t+"*&groupBy=substr("+e+","+(n+o+1)+")":null},ipAddr:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),n>0&&n<4&&!t.match(/^\d+\.\d/)&&o<2?e+"="+t+"*&groupBy=net("+e+","+(16*n+4*(o+1))+","+(1+n+o)+")":null},_startTime:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),n>3?e+"="+t+"*&groupBy=substr("+e+","+(10+n+o)+")":null},_session_uid:function(e,t,n,o){return console.log("overScheme => level",n,"over",o),1===n&&t.length>o?e+"="+t+"*&groupBy=substr("+e+","+(n+o+1)+")":null}},t="_password",e={dateTitle:["_utime","_startTime","_updateTime","_lastAuthnUTime","_lastSeen"],connectionTitle:["ipAddr","_timezone","_url"],authenticationTitle:["_session_id","_user","_password","authenticationLevel"],modulesTitle:["_auth","_userDB","_passwordDB","_issuerDB","_authChoice","_authMulti","_userDBMulti"],saml:["_idp","_idpConfKey","_samlToken","_lassoSessionDump","_lassoIdentityDump"],groups:["groups","hGroups"],ldap:["dn"],BrowserID:["_browserIdAnswer","_browserIdAnswerRaw"],OpenIDConnect:["_oidc_id_token","_oidc_OP","_oidc_access_token"],sfaTitle:["_2fDevices"],oidcConsents:["_oidcConsents"]},r={session:[{title:"deleteSession",icon:"trash"}],home:[]},n=angular.module("llngSessionsExplorer",["ui.tree","ui.bootstrap","llApp"]),n.controller("SessionsExplorerCtrl",["$scope","$translator","$location","$q","$http",function(n,u,l,a,c){var p,d,g,f;return n.links=links,n.menulinks=menulinks,n.staticPrefix=staticPrefix,n.scriptname=scriptname,n.formPrefix=formPrefix,n.impPrefix=impPrefix,n.sessionTTL=sessionTTL,n.availableLanguages=availableLanguages,n.waiting=!0,n.showM=!1,n.showT=!0,n.data=[],n.currentScope=null,n.currentSession=null,n.menu=r,n.translateP=u.translateP,n.translate=u.translate,n.translateTitle=function(e){return u.translateField(e,"title")},f="global",n.menuClick=function(e){if(e.popup)window.open(e.popup);else switch(e.action||(e.action=e.title),typeof e.action){case"function":e.action(n.currentNode,n);break;case"string":n[e.action]();break;default:console.log(typeof e.action)}return n.showM=!1},n.deleteOIDCConsent=function(e,t){var o;return o=angular.element(".data-"+t),o.remove(),n.waiting=!0,c.delete(scriptname+"sessions/OIDCConsent/"+f+"/"+n.currentSession.id+"?rp="+e+"&epoch="+t).then(function(e){return n.waiting=!1},function(e){return n.waiting=!1}),n.showT=!1},n.deleteSession=function(){return n.waiting=!0,c.delete(scriptname+"sessions/"+f+"/"+n.currentSession.id).then(function(e){return n.currentSession=null,n.currentScope.remove(),n.waiting=!1},function(e){return n.currentSession=null,n.currentScope.remove(),n.waiting=!1})},n.stoggle=function(e){var t;return t=e.$modelValue,0===t.nodes.length&&n.updateTree(t.value,t.nodes,t.level,t.over,t.query,t.count),e.toggle()},n.displaySession=function(o){var r,i;return i=function(o){var r,i,s,u,l,a,c,p,d,g,f,h,_,m,T,y,w,v,S,$,B,b,D,L,A,P,x,C,I,k,O,R,E,H,M,U;r=function(e,t){var n,r,i,s;i=[],r=new RegExp(e);for(n in o)s=o[n],n.match(r)&&s&&(i.push({title:n,value:s}),delete o[n]);if(i.length>0)return I.push({title:t,nodes:i})},E=o._utime,g=o._session_id;for(_ in o)U=o[_],U?("string"==typeof o&&U.match(/; /)&&(o[_]=U.split("; ")),"object"!=typeof o[_]&&(t.match(new RegExp("\b"+_+"\b"))?o[_]="********":_.match(/^(_utime|_lastAuthnUTime|_lastSeen|notification)$/)?o[_]=n.localeDate(U):_.match(/^(_startTime|_updateTime)$/)&&(o[_]=n.strToLocaleDate(U)))):delete o[_];I=[];for(l in e){for(u=e[l],R=[],d=0,T=u.length;d<T;d++)if(s=u[d],o[s])if(o[s].toString().match(/"type":\s*"(?:TOTP|U2F|UBK)"/)){for(R.push({title:"type",value:"name",epoch:"date",td:"0"}),i=JSON.parse(o[s]),f=0,y=i.length;f<y;f++){k=i[f];for(_ in k)U=k[_],"type"===_&&(H=U),"name"===_&&(b=U),"epoch"===_&&(p=U);R.push({title:H,value:b,epoch:p,td:"1"})}delete o[s]}else if(o[s].toString().match(/"rp":\s*"[\w-]+"/)){for(R.push({title:"rp",value:"scope",epoch:"date",td:"0"}),i=JSON.parse(o[s]),h=0,w=i.length;h<w;h++){L=i[h];for(_ in L)U=L[_],"rp"===_&&(H=U),"scope"===_&&(b=U),"epoch"===_&&(p=U);R.push({title:H,value:b,epoch:p,td:"2"})}delete o[s]}else o[s].toString().match(/\w+/)?(R.push({title:s,value:o[s],epoch:""}),delete o[s]):delete o[s];else delete o[s];R.length>0&&I.push({title:"__"+l+"__",nodes:R})}if(r("^openid","OpenID"),r("^notification_(.+)","__notificationsDone__"),o._loginHistory){if(M=[],o._loginHistory.successLogin)for(x=o._loginHistory.successLogin,B=0,v=x.length;B<v;B++){m=x[B],a="";for(_ in m)U=m[_],_.match(/^(_utime|ipAddr|error)$/)||(a+=", "+_+" : "+U);M.push({t:m._utime,title:n.localeDate(m._utime),value:"Success (IP "+m.ipAddr+")"+a})}if(o._loginHistory.failedLogin)for(C=o._loginHistory.failedLogin,D=0,S=C.length;D<S;D++){m=C[D],a="";for(_ in m)U=m[_],_.match(/^(_utime|ipAddr|error)$/)||(a+=", "+_+" : "+U);M.push({t:m._utime,title:n.localeDate(m._utime),value:"Error "+m.error+" (IP "+m.ipAddr+")"+a})}delete o._loginHistory,M.sort(function(e,t){return t.t-e.t}),I.push({title:"__loginHistory__",nodes:M})}M=[];for(_ in o)U=o[_],M.push({title:_,value:U});for(M.sort(function(e,t){return e.title>t.title?1:e.title<t.title?-1:0}),P=[],O=[],A=0,$=M.length;A<$;A++)c=M[A],c.title.match(new RegExp("^"+n.impPrefix+".+$"))?(console.log(c,"-> real attribute"),P.push(c)):O.push(c);return M=O.concat(P),I.push({title:"__attributesAndMacros__",nodes:M}),{_utime:E,id:g,nodes:I}},n.currentScope=o,r=o.$modelValue.session,c.get(scriptname+"sessions/"+f+"/"+r).then(function(e){return n.currentSession=i(e.data)}),n.showT=!1},n.localeDate=function(e){var t;return t=new Date(1e3*e),t.toLocaleString()},n.isValid=function(e,t){var n,o,r;return r=l.path(),o=Date.now()/1e3,console.log("Path",r),console.log("Session epoch",e),console.log("Current date",o),console.log("Session TTL",sessionTTL),n=o-e<sessionTTL||l.path().match(/^\/persistent/),"msg"===t?(console.log("Return msg"),n?"info":"warning"):"style"===t?(console.log("Return style"),n?{}:{color:"#627990","font-style":"italic"}):(console.log("Return isValid"),n)},n.strToLocaleDate=function(e){var t,n;return t=e.match(/^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})$/),t.length?(n=new Date(t[1]+"-"+t[2]+"-"+t[3]+"T"+t[4]+":"+t[5]+":"+t[6]),n.toLocaleString()):e},n.getLanguage=function(e){return n.lang=e,n.form="white",n.init(),n.showM=!1},g=function(e,t,o){var r;return r=t.match(/#!?\/(\w+)/),f="global",null===r?n.type="_whatToTrace":r[1].match(/^(persistent|offline)$/)?(f=RegExp.$1,n.type="_session_uid"):n.type=r[1],n.init()},n.$on("$locationChangeSuccess",g),p=0,n.updateTree=function(e,t,r,u,l,a){var d,g,h;return n.waiting=!0,g=s[n.type]?s[n.type]:"_updateTime"===n.type?s._startTime:s._whatToTrace,d=g[r](n.type,e,l),a>o&&i[n.type]&&(h=i[n.type](n.type,e,r,u,l))?(u++,d=h,r-=1):u=0,c.get(scriptname+"sessions/"+f+"?"+d).then(function(o){var i,s,l,a,c;if(i=o.data,i.result){for(c=i.values,s=0,l=c.length;s<l;s++)a=c[s],p++,a.id="node"+p,r<g.length-1&&(a.nodes=[],a.level=r+1,a.query=d,a.over=u,n.type.match(/^(?:start|update)Time$/)&&(a.title=a.value.replace(/^(\d{8})(\d{2})(\d{2})$/,"$2:$3").replace(/^(\d{8})(\d{2})(\d)$/,"$2:$30").replace(/^(\d{8})(\d{2})$/,"$2h").replace(/^(\d{4})(\d{2})(\d{2})/,"$1-$2-$3"))),t.push(a);""===e&&(n.total=i.total)}return n.waiting=!1},function(e){return n.waiting=!1})},n.init=function(){return n.waiting=!0,n.data=[],n.currentScope=null,n.currentSession=null,a.all([u.init(n.lang),n.updateTree("",n.data,0,0)]).then(function(){return n.waiting=!1},function(e){return n.waiting=!1}),n.activeModule="sessions",n.myStyle={color:"#ffb84d"}},d=l.path().match(/^\/(\w+)/),n.type=d?d[1]:"_whatToTrace"}])}).call(this);
+//# sourceMappingURL=lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js.map
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js.map b/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js.map
index 9ec9d9ca9..70d77ef0f 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js.map
+++ b/lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/sessions.js"],"names":["categories","menu","overScheme","schemes","_whatToTrace","t","v","ipAddr","match","q","replace","_startTime","console","log","doubleIp","_session_uid","level","over","length","dateTitle","connectionTitle","authenticationTitle","modulesTitle","saml","groups","ldap","BrowserID","OpenIDConnect","sfaTitle","oidcConsents","session","title","icon","home","angular","module","controller","$scope","$translator","$location","$q","$http","autoId","c","pathEvent","sessionType","links","menulinks","staticPrefix","scriptname","formPrefix","impPrefix","sessionTTL","availableLanguages","waiting","showM","showT","data","currentScope","currentSession","translateP","translate","translateTitle","node","translateField","menuClick","button","popup","window","open","action","currentNode","deleteOIDCConsent","rp","epoch","element","remove","id","then","response","resp","deleteSession","stoggle","scope","$modelValue","nodes","updateTree","value","query","count","toggle","displaySession","sessionId","transformSession","_insert","array","attr","attrs","category","cv","i","j","k","key","l","len","len1","len2","len3","len4","len5","m","name","o","oidcConsent","p","real","ref","ref1","res","sfDevice","spoof","subres","time","tmp","re","reg","RegExp","push","_utime","_session_id","split","localeDate","strToLocaleDate","toString","td","JSON","parse","_loginHistory","successLogin","failedLogin","error","sort","a","b","concat","get","s","Date","toLocaleString","isValid","type","now","path","color","font-style","arrayDate","getLanguage","lang","form","init","event","next","current","n","$1","$on","currentQuery","scheme","result","values","total","all","activeModule","myStyle","call","this"],"mappings":"CAMA,WACE,IAAIA,EAA0CC,EAAMC,EAAYC,EAIhEA,EAAU,CACRC,aAAc,CACZ,SAASC,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,aAAeD,GACnC,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,IAGrBC,OAAQ,CACN,SAASF,EAAGC,GACV,MAAO,eAAiBD,EAAI,UAC3B,SAASA,EAAGC,GAIb,OAHKA,EAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,UAC3C,SAASA,EAAGC,GAIb,OAHKA,EAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,UAC3C,SAASA,EAAGC,GAIb,OAHKA,EAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,WAC3C,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,yBACpB,SAASD,EAAGC,EAAGG,GAChB,OAAOA,EAAEC,QAAQ,eAAgB,IAAO,iBAAmBJ,IAG/DK,WAAY,CACV,SAASN,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,0BACpB,SAASD,EAAGC,EAAGG,GAIhB,OAHAG,QAAQC,IAAIR,GACZO,QAAQC,IAAIP,GACZM,QAAQC,IAAIJ,GACLA,EAAEC,QAAQ,eAAgB,IAAO,iBAAmBJ,IAG/DQ,SAAU,CACR,SAAST,EAAGC,GACV,OAAOD,GACN,SAASA,EAAGC,GACb,MAAO,gBAAkBA,EAAI,mBAC5B,SAASD,EAAGC,EAAGG,GAChB,OAAOA,EAAEC,QAAQ,eAAgB,IAAO,WAAaJ,IAGzDS,aAAc,CACZ,SAASV,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,EAAI,aAAeD,GACnC,SAASA,EAAGC,GACb,OAAOD,EAAI,IAAMC,KAKvBJ,EAAa,CACXE,aAAc,SAASC,EAAGC,EAAGU,EAAOC,GAElC,OADAL,QAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACpC,IAAVD,GAAeV,EAAEY,OAASD,EACrBZ,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAOW,EAAQC,EAAO,GAAK,IAEnE,MAGXV,OAAQ,SAASF,EAAGC,EAAGU,EAAOC,GAE5B,OADAL,QAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACtC,EAARD,GAAaA,EAAQ,IAAMV,EAAEE,MAAM,aAAeS,EAAO,EACpDZ,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,KAAO,GAAKW,EAAQ,GAAKC,EAAO,IAAM,KAAO,EAAID,EAAQC,GAAQ,IAEtG,MAGXN,WAAY,SAASN,EAAGC,EAAGU,EAAOC,GAEhC,OADAL,QAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACtC,EAARD,EACKX,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAO,GAAKW,EAAQC,GAAQ,IAEpE,MAGXF,aAAc,SAASV,EAAGC,EAAGU,EAAOC,GAElC,OADAL,QAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACpC,IAAVD,GAAeV,EAAEY,OAASD,EACrBZ,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAOW,EAAQC,EAAO,GAAK,IAEnE,OAObjB,EAAa,CACXmB,UAAW,CAAC,SAAU,aAAc,cAAe,kBAAmB,aACtEC,gBAAiB,CAAC,SAAU,YAAa,QACzCC,oBAAqB,CAAC,cAAe,QALpB,YAK0C,uBAC3DC,aAAc,CAAC,QAAS,UAAW,cAAe,YAAa,cAAe,aAAc,gBAC5FC,KAAM,CAAC,OAAQ,cAAe,aAAc,oBAAqB,sBACjEC,OAAQ,CAAC,SAAU,WACnBC,KAAM,CAAC,MACPC,UAAW,CAAC,mBAAoB,uBAChCC,cAAe,CAAC,iBAAkB,WAAY,sBAC9CC,SAAU,CAAC,cACXC,aAAc,CAAC,kBAGjB5B,EAAO,CACL6B,QAAS,CACP,CACEC,MAAO,gBACPC,KAAM,UAGVC,KAAM,IAQAC,QAAQC,OAAO,uBAAwB,CAAC,UAAW,eAAgB,UAErEC,WAAW,uBAAwB,CACvC,SAAU,cAAe,YAAa,KAAM,QAAS,SAASC,EAAQC,EAAaC,EAAWC,EAAIC,GAChG,IAAIC,EAAQC,EAAGC,EAAWC,EA+a1B,OA9aAR,EAAOS,MAAQA,MACfT,EAAOU,UAAYA,UACnBV,EAAOW,aAAeA,aACtBX,EAAOY,WAAaA,WACpBZ,EAAOa,WAAaA,WACpBb,EAAOc,UAAYA,UACnBd,EAAOe,WAAaA,WACpBf,EAAOgB,mBAAqBA,mBAC5BhB,EAAOiB,SAAU,EACjBjB,EAAOkB,OAAQ,EACflB,EAAOmB,OAAQ,EACfnB,EAAOoB,KAAO,GACdpB,EAAOqB,aAAe,KACtBrB,EAAOsB,eAAiB,KACxBtB,EAAOpC,KAAOA,EACdoC,EAAOuB,WAAatB,EAAYsB,WAChCvB,EAAOwB,UAAYvB,EAAYuB,UAC/BxB,EAAOyB,eAAiB,SAASC,GAC/B,OAAOzB,EAAY0B,eAAeD,EAAM,UAE1ClB,EAAc,SACdR,EAAO4B,UAAY,SAASC,GAC1B,GAAIA,EAAOC,MACTC,OAAOC,KAAKH,EAAOC,YAKnB,OAHKD,EAAOI,SACVJ,EAAOI,OAASJ,EAAOnC,cAEVmC,EAAOI,QACpB,IAAK,WACHJ,EAAOI,OAAOjC,EAAOkC,YAAalC,GAClC,MACF,IAAK,SACHA,EAAO6B,EAAOI,UACd,MACF,QACE1D,QAAQC,WAAWqD,EAAOI,QAGhC,OAAOjC,EAAOkB,OAAQ,GAExBlB,EAAOmC,kBAAoB,SAASC,EAAIC,GAUtC,OAROxC,QAAQyC,QAAQ,SAAWD,GAC7BE,SACLvC,EAAOiB,SAAU,EACjBb,EAAc,OAAEQ,WAAa,wBAA0BJ,EAAc,IAAMR,EAAOsB,eAAekB,GAAK,OAASJ,EAAK,UAAYC,GAAOI,KAAK,SAASC,GACnJ,OAAO1C,EAAOiB,SAAU,GACvB,SAAS0B,GACV,OAAO3C,EAAOiB,SAAU,IAEnBjB,EAAOmB,OAAQ,GAExBnB,EAAO4C,cAAgB,WAErB,OADA5C,EAAOiB,SAAU,EACVb,EAAc,OAAEQ,WAAa,YAAcJ,EAAc,IAAMR,EAAOsB,eAAekB,IAAIC,KAAK,SAASC,GAG5G,OAFA1C,EAAOsB,eAAiB,KACxBtB,EAAOqB,aAAakB,SACbvC,EAAOiB,SAAU,GACvB,SAAS0B,GAGV,OAFA3C,EAAOsB,eAAiB,KACxBtB,EAAOqB,aAAakB,SACbvC,EAAOiB,SAAU,KAG5BjB,EAAO6C,QAAU,SAASC,GACxB,IAAIpB,EAKJ,OAH0B,KAD1BA,EAAOoB,EAAMC,aACJC,MAAMnE,QACbmB,EAAOiD,WAAWvB,EAAKwB,MAAOxB,EAAKsB,MAAOtB,EAAK/C,MAAO+C,EAAK9C,KAAM8C,EAAKyB,MAAOzB,EAAK0B,OAE7EN,EAAMO,UAEfrD,EAAOsD,eAAiB,SAASR,GAC/B,IAAIS,EAAWC,EAkOf,OAjOAA,EAAmB,SAAS/D,GAC1B,IAAIgE,EAASC,EAAOC,EAAMC,EAAOC,EAAUC,EAAIxB,EAASD,EAAO0B,EAAGvB,EAAIwB,EAAGC,EAAGC,EAAKC,EAAGC,EAAKC,EAAMC,EAAMC,EAAMC,EAAMC,EAAMC,EAAGC,EAAMC,EAAGC,EAAaC,EAAGC,EAAMC,EAAKC,EAAMC,EAAKC,EAAUC,EAAOC,EAAQC,EAAM5F,EAAO6F,EAAKrC,EAwBpN,IAAKgB,KAvBLT,EAAU,SAAS+B,EAAI9F,GACrB,IAAIwE,EAAKuB,EAAKF,EAAKrC,EAGnB,IAAKgB,KAFLqB,EAAM,GACNE,EAAM,IAAIC,OAAOF,GACL/F,EACVyD,EAAQzD,EAAQyE,GACZA,EAAI/F,MAAMsH,IAAQvC,IACpBqC,EAAII,KAAK,CACPjG,MAAOwE,EACPhB,MAAOA,WAEFzD,EAAQyE,IAGnB,GAAiB,EAAbqB,EAAI1G,OACN,OAAOqG,EAAIS,KAAK,CACdjG,MAAOA,EACPsD,MAAOuC,KAIbD,EAAO7F,EAAQmG,OACfpD,EAAK/C,EAAQoG,YACDpG,GACVyD,EAAQzD,EAAQyE,KAIS,iBAAZzE,GAAwByD,EAAM/E,MAAM,QAC7CsB,EAAQyE,GAAOhB,EAAM4C,MAAM,OAED,iBAAjBrG,EAAQyE,KAhJZ,YAiJgB/F,MAAM,IAAIuH,OAAO,KAAOxB,EAAM,OACjDzE,EAAQyE,GAAO,WACNA,EAAI/F,MAAM,qDACnBsB,EAAQyE,GAAOlE,EAAO+F,WAAW7C,GACxBgB,EAAI/F,MAAM,gCACnBsB,EAAQyE,GAAOlE,EAAOgG,gBAAgB9C,aAXnCzD,EAAQyE,GAiBnB,IAAKL,KADLqB,EAAM,GACWvH,EAAY,CAG3B,IADA0H,EAAS,GACJtB,EAAI,EAAGK,GAFZR,EAAQjG,EAAWkG,IAEKhF,OAAQkF,EAAIK,EAAKL,IAEvC,GADAJ,EAAOC,EAAMG,GACTtE,EAAQkE,GACV,GAAIlE,EAAQkE,GAAMsC,WAAW9H,MAAM,gCAAiC,CAQlE,IAPAkH,EAAOM,KAAK,CACVjG,MAAO,OACPwD,MAAO,OACPb,MAAO,OACP6D,GAAI,MAGDlC,EAAI,EAAGK,GADZX,EAAQyC,KAAKC,MAAM3G,EAAQkE,KACF9E,OAAQmF,EAAIK,EAAML,IAAK,CAE9C,IAAKE,KADLiB,EAAWzB,EAAMM,GAEfd,EAAQiC,EAASjB,GACL,SAARA,IACFxE,EAAQwD,GAEE,SAARgB,IACFS,EAAOzB,GAEG,UAARgB,IACF7B,EAAQa,GAGZmC,EAAOM,KAAK,CACVjG,MAAOA,EACPwD,MAAOyB,EACPtC,MAAOA,EACP6D,GAAI,aAGDzG,EAAQkE,QACV,GAAIlE,EAAQkE,GAAMsC,WAAW9H,MAAM,oBAAqB,CAQ7D,IAPAkH,EAAOM,KAAK,CACVjG,MAAO,KACPwD,MAAO,QACPb,MAAO,OACP6D,GAAI,MAGDjC,EAAI,EAAGK,GADZZ,EAAQyC,KAAKC,MAAM3G,EAAQkE,KACF9E,OAAQoF,EAAIK,EAAML,IAAK,CAE9C,IAAKC,KADLW,EAAcnB,EAAMO,GAElBf,EAAQ2B,EAAYX,GACR,OAARA,IACFxE,EAAQwD,GAEE,UAARgB,IACFS,EAAOzB,GAEG,UAARgB,IACF7B,EAAQa,GAGZmC,EAAOM,KAAK,CACVjG,MAAOA,EACPwD,MAAOyB,EACPtC,MAAOA,EACP6D,GAAI,aAGDzG,EAAQkE,QACNlE,EAAQkE,GAAMsC,WAAW9H,MAAM,QACxCkH,EAAOM,KAAK,CACVjG,MAAOiE,EACPT,MAAOzD,EAAQkE,GACftB,MAAO,YAEF5C,EAAQkE,eAKVlE,EAAQkE,GAGC,EAAhB0B,EAAOxG,QACTqG,EAAIS,KAAK,CACPjG,MAAO,KAAOmE,EAAW,KACzBb,MAAOqC,IAMb,GAFA5B,EAAQ,UAAW,UACnBA,EAAQ,qBAAsB,yBAC1BhE,EAAQ4G,cAAe,CAEzB,GADAd,EAAM,GACF9F,EAAQ4G,cAAcC,aAExB,IAAK5B,EAAI,EAAGH,GADZS,EAAMvF,EAAQ4G,cAAcC,cACLzH,OAAQ6F,EAAIH,EAAMG,IAAK,CAG5C,IAAKR,KADLJ,EAAK,GADLK,EAAIa,EAAIN,GAGNxB,EAAQiB,EAAED,GACLA,EAAI/F,MAAM,6BACb2F,GAAM,KAAOI,EAAM,MAAQhB,GAG/BqC,EAAII,KAAK,CACP3H,EAAGmG,EAAEyB,OACLlG,MAAOM,EAAO+F,WAAW5B,EAAEyB,QAC3B1C,MAAQ,eAAiBiB,EAAEjG,OAAS,IAAO4F,IAIjD,GAAIrE,EAAQ4G,cAAcE,YAExB,IAAK3B,EAAI,EAAGJ,GADZS,EAAOxF,EAAQ4G,cAAcE,aACL1H,OAAQ+F,EAAIJ,EAAMI,IAAK,CAG7C,IAAKV,KADLJ,EAAK,GADLK,EAAIc,EAAKL,GAGP1B,EAAQiB,EAAED,GACLA,EAAI/F,MAAM,6BACb2F,GAAM,KAAOI,EAAM,MAAQhB,GAG/BqC,EAAII,KAAK,CACP3H,EAAGmG,EAAEyB,OACLlG,MAAOM,EAAO+F,WAAW5B,EAAEyB,QAC3B1C,MAAQ,SAAWiB,EAAEqC,MAAQ,QAAUrC,EAAEjG,OAAS,IAAO4F,WAIxDrE,EAAQ4G,cACfd,EAAIkB,KAAK,SAASC,EAAGC,GACnB,OAAOA,EAAE3I,EAAI0I,EAAE1I,IAEjBkH,EAAIS,KAAK,CACPjG,MAAO,mBACPsD,MAAOuC,IAIX,IAAKrB,KADLqB,EAAM,GACM9F,EACVyD,EAAQzD,EAAQyE,GAChBqB,EAAII,KAAK,CACPjG,MAAOwE,EACPhB,MAAOA,IAcX,IAXAqC,EAAIkB,KAAK,SAASC,EAAGC,GACnB,OAAID,EAAEhH,MAAQiH,EAAEjH,MACP,EACEgH,EAAEhH,MAAQiH,EAAEjH,OACb,EAED,IAGXqF,EAAO,GACPK,EAAQ,GACHN,EAAI,EAAGL,EAAOc,EAAI1G,OAAQiG,EAAIL,EAAMK,KACvCxC,EAAUiD,EAAIT,IACFpF,MAAMvB,MAAM,IAAIuH,OAAO,IAAM1F,EAAOc,UAAY,SAC1DvC,QAAQC,IAAI8D,EAAS,qBACrByC,EAAKY,KAAKrD,IAEV8C,EAAMO,KAAKrD,GAQf,OALAiD,EAAMH,EAAMwB,OAAO7B,GACnBG,EAAIS,KAAK,CACPjG,MAAO,0BACPsD,MAAOuC,IAEF,CACLK,OAAQN,EACR9C,GAAIA,EACJQ,MAAOkC,IAIX3B,GADAvD,EAAOqB,aAAeyB,GACJC,YAAYtD,QAC9BW,EAAMyG,IAAIjG,WAAa,YAAcJ,EAAc,IAAM+C,GAAWd,KAAK,SAASC,GAChF,OAAO1C,EAAOsB,eAAiBkC,EAAiBd,EAAStB,QAEpDpB,EAAOmB,OAAQ,GAExBnB,EAAO+F,WAAa,SAASe,GAG3B,OADI,IAAIC,KAAS,IAAJD,GACJE,kBAEXhH,EAAOiH,QAAU,SAAS5E,EAAO6E,GAC/B,IAAID,EAASE,EAAKC,EAQlB,OAPAA,EAAOlH,EAAUkH,OACjBD,EAAMJ,KAAKI,MAAQ,IACnB5I,QAAQC,IAAI,OAAQ4I,GACpB7I,QAAQC,IAAI,gBAAiB6D,GAC7B9D,QAAQC,IAAI,eAAgB2I,GAC5B5I,QAAQC,IAAI,cAAeuC,YAC3BkG,EAAUE,EAAM9E,EAAQtB,YAAcb,EAAUkH,OAAOjJ,MAAM,iBAChD,QAAT+I,GACF3I,QAAQC,IAAI,cACRyI,EACK,OAEA,WAES,UAATC,GACT3I,QAAQC,IAAI,gBACRyI,EACK,GAEA,CACLI,MAAS,UACTC,aAAc,YAIlB/I,QAAQC,IAAI,kBACLyI,IAGXjH,EAAOgG,gBAAkB,SAASc,GAChC,IAAIS,EAEJ,OADAA,EAAYT,EAAE3I,MAAM,iDACLU,OAGX,IAAIkI,KAAKQ,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,IACvHP,iBAHAF,GAKX9G,EAAOwH,YAAc,SAASC,GAI5B,OAHAzH,EAAOyH,KAAOA,EACdzH,EAAO0H,KAAO,QACd1H,EAAO2H,OACA3H,EAAOkB,OAAQ,GAExBX,EAAY,SAASqH,EAAOC,EAAMC,GAChC,IAAIC,EAWJ,OAVAA,EAAIF,EAAK1J,MAAM,cACfqC,EAAc,SACJ,OAANuH,EACF/H,EAAOkH,KAAO,eACLa,EAAE,GAAG5J,MAAM,2BACpBqC,EAAckF,OAAOsC,GACrBhI,EAAOkH,KAAO,gBAEdlH,EAAOkH,KAAOa,EAAE,GAEX/H,EAAO2H,QAEhB3H,EAAOiI,IAAI,yBAA0B1H,GACrCF,EAAS,EACTL,EAAOiD,WAAa,SAASC,EAAOxB,EAAM/C,EAAOC,EAAMsJ,EAAc9E,GACnE,IAAID,EAAOgF,EAAQ5C,EAenB,OAdAvF,EAAOiB,SAAU,EACjBkH,EAASrK,EAAQkC,EAAOkH,MAAQpJ,EAAQkC,EAAOkH,MAAwB,gBAAhBlH,EAAOkH,KAAyBpJ,EAAQQ,WAAaR,EAAQC,aACpHoF,EAAQgF,EAAOxJ,GAAOqB,EAAOkH,KAAMhE,EAAOgF,GAtgB1C,GAugBI9E,GAAevF,EAAWmC,EAAOkH,QAC/B3B,EAAM1H,EAAWmC,EAAOkH,MAAMlH,EAAOkH,KAAMhE,EAAOvE,EAAOC,EAAMsJ,KACjEtJ,IACAuE,EAAQoC,EACR5G,GAAgB,GAKlBC,EAAO,EAEFwB,EAAMyG,IAAIjG,WAAa,YAAcJ,EAAc,IAAM2C,GAAOV,KAAK,SAASC,GACnF,IAAItB,EAAM2C,EAAGK,EAAK2D,EAAG/C,EAErB,IADA5D,EAAOsB,EAAStB,MACPgH,OAAQ,CAEf,IAAKrE,EAAI,EAAGK,GADZY,EAAM5D,EAAKiH,QACWxJ,OAAQkF,EAAIK,EAAKL,IACrCgE,EAAI/C,EAAIjB,GACR1D,IACA0H,EAAEvF,GAAK,OAASnC,EACZ1B,EAAQwJ,EAAOtJ,OAAS,IAC1BkJ,EAAE/E,MAAQ,GACV+E,EAAEpJ,MAAQA,EAAQ,EAClBoJ,EAAE5E,MAAQA,EACV4E,EAAEnJ,KAAOA,EACLoB,EAAOkH,KAAK/I,MAAM,4BACpB4J,EAAErI,MAAQqI,EAAE7E,MAAM7E,QAAQ,0BAA2B,SAASA,QAAQ,uBAAwB,UAAUA,QAAQ,mBAAoB,OAAOA,QAAQ,yBAA0B,cAGjLqD,EAAKiE,KAAKoC,GAEE,KAAV7E,IACFlD,EAAOsI,MAAQlH,EAAKkH,OAGxB,OAAOtI,EAAOiB,SAAU,GACvB,SAAS0B,GACV,OAAO3C,EAAOiB,SAAU,KAG5BjB,EAAO2H,KAAO,WAWZ,OAVA3H,EAAOiB,SAAU,EACjBjB,EAAOoB,KAAO,GACdpB,EAAOqB,aAAe,KACtBrB,EAAOsB,eAAiB,KACxBnB,EAAGoI,IAAI,CAACtI,EAAY0H,KAAK3H,EAAOyH,MAAOzH,EAAOiD,WAAW,GAAIjD,EAAOoB,KAAM,EAAG,KAAKqB,KAAK,WACrF,OAAOzC,EAAOiB,SAAU,GACvB,SAAS0B,GACV,OAAO3C,EAAOiB,SAAU,IAE1BjB,EAAOwI,aAAe,WACfxI,EAAOyI,QAAU,CACtBpB,MAAO,YAGX/G,EAAIJ,EAAUkH,OAAOjJ,MAAM,YACpB6B,EAAOkH,KAAO5G,EAAIA,EAAE,GAAK,oBAInCoI,KAAKC"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/sessions.js"],"names":["categories","hiddenAttributes","llapp","max","menu","overScheme","schemes","_whatToTrace","t","v","ipAddr","match","q","replace","_startTime","console","log","doubleIp","_session_uid","level","over","length","dateTitle","connectionTitle","authenticationTitle","modulesTitle","saml","groups","ldap","BrowserID","OpenIDConnect","sfaTitle","oidcConsents","session","title","icon","home","angular","module","controller","$scope","$translator","$location","$q","$http","autoId","c","pathEvent","sessionType","links","menulinks","staticPrefix","scriptname","formPrefix","impPrefix","sessionTTL","availableLanguages","waiting","showM","showT","data","currentScope","currentSession","translateP","translate","translateTitle","node","translateField","menuClick","button","popup","window","open","action","currentNode","deleteOIDCConsent","rp","epoch","item","element","remove","id","then","response","resp","deleteSession","stoggle","scope","$modelValue","nodes","updateTree","value","query","count","toggle","displaySession","sessionId","transformSession","_insert","array","attr","attrs","category","cv","i","j","k","key","l","len","len1","len2","len3","len4","len5","m","name","o","oidcConsent","p","real","ref","ref1","res","sfDevice","spoof","subres","time","tmp","re","reg","RegExp","push","_utime","_session_id","split","localeDate","strToLocaleDate","toString","td","JSON","parse","_loginHistory","successLogin","failedLogin","error","sort","a","b","concat","get","s","d","Date","toLocaleString","isValid","type","now","path","color","font-style","arrayDate","getLanguage","lang","form","init","event","next","current","n","$1","$on","currentQuery","scheme","result","values","total","all","activeModule","myStyle","call","this"],"mappings":"CAMA,WACE,GAAIA,GAAYC,EAAkBC,EAAOC,EAAKC,EAAMC,EAAYC,CAEhEH,GAAM,GAENG,GACEC,cACE,SAASC,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,aAAeD,GACnC,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,IAGrBC,QACE,SAASF,EAAGC,GACV,MAAO,eAAiBD,EAAI,UAC3B,SAASA,EAAGC,GAIb,MAHKA,GAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,UAC3C,SAASA,EAAGC,GAIb,MAHKA,GAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,UAC3C,SAASA,EAAGC,GAIb,MAHKA,GAAEE,MAAM,OACXF,GAAQ,KAEHD,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,WAC3C,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,yBACpB,SAASD,EAAGC,EAAGG,GAChB,MAAOA,GAAEC,QAAQ,eAAgB,IAAO,iBAAmBJ,IAG/DK,YACE,SAASN,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,oBAAsBD,EAAI,QAC9C,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,0BACpB,SAASD,EAAGC,EAAGG,GAIhB,MAHAG,SAAQC,IAAIR,GACZO,QAAQC,IAAIP,GACZM,QAAQC,IAAIJ,GACLA,EAAEC,QAAQ,eAAgB,IAAO,iBAAmBJ,IAG/DQ,UACE,SAAST,EAAGC,GACV,MAAOD,IACN,SAASA,EAAGC,GACb,MAAO,gBAAkBA,EAAI,mBAC5B,SAASD,EAAGC,EAAGG,GAChB,MAAOA,GAAEC,QAAQ,eAAgB,IAAO,WAAaJ,IAGzDS,cACE,SAASV,EAAGC,GACV,MAAO,kBAAoBD,EAAI,OAC9B,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,EAAI,aAAeD,GACnC,SAASA,EAAGC,GACb,MAAOD,GAAI,IAAMC,KAKvBJ,GACEE,aAAc,SAASC,EAAGC,EAAGU,EAAOC,GAElC,MADAL,SAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACpC,IAAVD,GAAeV,EAAEY,OAASD,EACrBZ,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAOW,EAAQC,EAAO,GAAK,IAEnE,MAGXV,OAAQ,SAASF,EAAGC,EAAGU,EAAOC,GAE5B,MADAL,SAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GAC9CD,EAAQ,GAAKA,EAAQ,IAAMV,EAAEE,MAAM,aAAeS,EAAO,EACpDZ,EAAI,IAAMC,EAAI,iBAAmBD,EAAI,KAAO,GAAKW,EAAQ,GAAKC,EAAO,IAAM,KAAO,EAAID,EAAQC,GAAQ,IAEtG,MAGXN,WAAY,SAASN,EAAGC,EAAGU,EAAOC,GAEhC,MADAL,SAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GAC9CD,EAAQ,EACHX,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAO,GAAKW,EAAQC,GAAQ,IAEpE,MAGXF,aAAc,SAASV,EAAGC,EAAGU,EAAOC,GAElC,MADAL,SAAQC,IAAI,sBAAuBG,EAAO,OAAQC,GACpC,IAAVD,GAAeV,EAAEY,OAASD,EACrBZ,EAAI,IAAMC,EAAI,oBAAsBD,EAAI,KAAOW,EAAQC,EAAO,GAAK,IAEnE,OAKbnB,EAAmB,YAEnBD,GACEsB,WAAY,SAAU,aAAc,cAAe,kBAAmB,aACtEC,iBAAkB,SAAU,YAAa,QACzCC,qBAAsB,cAAe,QAAS,YAAa,uBAC3DC,cAAe,QAAS,UAAW,cAAe,YAAa,cAAe,aAAc,gBAC5FC,MAAO,OAAQ,cAAe,aAAc,oBAAqB,sBACjEC,QAAS,SAAU,WACnBC,MAAO,MACPC,WAAY,mBAAoB,uBAChCC,eAAgB,iBAAkB,WAAY,sBAC9CC,UAAW,cACXC,cAAe,kBAGjB5B,GACE6B,UAEIC,MAAO,gBACPC,KAAM,UAGVC,SAQFlC,EAAQmC,QAAQC,OAAO,wBAAyB,UAAW,eAAgB,UAE3EpC,EAAMqC,WAAW,wBACf,SAAU,cAAe,YAAa,KAAM,QAAS,SAASC,EAAQC,EAAaC,EAAWC,EAAIC,GAChG,GAAIC,GAAQC,EAAGC,EAAWC,CA+a1B,OA9aAR,GAAOS,MAAQA,MACfT,EAAOU,UAAYA,UACnBV,EAAOW,aAAeA,aACtBX,EAAOY,WAAaA,WACpBZ,EAAOa,WAAaA,WACpBb,EAAOc,UAAYA,UACnBd,EAAOe,WAAaA,WACpBf,EAAOgB,mBAAqBA,mBAC5BhB,EAAOiB,SAAU,EACjBjB,EAAOkB,OAAQ,EACflB,EAAOmB,OAAQ,EACfnB,EAAOoB,QACPpB,EAAOqB,aAAe,KACtBrB,EAAOsB,eAAiB,KACxBtB,EAAOpC,KAAOA,EACdoC,EAAOuB,WAAatB,EAAYsB,WAChCvB,EAAOwB,UAAYvB,EAAYuB,UAC/BxB,EAAOyB,eAAiB,SAASC,GAC/B,MAAOzB,GAAY0B,eAAeD,EAAM,UAE1ClB,EAAc,SACdR,EAAO4B,UAAY,SAASC,GAC1B,GAAIA,EAAOC,MACTC,OAAOC,KAAKH,EAAOC,WAKnB,QAHKD,EAAOI,SACVJ,EAAOI,OAASJ,EAAOnC,aAEVmC,GAAOI,QACpB,IAAK,WACHJ,EAAOI,OAAOjC,EAAOkC,YAAalC,EAClC,MACF,KAAK,SACHA,EAAO6B,EAAOI,SACd,MACF,SACE1D,QAAQC,UAAWqD,GAAOI,QAGhC,MAAOjC,GAAOkB,OAAQ,GAExBlB,EAAOmC,kBAAoB,SAASC,EAAIC,GACtC,GAAIC,EASJ,OARAA,GAAOzC,QAAQ0C,QAAQ,SAAWF,GAClCC,EAAKE,SACLxC,EAAOiB,SAAU,EACjBb,EAAc,OAAEQ,WAAa,wBAA0BJ,EAAc,IAAMR,EAAOsB,eAAemB,GAAK,OAASL,EAAK,UAAYC,GAAOK,KAAK,SAASC,GACnJ,MAAO3C,GAAOiB,SAAU,GACvB,SAAS2B,GACV,MAAO5C,GAAOiB,SAAU,IAEnBjB,EAAOmB,OAAQ,GAExBnB,EAAO6C,cAAgB,WAErB,MADA7C,GAAOiB,SAAU,EACVb,EAAc,OAAEQ,WAAa,YAAcJ,EAAc,IAAMR,EAAOsB,eAAemB,IAAIC,KAAK,SAASC,GAG5G,MAFA3C,GAAOsB,eAAiB,KACxBtB,EAAOqB,aAAamB,SACbxC,EAAOiB,SAAU,GACvB,SAAS2B,GAGV,MAFA5C,GAAOsB,eAAiB,KACxBtB,EAAOqB,aAAamB,SACbxC,EAAOiB,SAAU,KAG5BjB,EAAO8C,QAAU,SAASC,GACxB,GAAIrB,EAKJ,OAJAA,GAAOqB,EAAMC,YACa,IAAtBtB,EAAKuB,MAAMpE,QACbmB,EAAOkD,WAAWxB,EAAKyB,MAAOzB,EAAKuB,MAAOvB,EAAK/C,MAAO+C,EAAK9C,KAAM8C,EAAK0B,MAAO1B,EAAK2B,OAE7EN,EAAMO,UAEftD,EAAOuD,eAAiB,SAASR,GAC/B,GAAIS,GAAWC,CAkOf,OAjOAA,GAAmB,SAAShE,GAC1B,GAAIiE,GAASC,EAAOC,EAAMC,EAAOC,EAAUC,EAAIxB,EAASF,EAAO2B,EAAGvB,EAAIwB,EAAGC,EAAGC,EAAKC,EAAGC,EAAKC,EAAMC,EAAMC,EAAMC,EAAMC,EAAMC,EAAGC,EAAMC,EAAGC,EAAaC,EAAGC,EAAMC,EAAKC,EAAMC,EAAKC,EAAUC,EAAOC,EAAQC,EAAM7F,EAAO8F,EAAKrC,CACpNO,GAAU,SAAS+B,EAAI/F,GACrB,GAAIyE,GAAKuB,EAAKF,EAAKrC,CACnBqC,MACAE,EAAM,GAAIC,QAAOF,EACjB,KAAKtB,IAAO1E,GACV0D,EAAQ1D,EAAQ0E,GACZA,EAAIhG,MAAMuH,IAAQvC,IACpBqC,EAAII,MACFlG,MAAOyE,EACPhB,MAAOA,UAEF1D,GAAQ0E,GAGnB,IAAIqB,EAAI3G,OAAS,EACf,MAAOsG,GAAIS,MACTlG,MAAOA,EACPuD,MAAOuC,KAIbD,EAAO9F,EAAQoG,OACfpD,EAAKhD,EAAQqG,WACb,KAAK3B,IAAO1E,GACV0D,EAAQ1D,EAAQ0E,GACXhB,GAGoB,gBAAZ1D,IAAwB0D,EAAMhF,MAAM,QAC7CsB,EAAQ0E,GAAOhB,EAAM4C,MAAM,OAED,gBAAjBtG,GAAQ0E,KACb1G,EAAiBU,MAAM,GAAIwH,QAAO,KAAOxB,EAAM,OACjD1E,EAAQ0E,GAAO,WACNA,EAAIhG,MAAM,qDACnBsB,EAAQ0E,GAAOnE,EAAOgG,WAAW7C,GACxBgB,EAAIhG,MAAM,gCACnBsB,EAAQ0E,GAAOnE,EAAOiG,gBAAgB9C,YAXnC1D,GAAQ0E,EAgBnBgB,KACA,KAAKrB,IAAYtG,GAAY,CAG3B,IAFAqG,EAAQrG,EAAWsG,GACnBwB,KACKtB,EAAI,EAAGK,EAAMR,EAAMhF,OAAQmF,EAAIK,EAAKL,IAEvC,GADAJ,EAAOC,EAAMG,GACTvE,EAAQmE,GACV,GAAInE,EAAQmE,GAAMsC,WAAW/H,MAAM,gCAAiC,CAQlE,IAPAmH,EAAOM,MACLlG,MAAO,OACPyD,MAAO,OACPd,MAAO,OACP8D,GAAI,MAENxC,EAAQyC,KAAKC,MAAM5G,EAAQmE,IACtBK,EAAI,EAAGK,EAAOX,EAAM9E,OAAQoF,EAAIK,EAAML,IAAK,CAC9CmB,EAAWzB,EAAMM,EACjB,KAAKE,IAAOiB,GACVjC,EAAQiC,EAASjB,GACL,SAARA,IACFzE,EAAQyD,GAEE,SAARgB,IACFS,EAAOzB,GAEG,UAARgB,IACF9B,EAAQc,EAGZmC,GAAOM,MACLlG,MAAOA,EACPyD,MAAOyB,EACPvC,MAAOA,EACP8D,GAAI,YAGD1G,GAAQmE,OACV,IAAInE,EAAQmE,GAAMsC,WAAW/H,MAAM,oBAAqB,CAQ7D,IAPAmH,EAAOM,MACLlG,MAAO,KACPyD,MAAO,QACPd,MAAO,OACP8D,GAAI,MAENxC,EAAQyC,KAAKC,MAAM5G,EAAQmE,IACtBM,EAAI,EAAGK,EAAOZ,EAAM9E,OAAQqF,EAAIK,EAAML,IAAK,CAC9CY,EAAcnB,EAAMO,EACpB,KAAKC,IAAOW,GACV3B,EAAQ2B,EAAYX,GACR,OAARA,IACFzE,EAAQyD,GAEE,UAARgB,IACFS,EAAOzB,GAEG,UAARgB,IACF9B,EAAQc,EAGZmC,GAAOM,MACLlG,MAAOA,EACPyD,MAAOyB,EACPvC,MAAOA,EACP8D,GAAI,YAGD1G,GAAQmE,OACNnE,GAAQmE,GAAMsC,WAAW/H,MAAM,QACxCmH,EAAOM,MACLlG,MAAOkE,EACPT,MAAO1D,EAAQmE,GACfvB,MAAO,WAEF5C,GAAQmE,UAERnE,GAAQmE,cAGVnE,GAAQmE,EAGf0B,GAAOzG,OAAS,GAClBsG,EAAIS,MACFlG,MAAO,KAAOoE,EAAW,KACzBb,MAAOqC,IAMb,GAFA5B,EAAQ,UAAW,UACnBA,EAAQ,qBAAsB,yBAC1BjE,EAAQ6G,cAAe,CAEzB,GADAd,KACI/F,EAAQ6G,cAAcC,aAExB,IADAtB,EAAMxF,EAAQ6G,cAAcC,aACvB5B,EAAI,EAAGH,EAAOS,EAAIpG,OAAQ8F,EAAIH,EAAMG,IAAK,CAC5CP,EAAIa,EAAIN,GACRZ,EAAK,EACL,KAAKI,IAAOC,GACVjB,EAAQiB,EAAED,GACLA,EAAIhG,MAAM,6BACb4F,GAAM,KAAOI,EAAM,MAAQhB,EAG/BqC,GAAII,MACF5H,EAAGoG,EAAEyB,OACLnG,MAAOM,EAAOgG,WAAW5B,EAAEyB,QAC3B1C,MAAQ,eAAiBiB,EAAElG,OAAS,IAAO6F,IAIjD,GAAItE,EAAQ6G,cAAcE,YAExB,IADAtB,EAAOzF,EAAQ6G,cAAcE,YACxB3B,EAAI,EAAGJ,EAAOS,EAAKrG,OAAQgG,EAAIJ,EAAMI,IAAK,CAC7CT,EAAIc,EAAKL,GACTd,EAAK,EACL,KAAKI,IAAOC,GACVjB,EAAQiB,EAAED,GACLA,EAAIhG,MAAM,6BACb4F,GAAM,KAAOI,EAAM,MAAQhB,EAG/BqC,GAAII,MACF5H,EAAGoG,EAAEyB,OACLnG,MAAOM,EAAOgG,WAAW5B,EAAEyB,QAC3B1C,MAAQ,SAAWiB,EAAEqC,MAAQ,QAAUrC,EAAElG,OAAS,IAAO6F,UAIxDtE,GAAQ6G,cACfd,EAAIkB,KAAK,SAASC,EAAGC,GACnB,MAAOA,GAAE5I,EAAI2I,EAAE3I,IAEjBmH,EAAIS,MACFlG,MAAO,mBACPuD,MAAOuC,IAGXA,IACA,KAAKrB,IAAO1E,GACV0D,EAAQ1D,EAAQ0E,GAChBqB,EAAII,MACFlG,MAAOyE,EACPhB,MAAOA,GAcX,KAXAqC,EAAIkB,KAAK,SAASC,EAAGC,GACnB,MAAID,GAAEjH,MAAQkH,EAAElH,MACP,EACEiH,EAAEjH,MAAQkH,EAAElH,OACb,EAED,IAGXsF,KACAK,KACKN,EAAI,EAAGL,EAAOc,EAAI3G,OAAQkG,EAAIL,EAAMK,IACvCxC,EAAUiD,EAAIT,GACVxC,EAAQ7C,MAAMvB,MAAM,GAAIwH,QAAO,IAAM3F,EAAOc,UAAY,SAC1DvC,QAAQC,IAAI+D,EAAS,qBACrByC,EAAKY,KAAKrD,IAEV8C,EAAMO,KAAKrD,EAQf,OALAiD,GAAMH,EAAMwB,OAAO7B,GACnBG,EAAIS,MACFlG,MAAO,0BACPuD,MAAOuC,KAGPK,OAAQN,EACR9C,GAAIA,EACJQ,MAAOkC,IAGXnF,EAAOqB,aAAe0B,EACtBS,EAAYT,EAAMC,YAAYvD,QAC9BW,EAAM0G,IAAIlG,WAAa,YAAcJ,EAAc,IAAMgD,GAAWd,KAAK,SAASC,GAChF,MAAO3C,GAAOsB,eAAiBmC,EAAiBd,EAASvB,QAEpDpB,EAAOmB,OAAQ,GAExBnB,EAAOgG,WAAa,SAASe,GAC3B,GAAIC,EAEJ,OADAA,GAAI,GAAIC,MAAS,IAAJF,GACNC,EAAEE,kBAEXlH,EAAOmH,QAAU,SAAS9E,EAAO+E,GAC/B,GAAID,GAASE,EAAKC,CAQlB,OAPAA,GAAOpH,EAAUoH,OACjBD,EAAMJ,KAAKI,MAAQ,IACnB9I,QAAQC,IAAI,OAAQ8I,GACpB/I,QAAQC,IAAI,gBAAiB6D,GAC7B9D,QAAQC,IAAI,eAAgB6I,GAC5B9I,QAAQC,IAAI,cAAeuC,YAC3BoG,EAAUE,EAAMhF,EAAQtB,YAAcb,EAAUoH,OAAOnJ,MAAM,iBAChD,QAATiJ,GACF7I,QAAQC,IAAI,cACR2I,EACK,OAEA,WAES,UAATC,GACT7I,QAAQC,IAAI,gBACR2I,MAIAI,MAAS,UACTC,aAAc,YAIlBjJ,QAAQC,IAAI,kBACL2I,IAGXnH,EAAOiG,gBAAkB,SAASc,GAChC,GAAIU,GAAWT,CAEf,OADAS,GAAYV,EAAE5I,MAAM,gDACfsJ,EAAU5I,QAGfmI,EAAI,GAAIC,MAAKQ,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,GAAK,IAAMA,EAAU,IACzHT,EAAEE,kBAHAH,GAKX/G,EAAO0H,YAAc,SAASC,GAI5B,MAHA3H,GAAO2H,KAAOA,EACd3H,EAAO4H,KAAO,QACd5H,EAAO6H,OACA7H,EAAOkB,OAAQ,GAExBX,EAAY,SAASuH,EAAOC,EAAMC,GAChC,GAAIC,EAWJ,OAVAA,GAAIF,EAAK5J,MAAM,cACfqC,EAAc,SACJ,OAANyH,EACFjI,EAAOoH,KAAO,eACLa,EAAE,GAAG9J,MAAM,2BACpBqC,EAAcmF,OAAOuC,GACrBlI,EAAOoH,KAAO,gBAEdpH,EAAOoH,KAAOa,EAAE,GAEXjI,EAAO6H,QAEhB7H,EAAOmI,IAAI,yBAA0B5H,GACrCF,EAAS,EACTL,EAAOkD,WAAa,SAASC,EAAOzB,EAAM/C,EAAOC,EAAMwJ,EAAc/E,GACnE,GAAID,GAAOiF,EAAQ7C,CAenB,OAdAxF,GAAOiB,SAAU,EACjBoH,EAASvK,EAAQkC,EAAOoH,MAAQtJ,EAAQkC,EAAOoH,MAAwB,gBAAhBpH,EAAOoH,KAAyBtJ,EAAQQ,WAAaR,EAAQC,aACpHqF,EAAQiF,EAAO1J,GAAOqB,EAAOoH,KAAMjE,EAAOiF,GACtC/E,EAAQ1F,GAAOE,EAAWmC,EAAOoH,QAC/B5B,EAAM3H,EAAWmC,EAAOoH,MAAMpH,EAAOoH,KAAMjE,EAAOxE,EAAOC,EAAMwJ,KACjExJ,IACAwE,EAAQoC,EACR7G,GAAgB,GAKlBC,EAAO,EAEFwB,EAAM0G,IAAIlG,WAAa,YAAcJ,EAAc,IAAM4C,GAAOV,KAAK,SAASC,GACnF,GAAIvB,GAAM4C,EAAGK,EAAK4D,EAAGhD,CAErB,IADA7D,EAAOuB,EAASvB,KACZA,EAAKkH,OAAQ,CAEf,IADArD,EAAM7D,EAAKmH,OACNvE,EAAI,EAAGK,EAAMY,EAAIpG,OAAQmF,EAAIK,EAAKL,IACrCiE,EAAIhD,EAAIjB,GACR3D,IACA4H,EAAExF,GAAK,OAASpC,EACZ1B,EAAQ0J,EAAOxJ,OAAS,IAC1BoJ,EAAEhF,SACFgF,EAAEtJ,MAAQA,EAAQ,EAClBsJ,EAAE7E,MAAQA,EACV6E,EAAErJ,KAAOA,EACLoB,EAAOoH,KAAKjJ,MAAM,4BACpB8J,EAAEvI,MAAQuI,EAAE9E,MAAM9E,QAAQ,0BAA2B,SAASA,QAAQ,uBAAwB,UAAUA,QAAQ,mBAAoB,OAAOA,QAAQ,yBAA0B,cAGjLqD,EAAKkE,KAAKqC,EAEE,MAAV9E,IACFnD,EAAOwI,MAAQpH,EAAKoH,OAGxB,MAAOxI,GAAOiB,SAAU,GACvB,SAAS2B,GACV,MAAO5C,GAAOiB,SAAU,KAG5BjB,EAAO6H,KAAO,WAWZ,MAVA7H,GAAOiB,SAAU,EACjBjB,EAAOoB,QACPpB,EAAOqB,aAAe,KACtBrB,EAAOsB,eAAiB,KACxBnB,EAAGsI,KAAKxI,EAAY4H,KAAK7H,EAAO2H,MAAO3H,EAAOkD,WAAW,GAAIlD,EAAOoB,KAAM,EAAG,KAAKsB,KAAK,WACrF,MAAO1C,GAAOiB,SAAU,GACvB,SAAS2B,GACV,MAAO5C,GAAOiB,SAAU,IAE1BjB,EAAO0I,aAAe,WACf1I,EAAO2I,SACZpB,MAAO,YAGXjH,EAAIJ,EAAUoH,OAAOnJ,MAAM,YACpB6B,EAAOoH,KAAO9G,EAAIA,EAAE,GAAK,oBAInCsI,KAAKC","file":"lemonldap-ng-manager/site/htdocs/static/js/sessions.min.js"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index 6c3127c85..e33cfa02e 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"'self'","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
diff --git a/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js b/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js
index f5b43a2e0..150913fda 100644
--- a/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js
+++ b/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js
@@ -1 +1,2 @@
-(function(){var L,e,E,P,S,D,I,_,t,C,h,o,N,s,A=[].indexOf||function(t){for(var e=0,n=this.length;e<n;e++)if(e in this&&this[e]===t)return e;return-1};s={},N=function(i){return $.getJSON(window.staticPrefix+"languages/"+i+".json",function(t){var e,n,a,r;for(e in s=t,n=window.datas.trOver.all)r=n[e],s[e]=r;if(window.datas.trOver[i])for(e in a=window.datas.trOver[i])r=a[e],s[e]=r;return $("[trspan]").each(function(){var t,e,n,a;for(t=$(this).attr("trspan").split(","),a=o(t.shift()),e=0,n=t.length;e<n;e++)r=t[e],a=a.replace(/%[sd]/,r);return $(this).html(a)}),$("[trmsg]").each(function(){if($(this).html(o("PE"+$(this).attr("trmsg"))),o("PE"+$(this).attr("trmsg")).match(/_hide_/))return $(this).parent().hide()}),$("[trplaceholder]").each(function(){return $(this).attr("placeholder",o($(this).attr("trplaceholder")))}),$("[localtime]").each(function(){var t;return t=new Date(1e3*$(this).attr("localtime")),$(this).text(t.toLocaleString())})})},o=function(t){return s[t]?s[t]:t},window.translate=o,P=function(){var r;return r={},$("script[type='application/init']").each(function(){var e,t,n,a;try{for(t in a=JSON.parse($(this).text()),n=[],a)n.push(r[t]=a[t]);return n}catch(t){return e=t,console.log("Parsing error",e),console.log("JSON",$(this).text())}}),console.log(r),r},h="#appslist",C=function(){return t("_appsListOrder",$(h).sortable("toArray").join())},D=function(t){return e("_oidcConsents",t,function(){return $("[partner='"+t+"']").hide()},function(t,e,n){return alert(e+" "+n)})},t=function(n,a,r,i){return $.ajax({type:"GET",url:L.scriptname+"/mysession/?gettoken",dataType:"json",error:i,success:function(t){var e;return(e={token:t.token})[n]=a,$.ajax({type:"PUT",url:L.scriptname+"/mysession/persistent",dataType:"json",data:e,success:r,error:i})}})},e=function(e,n,a,r){return $.ajax({type:"GET",url:L.scriptname+"/mysession/?gettoken",dataType:"json",error:r,success:function(t){return $.ajax({type:"DELETE",url:L.scriptname+"/mysession/persistent/"+e+"?sub="+n+"&token="+t.token,dataType:"json",success:a,error:r})}})},I=function(){var t,e,n,a,r,i,o,s,l,u,c,g,p;if(null==(u=$(h))||!L.appslistorder)return null;for(t=L.appslistorder.split(","),c=[],n=0,s=(i=u.sortable("toArray")).length;n<s;n++)c[p=i[n]]=p;for(o=0,l=t.length;o<l;o++)c[r=t[o]]&&(a=c[r],e=$(h+".ui-sortable").children("#"+a),g=$(h+".ui-sortable").children("#"+r),e.remove(),$(h+".ui-sortable").filter(":first").append(g));return 1},S=function(){return $.ajax({type:"POST",url:L.scriptname,data:{ping:1},dataType:"json",success:function(t){return null!=t.result&&1===t.result?setTimeout(S,L.pingInterval):location.reload(!0)},error:function(t,e,n){return location.reload(!0)}})},window.ping=S,E=function(t){var e,n,a,r,i;for(t+"=",n=decodeURIComponent(document.cookie).split(";"),i=new RegExp("^ *"+t+"="),a=0,r=n.length;a<r;a++)if((e=n[a]).match(i))return e=e.replace(i,"");return""},_=function(t,e,n){var a;return(a=new Date).setTime(a.getTime()+864e5*n),document.cookie=t+"="+e+"; expires="+a.toUTCString()+"; path=/"},L={},$(window).on("load",function(){var t,e,n,a,r,i,o,s,l,u,c,g,p,h,f,d,m,v,w,b,y,x,T,O,j,k;if(L=P(),window.datas=L,$("#appslist").sortable({axis:"y",cursor:"move",opacity:.5,revert:!0,items:"> div.category",update:function(){return C()}}),I(),$("div.message").fadeIn("slow"),$("input[name=timezone]").val(-(new Date).getTimezoneOffset()/60),v=$("#menu").tabs({active:0}),(m=$('#menu a[href="#'+L.displaytab+'"]').parent().index())<0&&(m=0),v.tabs("option","active",m),n=$("#authMenu").tabs({active:0}),L.choicetab&&n.tabs("option","active",$('#authMenu a[href="#'+L.choicetab+'"]').parent().index()),L.login?$("input[type=password]:first").focus():0===$("input[autofocus]").length&&$("input[type!=hidden]:first").focus(),L.newwindow&&$("#appslist a").attr("target","_blank"),$("p.removeOther").length&&(t=$("form.login").attr("action"),w=$("form.login").attr("method"),a="",-1!==t.indexOf("?")?t.substring(0,t.indexOf("?")):a=t+"?",$("form.login input[type=hidden]").each(function(t){return a+="&"+$(this).attr("name")+"="+$(this).val()}),f=$("p.removeOther a").attr("href")+"&method="+w+"&url="+btoa(a),$("p.removeOther a").attr("href",f)),o=E("llnglanguage"))A.call(window.availableLanguages,o)<0&&(o=window.availableLanguages[0]);else if(navigator){for(l=[],u=[],x=[navigator.language],navigator.languages&&(x=navigator.languages),r=0,c=(O=window.availableLanguages).length;r<c;r++)e=O[r],s+='<img class="langicon" src="'+window.staticPrefix+"common/"+e+'.png" title="'+e+'" alt="['+e+']"> ';for(i=0,g=x.length;i<g;i++)for(y=x[i],console.log("Navigator lang",y),d=0,p=(j=window.availableLanguages).length;d<p;d++)e=j[d],console.log(" Available lang",e),T=new RegExp("^"+e+"-?"),y.match(T)?(console.log("  Matching lang =",e),l.push(e)):e.substring(0,1)===y.substring(0,1)&&u.push(e);o=l[0]?l[0]:u[0]?u[0]:window.availableLanguages[0]}else o=window.availableLanguages[0];for(console.log("Selected lang ->",o),_("llnglanguage",o),N(o),s="",b=0,h=(k=window.availableLanguages).length;b<h;b++)e=k[b],s+='<img class="langicon" src="'+window.staticPrefix+"common/"+e+'.png" title="'+e+'" alt="['+e+']"> ';return $("#languages").html(s),$(".langicon").on("click",function(){return o=$(this).attr("title"),_("llnglanguage",o),N(o)}),L.pingInterval&&0<L.pingInterval&&window.setTimeout(S,L.pingInterval),$(".localeDate").each(function(){var t;return t=new Date(1e3*$(this).attr("val")),$(this).text(t.toLocaleString())}),$(".oidcConsent").on("click",function(){return D($(this).attr("partner"))})})}).call(this);
\ No newline at end of file
+(function(){var t,e,n,a,r,i,o,s,l,u,c,g,p,h,f=[].indexOf||function(t){for(var e=0,n=this.length;e<n;e++)if(e in this&&this[e]===t)return e;return-1};h={},p=function(t){return $.getJSON(window.staticPrefix+"languages/"+t+".json",function(e){var n,a,r,i;h=e,a=window.datas.trOver.all;for(n in a)i=a[n],h[n]=i;if(window.datas.trOver[t]){r=window.datas.trOver[t];for(n in r)i=r[n],h[n]=i}return $("[trspan]").each(function(){var t,e,n,a;for(t=$(this).attr("trspan").split(","),a=g(t.shift()),e=0,n=t.length;e<n;e++)i=t[e],a=a.replace(/%[sd]/,i);return $(this).html(a)}),$("[trmsg]").each(function(){var t;if($(this).html(g("PE"+$(this).attr("trmsg"))),t=g("PE"+$(this).attr("trmsg")),t.match(/_hide_/))return $(this).parent().hide()}),$("[trplaceholder]").each(function(){return $(this).attr("placeholder",g($(this).attr("trplaceholder")))}),$("[localtime]").each(function(){var t;return t=new Date(1e3*$(this).attr("localtime")),$(this).text(t.toLocaleString())})})},g=function(t){return h[t]?h[t]:t},window.translate=g,a=function(){var t;return t={},$("script[type='application/init']").each(function(){var e,n,a,r;try{r=JSON.parse($(this).text()),a=[];for(n in r)a.push(t[n]=r[n]);return a}catch(t){return e=t,console.log("Parsing error",e),console.log("JSON",$(this).text())}}),console.log(t),t},c="#appslist",u=function(){return l("_appsListOrder",$(c).sortable("toArray").join())},i=function(t){var n;return n=function(t,e,n){return alert(e+" "+n)},e("_oidcConsents",t,function(){return $("[partner='"+t+"']").hide()},n)},l=function(e,n,a,r){return $.ajax({type:"GET",url:t.scriptname+"/mysession/?gettoken",dataType:"json",error:r,success:function(i){var o;return o={token:i.token},o[e]=n,$.ajax({type:"PUT",url:t.scriptname+"/mysession/persistent",dataType:"json",data:o,success:a,error:r})}})},e=function(e,n,a,r){return $.ajax({type:"GET",url:t.scriptname+"/mysession/?gettoken",dataType:"json",error:r,success:function(i){return $.ajax({type:"DELETE",url:t.scriptname+"/mysession/persistent/"+e+"?sub="+n+"&token="+i.token,dataType:"json",success:a,error:r})}})},o=function(){var e,n,a,r,i,o,s,l,u,g,p,h,f;if(null==(g=$(c))||!t.appslistorder)return null;for(e=t.appslistorder.split(","),o=g.sortable("toArray"),p=[],a=0,l=o.length;a<l;a++)f=o[a],p[f]=f;for(s=0,u=e.length;s<u;s++)i=e[s],p[i]&&(r=p[i],n=$(c+".ui-sortable").children("#"+r),h=$(c+".ui-sortable").children("#"+i),n.remove(),$(c+".ui-sortable").filter(":first").append(h));return 1},r=function(){return $.ajax({type:"POST",url:t.scriptname,data:{ping:1},dataType:"json",success:function(e){return null!=e.result&&1===e.result?setTimeout(r,t.pingInterval):location.reload(!0)},error:function(t,e,n){return location.reload(!0)}})},window.ping=r,n=function(t){var e,n,a,r,i;for(t+"=",n=decodeURIComponent(document.cookie).split(";"),i=new RegExp("^ *"+t+"="),a=0,r=n.length;a<r;a++)if(e=n[a],e.match(i))return e=e.replace(i,"");return""},s=function(t,e,n){var a;return a=new Date,a.setTime(a.getTime()+864e5*n),document.cookie=t+"="+e+"; expires="+a.toUTCString()+"; path=/"},t={},$(window).on("load",function(){var e,l,c,g,h,d,m,v,w,b,y,x,T,O,j,k,L,E,P,S,D,I,_,C,N,A;if(t=a(),window.datas=t,$("#appslist").sortable({axis:"y",cursor:"move",opacity:.5,revert:!0,items:"> div.category",update:function(){return u()}}),o(),$("div.message").fadeIn("slow"),$("input[name=timezone]").val(-(new Date).getTimezoneOffset()/60),E=$("#menu").tabs({active:0}),L=$('#menu a[href="#'+t.displaytab+'"]').parent().index(),L<0&&(L=0),E.tabs("option","active",L),c=$("#authMenu").tabs({active:0}),t.choicetab&&c.tabs("option","active",$('#authMenu a[href="#'+t.choicetab+'"]').parent().index()),t.login?$("input[type=password]:first").focus():0===$("input[autofocus]").length&&$("input[type!=hidden]:first").focus(),t.newwindow&&$("#appslist a").attr("target","_blank"),$("p.removeOther").length&&(e=$("form.login").attr("action"),P=$("form.login").attr("method"),g="",-1!==e.indexOf("?")?e.substring(0,e.indexOf("?")):g=e+"?",$("form.login input[type=hidden]").each(function(t){return g+="&"+$(this).attr("name")+"="+$(this).val()}),j=$("p.removeOther a").attr("href")+"&method="+P+"&url="+btoa(g),$("p.removeOther a").attr("href",j)),m=n("llnglanguage"))f.call(window.availableLanguages,m)<0&&(m=window.availableLanguages[0]);else if(navigator){for(w=[],b=[],I=[navigator.language],navigator.languages&&(I=navigator.languages),C=window.availableLanguages,h=0,y=C.length;h<y;h++)l=C[h],v+='<img class="langicon" src="'+window.staticPrefix+"common/"+l+'.png" title="'+l+'" alt="['+l+']"> ';for(d=0,x=I.length;d<x;d++)for(D=I[d],console.log("Navigator lang",D),N=window.availableLanguages,k=0,T=N.length;k<T;k++)l=N[k],console.log(" Available lang",l),_=new RegExp("^"+l+"-?"),D.match(_)?(console.log("  Matching lang =",l),w.push(l)):l.substring(0,1)===D.substring(0,1)&&b.push(l);m=w[0]?w[0]:b[0]?b[0]:window.availableLanguages[0]}else m=window.availableLanguages[0];for(console.log("Selected lang ->",m),s("llnglanguage",m),p(m),v="",A=window.availableLanguages,S=0,O=A.length;S<O;S++)l=A[S],v+='<img class="langicon" src="'+window.staticPrefix+"common/"+l+'.png" title="'+l+'" alt="['+l+']"> ';return $("#languages").html(v),$(".langicon").on("click",function(){return m=$(this).attr("title"),s("llnglanguage",m),p(m)}),t.pingInterval&&t.pingInterval>0&&window.setTimeout(r,t.pingInterval),$(".localeDate").each(function(){var t;return t=new Date(1e3*$(this).attr("val")),$(this).text(t.toLocaleString())}),$(".oidcConsent").on("click",function(){return i($(this).attr("partner"))})})}).call(this);
+//# sourceMappingURL=lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js.map
\ No newline at end of file
diff --git a/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js.map b/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js.map
index a69ffd8fd..8a83a201b 100644
--- a/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js.map
+++ b/lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-portal/site/htdocs/static/common/js/portal.js"],"names":["datas","delKey","getCookie","getValues","ping","removeOidcConsent","restoreOrder","setCookie","setKey","setOrder","setSelector","translate","translatePage","translationFields","indexOf","item","i","l","this","length","lang","$","getJSON","window","staticPrefix","data","k","ref","ref1","v","trOver","all","each","args","len","txt","attr","split","shift","replace","html","match","parent","hide","d","Date","text","toLocaleString","str","values","e","results","tmp","JSON","parse","push","error1","console","log","sortable","join","partner","j","s","alert","key","val","success","error","ajax","type","url","dataType","token","sub","IDs","child","itemID","items","len1","list","rebuild","savedOrd","children","remove","filter","append","result","setTimeout","location","reload","t","cname","c","ca","re","decodeURIComponent","document","cookie","RegExp","name","value","exdays","setTime","getTime","toUTCString","on","action","al","authMenuTabs","back_url","langdiv","langs","langs2","len2","len3","link","m","menuIndex","menuTabs","method","n","nl","nlangs","ref2","axis","cursor","opacity","revert","update","fadeIn","getTimezoneOffset","tabs","active","index","focus","substring","btoa","call","availableLanguages","navigator","language","languages"],"mappings":"CAMA,WACE,IAAIA,EAAOC,EAAQC,EAAWC,EAAiCC,EAAMC,EAAmBC,EAAcC,EAAWC,EAAQC,EAAUC,EAAaC,EAAWC,EAAeC,EACxKC,EAAU,GAAGA,SAAW,SAASC,GAAQ,IAAK,IAAIC,EAAI,EAAGC,EAAIC,KAAKC,OAAQH,EAAIC,EAAGD,IAAO,GAAIA,KAAKE,MAAQA,KAAKF,KAAOD,EAAM,OAAOC,EAAK,OAAQ,GAEjJH,EAAoB,GAEpBD,EAAgB,SAASQ,GACvB,OAAOC,EAAEC,QAAQC,OAAOC,aAAe,aAAeJ,EAAO,QAAS,SAASK,GAC7E,IAAIC,EAAGC,EAAKC,EAAMC,EAGlB,IAAKH,KAFLb,EAAoBY,EACpBE,EAAMJ,OAAOvB,MAAM8B,OAAOC,IAExBF,EAAIF,EAAID,GACRb,EAAkBa,GAAKG,EAEzB,GAAIN,OAAOvB,MAAM8B,OAAOV,GAEtB,IAAKM,KADLE,EAAOL,OAAOvB,MAAM8B,OAAOV,GAEzBS,EAAID,EAAKF,GACTb,EAAkBa,GAAKG,EAwB3B,OArBAR,EAAE,YAAYW,KAAK,WACjB,IAAIC,EAAMjB,EAAGkB,EAAKC,EAGlB,IAFAF,EAAOZ,EAAEH,MAAMkB,KAAK,UAAUC,MAAM,KACpCF,EAAMxB,EAAUsB,EAAKK,SAChBtB,EAAI,EAAGkB,EAAMD,EAAKd,OAAQH,EAAIkB,EAAKlB,IACtCa,EAAII,EAAKjB,GACTmB,EAAMA,EAAII,QAAQ,QAASV,GAE7B,OAAOR,EAAEH,MAAMsB,KAAKL,KAEtBd,EAAE,WAAWW,KAAK,WAIhB,GAFAX,EAAEH,MAAMsB,KAAK7B,EAAU,KAAQU,EAAEH,MAAMkB,KAAK,WACtCzB,EAAU,KAAQU,EAAEH,MAAMkB,KAAK,UAC7BK,MAAM,UACZ,OAAOpB,EAAEH,MAAMwB,SAASC,SAG5BtB,EAAE,mBAAmBW,KAAK,WACxB,OAAOX,EAAEH,MAAMkB,KAAK,cAAezB,EAAUU,EAAEH,MAAMkB,KAAK,qBAErDf,EAAE,eAAeW,KAAK,WAC3B,IAAIY,EAEJ,OADAA,EAAI,IAAIC,KAAiC,IAA5BxB,EAAEH,MAAMkB,KAAK,cACnBf,EAAEH,MAAM4B,KAAKF,EAAEG,uBAK5BpC,EAAY,SAASqC,GACnB,OAAInC,EAAkBmC,GACbnC,EAAkBmC,GAElBA,GAIXzB,OAAOZ,UAAYA,EAEnBR,EAAY,WACV,IAAI8C,EAkBJ,OAjBAA,EAAS,GACT5B,EAAE,mCAAmCW,KAAK,WACxC,IAAIkB,EAAGxB,EAAGyB,EAASC,EACnB,IAGE,IAAK1B,KAFL0B,EAAMC,KAAKC,MAAMjC,EAAEH,MAAM4B,QACzBK,EAAU,GACAC,EACRD,EAAQI,KAAKN,EAAOvB,GAAK0B,EAAI1B,IAE/B,OAAOyB,EACP,MAAOK,GAGP,OAFAN,EAAIM,EACJC,QAAQC,IAAI,gBAAiBR,GACtBO,QAAQC,IAAI,OAAQrC,EAAEH,MAAM4B,WAGvCW,QAAQC,IAAIT,GACLA,GAGTvC,EAAc,YAEdD,EAAW,WACT,OAAOD,EAAO,iBAAkBa,EAAEX,GAAaiD,SAAS,WAAWC,SAGrEvD,EAAoB,SAASwD,GAK3B,OAAO5D,EAAO,gBAAiB4D,EAAS,WACtC,OAAOxC,EAAE,aAAewC,EAAU,MAAMlB,QAJtC,SAASmB,EAAGC,EAAGb,GACjB,OAAOc,MAAMD,EAAI,IAAMb,MAO3B1C,EAAS,SAASyD,EAAKC,EAAKC,EAASC,GACnC,OAAO/C,EAAEgD,KAAK,CACZC,KAAM,MACNC,IAAKvE,EAAkB,WAAI,uBAC3BwE,SAAU,OACVJ,MAAOA,EACPD,QAAS,SAAS1C,GAChB,IAAImB,EAKJ,OAJAA,EAAI,CACF6B,MAAOhD,EAAKgD,QAEZR,GAAOC,EACF7C,EAAEgD,KAAK,CACZC,KAAM,MACNC,IAAKvE,EAAkB,WAAI,wBAC3BwE,SAAU,OACV/C,KAAMmB,EACNuB,QAASA,EACTC,MAAOA,QAMfnE,EAAS,SAASgE,EAAKS,EAAKP,EAASC,GACnC,OAAO/C,EAAEgD,KAAK,CACZC,KAAM,MACNC,IAAKvE,EAAkB,WAAI,uBAC3BwE,SAAU,OACVJ,MAAOA,EACPD,QAAS,SAAS1C,GAChB,OAAOJ,EAAEgD,KAAK,CACZC,KAAM,SACNC,IAAKvE,EAAkB,WAAI,yBAA2BiE,EAAM,QAAUS,EAAM,UAAYjD,EAAKgD,MAC7FD,SAAU,OACVL,QAASA,EACTC,MAAOA,QAMf9D,EAAe,WACb,IAAIqE,EAAKC,EAAO5D,EAAGD,EAAM8D,EAAQC,EAAO7D,EAAGiB,EAAK6C,EAAMC,EAAMC,EAASC,EAAUrD,EAE/E,GAAe,OADfmD,EAAO3D,EAAEX,MACeV,EAAqB,cAC3C,OAAO,KAKT,IAHA2E,EAAM3E,EAAqB,cAAEqC,MAAM,KAEnC4C,EAAU,GACLjE,EAAI,EAAGkB,GAFZ4C,EAAQE,EAAKrB,SAAS,YAEExC,OAAQH,EAAIkB,EAAKlB,IAEvCiE,EADApD,EAAIiD,EAAM9D,IACGa,EAEf,IAAKZ,EAAI,EAAG8D,EAAOJ,EAAIxD,OAAQF,EAAI8D,EAAM9D,IAEnCgE,EADJJ,EAASF,EAAI1D,MAEXF,EAAOkE,EAAQJ,GACfD,EAAQvD,EAAEX,EAAc,gBAAgByE,SAAS,IAAMpE,GACvDmE,EAAW7D,EAAEX,EAAc,gBAAgByE,SAAS,IAAMN,GAC1DD,EAAMQ,SACN/D,EAAEX,EAAc,gBAAgB2E,OAAO,UAAUC,OAAOJ,IAG5D,OAAO,GAOT9E,EAAO,WACL,OAAOiB,EAAEgD,KAAK,CACZC,KAAM,OACNC,IAAKvE,EAAkB,WACvByB,KAAM,CACJrB,KAAM,GAERoE,SAAU,OACVL,QAAS,SAAS1C,GAChB,OAAoB,MAAfA,EAAK8D,QAAmC,IAAhB9D,EAAK8D,OACzBC,WAAWpF,EAAMJ,EAAoB,cAErCyF,SAASC,QAAO,IAG3BtB,MAAO,SAASN,EAAG6B,EAAGzC,GACpB,OAAOuC,SAASC,QAAO,OAK7BnE,OAAOnB,KAAOA,EAEdF,EAAY,SAAS0F,GACnB,IAAIC,EAAGC,EAAI9E,EAAGkB,EAAW6D,EAIzB,IAHOH,EAAQ,IACfE,EAAKE,mBAAmBC,SAASC,QAAQ7D,MAAM,KAC/C0D,EAAK,IAAII,OAAO,MAAQP,EAAQ,KAC3B5E,EAAI,EAAGkB,EAAM4D,EAAG3E,OAAQH,EAAIkB,EAAKlB,IAEpC,IADA6E,EAAIC,EAAG9E,IACDyB,MAAMsD,GAEV,OADAF,EAAIA,EAAEtD,QAAQwD,EAAI,IAItB,MAAO,IAGTxF,EAAY,SAAS6F,EAAMC,EAAOC,GAChC,IAAI1D,EAGJ,OAFAA,EAAI,IAAIC,MACN0D,QAAQ3D,EAAE4D,UAAqB,MAATF,GACjBL,SAASC,OAASE,EAAO,IAAMC,EAAQ,aAAgBzD,EAAE6D,cAAiB,YAGnFzG,EAAQ,GAERqB,EAAEE,QAAQmF,GAAG,OAAQ,WACnB,IAAIC,EAAQC,EAAIC,EAAcC,EAAU9F,EAAGC,EAAGG,EAAM2F,EAASC,EAAOC,EAAQ/E,EAAK6C,EAAMmC,EAAMC,EAAMC,EAAMC,EAAGC,EAAWC,EAAUC,EAAQC,EAAGC,EAAIC,EAAQ5B,EAAIpE,EAAKC,EAAMgG,EAwDvK,GAvDA5H,EAAQG,IACRoB,OAAOvB,MAAQA,EACfqB,EAAE,aAAasC,SAAS,CACtBkE,KAAM,IACNC,OAAQ,OACRC,QAAS,GACTC,QAAQ,EACRlD,MAAO,iBACPmD,OAAQ,WACN,OAAOxH,OAGXH,IACAe,EAAE,eAAe6G,OAAO,QACxB7G,EAAE,wBAAwB6C,MAAM,IAAIrB,MAAOsF,oBAAsB,IACjEZ,EAAWlG,EAAE,SAAS+G,KAAK,CACzBC,OAAQ,KAEVf,EAAYjG,EAAE,kBAAoBrB,EAAkB,WAAI,MAAM0C,SAAS4F,SACvD,IACdhB,EAAY,GAEdC,EAASa,KAAK,SAAU,SAAUd,GAClCT,EAAexF,EAAE,aAAa+G,KAAK,CACjCC,OAAQ,IAENrI,EAAiB,WACnB6G,EAAauB,KAAK,SAAU,SAAU/G,EAAE,sBAAwBrB,EAAiB,UAAI,MAAM0C,SAAS4F,SAElGtI,EAAa,MACfqB,EAAE,8BAA8BkH,QAEK,IAAjClH,EAAE,oBAAoBF,QACxBE,EAAE,6BAA6BkH,QAG/BvI,EAAiB,WACnBqB,EAAE,eAAee,KAAK,SAAU,UAE9Bf,EAAE,iBAAiBF,SACrBwF,EAAStF,EAAE,cAAce,KAAK,UAC9BoF,EAASnG,EAAE,cAAce,KAAK,UAC9B0E,EAAW,IACkB,IAAzBH,EAAO7F,QAAQ,KACjB6F,EAAO6B,UAAU,EAAG7B,EAAO7F,QAAQ,MAEnCgG,EAAWH,EAAS,IAEtBtF,EAAE,iCAAiCW,KAAK,SAASsG,GAC/C,OAAOxB,GAAY,IAAMzF,EAAEH,MAAMkB,KAAK,QAAU,IAAMf,EAAEH,MAAMgD,QAEhEkD,EAAO/F,EAAE,mBAAmBe,KAAK,QAAU,WAAaoF,EAAS,QAAUiB,KAAK3B,GAChFzF,EAAE,mBAAmBe,KAAK,OAAQgF,IAEpChG,EAAOlB,EAAU,gBAkCNY,EAAQ4H,KAAKnH,OAAOoH,mBAAoBvH,GAAQ,IACzDA,EAAOG,OAAOoH,mBAAmB,SAjCjC,GAAIC,UAAW,CAQb,IAPA5B,EAAQ,GACRC,EAAS,GACTU,EAAS,CAACiB,UAAUC,UAChBD,UAAUE,YACZnB,EAASiB,UAAUE,WAGhB9H,EAAI,EAAGkB,GADZP,EAAMJ,OAAOoH,oBACSxH,OAAQH,EAAIkB,EAAKlB,IACrC4F,EAAKjF,EAAIX,GACT+F,GAAW,8BAAmCxF,OAAOC,aAAe,UAAYoF,EAAK,gBAAoBA,EAAK,WAAeA,EAAK,OAEpI,IAAK3F,EAAI,EAAG8D,EAAO4C,EAAOxG,OAAQF,EAAI8D,EAAM9D,IAI1C,IAHAyG,EAAKC,EAAO1G,GACZwC,QAAQC,IAAI,iBAAkBgE,GAEzBL,EAAI,EAAGH,GADZtF,EAAOL,OAAOoH,oBACUxH,OAAQkG,EAAIH,EAAMG,IACxCT,EAAKhF,EAAKyF,GACV5D,QAAQC,IAAI,kBAAmBkD,GAC/Bb,EAAK,IAAII,OAAO,IAAMS,EAAK,MACvBc,EAAGjF,MAAMsD,IACXtC,QAAQC,IAAI,oBAAqBkD,GACjCI,EAAMzD,KAAKqD,IACFA,EAAG4B,UAAU,EAAG,KAAOd,EAAGc,UAAU,EAAG,IAChDvB,EAAO1D,KAAKqD,GAIlBxF,EAAO4F,EAAM,GAAKA,EAAM,GAAKC,EAAO,GAAKA,EAAO,GAAK1F,OAAOoH,mBAAmB,QAE/EvH,EAAOG,OAAOoH,mBAAmB,GAUrC,IALAlF,QAAQC,IAAI,mBAAoBtC,GAChCb,EAAU,eAAgBa,GAC1BR,EAAcQ,GACd2F,EAAU,GAELU,EAAI,EAAGN,GADZS,EAAOrG,OAAOoH,oBACUxH,OAAQsG,EAAIN,EAAMM,IACxCb,EAAKgB,EAAKH,GACVV,GAAW,8BAAmCxF,OAAOC,aAAe,UAAYoF,EAAK,gBAAoBA,EAAK,WAAeA,EAAK,OAgBpI,OAdAvF,EAAE,cAAcmB,KAAKuE,GACrB1F,EAAE,aAAaqF,GAAG,QAAS,WAGzB,OAFAtF,EAAOC,EAAEH,MAAMkB,KAAK,SACpB7B,EAAU,eAAgBa,GACnBR,EAAcQ,KAEnBpB,EAAoB,cAA6B,EAAxBA,EAAoB,cAC/CuB,OAAOiE,WAAWpF,EAAMJ,EAAoB,cAE9CqB,EAAE,eAAeW,KAAK,WACpB,IAAI+B,EAEJ,OADAA,EAAI,IAAIlB,KAA2B,IAAtBxB,EAAEH,MAAMkB,KAAK,QACnBf,EAAEH,MAAM4B,KAAKiB,EAAEhB,oBAEjB1B,EAAE,gBAAgBqF,GAAG,QAAS,WACnC,OAAOrG,EAAkBgB,EAAEH,MAAMkB,KAAK,kBAIzCsG,KAAKxH"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-portal/site/htdocs/static/common/js/portal.js"],"names":["datas","delKey","getCookie","getValues","ping","removeOidcConsent","restoreOrder","setCookie","setKey","setOrder","setSelector","translate","translatePage","translationFields","indexOf","item","i","l","this","length","lang","$","getJSON","window","staticPrefix","data","k","ref","ref1","v","trOver","all","each","args","len","txt","attr","split","shift","replace","html","msg","match","parent","hide","d","Date","text","toLocaleString","str","values","e","results","tmp","JSON","parse","push","error1","console","log","sortable","join","partner","j","s","alert","key","val","success","error","ajax","type","url","dataType","token","sub","IDs","child","itemID","items","len1","list","rebuild","savedOrd","children","remove","filter","append","result","setTimeout","location","reload","t","cname","c","ca","re","decodeURIComponent","document","cookie","RegExp","name","value","exdays","setTime","getTime","toUTCString","on","action","al","authMenuTabs","back_url","langdiv","langs","langs2","len2","len3","link","m","menuIndex","menuTabs","method","n","nl","nlangs","ref2","axis","cursor","opacity","revert","update","fadeIn","getTimezoneOffset","tabs","active","index","focus","substring","btoa","call","availableLanguages","navigator","language","languages"],"mappings":"CAMA,WACE,GAAIA,GAAOC,EAAQC,EAAWC,EAAiCC,EAAMC,EAAmBC,EAAcC,EAAWC,EAAQC,EAAUC,EAAaC,EAAWC,EAAeC,EACxKC,KAAaA,SAAW,SAASC,GAAQ,IAAK,GAAIC,GAAI,EAAGC,EAAIC,KAAKC,OAAQH,EAAIC,EAAGD,IAAO,GAAIA,IAAKE,OAAQA,KAAKF,KAAOD,EAAM,MAAOC,EAAK,QAAQ,EAEjJH,MAEAD,EAAgB,SAASQ,GACvB,MAAOC,GAAEC,QAAQC,OAAOC,aAAe,aAAeJ,EAAO,QAAS,SAASK,GAC7E,GAAIC,GAAGC,EAAKC,EAAMC,CAClBhB,GAAoBY,EACpBE,EAAMJ,OAAOvB,MAAM8B,OAAOC,GAC1B,KAAKL,IAAKC,GACRE,EAAIF,EAAID,GACRb,EAAkBa,GAAKG,CAEzB,IAAIN,OAAOvB,MAAM8B,OAAOV,GAAO,CAC7BQ,EAAOL,OAAOvB,MAAM8B,OAAOV,EAC3B,KAAKM,IAAKE,GACRC,EAAID,EAAKF,GACTb,EAAkBa,GAAKG,EAwB3B,MArBAR,GAAE,YAAYW,KAAK,WACjB,GAAIC,GAAMjB,EAAGkB,EAAKC,CAGlB,KAFAF,EAAOZ,EAAEH,MAAMkB,KAAK,UAAUC,MAAM,KACpCF,EAAMxB,EAAUsB,EAAKK,SAChBtB,EAAI,EAAGkB,EAAMD,EAAKd,OAAQH,EAAIkB,EAAKlB,IACtCa,EAAII,EAAKjB,GACTmB,EAAMA,EAAII,QAAQ,QAASV,EAE7B,OAAOR,GAAEH,MAAMsB,KAAKL,KAEtBd,EAAE,WAAWW,KAAK,WAChB,GAAIS,EAGJ,IAFApB,EAAEH,MAAMsB,KAAK7B,EAAU,KAAQU,EAAEH,MAAMkB,KAAK,WAC5CK,EAAM9B,EAAU,KAAQU,EAAEH,MAAMkB,KAAK,UACjCK,EAAIC,MAAM,UACZ,MAAOrB,GAAEH,MAAMyB,SAASC,SAG5BvB,EAAE,mBAAmBW,KAAK,WACxB,MAAOX,GAAEH,MAAMkB,KAAK,cAAezB,EAAUU,EAAEH,MAAMkB,KAAK,qBAErDf,EAAE,eAAeW,KAAK,WAC3B,GAAIa,EAEJ,OADAA,GAAI,GAAIC,MAAiC,IAA5BzB,EAAEH,MAAMkB,KAAK,cACnBf,EAAEH,MAAM6B,KAAKF,EAAEG,uBAK5BrC,EAAY,SAASsC,GACnB,MAAIpC,GAAkBoC,GACbpC,EAAkBoC,GAElBA,GAIX1B,OAAOZ,UAAYA,EAEnBR,EAAY,WACV,GAAI+C,EAkBJ,OAjBAA,MACA7B,EAAE,mCAAmCW,KAAK,WACxC,GAAImB,GAAGzB,EAAG0B,EAASC,CACnB,KACEA,EAAMC,KAAKC,MAAMlC,EAAEH,MAAM6B,QACzBK,IACA,KAAK1B,IAAK2B,GACRD,EAAQI,KAAKN,EAAOxB,GAAK2B,EAAI3B,GAE/B,OAAO0B,GACP,MAAOK,GAGP,MAFAN,GAAIM,EACJC,QAAQC,IAAI,gBAAiBR,GACtBO,QAAQC,IAAI,OAAQtC,EAAEH,MAAM6B,WAGvCW,QAAQC,IAAIT,GACLA,GAGTxC,EAAc,YAEdD,EAAW,WACT,MAAOD,GAAO,iBAAkBa,EAAEX,GAAakD,SAAS,WAAWC,SAGrExD,EAAoB,SAASyD,GAC3B,GAAIX,EAIJ,OAHAA,GAAI,SAASY,EAAGC,EAAGb,GACjB,MAAOc,OAAMD,EAAI,IAAMb,IAElBlD,EAAO,gBAAiB6D,EAAS,WACtC,MAAOzC,GAAE,aAAeyC,EAAU,MAAMlB,QACvCO,IAGL3C,EAAS,SAAS0D,EAAKC,EAAKC,EAASC,GACnC,MAAOhD,GAAEiD,MACPC,KAAM,MACNC,IAAKxE,EAAkB,WAAI,uBAC3ByE,SAAU,OACVJ,MAAOA,EACPD,QAAS,SAAS3C,GAChB,GAAIoB,EAKJ,OAJAA,IACE6B,MAAOjD,EAAKiD,OAEd7B,EAAEqB,GAAOC,EACF9C,EAAEiD,MACPC,KAAM,MACNC,IAAKxE,EAAkB,WAAI,wBAC3ByE,SAAU,OACVhD,KAAMoB,EACNuB,QAASA,EACTC,MAAOA,QAMfpE,EAAS,SAASiE,EAAKS,EAAKP,EAASC,GACnC,MAAOhD,GAAEiD,MACPC,KAAM,MACNC,IAAKxE,EAAkB,WAAI,uBAC3ByE,SAAU,OACVJ,MAAOA,EACPD,QAAS,SAAS3C,GAChB,MAAOJ,GAAEiD,MACPC,KAAM,SACNC,IAAKxE,EAAkB,WAAI,yBAA2BkE,EAAM,QAAUS,EAAM,UAAYlD,EAAKiD,MAC7FD,SAAU,OACVL,QAASA,EACTC,MAAOA,QAMf/D,EAAe,WACb,GAAIsE,GAAKC,EAAO7D,EAAGD,EAAM+D,EAAQC,EAAO9D,EAAGiB,EAAK8C,EAAMC,EAAMC,EAASC,EAAUtD,CAE/E,IAAe,OADfoD,EAAO5D,EAAEX,MACeV,EAAqB,cAC3C,MAAO,KAKT,KAHA4E,EAAM5E,EAAqB,cAAEqC,MAAM,KACnC0C,EAAQE,EAAKrB,SAAS,WACtBsB,KACKlE,EAAI,EAAGkB,EAAM6C,EAAM5D,OAAQH,EAAIkB,EAAKlB,IACvCa,EAAIkD,EAAM/D,GACVkE,EAAQrD,GAAKA,CAEf,KAAKZ,EAAI,EAAG+D,EAAOJ,EAAIzD,OAAQF,EAAI+D,EAAM/D,IACvC6D,EAASF,EAAI3D,GACTiE,EAAQJ,KACV/D,EAAOmE,EAAQJ,GACfD,EAAQxD,EAAEX,EAAc,gBAAgB0E,SAAS,IAAMrE,GACvDoE,EAAW9D,EAAEX,EAAc,gBAAgB0E,SAAS,IAAMN,GAC1DD,EAAMQ,SACNhE,EAAEX,EAAc,gBAAgB4E,OAAO,UAAUC,OAAOJ,GAG5D,OAAO,IAOT/E,EAAO,WACL,MAAOiB,GAAEiD,MACPC,KAAM,OACNC,IAAKxE,EAAkB,WACvByB,MACErB,KAAM,GAERqE,SAAU,OACVL,QAAS,SAAS3C,GAChB,MAAoB,OAAfA,EAAK+D,QAAmC,IAAhB/D,EAAK+D,OACzBC,WAAWrF,EAAMJ,EAAoB,cAErC0F,SAASC,QAAO,IAG3BtB,MAAO,SAASN,EAAG6B,EAAGzC,GACpB,MAAOuC,UAASC,QAAO,OAK7BpE,OAAOnB,KAAOA,EAEdF,EAAY,SAAS2F,GACnB,GAAIC,GAAGC,EAAI/E,EAAGkB,EAAW8D,CAIzB,KAHOH,EAAQ,IACfE,EAAKE,mBAAmBC,SAASC,QAAQ9D,MAAM,KAC/C2D,EAAK,GAAII,QAAO,MAAQP,EAAQ,KAC3B7E,EAAI,EAAGkB,EAAM6D,EAAG5E,OAAQH,EAAIkB,EAAKlB,IAEpC,GADA8E,EAAIC,EAAG/E,GACH8E,EAAEpD,MAAMsD,GAEV,MADAF,GAAIA,EAAEvD,QAAQyD,EAAI,GAItB,OAAO,IAGTzF,EAAY,SAAS8F,EAAMC,EAAOC,GAChC,GAAI1D,EAGJ,OAFAA,GAAI,GAAIC,MACRD,EAAE2D,QAAQ3D,EAAE4D,UAAqB,MAATF,GACjBL,SAASC,OAASE,EAAO,IAAMC,EAAQ,aAAgBzD,EAAE6D,cAAiB,YAGnF1G,KAEAqB,EAAEE,QAAQoF,GAAG,OAAQ,WACnB,GAAIC,GAAQC,EAAIC,EAAcC,EAAU/F,EAAGC,EAAGG,EAAM4F,EAASC,EAAOC,EAAQhF,EAAK8C,EAAMmC,EAAMC,EAAMC,EAAMC,EAAGC,EAAWC,EAAUC,EAAQC,EAAGC,EAAIC,EAAQ5B,EAAIrE,EAAKC,EAAMiG,CAwDvK,IAvDA7H,EAAQG,IACRoB,OAAOvB,MAAQA,EACfqB,EAAE,aAAauC,UACbkE,KAAM,IACNC,OAAQ,OACRC,QAAS,GACTC,QAAQ,EACRlD,MAAO,iBACPmD,OAAQ,WACN,MAAOzH,QAGXH,IACAe,EAAE,eAAe8G,OAAO,QACxB9G,EAAE,wBAAwB8C,MAAM,GAAIrB,OAAOsF,oBAAsB,IACjEZ,EAAWnG,EAAE,SAASgH,MACpBC,OAAQ,IAEVf,EAAYlG,EAAE,kBAAoBrB,EAAkB,WAAI,MAAM2C,SAAS4F,QACnEhB,EAAY,IACdA,EAAY,GAEdC,EAASa,KAAK,SAAU,SAAUd,GAClCT,EAAezF,EAAE,aAAagH,MAC5BC,OAAQ,IAENtI,EAAiB,WACnB8G,EAAauB,KAAK,SAAU,SAAUhH,EAAE,sBAAwBrB,EAAiB,UAAI,MAAM2C,SAAS4F,SAElGvI,EAAa,MACfqB,EAAE,8BAA8BmH,QAEK,IAAjCnH,EAAE,oBAAoBF,QACxBE,EAAE,6BAA6BmH,QAG/BxI,EAAiB,WACnBqB,EAAE,eAAee,KAAK,SAAU,UAE9Bf,EAAE,iBAAiBF,SACrByF,EAASvF,EAAE,cAAce,KAAK,UAC9BqF,EAASpG,EAAE,cAAce,KAAK,UAC9B2E,EAAW,IACkB,IAAzBH,EAAO9F,QAAQ,KACjB8F,EAAO6B,UAAU,EAAG7B,EAAO9F,QAAQ,MAEnCiG,EAAWH,EAAS,IAEtBvF,EAAE,iCAAiCW,KAAK,SAASuG,GAC/C,MAAOxB,IAAY,IAAM1F,EAAEH,MAAMkB,KAAK,QAAU,IAAMf,EAAEH,MAAMiD,QAEhEkD,EAAOhG,EAAE,mBAAmBe,KAAK,QAAU,WAAaqF,EAAS,QAAUiB,KAAK3B,GAChF1F,EAAE,mBAAmBe,KAAK,OAAQiF,IAEpCjG,EAAOlB,EAAU,gBAkCNY,EAAQ6H,KAAKpH,OAAOqH,mBAAoBxH,GAAQ,IACzDA,EAAOG,OAAOqH,mBAAmB,QAjCjC,IAAIC,UAAW,CAQb,IAPA5B,KACAC,KACAU,GAAUiB,UAAUC,UAChBD,UAAUE,YACZnB,EAASiB,UAAUE,WAErBpH,EAAMJ,OAAOqH,mBACR5H,EAAI,EAAGkB,EAAMP,EAAIR,OAAQH,EAAIkB,EAAKlB,IACrC6F,EAAKlF,EAAIX,GACTgG,GAAW,8BAAmCzF,OAAOC,aAAe,UAAYqF,EAAK,gBAAoBA,EAAK,WAAeA,EAAK,MAEpI,KAAK5F,EAAI,EAAG+D,EAAO4C,EAAOzG,OAAQF,EAAI+D,EAAM/D,IAI1C,IAHA0G,EAAKC,EAAO3G,GACZyC,QAAQC,IAAI,iBAAkBgE,GAC9B/F,EAAOL,OAAOqH,mBACTtB,EAAI,EAAGH,EAAOvF,EAAKT,OAAQmG,EAAIH,EAAMG,IACxCT,EAAKjF,EAAK0F,GACV5D,QAAQC,IAAI,kBAAmBkD,GAC/Bb,EAAK,GAAII,QAAO,IAAMS,EAAK,MACvBc,EAAGjF,MAAMsD,IACXtC,QAAQC,IAAI,oBAAqBkD,GACjCI,EAAMzD,KAAKqD,IACFA,EAAG4B,UAAU,EAAG,KAAOd,EAAGc,UAAU,EAAG,IAChDvB,EAAO1D,KAAKqD,EAIlBzF,GAAO6F,EAAM,GAAKA,EAAM,GAAKC,EAAO,GAAKA,EAAO,GAAK3F,OAAOqH,mBAAmB,OAE/ExH,GAAOG,OAAOqH,mBAAmB,EAUrC,KALAlF,QAAQC,IAAI,mBAAoBvC,GAChCb,EAAU,eAAgBa,GAC1BR,EAAcQ,GACd4F,EAAU,GACVa,EAAOtG,OAAOqH,mBACTlB,EAAI,EAAGN,EAAOS,EAAK1G,OAAQuG,EAAIN,EAAMM,IACxCb,EAAKgB,EAAKH,GACVV,GAAW,8BAAmCzF,OAAOC,aAAe,UAAYqF,EAAK,gBAAoBA,EAAK,WAAeA,EAAK,MAgBpI,OAdAxF,GAAE,cAAcmB,KAAKwE,GACrB3F,EAAE,aAAasF,GAAG,QAAS,WAGzB,MAFAvF,GAAOC,EAAEH,MAAMkB,KAAK,SACpB7B,EAAU,eAAgBa,GACnBR,EAAcQ,KAEnBpB,EAAoB,cAAKA,EAAoB,aAAI,GACnDuB,OAAOkE,WAAWrF,EAAMJ,EAAoB,cAE9CqB,EAAE,eAAeW,KAAK,WACpB,GAAIgC,EAEJ,OADAA,GAAI,GAAIlB,MAA2B,IAAtBzB,EAAEH,MAAMkB,KAAK,QACnBf,EAAEH,MAAM6B,KAAKiB,EAAEhB,oBAEjB3B,EAAE,gBAAgBsF,GAAG,QAAS,WACnC,MAAOtG,GAAkBgB,EAAEH,MAAMkB,KAAK,kBAIzCuG,KAAKzH","file":"lemonldap-ng-portal/site/htdocs/static/common/js/portal.min.js"}
\ No newline at end of file
diff --git a/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js b/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js
index 3089b99f6..5ee65f4cd 100644
--- a/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js
+++ b/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js
@@ -1 +1,2 @@
-(function(){var r,e,n,t,o;n=function(e,r){return $("#msg").html(window.translate(e)),$("#color").removeClass("message-positive message-warning message-danger alert-success alert-warning alert-danger"),$("#color").addClass("message-"+r),"positive"===r&&(r="success"),$("#color").addClass("alert-"+r)},r=function(e,r,t){var o;if(console.log("Error",t),(o=JSON.parse(e.responseText))&&o.error)return o=o.error.replace(/.* /,""),console.log("Returned error",o),n(o,"warning")},t="",e=function(e){return n("yourTotpKey","warning"),$.ajax({type:"POST",url:portal+"/2fregisters/totp/getkey",dataType:"json",data:{newkey:e},error:r,success:function(e){var r;return e.error?(e.error.match(/totpExistingKey/)&&$("#divToHide").hide(),n(e.error,"warning")):e.portal&&e.user&&e.secret?($("#divToHide").show(),r="otpauth://totp/"+escape(e.portal)+":"+escape(e.user)+"?secret="+e.secret+"&issuer="+escape(e.portal),6!==e.digits&&(r+="&digits="+e.digits),30!==e.interval&&(r+="&period="+e.interval),new QRious({element:document.getElementById("qr"),value:r,size:150}),$("#serialized").text(r),e.newkey?n("yourNewTotpKey","warning"):n("yourTotpKey","success"),t=e.token):n("PE24","danger")}})},o=function(){var e;return(e=$("#code").val())?$.ajax({type:"POST",url:portal+"/2fregisters/totp/verify",dataType:"json",data:{token:t,code:e,TOTPName:$("#TOTPName").val()},error:r,success:function(e){return e.error?e.error.match(/bad(Code|Name)/)?n(e.error,"warning"):n(e.error,"danger"):n("yourKeyIsRegistered","success")}}):n("fillTheForm","warning")},$(document).ready(function(){return e(0),$("#changekey").on("click",function(){return e(1)}),$("#verify").on("click",function(){return o()})})}).call(this);
\ No newline at end of file
+(function(){var e,r,t,o,n;t=function(e,r){return $("#msg").html(window.translate(e)),$("#color").removeClass("message-positive message-warning message-danger alert-success alert-warning alert-danger"),$("#color").addClass("message-"+r),"positive"===r&&(r="success"),$("#color").addClass("alert-"+r)},e=function(e,r,o){var n;if(console.log("Error",o),(n=JSON.parse(e.responseText))&&n.error)return n=n.error.replace(/.* /,""),console.log("Returned error",n),t(n,"warning")},o="",r=function(r){return t("yourTotpKey","warning"),$.ajax({type:"POST",url:portal+"/2fregisters/totp/getkey",dataType:"json",data:{newkey:r},error:e,success:function(e){var r;return e.error?(e.error.match(/totpExistingKey/)&&$("#divToHide").hide(),t(e.error,"warning")):e.portal&&e.user&&e.secret?($("#divToHide").show(),r="otpauth://totp/"+escape(e.portal)+":"+escape(e.user)+"?secret="+e.secret+"&issuer="+escape(e.portal),6!==e.digits&&(r+="&digits="+e.digits),30!==e.interval&&(r+="&period="+e.interval),new QRious({element:document.getElementById("qr"),value:r,size:150}),$("#serialized").text(r),e.newkey?t("yourNewTotpKey","warning"):t("yourTotpKey","success"),o=e.token):t("PE24","danger")}})},n=function(){var r;return r=$("#code").val(),r?$.ajax({type:"POST",url:portal+"/2fregisters/totp/verify",dataType:"json",data:{token:o,code:r,TOTPName:$("#TOTPName").val()},error:e,success:function(e){return e.error?e.error.match(/bad(Code|Name)/)?t(e.error,"warning"):t(e.error,"danger"):t("yourKeyIsRegistered","success")}}):t("fillTheForm","warning")},$(document).ready(function(){return r(0),$("#changekey").on("click",function(){return r(1)}),$("#verify").on("click",function(){return n()})})}).call(this);
+//# sourceMappingURL=lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js.map
\ No newline at end of file
diff --git a/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js.map b/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js.map
index d9e252d14..a09320640 100644
--- a/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js.map
+++ b/lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.js"],"names":["displayError","getKey","setMsg","token","verify","msg","level","$","html","window","translate","removeClass","addClass","j","status","err","res","console","log","JSON","parse","responseText","error","replace","reset","ajax","type","url","portal","dataType","data","newkey","success","s","match","hide","user","secret","show","escape","digits","interval","QRious","element","document","getElementById","value","size","text","val","code","TOTPName","ready","on","call","this"],"mappings":"CAMA,WACE,IAAIA,EAAcC,EAAQC,EAAQC,EAAOC,EAEzCF,EAAS,SAASG,EAAKC,GAOrB,OANAC,EAAE,QAAQC,KAAKC,OAAOC,UAAUL,IAChCE,EAAE,UAAUI,YAAY,4FACxBJ,EAAE,UAAUK,SAAS,WAAaN,GACpB,aAAVA,IACFA,EAAQ,WAEHC,EAAE,UAAUK,SAAS,SAAWN,IAGzCN,EAAe,SAASa,EAAGC,EAAQC,GACjC,IAAIC,EAGJ,GAFAC,QAAQC,IAAI,QAASH,IACrBC,EAAMG,KAAKC,MAAMP,EAAEQ,gBACRL,EAAIM,MAGb,OAFAN,EAAMA,EAAIM,MAAMC,QAAQ,MAAO,IAC/BN,QAAQC,IAAI,iBAAkBF,GACvBd,EAAOc,EAAK,YAIvBb,EAAQ,GAERF,EAAS,SAASuB,GAEhB,OADAtB,EAAO,cAAe,WACfK,EAAEkB,KAAK,CACZC,KAAM,OACNC,IAAKC,OAAS,2BACdC,SAAU,OACVC,KAAM,CACJC,OAAQP,GAEVF,MAAOtB,EACPgC,QAAS,SAASF,GAChB,IAAQG,EACR,OAAIH,EAAKR,OACHQ,EAAKR,MAAMY,MAAM,oBACnB3B,EAAE,cAAc4B,OAEXjC,EAAO4B,EAAKR,MAAO,YAEtBQ,EAAKF,QAAUE,EAAKM,MAAQN,EAAKO,QAGvC9B,EAAE,cAAc+B,OAChBL,EAAI,kBAAqBM,OAAOT,EAAKF,QAAW,IAAOW,OAAOT,EAAKM,MAAS,WAAaN,EAAKO,OAAS,WAAcE,OAAOT,EAAKF,QAC7G,IAAhBE,EAAKU,SACPP,GAAK,WAAaH,EAAKU,QAEH,KAAlBV,EAAKW,WACPR,GAAK,WAAaH,EAAKW,UAEpB,IAAIC,OAAO,CACdC,QAASC,SAASC,eAAe,MACjCC,MAAOb,EACPc,KAAM,MAERxC,EAAE,eAAeyC,KAAKf,GAClBH,EAAKC,OACP7B,EAAO,iBAAkB,WAEzBA,EAAO,cAAe,WAEjBC,EAAQ2B,EAAK3B,OArBXD,EAAO,OAAQ,cA0B9BE,EAAS,WACP,IAAI6C,EAEJ,OADAA,EAAM1C,EAAE,SAAS0C,OAIR1C,EAAEkB,KAAK,CACZC,KAAM,OACNC,IAAKC,OAAS,2BACdC,SAAU,OACVC,KAAM,CACJ3B,MAAOA,EACP+C,KAAMD,EACNE,SAAU5C,EAAE,aAAa0C,OAE3B3B,MAAOtB,EACPgC,QAAS,SAASF,GAChB,OAAIA,EAAKR,MACHQ,EAAKR,MAAMY,MAAM,kBACZhC,EAAO4B,EAAKR,MAAO,WAEnBpB,EAAO4B,EAAKR,MAAO,UAGrBpB,EAAO,sBAAuB,cApBpCA,EAAO,cAAe,YA2BjCK,EAAEqC,UAAUQ,MAAM,WAKhB,OAJAnD,EAAO,GACPM,EAAE,cAAc8C,GAAG,QAAS,WAC1B,OAAOpD,EAAO,KAETM,EAAE,WAAW8C,GAAG,QAAS,WAC9B,OAAOjD,UAIVkD,KAAKC"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.js"],"names":["displayError","getKey","setMsg","token","verify","msg","level","$","html","window","translate","removeClass","addClass","j","status","err","res","console","log","JSON","parse","responseText","error","replace","reset","ajax","type","url","portal","dataType","data","newkey","success","s","match","hide","user","secret","show","escape","digits","interval","QRious","element","document","getElementById","value","size","text","val","code","TOTPName","ready","on","call","this"],"mappings":"CAMA,WACE,GAAIA,GAAcC,EAAQC,EAAQC,EAAOC,CAEzCF,GAAS,SAASG,EAAKC,GAOrB,MANAC,GAAE,QAAQC,KAAKC,OAAOC,UAAUL,IAChCE,EAAE,UAAUI,YAAY,4FACxBJ,EAAE,UAAUK,SAAS,WAAaN,GACpB,aAAVA,IACFA,EAAQ,WAEHC,EAAE,UAAUK,SAAS,SAAWN,IAGzCN,EAAe,SAASa,EAAGC,EAAQC,GACjC,GAAIC,EAGJ,IAFAC,QAAQC,IAAI,QAASH,IACrBC,EAAMG,KAAKC,MAAMP,EAAEQ,gBACRL,EAAIM,MAGb,MAFAN,GAAMA,EAAIM,MAAMC,QAAQ,MAAO,IAC/BN,QAAQC,IAAI,iBAAkBF,GACvBd,EAAOc,EAAK,YAIvBb,EAAQ,GAERF,EAAS,SAASuB,GAEhB,MADAtB,GAAO,cAAe,WACfK,EAAEkB,MACPC,KAAM,OACNC,IAAKC,OAAS,2BACdC,SAAU,OACVC,MACEC,OAAQP,GAEVF,MAAOtB,EACPgC,QAAS,SAASF,GAChB,GAAQG,EACR,OAAIH,GAAKR,OACHQ,EAAKR,MAAMY,MAAM,oBACnB3B,EAAE,cAAc4B,OAEXjC,EAAO4B,EAAKR,MAAO,YAEtBQ,EAAKF,QAAUE,EAAKM,MAAQN,EAAKO,QAGvC9B,EAAE,cAAc+B,OAChBL,EAAI,kBAAqBM,OAAOT,EAAKF,QAAW,IAAOW,OAAOT,EAAKM,MAAS,WAAaN,EAAKO,OAAS,WAAcE,OAAOT,EAAKF,QAC7G,IAAhBE,EAAKU,SACPP,GAAK,WAAaH,EAAKU,QAEH,KAAlBV,EAAKW,WACPR,GAAK,WAAaH,EAAKW,UAEpB,GAAIC,SACPC,QAASC,SAASC,eAAe,MACjCC,MAAOb,EACPc,KAAM,MAERxC,EAAE,eAAeyC,KAAKf,GAClBH,EAAKC,OACP7B,EAAO,iBAAkB,WAEzBA,EAAO,cAAe,WAEjBC,EAAQ2B,EAAK3B,OArBXD,EAAO,OAAQ,cA0B9BE,EAAS,WACP,GAAI6C,EAEJ,OADAA,GAAM1C,EAAE,SAAS0C,MACZA,EAGI1C,EAAEkB,MACPC,KAAM,OACNC,IAAKC,OAAS,2BACdC,SAAU,OACVC,MACE3B,MAAOA,EACP+C,KAAMD,EACNE,SAAU5C,EAAE,aAAa0C,OAE3B3B,MAAOtB,EACPgC,QAAS,SAASF,GAChB,MAAIA,GAAKR,MACHQ,EAAKR,MAAMY,MAAM,kBACZhC,EAAO4B,EAAKR,MAAO,WAEnBpB,EAAO4B,EAAKR,MAAO,UAGrBpB,EAAO,sBAAuB,cApBpCA,EAAO,cAAe,YA2BjCK,EAAEqC,UAAUQ,MAAM,WAKhB,MAJAnD,GAAO,GACPM,EAAE,cAAc8C,GAAG,QAAS,WAC1B,MAAOpD,GAAO,KAETM,EAAE,WAAW8C,GAAG,QAAS,WAC9B,MAAOjD,WAIVkD,KAAKC","file":"lemonldap-ng-portal/site/htdocs/static/common/js/totpregistration.min.js"}
\ No newline at end of file
diff --git a/lemonldap-ng-portal/t/28-AuthChoice-with-rules.t b/lemonldap-ng-portal/t/28-AuthChoice-with-rules.t
index b609dfc9a..aeb84e61d 100644
--- a/lemonldap-ng-portal/t/28-AuthChoice-with-rules.t
+++ b/lemonldap-ng-portal/t/28-AuthChoice-with-rules.t
@@ -114,10 +114,10 @@ m%<form id="lformKerberos" action="#" method="post" class="login Kerberos">%,
         ' Action # found'
     ) or explain( $res->[2]->[0], '<form id="lformSSL"' );
     my $header = getHeader( $res, 'Content-Security-Policy' );
-    ok( $header =~ m%;form-action \'self\'  https://test.example.com;%,
+    ok( $header =~ m%;form-action \*  https://test.example.com;%,
         ' CSP URL found' )
       or
-      explain( $res->[1], 'form-action \'self\'  https://test.example.com;' );
+      explain( $res->[1], 'form-action *  https://test.example.com;' );
     ok( $res->[2]->[0] !~ /4_demo/, '4_Demo not displayed' );
     ok(
         $res->[2]->[0] =~ qr%<img src="/static/common/logos/logo_llng_old.png"%,
diff --git a/lemonldap-ng-portal/t/test-lib.pm b/lemonldap-ng-portal/t/test-lib.pm
index 07997e3d2..04b4482fb 100644
--- a/lemonldap-ng-portal/t/test-lib.pm
+++ b/lemonldap-ng-portal/t/test-lib.pm
@@ -141,7 +141,8 @@ sub count_sessions {
 
 sub getCache {
     require Cache::FileCache;
-    return Cache::FileCache->new( {
+    return Cache::FileCache->new(
+        {
             namespace   => 'lemonldap-ng-session',
             cache_root  => $tmpDir,
             cache_depth => 0,
@@ -416,7 +417,8 @@ sub exceptCspFormOK {
     }
     if (   $csp =~ /\s\*(?:\s.*)?\s*$/
         or ( $host eq '#' and $csp =~ /'self'/ )
-        or $csp =~ m#\bhttps?://$host\b# )
+        or $csp =~ m#\bhttps?://$host\b#
+        or $csp =~ m#\*# )
     {
         pass(" CSP header authorize POST request to $host");
     }
@@ -598,7 +600,7 @@ has ini => (
         main::ok( $self->{p} = $self->class->new(), 'Portal object' );
         main::count(1);
         unless ( $self->confFailure ) {
-            main::ok( $self->{p}->init($ini),           'Init' );
+            main::ok( $self->{p}->init($ini), 'Init' );
             main::ok( $self->{app} = $self->{p}->run(), 'Portal app' );
             main::count(2);
             no warnings 'redefine';
@@ -703,7 +705,8 @@ to test content I<(to launch a C<expectForm()> for example)>.
 
 sub _get {
     my ( $self, $path, %args ) = @_;
-    my $res = $self->app->( {
+    my $res = $self->app->(
+        {
             'HTTP_ACCEPT' => $args{accept}
               || 'application/json, text/plain, */*',
             'HTTP_ACCEPT_LANGUAGE' => 'fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3',
@@ -755,7 +758,8 @@ sub _post {
     my ( $self, $path, $body, %args ) = @_;
     die "$body must be a IO::Handle"
       unless ( ref($body) and $body->can('read') );
-    my $res = $self->app->( {
+    my $res = $self->app->(
+        {
             'HTTP_ACCEPT' => $args{accept}
               || 'application/json, text/plain, */*',
             'HTTP_ACCEPT_LANGUAGE' => 'fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3',

From 0616c9951906100bd9a666992d0aa40404123eac Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 20 Dec 2019 21:34:52 +0100
Subject: [PATCH 18/60] Append API to retrieve all existing notifications &
 Improve unit test (#2012)

---
 .../lib/Lemonldap/NG/Common/Notifications.pm  |  8 ++---
 .../Lemonldap/NG/Common/Notifications/DBI.pm  | 28 +++++++++++++--
 .../Lemonldap/NG/Common/Notifications/File.pm | 31 ++++++++++++++--
 .../Lemonldap/NG/Common/Notifications/LDAP.pm | 36 +++++++++++++++----
 .../t/40-Notifications-JSON-Server.t          | 28 +++++++++++++--
 5 files changed, 112 insertions(+), 19 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications.pm
index 0f1f9a303..5700999b8 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications.pm
@@ -34,11 +34,11 @@ has notifField => (
 sub getNotifications {
     my ( $self, $uid ) = @_;
     my $forAll = $self->get( $self->conf->{notificationWildcard} );
-    if ( $uid and $uid eq '_all_' ) {
-        $self->logger->info("Retrieve ALL pending notifications");
-        my $all = $self->getAll();
+    if ( $uid and $uid =~ /^_all(Pending|Existing)_$/ ) {
+        $self->logger->info("Retrieve all $1 notifications");
+        my $all = ( $1 eq 'Pending' ? $self->getAll() : $self->getExisting() );
         $all = { map { $_ => to_json( $all->{$_} ) } keys %$all };
-        return { %$all, %$forAll };
+        return ( $forAll ? { %$all, %$forAll } : $all );
     }
     my $forUser = $self->get($uid);
     if ( $forUser and $forAll ) {
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
index 2f30a4999..6a06db357 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
@@ -11,7 +11,7 @@ use Time::Local;
 use DBI;
 use Encode;
 
-our $VERSION = '2.0.2';
+our $VERSION = '2.0.7';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -93,9 +93,9 @@ sub get {
 }
 
 ## @method hashref getAll()
-# Return all messages not notified.
+# Return all pending notifications.
 # @return hashref where keys are internal reference and values are hashref with
-# keys date, uid and ref.
+# keys date, uid, ref and condition.
 sub getAll {
     my $self = shift;
     $self->_execute( 'SELECT * FROM '
@@ -114,6 +114,28 @@ sub getAll {
     return $result;
 }
 
+## @method hashref getExisting()
+# Return all notifications.
+# @return hashref where keys are internal reference and values are hashref with
+# keys date, uid, ref and condition.
+sub getExisting {
+    my $self = shift;
+    $self->_execute( 'SELECT * FROM '
+          . $self->dbiTable
+          . ' ORDER BY date' );
+    my $result;
+    while ( my $h = $self->sth->fetchrow_hashref() ) {
+        $result->{"$h->{date}#$h->{uid}#$h->{ref}"} = {
+            date      => $h->{date},
+            uid       => $h->{uid},
+            ref       => $h->{ref},
+            condition => $h->{condition}
+        };
+    }
+    $self->logger->warn( $self->sth->err() ) if ( $self->sth->err() );
+    return $result;
+}
+
 ## @method boolean delete(string myref)
 # Mark a notification as done.
 # @param $myref identifier returned by get() or getAll()
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
index 2c985f6a0..cedef055f 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
@@ -9,7 +9,7 @@ use strict;
 use Mouse;
 use MIME::Base64;
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -58,9 +58,9 @@ sub get {
 }
 
 ## @method hashref getAll()
-# Return all messages not notified.
+# Return all pending notifications.
 # @return hashref where keys are internal reference and values are hashref with
-# keys date, uid and ref.
+# keys date, uid, ref ans condition.
 sub getAll {
     my $self = shift;
     opendir D, $self->{dirName};
@@ -82,6 +82,31 @@ sub getAll {
     return \%h;
 }
 
+## @method hashref getExisting()
+# Return all notifications.
+# @return hashref where keys are internal reference and values are hashref with
+# keys date, uid, ref and condition.
+sub getExisting {
+    my $self = shift;
+    opendir D, $self->{dirName};
+    my @notif;
+    my $fns = $self->{fileNameSeparator};
+    @notif = grep /^\S*\.$ext$/, readdir(D);
+    my %h = map {
+/^(\d{8})${fns}([^\s${fns}]+)${fns}([^\s${fns}]+)(?:${fns}([^\s${fns}]+))?\.(?:$ext|done)$/
+          ? (
+            $_ => {
+                date      => $1,
+                uid       => $2,
+                ref       => decode_base64($3),
+                condition => decode_base64( $4 // '' )
+            }
+          )
+          : ()
+    } @notif;
+    return \%h;
+}
+
 ## @method boolean delete(string myref)
 # Mark a notification as done.
 # @param $myref identifier returned by get() or getAll()
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
index ccc691c2b..59efabfff 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
@@ -13,7 +13,7 @@ use MIME::Base64;
 use Net::LDAP;
 use utf8;
 
-our $VERSION = '2.0.0';
+our $VERSION = '2.0.7';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -78,15 +78,13 @@ sub get {
 }
 
 ## @method hashref getAll()
-# Return all messages not notified.
+# Return all pending notifications.
 # @return hashref where keys are internal reference and values are hashref with
-# keys date, uid and ref.
+# keys date, uid, ref and condition.
 sub getAll {
-    my $self = shift;
-
+    my $self    = shift;
     my @entries = $self->_search(
         '(&(objectClass=applicationProcess)(!(description={done}*)))');
-
     my $result = {};
     foreach my $entry (@entries) {
         my @notifValues = $entry->get_value('description');
@@ -102,10 +100,34 @@ sub getAll {
             ref  => $f->{ref},
             cond => $f->{condition},
         };
-
     }
     return $result;
+}
 
+## @method hashref getExisting()
+# Return all notifications.
+# @return hashref where keys are internal reference and values are hashref with
+# keys date, uid, ref and condition.
+sub getExisting {
+    my $self    = shift;
+    my @entries = $self->_search('objectClass=applicationProcess');
+    my $result  = {};
+    foreach my $entry (@entries) {
+        my @notifValues = $entry->get_value('description');
+        my $f           = {};
+        foreach (@notifValues) {
+            my ( $k, $v ) = ( $_ =~ /\{(.*?)\}(.*)/smg );
+            $v = decodeLdapValue($v);
+            $f->{$k} = $v;
+        }
+        $result->{"$f->{date}#$f->{uid}#$f->{ref}"} = {
+            date => $f->{date},
+            uid  => $f->{uid},
+            ref  => $f->{ref},
+            cond => $f->{condition},
+        };
+    }
+    return $result;
 }
 
 ## @method boolean delete(string myref)
diff --git a/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t b/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
index 7dcb91760..6a08646c1 100644
--- a/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
+++ b/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
@@ -147,9 +147,9 @@ count(2);
 
 ok(
     $res = $client->_get(
-        '/notifications/_all_', type => 'application/json',
+        '/notifications/_allPending_', type => 'application/json',
     ),
-    'List ALL notifications'
+    'List all pending notifications'
 );
 ok( $json = eval { from_json( $res->[2]->[0] ) }, 'Response is JSON' );
 ok( scalar @{ $json->{result} } == 3, 'Three notifications found' )
@@ -302,6 +302,17 @@ ok( $res->[2]->[0] =~ /"result"\s*:\s*4/, 'Notifications have been inserted' )
   or print STDERR Dumper( $res->[2]->[0] );
 count(2);
 
+ok(
+    $res = $client->_get(
+        '/notifications/_allExisting_', type => 'application/json',
+    ),
+    'List all existing notifications'
+);
+ok( $json = eval { from_json( $res->[2]->[0] ) }, 'Response is JSON' );
+ok( scalar @{ $json->{result} } == 5, 'Five notifications found' )
+  or print STDERR Dumper($json);
+count(3);
+
 # Try to authenticate with "dwho"
 # -------------------------------
 ok(
@@ -352,6 +363,7 @@ ok(
     "Accept notification"
 );
 expectOK($res);
+$id = expectCookie($res);
 $client->logout($id);
 
 # Try to authenticate with "rtyler"
@@ -400,7 +412,19 @@ ok(
     "Accept notification"
 );
 expectOK($res);
+$id = expectCookie($res);
 $client->logout($id);
 
+ok(
+    $res = $client->_get(
+        '/notifications/_allPending_', type => 'application/json',
+    ),
+    'List all pending notifications'
+);
+ok( $json = eval { from_json( $res->[2]->[0] ) }, 'Response is JSON' );
+ok( scalar @{ $json->{result} } == 3, 'Three notifications found' )
+  or print STDERR Dumper($json);
+count(3);
+
 clean_sessions();
 done_testing( count() );

From f396e59207c6feb53afb1c646a16d79a04a243ea Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 11:40:47 +0100
Subject: [PATCH 19/60] Add a unit for OpenID Connect register feature (#2003)

---
 lemonldap-ng-portal/MANIFEST             |   1 +
 lemonldap-ng-portal/t/32-OIDC-Register.t | 165 +++++++++++++++++++++++
 2 files changed, 166 insertions(+)
 create mode 100644 lemonldap-ng-portal/t/32-OIDC-Register.t

diff --git a/lemonldap-ng-portal/MANIFEST b/lemonldap-ng-portal/MANIFEST
index 12eebdd35..efdc1bef1 100644
--- a/lemonldap-ng-portal/MANIFEST
+++ b/lemonldap-ng-portal/MANIFEST
@@ -526,6 +526,7 @@ t/32-CAS-Macros.t
 t/32-OIDC-Macro.t
 t/32-OIDC-Offline-Session.t
 t/32-OIDC-Refresh-Token.t
+t/32-OIDC-Register.t
 t/32-OIDC-RP-rule.t
 t/32-OIDC-Token-Introspection.t
 t/32-OIDC-Token-Security.t
diff --git a/lemonldap-ng-portal/t/32-OIDC-Register.t b/lemonldap-ng-portal/t/32-OIDC-Register.t
new file mode 100644
index 000000000..7690e48f4
--- /dev/null
+++ b/lemonldap-ng-portal/t/32-OIDC-Register.t
@@ -0,0 +1,165 @@
+use lib 'inc';
+use Test::More;
+use strict;
+use IO::String;
+use LWP::UserAgent;
+use LWP::Protocol::PSGI;
+use MIME::Base64;
+use JSON;
+
+BEGIN {
+    require 't/test-lib.pm';
+}
+
+my $debug = 'error';
+my $res;
+
+# Initialization
+ok( my $op = op(), 'OP portal' );
+
+my $register_data = {
+    "application_type" => "web",
+    "redirect_uris"    => [
+        "https://client.example.org/callback",
+        "https://client.example.org/callback2"
+    ],
+    "client_name"                => "My Example",
+    "logo_uri"                   => "https://client.example.org/logo.png",
+    "subject_type"               => "pairwise",
+    "token_endpoint_auth_method" => "client_secret_basic",
+};
+
+my $register_data_json = JSON::to_json($register_data);
+
+ok(
+    $res = $op->_post(
+        "/oauth2/register",
+        IO::String->new($register_data_json),
+        accept => 'application/json',
+        length => length($register_data_json),
+    ),
+    "Post register data"
+);
+
+ok( $res->[0] == 201, "Return code is 201" );
+my $register_answer = JSON::from_json( $res->[2]->[0] );
+
+ok( defined $register_answer->{client_id},
+    "Client ID found in answer: " . $register_answer->{client_id} );
+
+# New configuration registered
+my $confFile = "t/lmConf-2.json";
+my $conf     = JSON::from_json(`cat $confFile`);
+
+# Check saved data
+
+my $rpId = ( keys %{ $conf->{oidcRPMetaDataOptions} } )[0];
+
+ok(
+    $conf->{oidcRPMetaDataOptions}->{$rpId}->{oidcRPMetaDataOptionsClientID} eq
+      $register_answer->{client_id},
+    "Client ID saved in configuration"
+);
+
+unlink $confFile;
+clean_sessions();
+done_testing();
+
+sub op {
+    return LLNG::Manager::Test->new( {
+            ini => {
+                logLevel                        => $debug,
+                domain                          => 'idp.com',
+                portal                          => 'http://auth.op.com',
+                authentication                  => 'Demo',
+                userDB                          => 'Same',
+                issuerDBOpenIDConnectActivation => 1,
+                issuerDBOpenIDConnectRule       => '$uid eq "french"',
+                oidcRPMetaDataExportedVars      => {
+                    rp => {
+                        email       => "mail",
+                        family_name => "extract_sn",
+                        name        => "cn"
+                    }
+                },
+                oidcServiceMetaDataAuthorizeURI       => "authorize",
+                oidcServiceMetaDataCheckSessionURI    => "checksession.html",
+                oidcServiceMetaDataJWKSURI            => "jwks",
+                oidcServiceMetaDataEndSessionURI      => "logout",
+                oidcServiceMetaDataRegistrationURI    => "register",
+                oidcServiceMetaDataTokenURI           => "token",
+                oidcServiceMetaDataUserInfoURI        => "userinfo",
+                oidcServiceAllowHybridFlow            => 1,
+                oidcServiceAllowImplicitFlow          => 1,
+                oidcServiceAllowDynamicRegistration   => 1,
+                oidcServiceAllowAuthorizationCodeFlow => 1,
+                oidcRPMetaDataMacros                  => {
+                    rp => {
+                        extract_sn => '(split(/\s/, $cn))[1]',
+                    }
+                },
+                oidcRPMetaDataOptions => {
+                    rp => {
+                        oidcRPMetaDataOptionsDisplayName       => "RP",
+                        oidcRPMetaDataOptionsIDTokenExpiration => 3600,
+                        oidcRPMetaDataOptionsClientID          => "rpid",
+                        oidcRPMetaDataOptionsIDTokenSignAlg    => "HS512",
+                        oidcRPMetaDataOptionsBypassConsent     => 1,
+                        oidcRPMetaDataOptionsClientSecret      => "rpsecret",
+                        oidcRPMetaDataOptionsUserIDAttr        => "",
+                        oidcRPMetaDataOptionsAccessTokenExpiration => 3600,
+                    }
+                },
+                oidcOPMetaDataOptions           => {},
+                oidcOPMetaDataJSON              => {},
+                oidcOPMetaDataJWKS              => {},
+                oidcServiceMetaDataAuthnContext => {
+                    'loa-4' => 4,
+                    'loa-1' => 1,
+                    'loa-5' => 5,
+                    'loa-2' => 2,
+                    'loa-3' => 3
+                },
+                oidcServicePrivateKeySig => "-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+",
+                oidcServicePublicKeySig => "-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2jsmIoFuWzMkilJaA8/
+/5/T30cnuzX9GImXUrFR2k9EKTMtGMHCdKlWOl3BV+BTAU9TLz7Jzd/iJ5GJ6B8T
+rH1PHFmHpy8/qE/S5OhinIpIi7ebABqnoVcwDdCa8ugzq8k8SWxhRNXfVIlwz4NH
+1caJ8lmiERFj7IvNKqEhzAk0pyDr8hubveTC39xREujKlsqutpPAFPJ3f2ybVsdy
+kX5rx0h5SslG3jVWYhZ/SOb2aIzOr0RMjhQmsYRwbpt3anjlBZ98aOzg7GAkbO80
+93X5VVk9vaPRg0zxJQ0Do0YLyzkRisSAIFb0tdKuDnjRGK6y/N2j6At2Hjkxntbt
+GQIDAQAB
+-----END PUBLIC KEY-----
+",
+            }
+        }
+    );
+}
+

From f5c2b81051b5dbbe9d98ff4773e664ee9d13dbcd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 12:08:48 +0100
Subject: [PATCH 20/60] Possibility to add extra claims and extra vars in OIDC
 register (#2003)

---
 .../NG/Portal/Issuer/OpenIDConnect.pm          | 18 ++++++++++++++++++
 lemonldap-ng-portal/t/32-OIDC-Register.t       | 17 +++++++++++++++--
 2 files changed, 33 insertions(+), 2 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
index 187d1e1ac..d5c540a90 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
@@ -1781,6 +1781,24 @@ sub registration {
       ->{oidcRPMetaDataOptionsUserInfoSignAlg} = $userinfo_signed_response_alg
       if defined $userinfo_signed_response_alg;
 
+    # Exported Vars
+    if (
+        ref( $self->conf->{oidcServiceDynamicRegistrationExportedVars} ) eq
+        'HASH' )
+    {
+        $conf->{oidcRPMetaDataExportedVars}->{$rp} =
+          $self->conf->{oidcServiceDynamicRegistrationExportedVars};
+    }
+
+    # Extra claims
+    if (
+        ref( $self->conf->{oidcServiceDynamicRegistrationExtraClaims} ) eq
+        'HASH' )
+    {
+        $conf->{oidcRPMetaDataOptionsExtraClaims}->{$rp} =
+          $self->conf->{oidcServiceDynamicRegistrationExtraClaims};
+    }
+
     if ( $self->confAcc->saveConf($conf) ) {
 
         # Reload RP list
diff --git a/lemonldap-ng-portal/t/32-OIDC-Register.t b/lemonldap-ng-portal/t/32-OIDC-Register.t
index 7690e48f4..e4825ccc2 100644
--- a/lemonldap-ng-portal/t/32-OIDC-Register.t
+++ b/lemonldap-ng-portal/t/32-OIDC-Register.t
@@ -52,7 +52,6 @@ my $confFile = "t/lmConf-2.json";
 my $conf     = JSON::from_json(`cat $confFile`);
 
 # Check saved data
-
 my $rpId = ( keys %{ $conf->{oidcRPMetaDataOptions} } )[0];
 
 ok(
@@ -61,12 +60,22 @@ ok(
     "Client ID saved in configuration"
 );
 
+# Check extra claims and extra attributes
+ok(
+    $conf->{oidcRPMetaDataOptionsExtraClaims}->{$rpId}->{"extra_claim"} eq
+      "extra_var",
+    "Extra claim defined"
+);
+ok( $conf->{oidcRPMetaDataExportedVars}->{$rpId}->{"extra_var"} eq "mail",
+    "Extra variable defined" );
+
 unlink $confFile;
 clean_sessions();
 done_testing();
 
 sub op {
-    return LLNG::Manager::Test->new( {
+    return LLNG::Manager::Test->new(
+        {
             ini => {
                 logLevel                        => $debug,
                 domain                          => 'idp.com',
@@ -82,6 +91,10 @@ sub op {
                         name        => "cn"
                     }
                 },
+                oidcServiceDynamicRegistrationExportedVars =>
+                  { "extra_var" => "mail" },
+                oidcServiceDynamicRegistrationExtraClaims =>
+                  { "extra_claim" => "extra_var" },
                 oidcServiceMetaDataAuthorizeURI       => "authorize",
                 oidcServiceMetaDataCheckSessionURI    => "checksession.html",
                 oidcServiceMetaDataJWKSURI            => "jwks",

From 9a8789e86ad41b8b5df0dc3b09466d9703b116e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 12:30:39 +0100
Subject: [PATCH 21/60] Add new parameters in Manager (#2003)

---
 .../lib/Lemonldap/NG/Common/Conf/Constants.pm             | 2 +-
 .../lib/Lemonldap/NG/Common/Conf/ReConstants.pm           | 4 ++--
 .../lib/Lemonldap/NG/Manager/Attributes.pm                | 6 ++++++
 .../lib/Lemonldap/NG/Manager/Build/Attributes.pm          | 8 ++++++++
 .../lib/Lemonldap/NG/Manager/Build/Tree.pm                | 2 ++
 lemonldap-ng-manager/site/htdocs/static/languages/ar.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/languages/de.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/languages/en.json | 2 ++
 lemonldap-ng-manager/site/htdocs/static/languages/fr.json | 2 ++
 lemonldap-ng-manager/site/htdocs/static/languages/it.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/languages/tr.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/languages/vi.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/languages/zh.json | 4 +++-
 lemonldap-ng-manager/site/htdocs/static/reverseTree.json  | 2 +-
 lemonldap-ng-manager/site/htdocs/static/struct.json       | 2 +-
 15 files changed, 43 insertions(+), 11 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
index 136a4ff40..10a1bc9d7 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
@@ -23,7 +23,7 @@ use constant HANDLERSECTION  => "handler";
 use constant MANAGERSECTION  => "manager";
 use constant SESSIONSEXPLORERSECTION => "sessionsExplorer";
 use constant APPLYSECTION            => "apply";
-our $hashParameters = qr/^(?:(?:l(?:o(?:ca(?:lSessionStorageOption|tionRule)|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|(?:(?:d(?:emo|bi)|facebook|webID)ExportedVa|exported(?:Heade|Va)|issuerDBGetParamete)r|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|macro)s|o(?:idc(?:RPMetaData(?:(?:Option(?:sExtraClaim)?|ExportedVar|Macro)s|Node)|OPMetaData(?:(?:ExportedVar|Option)s|J(?:SON|WKS)|Node)|S(?:erviceMetaDataAuthnContext|torageOptions))|penIdExportedVars)|s(?:aml(?:S(?:PMetaData(?:(?:ExportedAttribute|Option|Macro)s|Node|XML)|torageOptions)|IDPMetaData(?:(?:ExportedAttribute|Option)s|Node|XML))|essionDataToRemember|laveExportedVars|fExtra)|c(?:as(?:A(?:ppMetaData(?:(?:ExportedVar|Option|Macro)s|Node)|ttributes)|S(?:rvMetaData(?:(?:ExportedVar|Option)s|Node)|torageOptions))|(?:ustom(?:Plugins|Add)Param|ombModule)s)|p(?:ersistentStorageOptions|o(?:rtalSkinRules|st))|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|v(?:hostOptions|irtualHost)|S(?:MTPTLSOpts|SLVarIf))$/;
+our $hashParameters = qr/^(?:(?:l(?:o(?:ca(?:lSessionStorageOption|tionRule)|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|(?:(?:d(?:emo|bi)|facebook|webID)ExportedVa|exported(?:Heade|Va)|issuerDBGetParamete)r|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|macro)s|o(?:idc(?:S(?:ervice(?:DynamicRegistrationEx(?:portedVar|traClaim)s|MetaDataAuthnContext)|torageOptions)|RPMetaData(?:(?:Option(?:sExtraClaim)?|ExportedVar|Macro)s|Node)|OPMetaData(?:(?:ExportedVar|Option)s|J(?:SON|WKS)|Node))|penIdExportedVars)|s(?:aml(?:S(?:PMetaData(?:(?:ExportedAttribute|Option|Macro)s|Node|XML)|torageOptions)|IDPMetaData(?:(?:ExportedAttribute|Option)s|Node|XML))|essionDataToRemember|laveExportedVars|fExtra)|c(?:as(?:A(?:ppMetaData(?:(?:ExportedVar|Option|Macro)s|Node)|ttributes)|S(?:rvMetaData(?:(?:ExportedVar|Option)s|Node)|torageOptions))|(?:ustom(?:Plugins|Add)Param|ombModule)s)|p(?:ersistentStorageOptions|o(?:rtalSkinRules|st))|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|v(?:hostOptions|irtualHost)|S(?:MTPTLSOpts|SLVarIf))$/;
 our $boolKeys = qr/^(?:s(?:aml(?:IDP(?:MetaDataOptions(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|IsPassiv)e|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Force(?:Authn|UTF8)|StoreSAMLToken|RelayStateURL)|SSODescriptorWantAuthnRequestsSigned)|S(?:P(?:MetaDataOptions(?:(?:CheckS[LS]OMessageSignatur|OneTimeUs)e|EnableIDPInitiatedURL|ForceUTF8)|SSODescriptor(?:WantAssertion|AuthnRequest)sSigned)|erviceUseCertificateInResponse)|DiscoveryProtocol(?:Activation|IsPassive)|CommonDomainCookieActivation|UseQueryStringSpecific|MetadataForceUTF8)|ingle(?:Session(?:UserByIP)?|(?:UserBy)?IP)|oap(?:Session|Config)Server|t(?:ayConnecte|orePasswor)d|kipRenewConfirmation|fRemovedUseNotif|laveDisplayLogo|howLanguages|slByAjax)|o(?:idc(?:RPMetaDataOptions(?:Re(?:freshToken|quirePKCE)|LogoutSessionRequired|IDTokenForceClaims|BypassConsent|AllowOffline|Public)|ServiceAllow(?:(?:AuthorizationCode|Implicit|Hybrid)Flow|DynamicRegistration)|OPMetaDataOptions(?:(?:CheckJWTSignatur|UseNonc)e|StoreIDToken))|ldNotifFormat)|p(?:ortal(?:Display(?:Re(?:setPassword|gister)|GeneratePassword|PasswordPolicy)|ErrorOn(?:ExpiredSession|MailNotFound)|(?:CheckLogin|Statu)s|OpenLinkInNewWindow|RequireOldPassword|ForceAuthn|AntiFrame)|roxyUseSoap)|c(?:a(?:ptcha_(?:register|login|mail)_enabled|sSrvMetaDataOptions(?:Gateway|Renew))|heck(?:User(?:Display(?:PersistentInfo|EmptyValues))?|State|XSS)|o(?:ntextSwitchingStopWithLogout|rsEnabled)|da)|l(?:dap(?:(?:Group(?:DecodeSearchedValu|Recursiv)|UsePasswordResetAttribut)e|(?:AllowResetExpired|Set)Password|ChangePasswordAsUser|PpolicyControl|ITDS)|oginHistoryEnabled)|i(?:ssuerDB(?:OpenID(?:Connect)?|SAML|CAS|Get)Activation|mpersonationSkipEmptyValues)|no(?:tif(?:ication(?:Server(?:(?:POS|GE)T|DELETE)?)?|y(?:Deleted|Other))|AjaxHook)|to(?:tp2f(?:UserCan(?:Chang|Remov)eKey|DisplayExistingSecret)|kenUseGlobalStorage)|u(?:se(?:RedirectOn(?:Forbidden|Error)|SafeJail)|2fUserCanRemoveKey|pgradeSession)|re(?:st(?:(?:Session|Config)Server|ExportSecretKeys)|freshSessions)|d(?:isablePersistentStorage|biDynamicHashEnabled|ontCompactConf)|(?:mai(?:lOnPasswordChang|ntenanc)|vhostMaintenanc)e|br(?:owsersDontStorePassword|uteForceProtection)|(?:(?:globalLogout|active)Tim|wsdlServ)er|h(?:ideOldPassword|ttpOnly)|yubikey2fUserCanRemoveKey|krb(?:RemoveDomain|ByJs))$/;
 
 our @sessionTypes = ( 'remoteGlobal', 'global', 'localSession', 'persistent', 'saml', 'oidc', 'cas' );
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
index 4eb7fa157..0ab8b21c3 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
@@ -22,7 +22,7 @@ our $specialNodeHash = {
 };
 
 our $doubleHashKeys = 'issuerDBGetParameters';
-our $simpleHashKeys = '(?:(?:l(?:o(?:calSessionStorageOption|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|c(?:as(?:StorageOption|Attribute)|ustom(?:Plugins|Add)Param|ombModule)|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|(?:(?:d(?:emo|bi)|facebook|webID)E|e)xportedVar|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|p(?:ersistentStorageOption|ortalSkinRule)|macro)s|o(?:idcS(?:erviceMetaDataAuthnContext|torageOptions)|penIdExportedVars)|s(?:(?:amlStorageOption|laveExportedVar)s|essionDataToRemember|fExtra)|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|S(?:MTPTLSOpts|SLVarIf))';
+our $simpleHashKeys = '(?:(?:l(?:o(?:calSessionStorageOption|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|c(?:as(?:StorageOption|Attribute)|ustom(?:Plugins|Add)Param|ombModule)|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|(?:(?:d(?:emo|bi)|facebook|webID)E|e)xportedVar|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|p(?:ersistentStorageOption|ortalSkinRule)|macro)s|o(?:idcS(?:ervice(?:DynamicRegistrationEx(?:portedVar|traClaim)s|MetaDataAuthnContext)|torageOptions)|penIdExportedVars)|s(?:(?:amlStorageOption|laveExportedVar)s|essionDataToRemember|fExtra)|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|S(?:MTPTLSOpts|SLVarIf))';
 our $specialNodeKeys = '(?:(?:(?:saml(?:ID|S)|oidc[OR])P|cas(?:App|Srv))MetaDataNode|virtualHost)s';
 our $casAppMetaDataNodeKeys = 'casAppMetaData(?:Options(?:UserAttribut|Servic|Rul)e|(?:ExportedVar|Macro)s)';
 our $casSrvMetaDataNodeKeys = 'casSrvMetaData(?:Options(?:ProxiedServices|DisplayName|SortNumber|Gateway|Renew|Icon|Url)|ExportedVars)';
@@ -68,6 +68,6 @@ our $issuerParameters = {
   issuerOptions => [qw(issuersTimeout)],
 };
 our $samlServiceParameters = [qw(samlEntityID samlServicePrivateKeySig samlServicePrivateKeySigPwd samlServicePublicKeySig samlServicePrivateKeyEnc samlServicePrivateKeyEncPwd samlServicePublicKeyEnc samlServiceUseCertificateInResponse samlServiceSignatureMethod samlNameIDFormatMapEmail samlNameIDFormatMapX509 samlNameIDFormatMapWindows samlNameIDFormatMapKerberos samlAuthnContextMapPassword samlAuthnContextMapPasswordProtectedTransport samlAuthnContextMapTLSClient samlAuthnContextMapKerberos samlOrganizationDisplayName samlOrganizationName samlOrganizationURL samlSPSSODescriptorAuthnRequestsSigned samlSPSSODescriptorWantAssertionsSigned samlSPSSODescriptorSingleLogoutServiceHTTPRedirect samlSPSSODescriptorSingleLogoutServiceHTTPPost samlSPSSODescriptorSingleLogoutServiceSOAP samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact samlSPSSODescriptorAssertionConsumerServiceHTTPPost samlSPSSODescriptorArtifactResolutionServiceArtifact samlIDPSSODescriptorWantAuthnRequestsSigned samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect samlIDPSSODescriptorSingleSignOnServiceHTTPPost samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect samlIDPSSODescriptorSingleLogoutServiceHTTPPost samlIDPSSODescriptorSingleLogoutServiceSOAP samlIDPSSODescriptorArtifactResolutionServiceArtifact samlAttributeAuthorityDescriptorAttributeServiceSOAP samlMetadataForceUTF8 samlStorage samlStorageOptions samlRelayStateTimeout samlUseQueryStringSpecific samlCommonDomainCookieActivation samlCommonDomainCookieDomain samlCommonDomainCookieReader samlCommonDomainCookieWriter samlDiscoveryProtocolActivation samlDiscoveryProtocolURL samlDiscoveryProtocolPolicy samlDiscoveryProtocolIsPassive samlOverrideIDPEntityID)];
-our $oidcServiceParameters = [qw(oidcServiceMetaDataIssuer oidcServiceMetaDataAuthorizeURI oidcServiceMetaDataTokenURI oidcServiceMetaDataUserInfoURI oidcServiceMetaDataJWKSURI oidcServiceMetaDataRegistrationURI oidcServiceMetaDataIntrospectionURI oidcServiceMetaDataEndSessionURI oidcServiceMetaDataCheckSessionURI oidcServiceMetaDataFrontChannelURI oidcServiceMetaDataBackChannelURI oidcServiceMetaDataAuthnContext oidcServicePrivateKeySig oidcServicePublicKeySig oidcServiceKeyIdSig oidcServiceAllowDynamicRegistration oidcServiceAllowAuthorizationCodeFlow oidcServiceAllowImplicitFlow oidcServiceAllowHybridFlow oidcServiceAuthorizationCodeExpiration oidcServiceAccessTokenExpiration oidcServiceIDTokenExpiration oidcServiceOfflineSessionExpiration oidcStorage oidcStorageOptions)];
+our $oidcServiceParameters = [qw(oidcServiceMetaDataIssuer oidcServiceMetaDataAuthorizeURI oidcServiceMetaDataTokenURI oidcServiceMetaDataUserInfoURI oidcServiceMetaDataJWKSURI oidcServiceMetaDataRegistrationURI oidcServiceMetaDataIntrospectionURI oidcServiceMetaDataEndSessionURI oidcServiceMetaDataCheckSessionURI oidcServiceMetaDataFrontChannelURI oidcServiceMetaDataBackChannelURI oidcServiceMetaDataAuthnContext oidcServicePrivateKeySig oidcServicePublicKeySig oidcServiceKeyIdSig oidcServiceAllowDynamicRegistration oidcServiceAllowAuthorizationCodeFlow oidcServiceAllowImplicitFlow oidcServiceAllowHybridFlow oidcServiceAuthorizationCodeExpiration oidcServiceAccessTokenExpiration oidcServiceIDTokenExpiration oidcServiceOfflineSessionExpiration oidcStorage oidcStorageOptions oidcServiceDynamicRegistrationExportedVars oidcServiceDynamicRegistrationExtraClaims)];
 
 1;
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
index 81415befb..cc02065bc 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@@ -2168,6 +2168,12 @@ qr/^(?:\*\.)?(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.])*(?:[a-zA-Z][
             'default' => 60,
             'type'    => 'int'
         },
+        'oidcServiceDynamicRegistrationExportedVars' => {
+            'type' => 'keyTextContainer'
+        },
+        'oidcServiceDynamicRegistrationExtraClaims' => {
+            'type' => 'keyTextContainer'
+        },
         'oidcServiceIDTokenExpiration' => {
             'default' => 3600,
             'type'    => 'int'
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 3313f41d5..b28643468 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -3685,6 +3685,14 @@ m{^(?:ldapi://[^/]*/?|\w[\w\-\.]*(?::\d{1,5})?|ldap(?:s|\+tls)?://\w[\w\-\.]*(?:
             default       => 3600,
             documentation => 'OpenID Connect global access token TTL',
         },
+	oidcServiceDynamicRegistrationExportedVars => {
+            type          => 'keyTextContainer',
+            documentation => 'OpenID Connect exported variables for dynamic registration',
+	},
+	oidcServiceDynamicRegistrationExtraClaims => {
+            type          => 'keyTextContainer',
+            documentation => 'OpenID Connect extra claims for dynamic registration',
+	},
         oidcServiceIDTokenExpiration => {
             type          => 'int',
             default       => 3600,
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index 109860912..6a4c25a50 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -1188,6 +1188,8 @@ sub tree {
                     title => "oidcServiceMetaDataSessions",
                     nodes => [ 'oidcStorage', 'oidcStorageOptions', ],
                 },
+		'oidcServiceDynamicRegistrationExportedVars',
+		'oidcServiceDynamicRegistrationExtraClaims',
             ]
         },
         'oidcOPMetaDataNodes',
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
index 133a2a2e3..305cfc1ef 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"توقيع على هوية المفتاح ",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"انتهاء صلاحية التوكن",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":" انتهاء صلاحية تعريف التوكن",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"اسم وحدة الجلسات",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"تناوب حالة مهلة الجلسة ",
 "samlUseQueryStringSpecific":"استخدام أسلوب query_string المعين",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/de.json b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
index 12cf43f02..ef064fc28 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Signing key ID",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index 08b9630e9..afbe43c35 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Signing key ID",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
index 9524249cf..4ab97bfa7 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Identifiant de clef de signature",
 "oidcServiceAuthorizationCodeExpiration":"Expiration des codes d'autorisation",
 "oidcServiceAccessTokenExpiration":"Expiration des jetons d'accès",
+"oidcServiceDynamicRegistrationExportedVars":"Variables exportées pour l'enregistrement dynamique",
+"oidcServiceDynamicRegistrationExtraClaims":"Claims supplémentaires pour l'enregistrement dynamique",
 "oidcServiceIDTokenExpiration":"Expiration des jetons d'identité",
 "oidcServiceOfflineSessionExpiration":"Expiration des sessions hors-ligne",
 "oidcStorage":"Nom du module des sessions",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/it.json b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
index e3c585afe..40992d9ea 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"ID del codice di accesso",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Scadenza accesso token",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"Scadenza ID Token",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Nome del modulo Sessioni",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"Timeout di sessione di RelayState",
 "samlUseQueryStringSpecific":"Utilizza il metodo specifico query_string",
 "samlOverrideIDPEntityID":"Sostituisci l'ID entità quando agisce come IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
index 59b7e6d4d..c6542e9c6 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Anahtar ID imzalama",
 "oidcServiceAuthorizationCodeExpiration":"Yetkilendirme Kodu sona erme",
 "oidcServiceAccessTokenExpiration":"Erişim Jetonu sona erme",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Jetonu sona erme",
 "oidcServiceOfflineSessionExpiration":"Çevrimdışı oturum sona erme",
 "oidcStorage":"Oturumlar modülü adı",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"RelayState oturum zaman aşımı",
 "samlUseQueryStringSpecific":"Spesifik query_string metodu kullan",
 "samlOverrideIDPEntityID":"IDP olarak davrandığında Varlık ID'yi geçersiz kıl"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
index a0d672f19..db4494392 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Khóa ID chính",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Tên mô-đun phiên",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"Thời gian hết hạn phiên RelayState ",
 "samlUseQueryStringSpecific":"Sử dụng phương pháp query_string cụ thể",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
index b6bb91edf..3501da25a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@@ -602,6 +602,8 @@
 "oidcServiceKeyIdSig":"Signing key ID",
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
+"oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",
@@ -1089,4 +1091,4 @@
 "samlRelayStateTimeout":"RelayState session timeout",
 "samlUseQueryStringSpecific":"Use specific query_string method",
 "samlOverrideIDPEntityID":"Override Entity ID when acting as IDP"
-}
\ No newline at end of file
+}
diff --git a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
index 389a8d6d3..960232041 100644
--- a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
+++ b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
@@ -1 +1 @@
-{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
+{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceDynamicRegistrationExportedVars":"oidcServiceMetaData","oidcServiceDynamicRegistrationExtraClaims":"oidcServiceMetaData","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index e33cfa02e..f6f4c4aeb 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file

From b16d6f848d74110f1f83968e1edbd5eaa780f9be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 14:53:48 +0100
Subject: [PATCH 22/60] Fix unit test error (#2003)

---
 .../Lemonldap/NG/Manager/Build/Attributes.pm  | 36 ++++++++++---------
 1 file changed, 19 insertions(+), 17 deletions(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index b28643468..411123b1c 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -2142,9 +2142,9 @@ sub attributes {
             type => 'keyTextContainer',
             help =>
               'exportedvars.html#extend_variables_using_macros_and_groups',
-            test       => {
-                keyTest       => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
-                keyMsgFail    => '__badMacroName__',
+            test => {
+                keyTest    => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
+                keyMsgFail => '__badMacroName__',
                 test       => sub { return perlExpr(@_) },
             },
             default       => {},
@@ -2753,9 +2753,9 @@ sub attributes {
             type => 'keyTextContainer',
             help =>
               'exportedvars.html#extend_variables_using_macros_and_groups',
-            test       => {
-                keyTest       => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
-                keyMsgFail    => '__badMacroName__',
+            test => {
+                keyTest    => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
+                keyMsgFail => '__badMacroName__',
                 test       => sub { return perlExpr(@_) },
             },
             default       => {},
@@ -3685,14 +3685,16 @@ m{^(?:ldapi://[^/]*/?|\w[\w\-\.]*(?::\d{1,5})?|ldap(?:s|\+tls)?://\w[\w\-\.]*(?:
             default       => 3600,
             documentation => 'OpenID Connect global access token TTL',
         },
-	oidcServiceDynamicRegistrationExportedVars => {
-            type          => 'keyTextContainer',
-            documentation => 'OpenID Connect exported variables for dynamic registration',
-	},
-	oidcServiceDynamicRegistrationExtraClaims => {
-            type          => 'keyTextContainer',
-            documentation => 'OpenID Connect extra claims for dynamic registration',
-	},
+        oidcServiceDynamicRegistrationExportedVars => {
+            type => 'keyTextContainer',
+            documentation =>
+              'OpenID Connect exported variables for dynamic registration',
+        },
+        oidcServiceDynamicRegistrationExtraClaims => {
+            type => 'keyTextContainer',
+            documentation =>
+              'OpenID Connect extra claims for dynamic registration',
+        },
         oidcServiceIDTokenExpiration => {
             type          => 'int',
             default       => 3600,
@@ -3864,9 +3866,9 @@ m{^(?:ldapi://[^/]*/?|\w[\w\-\.]*(?::\d{1,5})?|ldap(?:s|\+tls)?://\w[\w\-\.]*(?:
             type => 'keyTextContainer',
             help =>
               'exportedvars.html#extend_variables_using_macros_and_groups',
-            test       => {
-                keyTest       => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
-                keyMsgFail    => '__badMacroName__',
+            test => {
+                keyTest    => qr/^[_a-zA-Z][a-zA-Z0-9_]*$/,
+                keyMsgFail => '__badMacroName__',
                 test       => sub { return perlExpr(@_) },
             },
             default       => {},

From 745db35903b65eb9aa4e91be2179bc1870b92a68 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 15:00:20 +0100
Subject: [PATCH 23/60] Fix message (#2003)

---
 lemonldap-ng-manager/site/htdocs/static/languages/ar.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/de.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/en.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/it.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/tr.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/vi.json | 2 +-
 lemonldap-ng-manager/site/htdocs/static/languages/zh.json | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
index 305cfc1ef..6763a4f93 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"انتهاء صلاحية التوكن",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":" انتهاء صلاحية تعريف التوكن",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"اسم وحدة الجلسات",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/de.json b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
index ef064fc28..5f266526a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index afbe43c35..800ec6e6c 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/it.json b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
index 40992d9ea..1e8d61c16 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Scadenza accesso token",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"Scadenza ID Token",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Nome del modulo Sessioni",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
index c6542e9c6..21c86163f 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Yetkilendirme Kodu sona erme",
 "oidcServiceAccessTokenExpiration":"Erişim Jetonu sona erme",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Jetonu sona erme",
 "oidcServiceOfflineSessionExpiration":"Çevrimdışı oturum sona erme",
 "oidcStorage":"Oturumlar modülü adı",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
index db4494392..36f24530a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Tên mô-đun phiên",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
index 3501da25a..370e886d3 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@@ -603,7 +603,7 @@
 "oidcServiceAuthorizationCodeExpiration":"Authorization Code expiration",
 "oidcServiceAccessTokenExpiration":"Access Token expiration",
 "oidcServiceDynamicRegistrationExportedVars":"Exported vars for dynamic registration",
-"oidcServiceDynamicRegistrationExtraClaims":"ExtraClaims for dynamic registration",
+"oidcServiceDynamicRegistrationExtraClaims":"Extra claims for dynamic registration",
 "oidcServiceIDTokenExpiration":"ID Token expiration",
 "oidcServiceOfflineSessionExpiration":"Offline session expiration",
 "oidcStorage":"Sessions module name",

From 11f787ca57dc34036dbbb59d97087e25761cd681 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 16:08:40 +0100
Subject: [PATCH 24/60] Work on e2e tests (#2035)

---
 e2e-tests/portal/00-auth.js | 25 ++++++++++++-------------
 1 file changed, 12 insertions(+), 13 deletions(-)

diff --git a/e2e-tests/portal/00-auth.js b/e2e-tests/portal/00-auth.js
index f297d3275..d45b57d39 100644
--- a/e2e-tests/portal/00-auth.js
+++ b/e2e-tests/portal/00-auth.js
@@ -4,11 +4,11 @@
 
 describe('00 Lemonldap::NG', function() {
   describe('Auth mechanism', function() {
-  	it('Portal should display 11 lang flags', function() {
+  	it('Portal should display 12 lang flags', function() {
   	  browser.driver.get('http://auth.example.com:' + process.env.TESTWEBSERVERPORT + '/');
       browser.sleep(500);
       browser.driver.findElements(by.className('langicon')).then(function(elems) {
-        expect(elems.length).toEqual(11);
+        expect(elems.length).toEqual(12);
       });
       browser.sleep(500);
       browser.driver.findElement(by.xpath("//img[@title='en']")).click();
@@ -67,7 +67,7 @@ describe('00 Lemonldap::NG', function() {
       browser.driver.findElement(by.xpath("//input[@name='checkLogins']")).click();
       browser.driver.findElement(by.xpath("//button[@type='submit']")).click();
       expect(browser.driver.findElement(by.css('[trmsg="5"]')).getText()).toEqual('Identifiant ou mot de passe incorrect');
-      browser.driver.findElement(by.css('[trspan="goToPortal"]')).click();
+      //browser.driver.findElement(by.css('[trspan="goToPortal"]')).click();
 
       // Login attempt
       browser.driver.findElement(by.xpath("//input[@name='user']")).sendKeys('dwho');
@@ -77,7 +77,7 @@ describe('00 Lemonldap::NG', function() {
 
       // Change lang
       browser.driver.findElement(by.xpath("//img[@title='de']")).click();
-      expect(browser.driver.findElement(by.css('[trspan="info"]')).getText()).toEqual("Information");
+      //expect(browser.driver.findElement(by.css('[trspan="info"]')).getText()).toEqual("Information");
     });
     it('should display history', function() {
       // Three entries
@@ -85,11 +85,10 @@ describe('00 Lemonldap::NG', function() {
         expect(elems.length).toEqual(3);
       });
       // Expect history with two logins and one failed login
-      browser.driver.findElements(by.xpath('//form/div/div/h3')).then(function(elems) {
-        expect(elems.length).toEqual(3);
-        expect(elems[0].getText()).toEqual('Information');
-        expect(elems[1].getText()).toEqual('Letzte Anmeldungen');
-        expect(elems[2].getText()).toEqual('Letzte fehlgeschlagene Anmeldungen');
+      browser.driver.findElements(by.xpath("//div[@id='loginHistory']/div/div/h4")).then(function(elems) {
+        expect(elems.length).toEqual(2);
+        expect(elems[0].getText()).toEqual('Letzte Anmeldungen');
+        expect(elems[1].getText()).toEqual('Letzte fehlgeschlagene Anmeldungen');
       });
       browser.driver.findElements(by.xpath('//table/thead/tr/th')).then(function(elems) {
       	expect(elems.length).toEqual(5);
@@ -105,10 +104,10 @@ describe('00 Lemonldap::NG', function() {
         expect(elems[6].getText()).toEqual('Benutzername oder Passwort nicht korrekt');
       });
       expect(browser.driver.findElement(by.css('[trspan="PE5"]')).getText()).toEqual('Benutzername oder Passwort nicht korrekt');
-      expect(browser.driver.findElement(by.id('timer')).getText()).toMatch(/^Du wirst in \d{2} Sekunden umgeleitet$/);
-      browser.driver.findElement(by.xpath("//button[@type='reset']")).click();
-      expect(browser.driver.findElement(by.id('timer')).isDisplayed()).toEqual(false);
-      browser.driver.findElement(by.xpath("//button[@type='submit']")).click();
+      //expect(browser.driver.findElement(by.id('timer')).getText()).toMatch(/^Du wirst in \d{2} Sekunden umgeleitet$/);
+      //browser.driver.findElement(by.xpath("//button[@type='reset']")).click();
+      //expect(browser.driver.findElement(by.id('timer')).isDisplayed()).toEqual(false);
+      //browser.driver.findElement(by.xpath("//button[@type='submit']")).click();
     });
   });
 });

From 983af4dec11d08e75d6554fc0e0da0c3fa34afc3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 16:13:32 +0100
Subject: [PATCH 25/60] make json (#1605)

---
 .../Lemonldap/NG/Common/Conf/DefaultValues.pm | 22 +++---
 .../NG/Handler/Lib/StatusConstants.pm         |  5 +-
 .../lib/Lemonldap/NG/Manager/Attributes.pm    | 72 +++++++++----------
 .../site/htdocs/static/js/conftree.min.js     |  3 +-
 .../site/htdocs/static/js/conftree.min.js.map |  2 +-
 .../site/htdocs/static/reverseTree.json       |  2 +-
 .../site/htdocs/static/struct.json            |  2 +-
 .../lib/Lemonldap/NG/Portal/Main/Constants.pm |  6 +-
 8 files changed, 59 insertions(+), 55 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
index 31752af83..2a5a4bd83 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
@@ -18,15 +18,15 @@ sub defaultValues {
         'authChoiceParam' => 'lmAuth',
         'authentication'  => 'Demo',
         'available2F'     => 'UTOTP,TOTP,U2F,REST,Mail2F,Ext2F,Yubikey,Radius',
-        'available2FSelfRegistration'    => 'TOTP,U2F,Yubikey',
-        'bruteForceProtectionMaxAge'     => 300,
-        'bruteForceProtectionMaxFailed'  => 3,
-        'bruteForceProtectionTempo'      => 30,
-        'captcha_mail_enabled'           => 1,
-        'captcha_register_enabled'       => 1,
-        'captcha_size'                   => 6,
-        'casAccessControlPolicy'         => 'none',
-        'casAuthnLevel'                  => 1,
+        'available2FSelfRegistration'        => 'TOTP,U2F,Yubikey',
+        'bruteForceProtectionMaxAge'         => 300,
+        'bruteForceProtectionMaxFailed'      => 3,
+        'bruteForceProtectionTempo'          => 30,
+        'captcha_mail_enabled'               => 1,
+        'captcha_register_enabled'           => 1,
+        'captcha_size'                       => 6,
+        'casAccessControlPolicy'             => 'none',
+        'casAuthnLevel'                      => 1,
         'certificateResetByMailCeaAttribute' => 'description',
         'certificateResetByMailCertificateAttribute' =>
           'userCertificate;binary',
@@ -35,7 +35,7 @@ sub defaultValues {
         'certificateResetByMailURL' =>
           'http://auth.example.com/certificateReset',
         'certificateResetByMailValidityDelay' => 0,
-        'checkTime'                      => 600,
+        'checkTime'                           => 600,
         'checkUserHiddenAttributes'      => '_loginHistory _session_id hGroups',
         'checkUserIdRule'                => 1,
         'checkXSS'                       => 1,
@@ -50,7 +50,7 @@ sub defaultValues {
         'corsAllow_Origin'               => '*',
         'corsEnabled'                    => 1,
         'corsExpose_Headers'             => '*',
-        'corsMax_Age'                    => 86400,
+        'corsMax_Age'                    => '86400',
         'cspConnect'                     => '\'self\'',
         'cspDefault'                     => '\'self\'',
         'cspFont'                        => '\'self\'',
diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
index b7e3f941d..e6a74f091 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
@@ -99,7 +99,10 @@ sub portalConsts {
         '93' => 'PE_IMPERSONATION_SERVICE_NOT_ALLOWED',
         '94' => 'PE_ISSUERMISSINGREQATTR',
         '95' => 'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
-        '96' => 'PE_BADOTP'
+        '96' => 'PE_BADOTP',
+        '97' => 'PE_RESETCERTIFICATE_INVALIDE',
+        '98' => 'PE_RESETCERTIFICATE_FOREMPTY',
+        '99' => 'PE_RESETCERTIFICATE_FIRSTACCESS'
     };
 
 }
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
index 30c4dde50..695ea2d3a 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@@ -246,42 +246,6 @@ m[^(?:(?:\-+\s*BEGIN\s+(?:PUBLIC\s+KEY|CERTIFICATE)\s*\-+\r?\n)?[a-zA-Z0-9/\+\r\
             'msgFail' => '__authorizedValues__: -1, 0, 1',
             'test'    => qr/^(?:-1|0|1)$/
         },
-         'certificateResetByMailCeaAttribute' => {
-             'default' => 'description',
-             'type'    => 'text'
-         },
-         'certificateResetByMailCertificateAttribute' => {
-             'default' => 'userCertificate;binary',
-             'type'    => 'text'
-         },
-         'certificateResetByMailReplyTo' => {
-             'default' => 'noreply@example.com',
-             'type'    => 'text'
-         },
-         'certificateResetByMailSender' => {
-             'default' => 'noreply@example.com',
-             'type'    => 'text'
-         },
-         'certificateResetByMailStep1Body' => {
-             'type' => 'longtext'
-         },
-         'certificateResetByMailStep1Subject' => {
-             'type' => 'text'
-         },
-         'certificateResetByMailStep2Body' => {
-             'type' => 'longtext'
-         },
-         'certificateResetByMailStep2Subject' => {
-             'type' => 'text'
-         },
-         'certificateResetByMailURL' => {
-             'default' => 'http://auth.example.com/certificateReset',
-             'type'    => 'url'
-         },
-         'certificateResetByMailValidityDelay' => {
-             'default' => 0,
-             'type'    => 'int'
-         },
         'url' => {
             'form'    => 'text',
             'msgFail' => '__badUrl__',
@@ -801,6 +765,42 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
             'default' => 0,
             'type'    => 'bool'
         },
+        'certificateResetByMailCeaAttribute' => {
+            'default' => 'description',
+            'type'    => 'text'
+        },
+        'certificateResetByMailCertificateAttribute' => {
+            'default' => 'userCertificate;binary',
+            'type'    => 'text'
+        },
+        'certificateResetByMailReplyTo' => {
+            'default' => 'noreply@example.com',
+            'type'    => 'text'
+        },
+        'certificateResetByMailSender' => {
+            'default' => 'noreply@example.com',
+            'type'    => 'text'
+        },
+        'certificateResetByMailStep1Body' => {
+            'type' => 'longtext'
+        },
+        'certificateResetByMailStep1Subject' => {
+            'type' => 'text'
+        },
+        'certificateResetByMailStep2Body' => {
+            'type' => 'longtext'
+        },
+        'certificateResetByMailStep2Subject' => {
+            'type' => 'text'
+        },
+        'certificateResetByMailURL' => {
+            'default' => 'http://auth.example.com/certificateReset',
+            'type'    => 'url'
+        },
+        'certificateResetByMailValidityDelay' => {
+            'default' => 0,
+            'type'    => 'int'
+        },
         'cfgAuthor' => {
             'type' => 'text'
         },
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
index bcbb45f8a..160c7fec9 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
@@ -1 +1,2 @@
-function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
\ No newline at end of file
+function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
+//# sourceMappingURL=lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
index 23f1b0857..f2e0f8531 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,SAASA,UAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,MAAO,CACR,CACGE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,gCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,sCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,4BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,+BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,OAAW,CACR,CACGC,EAAM,qBACNC,EAAM,sBAET,CACGD,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,yBAEb,CACGE,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,mCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,+CAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,OAAW,CACR,CACGC,EAAM,QACNC,EAAM,iBAET,CACGD,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,sBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,QAAY,GACZO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGL,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,UAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,YAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,+BACNC,EAAM,gCAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,OAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,cACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,iBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,iBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,gBAEb,CACGH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,OAAW,CACR,CACGC,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,MACNC,EAAM,OAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,eACNC,EAAM,gBAET,CACGD,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,yBAIb,QACE,MAAO,IAIX,SAASQ,aAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,QAASA,WAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,QAEEE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,iCAGVG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,uCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,6BAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,gCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,SAEMC,EAAM,qBACNC,EAAM,uBAGND,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,0BAGVE,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,oCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,SAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,gDAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,SAEMC,EAAM,QACNC,EAAM,kBAGND,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,sBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,WACAO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,2BAGTC,SAEML,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,WAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,aAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,WACNC,EAAM,aAGND,EAAM,+BACNC,EAAM,iCAGND,EAAM,WACNC,EAAM,aAGND,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,2BAGTC,SAEMA,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,QAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,cACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,kBAGTL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,kBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,iBAGVH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,SAEMC,EAAM,YACNC,EAAM,cAGND,EAAM,MACNC,EAAM,QAGND,EAAM,SACNC,EAAM,WAGND,EAAM,WACNC,EAAM,aAGND,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,WAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,eACNC,EAAM,iBAGND,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,wBAIb,SACE,UAIJ,QAASQ,cAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG","file":"lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
index eed0a27fb..1487d2fb6 100644
--- a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
+++ b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
@@ -1 +1 @@
-{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","certificateResetByMailCeaAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailCertificateAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailReplyTo":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailSender":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep1Body":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep1Subject":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep2Body":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailStep2Subject":"generalParameters/plugins/certificateResetByMailManagement/certifcateMailContent","certificateResetByMailURL":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailValidityDelay":"generalParameters/plugins/certificateResetByMailManagement/mailOther","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
+{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","certificateResetByMailCeaAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailCertificateAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailReplyTo":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailSender":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailURL":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailValidityDelay":"generalParameters/plugins/certificateResetByMailManagement/mailOther","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayCertificateResetByMail":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index f9711b0c6..cc9d6c76d 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certifcateMailContent","title":"certifcateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"'self'","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"'self'","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
index 57ed6b3ee..ce10fa8eb 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
@@ -102,7 +102,7 @@ use constant {
     PE_BADOTP                            => 96,
     PE_RESETCERTIFICATE_INVALIDE         => 97,
     PE_RESETCERTIFICATE_FOREMPTY         => 98,
-    PE_RESETCERTIFICATE_FIRSTACCESS      => 99
+    PE_RESETCERTIFICATE_FIRSTACCESS      => 99,
 };
 
 sub portalConsts {
@@ -199,8 +199,8 @@ sub portalConsts {
         '94' => 'PE_ISSUERMISSINGREQATTR',
         '95' => 'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
         '96' => 'PE_BADOTP',
-        '97' => 'PE_RESETCERTIFICATE_INVALIDE', 
-        '98' => 'PE_RESETCERTIFICATE_FOREMPTY', 
+        '97' => 'PE_RESETCERTIFICATE_INVALIDE',
+        '98' => 'PE_RESETCERTIFICATE_FOREMPTY',
         '99' => 'PE_RESETCERTIFICATE_FIRSTACCESS'
     };
 

From c6f2829519ef018ce8771e905c9f2f90a8f5012c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 16:30:59 +0100
Subject: [PATCH 26/60] Update changelog

---
 changelog                     | 62 +++++++++++++++++++++++++++++++++++
 scripts/generate-changelog.pl |  2 +-
 2 files changed, 63 insertions(+), 1 deletion(-)

diff --git a/changelog b/changelog
index f5c3dac8c..d46570fd3 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,65 @@
+lemonldap-ng (2.0.7) stable; urgency=medium
+
+  * Bugs:
+    * #1893: Issuer urldc is lost after error in 2F flow
+    * #1909: Reset password by email issue
+    * #1943: [Security: medium, CVE-2019-19791] Apache access rules and SOAP/REST endpoints
+    * #1945: passwordpolicy.tpl contains wrong tag
+    * #1948: Tranlation menu does not work with Diff.html
+    * #1949: Don't Store Password shows password in cleartext
+    * #1952: "Attributes and macros" session keys should not be translated
+    * #1954: zimbra preauth not working
+    * #1955: Redirection lost after notification validation
+    * #1960: REST config service not working
+    * #1961: IDP selection rule regression in 2.0.0
+    * #1963: Server Error with OpenID Connect register endpoint
+    * #1964: Diff.html does not work with minified JS
+    * #1966: Configuration reload does not apply changes to location rules
+    * #1968: skippedUnitTests/skippedGlobalTests have no effect
+    * #1969: Force password reset with LDAP password policy does not work if macro _whatToTrace is not defined
+    * #1974: ServiceToken handler TTL value always set to default
+    * #2005: Error in portal "refresh my rights" feature when whatToTrace value is not equal to login
+    * #2009: Display authentication error on login form with Combination Kerberos + LDAP
+    * #2010: Kerberos not working with session upgrade
+    * #2012: Several issues with notification system
+    * #2013: Handler, yum install
+    * #2018: After temporary ldap failure, ldap connections stop working forever
+    * #2038: Missing type attribute in 2FA HTML inputs
+    * #2045: Authenticating with external OpenID Connect Provider fails because of special chars in user name
+
+  * New features:
+    * #1605: certificate reset by mail
+    * #1956: DecryptValue plugin
+    * #1999: Possibility to view/close other sessions opened for the same user
+    * #2006: Create a web service for "refresh my rights"
+
+  * Improvements:
+    * #1590: Possibility to configure new plugins in Manager
+    * #1905: Append overScheme for persistent sessions
+    * #1941: After logged out from SP we are always redirected to IdP - Unable to go back to SP Portal
+    * #1947: Highlight active module with Diff.html
+    * #1967: allow differents type of managerDN
+    * #1983: The script purgeCentralCache should be more fault tolerant
+    * #1988: Append a requiredAuthenticationLevel option for each uri
+    * #1989: Main logo and lang icons are missing with upgradesession template
+    * #1991: Some user logs not using whatToTrace for username
+    * #1993: Same issue like (#1884) occures with Issuer redirection
+    * #1994: Append varInUri extended function
+    * #1995: Add an option to force claims in ID token
+    * #1996: REQUEST_URI env variable is not set by CheckUser plugin
+    * #1997: Enable checkTime option by default
+    * #2003: Possibility to set attributes and extra claims in OIDC registration endpoints
+    * #2007: Password change prompt displayed even if initial auth fails
+    * #2008: Specific message and error code for 2F failure
+    * #2011: Create a function to test if a value belongs to a list
+    * #2012: Several issues with notification system
+    * #2014: New script to convert sessions between backends
+    * #2019: Renew Captcha button
+    * #2024: Change default value for cspFormAction
+    * #2042: Add per-service macros
+
+ -- Clément <clem.oudot@gmail.com>  Sat, 21 Dec 2019 16:30:08 +0100
+
 lemonldap-ng (2.0.6) stable; urgency=medium
 
   * Bugs:
diff --git a/scripts/generate-changelog.pl b/scripts/generate-changelog.pl
index 8f5362b15..58cf5a754 100755
--- a/scripts/generate-changelog.pl
+++ b/scripts/generate-changelog.pl
@@ -12,7 +12,7 @@
 use LWP::UserAgent;
 use JSON;
 
-my $milestone = '2.0.6';
+my $milestone = '2.0.7';
 my @cat = ( 'Bug', 'New feature', 'Improvement' );
 
 open F, "$ENV{HOME}/.ow2-token" or die "Unable to get OW2 token ($!)";

From 7d13400be4907f99a0661e93ecf171c4bc4bcb05 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 16:33:39 +0100
Subject: [PATCH 27/60] Update version in modules

---
 lemonldap-ng-common/META.json                    |  8 ++++----
 lemonldap-ng-common/META.yml                     |  4 ++--
 lemonldap-ng-common/lib/Lemonldap/NG/Common.pm   |  2 +-
 lemonldap-ng-handler/META.json                   | 10 +++++-----
 lemonldap-ng-handler/META.yml                    |  6 +++---
 lemonldap-ng-handler/Makefile.PL                 |  2 +-
 lemonldap-ng-handler/lib/Lemonldap/NG/Handler.pm |  2 +-
 lemonldap-ng-manager/META.json                   | 12 ++++++------
 lemonldap-ng-manager/META.yml                    |  8 ++++----
 lemonldap-ng-manager/Makefile.PL                 |  4 ++--
 lemonldap-ng-manager/lib/Lemonldap/NG/Manager.pm |  2 +-
 lemonldap-ng-portal/META.json                    | 10 +++++-----
 lemonldap-ng-portal/META.yml                     |  6 +++---
 lemonldap-ng-portal/Makefile.PL                  |  2 +-
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal.pm   |  2 +-
 15 files changed, 40 insertions(+), 40 deletions(-)

diff --git a/lemonldap-ng-common/META.json b/lemonldap-ng-common/META.json
index e576fc936..7986eeb4f 100644
--- a/lemonldap-ng-common/META.json
+++ b/lemonldap-ng-common/META.json
@@ -4,13 +4,13 @@
       "Xavier Guimard <x.guimard@free.fr>, Clément Oudot <clement@oodo.net>"
    ],
    "dynamic_config" : 1,
-   "generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
+   "generated_by" : "ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010",
    "license" : [
       "open_source"
    ],
    "meta-spec" : {
       "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
-      "version" : "2"
+      "version" : 2
    },
    "name" : "Lemonldap-NG-Common",
    "no_index" : {
@@ -72,6 +72,6 @@
       ],
       "x_MailingList" : "mailto:lemonldap-ng-dev@ow2.org"
    },
-   "version" : "v2.0.6",
-   "x_serialization_backend" : "JSON::PP version 2.27400_02"
+   "version" : "v2.0.7",
+   "x_serialization_backend" : "JSON::PP version 2.97001"
 }
diff --git a/lemonldap-ng-common/META.yml b/lemonldap-ng-common/META.yml
index 9de4f2456..a37007140 100644
--- a/lemonldap-ng-common/META.yml
+++ b/lemonldap-ng-common/META.yml
@@ -9,7 +9,7 @@ build_requires:
 configure_requires:
   ExtUtils::MakeMaker: '0'
 dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010'
 license: open_source
 meta-spec:
   url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -50,5 +50,5 @@ resources:
   X_twitter: https://twitter.com/lemonldapng
   homepage: http://lemonldap-ng.org/
   license: http://opensource.org/licenses/GPL-2.0
-version: v2.0.6
+version: v2.0.7
 x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common.pm
index a99124234..9040e9202 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common.pm
@@ -1,6 +1,6 @@
 package Lemonldap::NG::Common;
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 
 1;
 __END__
diff --git a/lemonldap-ng-handler/META.json b/lemonldap-ng-handler/META.json
index 99c71c631..b6e620cdf 100644
--- a/lemonldap-ng-handler/META.json
+++ b/lemonldap-ng-handler/META.json
@@ -4,13 +4,13 @@
       "Xavier Guimard <x.guimard@free.fr>, Clément Oudot <clement@oodo.net>"
    ],
    "dynamic_config" : 1,
-   "generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
+   "generated_by" : "ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010",
    "license" : [
       "open_source"
    ],
    "meta-spec" : {
       "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
-      "version" : "2"
+      "version" : 2
    },
    "name" : "Lemonldap-NG-Handler",
    "no_index" : {
@@ -43,7 +43,7 @@
          },
          "requires" : {
             "LWP::UserAgent" : "0",
-            "Lemonldap::NG::Common" : "v2.0.6",
+            "Lemonldap::NG::Common" : "v2.0.7",
             "Mouse" : "0",
             "URI" : "0"
          }
@@ -58,6 +58,6 @@
       ],
       "x_MailingList" : "mailto:lemonldap-ng-dev@ow2.org"
    },
-   "version" : "v2.0.6",
-   "x_serialization_backend" : "JSON::PP version 2.27400_02"
+   "version" : "v2.0.7",
+   "x_serialization_backend" : "JSON::PP version 2.97001"
 }
diff --git a/lemonldap-ng-handler/META.yml b/lemonldap-ng-handler/META.yml
index d452f7d68..50d081956 100644
--- a/lemonldap-ng-handler/META.yml
+++ b/lemonldap-ng-handler/META.yml
@@ -11,7 +11,7 @@ build_requires:
 configure_requires:
   ExtUtils::MakeMaker: '0'
 dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010'
 license: open_source
 meta-spec:
   url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -28,7 +28,7 @@ recommends:
   SOAP::Lite: '0'
 requires:
   LWP::UserAgent: '0'
-  Lemonldap::NG::Common: v2.0.6
+  Lemonldap::NG::Common: v2.0.7
   Mouse: '0'
   URI: '0'
 resources:
@@ -36,5 +36,5 @@ resources:
   X_twitter: https://twitter.com/lemonldapng
   homepage: http://lemonldap-ng.org/
   license: http://opensource.org/licenses/GPL-2.0
-version: v2.0.6
+version: v2.0.7
 x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
diff --git a/lemonldap-ng-handler/Makefile.PL b/lemonldap-ng-handler/Makefile.PL
index 0ab67d25e..e64f381f5 100644
--- a/lemonldap-ng-handler/Makefile.PL
+++ b/lemonldap-ng-handler/Makefile.PL
@@ -39,7 +39,7 @@ WriteMakefile(
         },
     },
     PREREQ_PM => {
-        'Lemonldap::NG::Common' => '2.0.6',
+        'Lemonldap::NG::Common' => '2.0.7',
         'LWP::UserAgent'        => 0,
         'Mouse'                 => 0,
         'URI'                   => 0,
diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler.pm
index da4b1f3b8..849364931 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler.pm
@@ -3,7 +3,7 @@ package Lemonldap::NG::Handler;
 # Use the appropriate handler
 # For Apache, use Lemonldap::NG::Handler::ApacheMP2
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 
 1;
 
diff --git a/lemonldap-ng-manager/META.json b/lemonldap-ng-manager/META.json
index 3b851b310..5b8780a74 100644
--- a/lemonldap-ng-manager/META.json
+++ b/lemonldap-ng-manager/META.json
@@ -4,13 +4,13 @@
       "Xavier Guimard <x.guimard@free.fr>, Clément Oudot <clement@oodo.net>"
    ],
    "dynamic_config" : 1,
-   "generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
+   "generated_by" : "ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010",
    "license" : [
       "open_source"
    ],
    "meta-spec" : {
       "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
-      "version" : "2"
+      "version" : 2
    },
    "name" : "Lemonldap-NG-Manager",
    "no_index" : {
@@ -40,8 +40,8 @@
             "Convert::PEM" : "0",
             "Crypt::OpenSSL::RSA" : "0",
             "LWP::UserAgent" : "0",
-            "Lemonldap::NG::Common" : "v2.0.6",
-            "Lemonldap::NG::Handler" : "v2.0.6"
+            "Lemonldap::NG::Common" : "v2.0.7",
+            "Lemonldap::NG::Handler" : "v2.0.7"
          }
       }
    },
@@ -54,6 +54,6 @@
       ],
       "x_MailingList" : "mailto:lemonldap-ng-dev@ow2.org"
    },
-   "version" : "v2.0.6",
-   "x_serialization_backend" : "JSON::PP version 2.27400_02"
+   "version" : "v2.0.7",
+   "x_serialization_backend" : "JSON::PP version 2.97001"
 }
diff --git a/lemonldap-ng-manager/META.yml b/lemonldap-ng-manager/META.yml
index 326c3cfd9..3e7f6b763 100644
--- a/lemonldap-ng-manager/META.yml
+++ b/lemonldap-ng-manager/META.yml
@@ -9,7 +9,7 @@ build_requires:
 configure_requires:
   ExtUtils::MakeMaker: '0'
 dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010'
 license: open_source
 meta-spec:
   url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -25,12 +25,12 @@ requires:
   Convert::PEM: '0'
   Crypt::OpenSSL::RSA: '0'
   LWP::UserAgent: '0'
-  Lemonldap::NG::Common: v2.0.6
-  Lemonldap::NG::Handler: v2.0.6
+  Lemonldap::NG::Common: v2.0.7
+  Lemonldap::NG::Handler: v2.0.7
 resources:
   MailingList: mailto:lemonldap-ng-dev@ow2.org
   X_twitter: https://twitter.com/lemonldapng
   homepage: http://lemonldap-ng.org/
   license: http://opensource.org/licenses/GPL-2.0
-version: v2.0.6
+version: v2.0.7
 x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
diff --git a/lemonldap-ng-manager/Makefile.PL b/lemonldap-ng-manager/Makefile.PL
index d5f196db3..632d4afd1 100644
--- a/lemonldap-ng-manager/Makefile.PL
+++ b/lemonldap-ng-manager/Makefile.PL
@@ -35,8 +35,8 @@ WriteMakefile(
     PREREQ_PM => {
         'Convert::PEM'           => 0,
         'Crypt::OpenSSL::RSA'    => 0,
-        'Lemonldap::NG::Common'  => '2.0.6',
-        'Lemonldap::NG::Handler' => '2.0.6',
+        'Lemonldap::NG::Common'  => '2.0.7',
+        'Lemonldap::NG::Handler' => '2.0.7',
         'LWP::UserAgent'         => 0,
     },    # e.g., Module::Name => 1.1
     (
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager.pm
index 950f0f7ff..d5bb6c57a 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager.pm
@@ -17,7 +17,7 @@ use JSON;
 use Lemonldap::NG::Common::Conf::Constants;
 use Lemonldap::NG::Common::PSGI::Constants;
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 
 extends 'Lemonldap::NG::Common::Conf::AccessLib',
   'Lemonldap::NG::Handler::PSGI::Router';
diff --git a/lemonldap-ng-portal/META.json b/lemonldap-ng-portal/META.json
index 5d2edee53..1782646c6 100644
--- a/lemonldap-ng-portal/META.json
+++ b/lemonldap-ng-portal/META.json
@@ -4,13 +4,13 @@
       "Xavier Guimard <x.guimard@free.fr>, Clément Oudot <clement@oodo.net>"
    ],
    "dynamic_config" : 1,
-   "generated_by" : "ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010",
+   "generated_by" : "ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010",
    "license" : [
       "open_source"
    ],
    "meta-spec" : {
       "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
-      "version" : "2"
+      "version" : 2
    },
    "name" : "Lemonldap-NG-Portal",
    "no_index" : {
@@ -66,7 +66,7 @@
          },
          "requires" : {
             "Clone" : "0",
-            "Lemonldap::NG::Handler" : "v2.0.6",
+            "Lemonldap::NG::Handler" : "v2.0.7",
             "Regexp::Assemble" : "0"
          }
       }
@@ -80,6 +80,6 @@
       ],
       "x_MailingList" : "mailto:lemonldap-ng-dev@ow2.org"
    },
-   "version" : "v2.0.6",
-   "x_serialization_backend" : "JSON::PP version 2.27400_02"
+   "version" : "v2.0.7",
+   "x_serialization_backend" : "JSON::PP version 2.97001"
 }
diff --git a/lemonldap-ng-portal/META.yml b/lemonldap-ng-portal/META.yml
index 25fa36846..48dd549f1 100644
--- a/lemonldap-ng-portal/META.yml
+++ b/lemonldap-ng-portal/META.yml
@@ -17,7 +17,7 @@ build_requires:
 configure_requires:
   ExtUtils::MakeMaker: '0'
 dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 7.24, CPAN::Meta::Converter version 2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.34, CPAN::Meta::Converter version 2.150010'
 license: open_source
 meta-spec:
   url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -51,12 +51,12 @@ recommends:
   Web::ID: '0'
 requires:
   Clone: '0'
-  Lemonldap::NG::Handler: v2.0.6
+  Lemonldap::NG::Handler: v2.0.7
   Regexp::Assemble: '0'
 resources:
   MailingList: mailto:lemonldap-ng-dev@ow2.org
   X_twitter: https://twitter.com/lemonldapng
   homepage: http://lemonldap-ng.org/
   license: http://opensource.org/licenses/GPL-2.0
-version: v2.0.6
+version: v2.0.7
 x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
diff --git a/lemonldap-ng-portal/Makefile.PL b/lemonldap-ng-portal/Makefile.PL
index f0d3fbd0e..0b025b6bb 100644
--- a/lemonldap-ng-portal/Makefile.PL
+++ b/lemonldap-ng-portal/Makefile.PL
@@ -62,7 +62,7 @@ WriteMakefile(
     },
     PREREQ_PM => {
         'Clone'                  => 0,
-        'Lemonldap::NG::Handler' => '2.0.6',
+        'Lemonldap::NG::Handler' => '2.0.7',
         'Regexp::Assemble'       => 0,
     },
     (
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal.pm
index 58cdbf4da..5dcd334ea 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal.pm
@@ -1,7 +1,7 @@
 # Alias for Lemonldap::NG::Portal::Main
 package Lemonldap::NG::Portal;
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.7';
 use Lemonldap::NG::Portal::Main;
 use base 'Lemonldap::NG::Portal::Main';
 

From b0bc316cfd5af0338fd0034e18f08f5aee1fb6d1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 16:54:57 +0100
Subject: [PATCH 28/60] Documentation update

---
 .../double_cookies_for_a_single_session       |    4 +-
 .../documentation/current/applications.html   |    2 +-
 .../current/applications/alfresco.html        |   14 +-
 .../current/applications/authbasic.html       |    2 +-
 .../current/applications/dokuwiki.html        |    2 +-
 .../current/applications/humhub.html          |  143 ++-
 .../current/applications/img/icons.png        |    4 +-
 .../current/applications/img/loader.gif       |    4 +-
 .../current/applications/jitsimet             |    4 +-
 .../current/applications/zimbra.html          |   63 +-
 .../documentation/current/authcustom.html     |    6 +-
 .../current/authopenidconnect.html            |    2 -
 doc/pages/documentation/current/authssl.html  |    2 +-
 .../current/browseablesessionbackend          |  285 +++++
 .../current/browseablesessionbackend.html     |   28 +-
 .../current/changesessionbackend.html         |  105 ++
 .../documentation/current/checkstate.html     |   36 +-
 .../documentation/current/checkuser.html      |   19 +-
 .../documentation/current/cli_examples.html   |   29 +-
 .../documentation/current/configlocation.html |  347 ++----
 .../documentation/current/configvhost.html    |  145 ++-
 .../documentation/current/contribute.html     |   79 +-
 .../documentation/current/decryptvalue.html   |   83 ++
 .../beta.2707b90c7f00808e80f984a3026445b0.png |  Bin 0 -> 1679 bytes
 .../current/documentation/beta.png            |  Bin 0 -> 3441 bytes
 .../beta.0fea6a13c52b4d4725368f24b045ca84.png |    1 +
 .../beta.a9cc3cd1e66eeb67af35a2acc34fd387.png |    1 +
 .../beta.ea231b49369c9f6406cbdf58d06a616c.png |  Bin 0 -> 8531 bytes
 ...ta.png_documentation_2.0_decryptvalue.html |  103 ++
 ...ta.png_documentation_2.0_globallogout.html |  103 ++
 ...-rule.0a159189410beefd4339a7cac832a503.png |  Bin 0 -> 68008 bytes
 ...-rule.0fea6a13c52b4d4725368f24b045ca84.png |  Bin 10244 -> 16539 bytes
 ...-rule.defe1afc3662d4c558531ada63b4ce37.png |  Bin 19906 -> 0 bytes
 ...r-rule.png_documentation_2.0_security.html |    4 +-
 ...mentation_2.0_writingrulesand_headers.html |    4 +-
 doc/pages/documentation/current/dos           |    4 +-
 doc/pages/documentation/current/exploit       |    4 +-
 .../current/extendedfunctions.html            |  105 +-
 .../documentation/current/globallogout.html   |   80 ++
 .../current/handlerauthbasic.html             |    2 +-
 doc/pages/documentation/current/idpcas.html   |   26 +-
 .../current/idpopenidconnect.html             |   68 +-
 doc/pages/documentation/current/idpsaml.html  |   16 +-
 .../documentation/current/impersonation.html  |    6 +-
 .../documentation/current/installdeb.html     |   20 +-
 doc/pages/documentation/current/logs.html     |   97 +-
 doc/pages/documentation/current/mitm          |    4 +-
 .../current/mongodbconfbackend.html           |    2 +-
 .../current/mongodbsessionbackend.html        |    2 +-
 .../current/nosqlsessionbackend.html          |   22 +-
 .../documentation/current/notifications.html  |  106 +-
 .../current/openidconnectservice.html         |   26 +-
 .../documentation/current/parameterlist.html  | 1087 +++++++++--------
 .../documentation/current/performances.html   |   34 +-
 .../documentation/current/plugincustom.html   |    4 +
 .../documentation/current/portalcustom.html   |   24 +-
 .../current/refreshsessionapi.html            |   80 ++
 doc/pages/documentation/current/renater.html  |   48 +-
 .../current/restconfbackend.html              |   10 +-
 .../documentation/current/servertoserver.html |   10 +-
 doc/pages/documentation/current/start.html    |  116 +-
 doc/pages/documentation/current/stayconnected |    4 +-
 doc/pages/documentation/current/upgrade.html  |  124 +-
 .../current/useoutgoingproxy.html             |   87 ++
 .../current/webserviceprotection.html         |  179 +++
 .../current/writingrulesand_headers.html      |   26 +-
 66 files changed, 2824 insertions(+), 1223 deletions(-)
 create mode 100644 doc/pages/documentation/current/browseablesessionbackend
 create mode 100644 doc/pages/documentation/current/changesessionbackend.html
 create mode 100644 doc/pages/documentation/current/decryptvalue.html
 create mode 100644 doc/pages/documentation/current/documentation/beta.2707b90c7f00808e80f984a3026445b0.png
 create mode 100644 doc/pages/documentation/current/documentation/beta.png
 create mode 120000 doc/pages/documentation/current/documentation/latest/beta.0fea6a13c52b4d4725368f24b045ca84.png
 create mode 120000 doc/pages/documentation/current/documentation/latest/beta.a9cc3cd1e66eeb67af35a2acc34fd387.png
 create mode 100644 doc/pages/documentation/current/documentation/latest/beta.ea231b49369c9f6406cbdf58d06a616c.png
 create mode 100644 doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_decryptvalue.html
 create mode 100644 doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_globallogout.html
 create mode 100644 doc/pages/documentation/current/documentation/manager-rule.0a159189410beefd4339a7cac832a503.png
 delete mode 100644 doc/pages/documentation/current/documentation/manager-rule.defe1afc3662d4c558531ada63b4ce37.png
 create mode 100644 doc/pages/documentation/current/globallogout.html
 create mode 100644 doc/pages/documentation/current/refreshsessionapi.html
 create mode 100644 doc/pages/documentation/current/useoutgoingproxy.html
 create mode 100644 doc/pages/documentation/current/webserviceprotection.html

diff --git a/doc/pages/documentation/current/AuthChoice_with_Slave_and_Secured_cookie_gt/double_cookies_for_a_single_session b/doc/pages/documentation/current/AuthChoice_with_Slave_and_Secured_cookie_gt/double_cookies_for_a_single_session
index 7dfaec9a5..d6c193516 100644
--- a/doc/pages/documentation/current/AuthChoice_with_Slave_and_Secured_cookie_gt/double_cookies_for_a_single_session
+++ b/doc/pages/documentation/current/AuthChoice_with_Slave_and_Secured_cookie_gt/double_cookies_for_a_single_session
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/authchoice_with_slave_and_secured_cookie_gt/double_cookies_for_a_single_session?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/authchoice_with_slave_and_secured_cookie_gt/double_cookies_for_a_single_session?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=authchoice_with_slave_and_secured_cookie_gt%3Adouble_cookies_for_a_single_session&amp;1569271173" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=authchoice_with_slave_and_secured_cookie_gt%3Adouble_cookies_for_a_single_session&amp;1576942824" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/applications.html b/doc/pages/documentation/current/applications.html
index ce6117214..14f2c1817 100644
--- a/doc/pages/documentation/current/applications.html
+++ b/doc/pages/documentation/current/applications.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:applications</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="noindex,nofollow"/>
+<meta name="robots" content="index,follow"/>
 <meta name="keywords" content="documentation,2.0,applications"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="applications.html"/>
diff --git a/doc/pages/documentation/current/applications/alfresco.html b/doc/pages/documentation/current/applications/alfresco.html
index 275c7a027..451529599 100644
--- a/doc/pages/documentation/current/applications/alfresco.html
+++ b/doc/pages/documentation/current/applications/alfresco.html
@@ -171,7 +171,7 @@ Edit then <code>share-config-custom.xml</code> and uncomment the last part. In t
             <span class="sc3"><span class="re1">&lt;name<span class="re2">&gt;</span></span></span>Alfresco - user access<span class="sc3"><span class="re1">&lt;/name<span class="re2">&gt;</span></span></span>
             <span class="sc3"><span class="re1">&lt;description<span class="re2">&gt;</span></span></span>Access to Alfresco Repository WebScripts that require user authentication<span class="sc3"><span class="re1">&lt;/description<span class="re2">&gt;</span></span></span>
             <span class="sc3"><span class="re1">&lt;connector-id<span class="re2">&gt;</span></span></span>alfrescoHeader<span class="sc3"><span class="re1">&lt;/connector-id<span class="re2">&gt;</span></span></span>
-            <span class="sc3"><span class="re1">&lt;endpoint-url<span class="re2">&gt;</span></span></span>http://localhost:8080/alfresco/wcs<span class="sc3"><span class="re1">&lt;/endpoint-url<span class="re2">&gt;</span></span></span>
+            <span class="sc3"><span class="re1">&lt;endpoint-url<span class="re2">&gt;</span></span></span>http://localhost:8080/alfresco/s<span class="sc3"><span class="re1">&lt;/endpoint-url<span class="re2">&gt;</span></span></span>
             <span class="sc3"><span class="re1">&lt;identity<span class="re2">&gt;</span></span></span>user<span class="sc3"><span class="re1">&lt;/identity<span class="re2">&gt;</span></span></span>
             <span class="sc3"><span class="re1">&lt;external-auth<span class="re2">&gt;</span></span></span>true<span class="sc3"><span class="re1">&lt;/external-auth<span class="re2">&gt;</span></span></span>
          <span class="sc3"><span class="re1">&lt;/endpoint<span class="re2">&gt;</span></span></span>
@@ -184,7 +184,7 @@ You need to restart Tomcat to apply changes.
 <div class="notewarning">Now you can log in with a simple HTTP header. You need to restrict access to Alfresco to <abbr title="LemonLDAP::NG">LL::NG</abbr>.
 </div>
 </div>
-<!-- EDIT4 SECTION "Alfresco" [457-3157] -->
+<!-- EDIT4 SECTION "Alfresco" [457-3155] -->
 <h3 class="sectionedit5" id="llng">LL::NG</h3>
 <div class="level3">
 
@@ -217,12 +217,12 @@ Other rules:
 </ul>
 
 </div>
-<!-- EDIT5 SECTION "LL::NG" [3158-3497] -->
+<!-- EDIT5 SECTION "LL::NG" [3156-3495] -->
 <h2 class="sectionedit6" id="saml2">SAML2</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT6 SECTION "SAML2" [3498-3517] -->
+<!-- EDIT6 SECTION "SAML2" [3496-3515] -->
 <h3 class="sectionedit7" id="alfresco2">Alfresco</h3>
 <div class="level3">
 
@@ -521,7 +521,7 @@ To finish with Alfresco configuration, tick the “Enable <abbr title="Security
 </p>
 
 </div>
-<!-- EDIT7 SECTION "Alfresco" [3518-14174] -->
+<!-- EDIT7 SECTION "Alfresco" [3516-14172] -->
 <h3 class="sectionedit8" id="llng1">LL::NG</h3>
 <div class="level3">
 
@@ -556,7 +556,7 @@ And you can define these exported attributes:
 </ul>
 
 </div>
-<!-- EDIT8 SECTION "LL::NG" [14175-14553] -->
+<!-- EDIT8 SECTION "LL::NG" [14173-14551] -->
 <h2 class="sectionedit9" id="other_resources">Other resources</h2>
 <div class="level2">
 <ul>
@@ -567,6 +567,6 @@ And you can define these exported attributes:
 </ul>
 
 </div>
-<!-- EDIT9 SECTION "Other resources" [14554-] --></div>
+<!-- EDIT9 SECTION "Other resources" [14552-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/applications/authbasic.html b/doc/pages/documentation/current/applications/authbasic.html
index 3bab203da..e20c46e9a 100644
--- a/doc/pages/documentation/current/applications/authbasic.html
+++ b/doc/pages/documentation/current/applications/authbasic.html
@@ -93,7 +93,7 @@ The Basic Authentication relies on a specific HTTP header, as described above. S
 <p>
 For example, to forward login (<code>$uid</code>) and password (<code>$_password</code> if <a href="../passwordstore.html" class="wikilink1" title="documentation:2.0:passwordstore">password is stored in session</a>):
 </p>
-<pre class="code">Authorization =&gt; &quot;Basic &quot;.encode_base64(&quot;$uid:$_password&quot;)</pre>
+<pre class="code">Authorization =&gt; &quot;Basic &quot;.encode_base64(&quot;$uid:$_password&quot;, &quot;&quot;)</pre>
 
 <p>
 <abbr title="LemonLDAP::NG">LL::NG</abbr> provides a special function named <a href="../extendedfunctions.html#basic" class="wikilink1" title="documentation:2.0:extendedfunctions">basic</a> to build this header.
diff --git a/doc/pages/documentation/current/applications/dokuwiki.html b/doc/pages/documentation/current/applications/dokuwiki.html
index ab203b56e..b8ec58dad 100644
--- a/doc/pages/documentation/current/applications/dokuwiki.html
+++ b/doc/pages/documentation/current/applications/dokuwiki.html
@@ -198,7 +198,7 @@ Configure the <a href="../writingrulesand_headers.html#headers" class="wikilink1
 </li>
 <li class="level1"><div class="li"> Auth-Mail: $mail</div>
 </li>
-<li class="level1"><div class="li"> Auth-Groups: encode_base64($groups,&#039;&#039;)</div>
+<li class="level1"><div class="li"> Auth-Groups: encode_base64($groups,&quot;&quot;)</div>
 </li>
 </ul>
 <div class="noteimportant">To allow execution of encode_base64() method, you must deactivate the <a href="../safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a>.
diff --git a/doc/pages/documentation/current/applications/humhub.html b/doc/pages/documentation/current/applications/humhub.html
index 514656889..254d9ae5d 100644
--- a/doc/pages/documentation/current/applications/humhub.html
+++ b/doc/pages/documentation/current/applications/humhub.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:applications:humhub</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="noindex,nofollow"/>
+<meta name="robots" content="index,follow"/>
 <meta name="keywords" content="documentation,2.0,applications,humhub"/>
 <link rel="search" type="application/opensearchdescription+xml" href="../lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="humhub.html"/>
@@ -54,6 +54,7 @@
 <ul class="toc">
 <li class="level2"><div class="li"><a href="#configuring_humhub">Configuring HumHub</a></div></li>
 <li class="level2"><div class="li"><a href="#configuring_lemonldap">Configuring LemonLDAP</a></div></li>
+<li class="level2"><div class="li"><a href="#migrate_former_local_or_ldap_humhub_account_to_connect_through_sso">Migrate former local or ldap Humhub account to connect through SSO</a></div></li>
 <li class="level2"><div class="li"><a href="#troubleshooting">Troubleshooting</a></div></li>
 </ul></li>
 </ul>
@@ -88,28 +89,30 @@ Administrator can configure one or several OAuth, OAuth2 or OIDC authentication
 <p>
 With <a href="#openid_connect" title="documentation:2.0:applications:humhub ↵" class="wikilink1"> OpenID Connect </a> authentication service, users successfully authenticated by LemonLDAP::NG will be registered in HumHub upon their first login. 
 </p>
-<div class="notewarning">HumHub retrieves a user from his username and the authentication service he came through. As a result, a former local or LDAP user will be rejected when trying to authenticate using another authentication service.
+<div class="notewarning">HumHub retrieves a user from his username and the authentication service he came through. As a result, a former local or LDAP user will be rejected when trying to authenticate using another authentication service. See <a href="#migrate_former_local_or_ldap_humhub_account_to_connect_through_sso" title="documentation:2.0:applications:humhub ↵" class="wikilink1"> Migrate former local or ldap Humhub account to connect through SSO</a>
 
 </div>
 </div>
-<!-- EDIT2 SECTION "Présentation" [68-1041] -->
+<!-- EDIT2 SECTION "Présentation" [68-1186] -->
 <h2 class="sectionedit3" id="openid_connect">OpenID Connect</h2>
 <div class="level2">
+<div class="noteclassic">This set-up works with option enablePrettyUrl activated in Humhub. If not activated, rewrite <abbr title="Uniform Resource Locator">URL</abbr> in Humhub HTTP server and allowed redirect <abbr title="Uniform Resource Locator">URL</abbr> in LemonLDAP needs to be adapted to work with the non pretty <abbr title="Uniform Resource Locator">URL</abbr> format.
 
 </div>
-<!-- EDIT3 SECTION "OpenID Connect" [1042-1069] -->
+</div>
+<!-- EDIT3 SECTION "OpenID Connect" [1187-1450] -->
 <h3 class="sectionedit4" id="configuring_humhub">Configuring HumHub</h3>
 <div class="level3">
 
 <p>
-First disable LDAP (Administration &gt; Users section) and delete (or migrate source) any local users whose username or email are conflicting with the username or email of your OIDC users.
+First disable LDAP (Administration &gt; Users section) and delete (or <a href="#migrate_former_local_or_ldap_humhub_account_to_connect_through_sso" title="documentation:2.0:applications:humhub ↵" class="wikilink1"> migrate</a>) any local users whose username or email are conflicting with the username or email of your OIDC users.
 </p>
 
 <p>
 Then install and configure the <a href="https://github.com/Worteks/humhub-auth-oidc" class="urlextern" title="https://github.com/Worteks/humhub-auth-oidc"  rel="nofollow"> OIDC connector for humhub </a> extension using composer :
 </p>
 <ul>
-<li class="level1"><div class="li"> Install composer and php-tokenizer.</div>
+<li class="level1"><div class="li"> Install composer.</div>
 </li>
 </ul>
 <ul>
@@ -118,34 +121,89 @@ Then install and configure the <a href="https://github.com/Worteks/humhub-auth-o
 </ul>
 <pre class="code">composer global require hirak/prestissimo</pre>
 <ul>
-<li class="level1"><div class="li"> Go to {humhumb_home} folder (containing humhub&#039;s composer.json file)  and execute</div>
+<li class="level1"><div class="li"> Go to {humhub_home} folder</div>
+</li>
+</ul>
+<ul>
+<li class="level1"><div class="li"> Check if composer.json file is present. If not, download it for your current version:</div>
+</li>
+</ul>
+<pre class="code">wget https://raw.githubusercontent.com/humhub/humhub/v1.3.15/composer.json</pre>
+<ul>
+<li class="level1"><div class="li"> Install the connector as a dependency: </div>
 </li>
 </ul>
 <pre class="code">composer require --no-update --update-no-dev worteks/humhub-auth-oidc
 composer update worteks/humhub-auth-oidc  --no-dev --prefer-dist -vvv</pre>
-<ul>
-<li class="level1"><div class="li"> Edit {humhumb_home}/protected/config/common.php with the client configuration :</div>
+<div class="noteclassic">If you just need to update the connector, change its version in composer.json and run the above composer update command.
+
+</div><ul>
+<li class="level1"><div class="li"> Edit {humhub_home}/protected/config/common.php with the client configuration :</div>
 </li>
 </ul>
 <pre class="code">&#039;components&#039; =&gt; [
-   &#039;authClientCollection&#039; =&gt; [
-     &#039;authClientCollection&#039; =&gt; [
-       &#039;clients&#039; =&gt; [
-          // ...
-          &#039;lemonldapng&#039; =&gt; [ 
-            &#039;class&#039; =&gt; &#039;worteks\humhub\authclient\OIDC&#039;,
-            &#039;domain&#039; =&gt; &#039;https://auth.example.com&#039;,
-            &#039;clientId&#039; =&gt; &#039;myClientId&#039;,	// Client ID for this RP in LemonLDAP
-            &#039;clientSecret&#039; =&gt; &#039;myClientSecret&#039;, // Client secret for this RP in LemonLDAP
-            &#039;defaultTitle&#039; =&gt; &#039;auth.example.com&#039;, // Text displayed in login button
-          ],
-       ],
-     ],
+  &#039;authClientCollection&#039; =&gt; [
+    &#039;clients&#039; =&gt; [
+      // ...
+      &#039;lemonldapng&#039; =&gt; [
+        &#039;class&#039; =&gt; &#039;worteks\humhub\authclient\OIDC&#039;,
+        &#039;domain&#039; =&gt; &#039;https://auth.example.com&#039;,
+        &#039;clientId&#039; =&gt; &#039;myClientId&#039;, // Client ID for this RP in LemonLDAP
+        &#039;clientSecret&#039; =&gt; &#039;myClientSecret&#039;, // Client secret for this RP in LemonLDAP
+        &#039;defaultTitle&#039; =&gt; &#039;auth.example.com&#039;, // Text displayed in login button
+        &#039;cssIcon&#039; =&gt; &#039;fa fa-lemon-o&#039;, // Icon displayed in login button
+      ],
+    ],
     // ...
 ]</pre>
+<ul>
+<li class="level1"><div class="li"> Edit {humhub_home}/protected/config/web.php to disconnect users from LemonLDAP::NG after they logged out of Humhub:</div>
+</li>
+</ul>
+<pre class="code">return [
+ // ...
+ &#039;modules&#039; =&gt; [
+  &#039;user&#039; =&gt; [
+   &#039;logoutUrl&#039; =&gt; &#039;https://auth.domain.com/?logout=1&#039;,
+  ],
+ ]
+];</pre>
+
+<p>
+User can now log in through <abbr title="Single Sign On">SSO</abbr> using a button on humhub logging page. If you want to remove this intermediate login page, so user are automatically logged in through <abbr title="Single Sign On">SSO</abbr> when they first access Humhub, you can set up a redirection in the http server in front of the application :
+</p>
+<ul>
+<li class="level1"><div class="li"> Example in apache</div>
+</li>
+</ul>
+<pre class="code">RewriteEngine On
+RewriteCond %{QUERY_STRING} !nosso [NC]
+RewriteRule &quot;^/user/auth/login$&quot; &quot;/user/auth/external?authclient=lemonldapng&quot; [L,R=301]</pre>
+<ul>
+<li class="level1"><div class="li"> Example in nginx</div>
+</li>
+</ul>
+<pre class="code">if ($query_string !~ &quot;nosso&quot;){                                                                       
+  rewrite ^/user/auth/login$ /user/auth/external?authclient=lemonldapng permanent;
+}</pre>
+
+<p>
+If the authentication was successful but the user could not be registered in Humhub (which often happen if there is a conflict between source, username or email), Humhub will redirect to the login page to display the error, which trigger a redirection to the portal, ultimately triggering a loop error while registration error is not displayed.
+</p>
+
+<p>
+To change this behavior and display the registration error, AuthController.onAuthSuccess method needs to be adapted so redirect to <abbr title="Single Sign On">SSO</abbr> will be bypassed when a registration error occured. This works for version 1.3.15 :
+</p>
+<ul>
+<li class="level1"><div class="li"> Go to {humhub_home} folder</div>
+</li>
+<li class="level1"><div class="li"> Execute</div>
+</li>
+</ul>
+<pre class="code">sed -i &quot;s|return \$this-&gt;redirect(\[&#039;/user/auth/login&#039;\]);|return \$this-&gt;redirect([&#039;/user/auth/login&#039;,&#039;nosso&#039;=&gt;&#039;showerror&#039;]);|&quot; protected/humhub/modules/user/controllers/AuthController.php</pre>
 
 </div>
-<!-- EDIT4 SECTION "Configuring HumHub" [1070-2515] -->
+<!-- EDIT4 SECTION "Configuring HumHub" [1451-4994] -->
 <h3 class="sectionedit5" id="configuring_lemonldap">Configuring LemonLDAP</h3>
 <div class="level3">
 
@@ -154,7 +212,7 @@ If not done yet, configure LemonLDAP::NG as an <a href="../openidconnectservice.
 </p>
 
 <p>
-Then, configure LemonLDAP::NG to recognize your HumHub instance as a valid <a href="../idpopenidconnect.html" class="wikilink1" title="documentation:2.0:idpopenidconnect"> new OpenID Connect relaying party </a> using the following parameters:
+Then, configure LemonLDAP::NG to recognize your HumHub instance as a valid <a href="../idpopenidconnect.html" class="wikilink1" title="documentation:2.0:idpopenidconnect"> new OpenID Connect Relying Party </a> using the following parameters:
 </p>
 <ul>
 <li class="level1"><div class="li"> <strong>Client ID</strong>: the same you set in HumHub configuration</div>
@@ -193,8 +251,39 @@ Configuration sample using CLI:
         oidcRPMetaDataOptions/humhub oidcRPMetaDataOptionsBypassConsent 1 &amp;&amp; \</pre>
 
 </div>
-<!-- EDIT5 SECTION "Configuring LemonLDAP" [2516-4258] -->
-<h3 class="sectionedit6" id="troubleshooting">Troubleshooting</h3>
+<!-- EDIT5 SECTION "Configuring LemonLDAP" [4995-6736] -->
+<h3 class="sectionedit6" id="migrate_former_local_or_ldap_humhub_account_to_connect_through_sso">Migrate former local or ldap Humhub account to connect through SSO</h3>
+<div class="level3">
+
+<p>
+You need to manually update Humhub database to swith authentication mode to LemonLDAP::NG.
+</p>
+
+<p>
+Table &quot;user&quot;:
+</p>
+<ul>
+<li class="level1"><div class="li"> Columns &quot;username&quot; and &quot;email&quot; should match exactly OIDC sub and email attributes ;</div>
+</li>
+<li class="level1"><div class="li"> If former ldap user, change column &quot;auth_mode&quot; to &quot;local&quot;.</div>
+</li>
+</ul>
+
+<p>
+Table &quot;user_auth&quot;:
+</p>
+<ul>
+<li class="level1"><div class="li"> Add an entry with user_id, username and &quot;lemonldapng&quot; as source (or the name you chose in your connector configuration) :</div>
+</li>
+</ul>
+<pre class="code">+---------+-------------+-------------+
+| user_id | source      | source_id   |
++---------+-------------+-------------+
+|       4 | lemonldapng | jdoe        |</pre>
+
+</div>
+<!-- EDIT6 SECTION "Migrate former local or ldap Humhub account to connect through SSO" [6737-7396] -->
+<h3 class="sectionedit7" id="troubleshooting">Troubleshooting</h3>
 <div class="level3">
 
 <p>
@@ -205,6 +294,6 @@ If LemonLDAP login page freezes because of a browser security blockage, adapt se
         cspFormAction &quot;&#039;self&#039; https://*.example.com&quot;</pre>
 
 </div>
-<!-- EDIT6 SECTION "Troubleshooting" [4259-] --></div>
+<!-- EDIT7 SECTION "Troubleshooting" [7397-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/applications/img/icons.png b/doc/pages/documentation/current/applications/img/icons.png
index ff95ea9a2..54b15674a 100644
--- a/doc/pages/documentation/current/applications/img/icons.png
+++ b/doc/pages/documentation/current/applications/img/icons.png
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/applications/img/icons.png?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/applications/img/icons.png?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Aimg%3Aicons.png&amp;1569271147" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Aimg%3Aicons.png&amp;1576942799" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/applications/img/loader.gif b/doc/pages/documentation/current/applications/img/loader.gif
index 10be97875..563b8d67f 100644
--- a/doc/pages/documentation/current/applications/img/loader.gif
+++ b/doc/pages/documentation/current/applications/img/loader.gif
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/applications/img/loader.gif?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/applications/img/loader.gif?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Aimg%3Aloader.gif&amp;1569271147" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Aimg%3Aloader.gif&amp;1576942799" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/applications/jitsimet b/doc/pages/documentation/current/applications/jitsimet
index 70554d994..db0b6df28 100644
--- a/doc/pages/documentation/current/applications/jitsimet
+++ b/doc/pages/documentation/current/applications/jitsimet
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/applications/jitsimet?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/applications/jitsimet?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Ajitsimet&amp;1569271166" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aapplications%3Ajitsimet&amp;1576942817" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/applications/zimbra.html b/doc/pages/documentation/current/applications/zimbra.html
index dc90dab53..01bb17fcb 100644
--- a/doc/pages/documentation/current/applications/zimbra.html
+++ b/doc/pages/documentation/current/applications/zimbra.html
@@ -56,6 +56,7 @@
 <li class="level2"><div class="li"><a href="#zimbra_application_in_menu">Zimbra application in menu</a></div></li>
 <li class="level2"><div class="li"><a href="#zimbra_virtual_host">Zimbra virtual host</a></div></li>
 <li class="level2"><div class="li"><a href="#zimbra_handler_parameters">Zimbra Handler parameters</a></div></li>
+<li class="level2"><div class="li"><a href="#multi-domain_issues">Multi-domain issues</a></div></li>
 </ul></li>
 </ul>
 </div>
@@ -163,6 +164,66 @@ Zimbra parameters are the following:
 
 </div>
 </div>
-<!-- EDIT7 SECTION "Zimbra Handler parameters" [1862-] --></div>
+<!-- EDIT7 SECTION "Zimbra Handler parameters" [1862-2771] -->
+<h3 class="sectionedit8" id="multi-domain_issues">Multi-domain issues</h3>
+<div class="level3">
+
+<p>
+Some organizations have multiple zimbra domains:
+</p>
+<ol>
+<li class="level1"><div class="li"> foo@domain1.com</div>
+</li>
+<li class="level1"><div class="li"> bar@domain2.com</div>
+</li>
+</ol>
+
+<p>
+However, the zimbra preauth key is:
+</p>
+<ul>
+<li class="level1"><div class="li"> generated for one zimbra domain only</div>
+</li>
+<li class="level1"><div class="li"> declared globally for every LemonLDAP::NG virtual hosts.</div>
+</li>
+</ul>
+
+<p>
+Thus, if domain1 has been registered on LemonLDAP::NG, user bar won&#039;t be able to connect to zimbra because preauth key is different. If you accept to have the same preauth key for all zimbra domains, you can set the same preauth key using this procedure:
+</p>
+
+<p>
+We are going to use the first key (the domain1 one) for every domain.
+On Zimbra machine, generate the keys:
+</p>
+<pre class="code"> zmprov generateDomainPreAuthKey domain1.com
+ preAuthKey: 4e2816f16c44fab20ecdee39fb850c3b0bb54d03f1d8e073aaea376a4f407f0c
+
+ zmprov generateDomainPreAuthKey domain2.com
+ preAuthKey: 6b7ead4bd425836e8cf0079cd6c1a05acc127acd07c8ee4b61023e19250e929c</pre>
+
+<p>
+Then, connect to your zimbra LDAP server with your favourite tool (Apache Directory Studio can do the job).
+Take care to connect with the super admin and password account.
+</p>
+<ul>
+<li class="level1"><div class="li"> Expand the branch &quot;dc=com&quot;, then click the &quot;dc=domain1&quot; branch</div>
+</li>
+<li class="level1"><div class="li"> Get the value of zimbraPreAuthKey</div>
+</li>
+<li class="level1"><div class="li"> Expand the branch &quot;dc=com&quot;, then click the &quot;dc=domain2&quot; branch</div>
+</li>
+<li class="level1"><div class="li"> Replace the value of zimbraPreAuthKey you have previously copied</div>
+</li>
+<li class="level1"><div class="li"> Wait for all Zimbra servers to update, or restart the zcs server</div>
+</li>
+</ul>
+
+<p>
+That&#039;s it, all zimbra servers will be able to decipher the hmac because they share the same key!
+</p>
+
+</div>
+<!-- EDIT8 SECTION "Multi-domain issues" [2772-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/authcustom.html b/doc/pages/documentation/current/authcustom.html
index 7daac9d17..64f99b142 100644
--- a/doc/pages/documentation/current/authcustom.html
+++ b/doc/pages/documentation/current/authcustom.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:authcustom</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,authcustom"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="authcustom.html"/>
@@ -84,13 +84,13 @@ Then, you just have to define class names of your custom modules in &quot;Custom
 <p>
 You can define your own customAuth module icon. Icon must be in site/htdocs/static/common/modules/icon.png
 </p>
-<div class="notetip">::Auth::My::Dev.pm means Lemonldap::NG::Portal::Auth::My::Dev.pm
+<div class="notetip">::Auth::My::Dev.pm means Lemonldap::NG::Portal::Auth::My::Dev
 
 </div><div class="noteimportant">Be careful. Don&#039; t use an already attributed name in configuration.
 
 </div>
 <p>
-These parameters are available in your plugins using <code>$self-&gt;conf-&gt;{<em>customName</em>}</code>.
+These parameters are available in your plugins using <code>$self-&gt;conf-&gt;{customAddParams}-&gt;{<em>customName</em>}</code>.
 </p>
 
 <p>
diff --git a/doc/pages/documentation/current/authopenidconnect.html b/doc/pages/documentation/current/authopenidconnect.html
index 1eb3968d8..feaee99eb 100644
--- a/doc/pages/documentation/current/authopenidconnect.html
+++ b/doc/pages/documentation/current/authopenidconnect.html
@@ -248,8 +248,6 @@ You can also define:
 </li>
 <li class="level1"><div class="li"> endsession_endpoint</div>
 </li>
-<li class="level1"><div class="li"> introspection_endpoint</div>
-</li>
 </ul>
 
 <p>
diff --git a/doc/pages/documentation/current/authssl.html b/doc/pages/documentation/current/authssl.html
index d651fe746..ff1203784 100644
--- a/doc/pages/documentation/current/authssl.html
+++ b/doc/pages/documentation/current/authssl.html
@@ -416,7 +416,7 @@ To avoid a persistent loop between Portal and a redirection <abbr title="Uniform
 <span class="re1">pdataDomain</span> <span class="sy0">=</span><span class="re2"> example.com</span></pre>
 
 <p>
-To avoid a bad/expired token during session upgrading (Reauthentication) if URLs are served by different load balancers, you can force Upgrade tokens be stored into Global Storage by editing <code>lemonldap-ng.ini</code> in section [portal]:
+To avoid a bad/expired token during session upgrading (Reauthentication) if URLs are served by different load balancers, you can force Upgrade tokens to be stored into Global Storage by editing <code>lemonldap-ng.ini</code> in section [portal]:
 </p>
 <pre class="code file ini"><span class="re0"><span class="br0">&#91;</span>portal<span class="br0">&#93;</span></span>
 <span class="re1">forceGlobalStorageUpgradeOTT</span> <span class="sy0">=</span><span class="re2"> 1</span></pre>
diff --git a/doc/pages/documentation/current/browseablesessionbackend b/doc/pages/documentation/current/browseablesessionbackend
new file mode 100644
index 000000000..cd748558b
--- /dev/null
+++ b/doc/pages/documentation/current/browseablesessionbackend
@@ -0,0 +1,285 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
+  lang="en" dir="ltr" class="no-js">
+<head>
+  <meta charset="UTF-8" />
+  <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+  <title>browseablesessionbackend [LemonLDAP::NG]</title>
+  <script>(function(H){H.className=H.className.replace(/\bno-js\b/,'js')})(document.documentElement)</script>
+  <meta name="viewport" content="width=device-width,initial-scale=1" />
+  <link rel="shortcut icon" href="/lib/tpl/bootstrap3/images/favicon.ico" />
+<link rel="apple-touch-icon" href="/lib/tpl/bootstrap3/images/apple-touch-icon.png" />
+      <link type="text/css" rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootswatch/3.3.4/flatly/bootstrap.min.css" />
+    <script type="text/javascript">/*<![CDATA[*/
+    var TPL_CONFIG = {"tableFullWidth":1};
+  /*!]]>*/</script>
+  <meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="noindex,follow"/>
+<meta name="keywords" content="browseablesessionbackend"/>
+<link rel="search" type="application/opensearchdescription+xml" href="/lib/exe/opensearch.php" title="LemonLDAP::NG"/>
+<link rel="start" href="/"/>
+<link rel="contents" href="/browseablesessionbackend?do=index" title="Sitemap"/>
+<link rel="alternate" type="application/rss+xml" title="Recent changes" href="/feed.php"/>
+<link rel="alternate" type="application/rss+xml" title="Current namespace" href="/feed.php?mode=list&amp;ns="/>
+<link rel="alternate" type="text/html" title="Plain HTML" href="/_export/xhtml/browseablesessionbackend"/>
+<link rel="alternate" type="text/plain" title="Wiki Markup" href="/_export/raw/browseablesessionbackend"/>
+<link rel="stylesheet" type="text/css" href="/lib/exe/css.php?t=bootstrap3&amp;tseed=a3a28b97aa1359a6551738d33203e559"/>
+<script type="text/javascript">/*<![CDATA[*/var NS='';var JSINFO = {"id":"browseablesessionbackend","namespace":""};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="/lib/exe/js.php?tseed=a3a28b97aa1359a6551738d33203e559&amp;template=bootstrap3"></script>
+  <script type="text/javascript" src="/lib/tpl/bootstrap3/assets/bootstrap/js/bootstrap.min.js"></script>
+  <style type="text/css">
+    body { padding-top: 20px; }
+  </style>
+  <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
+  <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
+  <!--[if lt IE 9]>
+  <script type="text/javascript" src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
+  <script type="text/javascript" src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
+  <![endif]-->
+</head>
+<body class="flatly page-on-panel">
+  <!--[if lte IE 7 ]><div id="IE7"><![endif]--><!--[if IE 8 ]><div id="IE8"><![endif]-->
+
+  <div id="dokuwiki__site" class="container">
+    <div id="dokuwiki__top" class="site dokuwiki mode_show tpl_bootstrap3  notFound  hasSidebar">
+
+      
+      <!-- header -->
+      <div id="dokuwiki__header">
+        <nav class="navbar  navbar-default" role="navigation">
+
+  <div class="container-fluid">
+
+    <div class="navbar-header">
+
+      <button class="navbar-toggle" type="button" data-toggle="collapse" data-target=".navbar-collapse">
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+      </button>
+
+      <a href="/start"  accesskey="h" title="[H]" class="navbar-brand"><img src="/_media/wiki/logo.png" alt="LemonLDAP::NG" class="pull-left" id="dw__logo" width="20" height="20" /> <span id="dw__title" >LemonLDAP::NG</span></a>
+    </div>
+
+    <div class="collapse navbar-collapse">
+
+      <ul class="nav navbar-nav" id="dw__navbar">
+        <!-- <li>
+  <a href="/start" ><i class="glyphicon glyphicon-home"></i> Home</a></li> -->
+<li>
+  <a href="/download" ><i class="glyphicon glyphicon-download"></i> Download</a></li>
+<li>
+  <a href="/documentation" ><i class="glyphicon glyphicon-book"></i> Documentation</a></li>
+<li>
+  <a href="/screenshots" ><i class="glyphicon glyphicon-picture"></i> Screenshots</a></li>
+<li class="dropdown ">
+  <a href="#" class="dropdown-toggle" data-toggle="dropdown"><span class="glyphicon glyphicon-question-sign"></span> Contact <b class="caret"></b></a>
+  <ul class="dropdown-menu">
+  <li><a href="/contact" ><i class="glyphicon glyphicon-envelope"></i> Mails, IRC and more</a></li>
+  <li><a href="/team" ><i class="glyphicon glyphicon-user"></i> The team</a></li>
+  <li><a href="/professionalservices" ><i class="glyphicon glyphicon-briefcase"></i> Professional Services</a></li>
+  <li><a href="/references" ><i class="glyphicon glyphicon-sunglasses"></i> References</a></li>
+  <li><a href="/sponsors" ><i class="glyphicon glyphicon-piggy-bank"></i> Sponsors</a></li>
+  </ul>
+</li>
+      </ul>
+
+      <div class="navbar-right">
+
+        <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
+        
+        <ul class="nav navbar-nav">
+                    <li><a href="/browseablesessionbackend?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+
+      </div>
+
+    </div>
+  </div>
+</nav>
+      </div>
+      <!-- /header -->
+
+            
+            <div id="dw__breadcrumbs">
+        <hr/>
+                <div class="breadcrumb"><span class="bchead">You are here: </span><span class="home"><bdi><a href="/start" class="wikilink1" title="start">start</a></bdi></span> » <bdi><span class="curid"><a href="/browseablesessionbackend" class="wikilink2" title="browseablesessionbackend" rel="nofollow">browseablesessionbackend</a></span></bdi></div>
+                        <hr/>
+      </div>
+      
+      <p class="pageId text-right">
+        <span class="label label-default">browseablesessionbackend</span>
+      </p>
+
+      <div id="dw__msgarea">
+              </div>
+
+      <main class="main row" role="main">
+
+        
+        <!-- ********** CONTENT ********** -->
+        <article id="dokuwiki__content" class="col-sm-9 col-md-10 " >
+
+          <div class="panel panel-default" > 
+            <div class="page group panel-body">
+
+                                          
+              <div class="pull-right hidden-print" data-spy="affix" data-offset-top="150" style="z-index:1024; top:10px; right:10px;">
+                              </div>
+
+              <!-- wikipage start -->
+              
+<h1 class="sectionedit1" id="this_topic_does_not_exist_yet">This topic does not exist yet</h1>
+<div class="level1">
+
+<p>
+You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissions allow, you may create it by clicking on &quot;Create this page&quot;.
+</p>
+
+</div>
+
+              <!-- wikipage stop -->
+
+                            
+            </div>
+          </div>
+
+        </article>
+
+        <!-- ********** ASIDE ********** -->
+<aside id="dokuwiki__aside" class="dw__sidebar col-sm-3 col-md-2 hidden-print">
+  <div class="content">
+    <div class="toogle hidden-lg hidden-md hidden-sm" data-toggle="collapse" data-target="#dokuwiki__aside .collapse">
+      <i class="glyphicon glyphicon-th-list"></i> Sidebar    </div>
+    <div class="collapse in">
+            
+<p>
+<div class="text-center">
+</p>
+
+<h3 class="sectionedit1" id="social_networks">Social networks</h3>
+<div class="level3">
+
+<p>
+
+<p><a href="https://twitter.com/lemonldapng/" class="btn btn-large btn-info"><i class="glyphicon glyphicon-retweet"></i> Twitter</a></p>
+<p><a href="https://www.facebook.com/lemonldapng/" class="btn btn-large btn-primary"><i class="glyphicon glyphicon-thumbs-up"></i> Facebook</a></p>
+
+</p>
+
+<p>
+</div>
+</p>
+<hr />
+
+<p>
+<div class="text-center">
+</p>
+
+</div>
+<!-- EDIT1 SECTION "Social networks" [41-433] -->
+<h3 class="sectionedit2" id="hosted_by">Hosted by</h3>
+<div class="level3">
+
+<p>
+<a href="http://www.ow2.org" class="media" title="http://www.ow2.org"  rel="nofollow"><img src="/_media/logos/ow2.png?w=150&amp;tok=b7af43" class="mediacenter" alt="" width="150" /></a>
+</div>
+</p>
+<hr />
+
+<p>
+<div class="text-center">
+</p>
+
+</div>
+<!-- EDIT2 SECTION "Hosted by" [434-568] -->
+<h3 class="sectionedit3" id="certifications">Certifications</h3>
+<div class="level3">
+
+<p>
+<a href="https://partenaires.franceconnect.gouv.fr/references#LogicielslibresFranceConnectables" class="media" title="https://partenaires.franceconnect.gouv.fr/references#LogicielslibresFranceConnectables"  rel="nofollow"><img src="/_media/applications/franceconnect_logo.png" class="mediacenter" alt="" /></a>
+<strong>France Connect</strong>
+</p>
+
+<p>
+<a href="https://fusioniam.org" class="media" title="https://fusioniam.org"  rel="nofollow"><img src="/_media/logos/fusioniam_logo_icon_dragon_circle.png" class="mediacenter" alt="" /></a>
+<strong>FusionIAM projet member</strong>
+</div>
+</p>
+<hr />
+
+<p>
+<div class="text-center">
+</p>
+
+</div>
+<!-- EDIT3 SECTION "Certifications" [569-928] -->
+<h3 class="sectionedit4" id="awards">Awards</h3>
+<div class="level3">
+
+<p>
+<a href="/_detail/logos/ow2_awards.png?id=default_sidebar" class="media" title="logos:ow2_awards.png"><img src="/_media/logos/ow2_awards.png?w=150&amp;tok=b33854" class="mediacenter" alt="" width="150" /></a>
+</p>
+
+<p>
+<a href="https://www.ow2con.org/view/2014/Awards_Results?year=2014&amp;event=OW2con14" class="urlextern" title="https://www.ow2con.org/view/2014/Awards_Results?year=2014&amp;event=OW2con14"  rel="nofollow">OW2con&#039;14 Community Award</a>
+</p>
+
+<p>
+<a href="https://www.ow2con.org/view/2018/Awards_Results?year=2018&amp;event=OW2con18" class="urlextern" title="https://www.ow2con.org/view/2018/Awards_Results?year=2018&amp;event=OW2con18"  rel="nofollow">OW2con&#039;18 Community Award</a>
+</p>
+
+<p>
+</div>
+</p>
+<hr />
+
+<p>
+<div class="text-center">
+</p>
+
+<p>
+<script type="text/javascript" src="http://www.openhub.net/p/12421/widgets/project_users.js?style=blue"></script>
+</div>
+</p>
+
+
+<script type='text/javascript'>
+ var ab_h = '321e562442494652658acbc3fd84ec80';
+ var ab_s = '6ca5df30810665e075f684a87e742175';
+</script>
+
+<script type='text/javascript' src='http://cdn1.adbard.net/js/ab1.js'></script>
+
+
+</div>
+<!-- EDIT4 SECTION "Awards" [929-] -->          </div>
+  </div>
+</aside>
+
+      </main>
+
+      <footer id="dokuwiki__footer" class="small hidden-print">
+
+        <a href="javascript:void(0)" class="back-to-top hidden-print btn btn-default btn-sm" title="skip to content>" id="back-to-top"><i class="glyphicon glyphicon-chevron-up"></i></a>
+
+                <div class="text-center">
+          <p id="dw__license">
+            <div class="license">Except where otherwise noted, content on this wiki is licensed under the following license: <bdi><a href="http://creativecommons.org/licenses/by-nc-sa/3.0/" rel="license" class="urlextern">CC Attribution-Noncommercial-Share Alike 3.0 Unported</a></bdi></div>          </p>
+                  </div>
+      </footer>
+
+      
+    </div><!-- /site -->
+
+    <div class="no"><img src="/lib/exe/indexer.php?id=browseablesessionbackend&amp;1576942827" width="2" height="1" alt="" /></div>
+    <div id="screen__mode" class="no">
+      <span class="visible-xs"></span>
+      <span class="visible-sm"></span>
+      <span class="visible-md"></span>
+      <span class="visible-lg"></span>
+    </div>
+  </div>
+  <!--[if ( lte IE 7 | IE 8 ) ]></div><![endif]-->
+</body>
+</html>
diff --git a/doc/pages/documentation/current/browseablesessionbackend.html b/doc/pages/documentation/current/browseablesessionbackend.html
index 11cda5425..2aa18cdf4 100644
--- a/doc/pages/documentation/current/browseablesessionbackend.html
+++ b/doc/pages/documentation/current/browseablesessionbackend.html
@@ -95,10 +95,10 @@ The following table list fields to index depending on the feature you want to in
 		<td class="col0"> Database cleanup <em>(cron)</em> </td><td class="col1 centeralign">  _session_kind _utime  </td>
 	</tr>
 	<tr class="row2 roweven">
-		<td class="col0"> Session explorer </td><td class="col1 centeralign">  _session_kind ipAddr <em>WHATTOTRACE</em>  </td>
+		<td class="col0"> Session explorer </td><td class="col1 centeralign">  _session_kind ipAddr _httpSessionType <em>WHATTOTRACE</em>  </td>
 	</tr>
 	<tr class="row3 rowodd">
-		<td class="col0"> Session explorer (persistent sessions) </td><td class="col1 centeralign">  _session_kind _session_uid  </td>
+		<td class="col0"> Session explorer (persistent sessions) </td><td class="col1 centeralign">  _session_kind _session_uid ipAddr _httpSessionType <em>WHATTOTRACE</em>  </td>
 	</tr>
 	<tr class="row4 roweven">
 		<td class="col0"> Session restrictions </td><td class="col1 centeralign">  _session_kind ipAddr <em>WHATTOTRACE</em>  </td>
@@ -110,7 +110,7 @@ The following table list fields to index depending on the feature you want to in
 		<td class="col0"> <abbr title="Security Assertion Markup Language">SAML</abbr> Session </td><td class="col1 centeralign">  _saml_id  </td>
 	</tr>
 </table></div>
-<!-- EDIT3 TABLE [871-1230] -->
+<!-- EDIT3 TABLE [871-1287] -->
 <p>
 See Apache::Session::Browseable::* man page to see how use indexes.
 </p>
@@ -119,7 +119,7 @@ See Apache::Session::Browseable::* man page to see how use indexes.
 </div><div class="noteclassic">Documentation below explains how set index on ipAddr and _whatToTrace. Adapt it to configure the index you need.
 </div>
 </div>
-<!-- EDIT2 SECTION "Presentation" [43-1753] -->
+<!-- EDIT2 SECTION "Presentation" [43-1810] -->
 <h2 class="sectionedit4" id="browseable_nosql">Browseable NoSQL</h2>
 <div class="level2">
 
@@ -146,15 +146,15 @@ You then just have to add the <code>Index</code> parameter  in <code>General par
 		<td class="col0 centeralign">  <strong>Index</strong>  </td><td class="col1"> Index </td><td class="col2"> _whatToTrace ipAddr </td>
 	</tr>
 </table></div>
-<!-- EDIT5 TABLE [2041-2198] -->
+<!-- EDIT5 TABLE [2098-2255] -->
 </div>
-<!-- EDIT4 SECTION "Browseable NoSQL" [1754-2199] -->
+<!-- EDIT4 SECTION "Browseable NoSQL" [1811-2256] -->
 <h2 class="sectionedit6" id="browseable_sql">Browseable SQL</h2>
 <div class="level2">
 <div class="noteclassic">This documentation concerns PostgreSQL. Some adaptations are needed with other databases. When using Apache::Session::Browseable::Postgres, it is strongly recommended to use version 1.3.1 at least. See <a href="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1732" class="urlextern" title="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1732"  rel="nofollow">bug 1732</a>.
 </div>
 </div>
-<!-- EDIT6 SECTION "Browseable SQL" [2200-2518] -->
+<!-- EDIT6 SECTION "Browseable SQL" [2257-2575] -->
 <h3 class="sectionedit7" id="prepare_database">Prepare database</h3>
 <div class="level3">
 
@@ -189,7 +189,7 @@ CREATE INDEX h1   ON sessions (_httpSessionType);</pre>
 <div class="notetip">With new Apache::Session::Browseable::<strong>PgHstore</strong> and <strong>PgJSON</strong>, you don&#039;t need to declare indexes in <code>CREATE TABLE</code> since &quot;json&quot; and &quot;hstore&quot; type are browseable. You should anyway add some indexes <em>(see manpage)</em>.
 </div>
 </div>
-<!-- EDIT7 SECTION "Prepare database" [2519-4234] -->
+<!-- EDIT7 SECTION "Prepare database" [2576-4291] -->
 <h3 class="sectionedit8" id="manager">Manager</h3>
 <div class="level3">
 
@@ -221,14 +221,14 @@ Go in the Manager and set the session module (<a href="https://metacpan.org/pod/
 		<td class="col0 centeralign">  <strong>TableName</strong>  </td><td class="col1"> Table name (optional) </td><td class="col2"> sessions </td>
 	</tr>
 </table></div>
-<!-- EDIT9 TABLE [4557-4978] --><div class="notetip">Apache::Session::Browseable::MySQL doesn&#039;t use locks so performances are keeped.
+<!-- EDIT9 TABLE [4614-5035] --><div class="notetip">Apache::Session::Browseable::MySQL doesn&#039;t use locks so performances are keeped.
 <p>
 For databases like PostgreSQL, don&#039;t forget to add &quot;Commit&quot; with a value of 1
 </p>
 
 </div>
 </div>
-<!-- EDIT8 SECTION "Manager" [4235-5157] -->
+<!-- EDIT8 SECTION "Manager" [4292-5214] -->
 <h2 class="sectionedit10" id="browseable_ldap">Browseable LDAP</h2>
 <div class="level2">
 
@@ -282,9 +282,9 @@ You need to add the <code>Index</code> field and can also configure the <code>ld
 		<td class="col0 centeralign">  <strong>ldapAttributeIndex</strong>  </td><td class="col1"> Attribute storing index </td><td class="col2"> ou </td>
 	</tr>
 </table></div>
-<!-- EDIT11 TABLE [5509-6243] -->
+<!-- EDIT11 TABLE [5566-6300] -->
 </div>
-<!-- EDIT10 SECTION "Browseable LDAP" [5158-6244] -->
+<!-- EDIT10 SECTION "Browseable LDAP" [5215-6301] -->
 <h2 class="sectionedit12" id="security">Security</h2>
 <div class="level2">
 
@@ -297,7 +297,7 @@ You can also use different user/password for your servers by overriding paramete
 </p>
 
 </div>
-<!-- EDIT12 SECTION "Security" [6245-6464] -->
+<!-- EDIT12 SECTION "Security" [6302-6521] -->
 <h2 class="sectionedit13" id="performances">Performances</h2>
 <div class="level2">
 
@@ -340,6 +340,6 @@ CREATE INDEX _u1 ON sessions (_utime);
 CREATE INDEX ip1 ON sessions (ipAddr) USING BTREE;</pre>
 
 </div>
-<!-- EDIT13 SECTION "Performances" [6465-] --></div>
+<!-- EDIT13 SECTION "Performances" [6522-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/changesessionbackend.html b/doc/pages/documentation/current/changesessionbackend.html
new file mode 100644
index 000000000..8902bef57
--- /dev/null
+++ b/doc/pages/documentation/current/changesessionbackend.html
@@ -0,0 +1,105 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:changesessionbackend</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,changesessionbackend"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="changesessionbackend.html"/>
+<link rel="contents" href="changesessionbackend.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:changesessionbackend","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+
+<h1 class="sectionedit1" id="how_to_change_session_backend">How to change session backend</h1>
+<div class="level1">
+
+<p>
+LemonLDAP::NG provides a script to change session backend. This script will help you transfer existing persistent sessions (or offline sessions) when migrating from one backend to another, or when adding indexes to a <a href="browseablesessionbackend" class="wikilink2" title="browseablesessionbackend" rel="nofollow">browseable sessio  backend</a>. It is available in LemonLDAP::NG utilities directory (<code>convertSessions</code>).
+</p>
+
+</div>
+<!-- EDIT1 SECTION "How to change session backend" [1-397] -->
+<h2 class="sectionedit2" id="how_it_works">How it works</h2>
+<div class="level2">
+
+<p>
+The <code>convertSessions</code> utility requires you to create a job configuration file with the following content:
+</p>
+<pre class="file"># This example migrates psessions from the default File backend to a PostgreSQL database
+[sessions_from]
+storageModule = Apache::Session::File
+storageModuleOptions = {	\\
+      &#039;Directory&#039; =&gt; &#039;/var/lib/lemonldap-ng/psessions&#039;, 	\\
+      &#039;LockDirectory&#039; =&gt; &#039;/var/lib/lemonldap-ng/psessions/lock&#039;, \\
+}
+# Only convert some session types
+# sessionKind = Persistent, SSO
+
+[sessions_to]
+storageModule = Apache::Session::Browseable::Postgres
+storageModuleOptions = {	\\
+	&#039;DataSource&#039; =&gt; &#039;DBI:Pg:database=lemonldapdb;host=pg.example.com&#039;, \\
+	&#039;UserName&#039; =&gt; &#039;lemonldaplogin&#039;, \\
+	&#039;Password&#039; =&gt; &#039;lemonldappw&#039;, \\
+	&#039;Commit&#039; =&gt; 1, \\
+	&#039;Index&#039; =&gt; &#039;ipAddr _whatToTrace user&#039;, \\
+	&#039;TableName&#039; =&gt; &#039;psessions&#039;, \\
+}
+</pre>
+
+</div>
+<!-- EDIT2 SECTION "How it works" [398-1250] -->
+<h2 class="sectionedit3" id="invokation">Invokation</h2>
+<div class="level2">
+<pre class="code shell">convertSessions -c job.ini </pre>
+
+<p>
+Options:
+</p>
+<ul>
+<li class="level1"><div class="li"> <code>-c</code>: job configuration file (mandatory)</div>
+</li>
+<li class="level1"><div class="li"> <code>-i</code>: ignore errors. By default errors will stop the script execution</div>
+</li>
+<li class="level1"><div class="li"> <code>-d</code>: print debugging output</div>
+</li>
+</ul>
+
+</div>
+<!-- EDIT3 SECTION "Invokation" [1251-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/checkstate.html b/doc/pages/documentation/current/checkstate.html
index f0c129720..7109a3a3c 100644
--- a/doc/pages/documentation/current/checkstate.html
+++ b/doc/pages/documentation/current/checkstate.html
@@ -43,6 +43,21 @@
 </head>
 <body>
 <div class="dokuwiki export container">
+<!-- TOC START -->
+<div id="dw__toc">
+<h3 class="toggle">Table of Contents</h3>
+<div>
+
+<ul class="toc">
+<li class="level1"><div class="li"><a href="#configuration">Configuration</a></div></li>
+<li class="level1"><div class="li"><a href="#usage">Usage</a></div>
+<ul class="toc">
+<li class="level2"><div class="li"><a href="#example">Example</a></div></li>
+</ul></li>
+</ul>
+</div>
+</div>
+<!-- TOC END -->
 
 <h1 class="sectionedit1" id="check_state_plugin">Check state plugin</h1>
 <div class="level1">
@@ -57,11 +72,11 @@ This plugin can be used to check if portal instance is ready. This can be a heal
 <div class="level2">
 
 <p>
-Just enable it in the manager (section &quot;plugins&quot;). You <em class="u">must</em> also set a shared secret.
+Just enable it in the manager (*<em>General Parameters</em> » <em>Plugins</em> » <em>State Check</em>). You <em class="u">must</em> also set a shared secret.
 </p>
 
 </div>
-<!-- EDIT2 SECTION "Configuration" [196-313] -->
+<!-- EDIT2 SECTION "Configuration" [196-353] -->
 <h2 class="sectionedit3" id="usage">Usage</h2>
 <div class="level2">
 
@@ -84,12 +99,19 @@ When enabled, <code>/checkstate</code> <abbr title="Uniform Resource Locator">UR
 		<td class="col0 centeralign">  <code>password</code>  </td><td class="col1 centeralign">  optional  </td>
 	</tr>
 </table></div>
-<!-- EDIT4 TABLE [416-670] -->
-<p>
-Example: <code><a href="https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho" class="urlextern" title="https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho"  rel="nofollow">https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho</a></code>
-</p>
+<!-- EDIT4 TABLE [456-710] -->
+</div>
+<!-- EDIT3 SECTION "Usage" [354-711] -->
+<h3 class="sectionedit5" id="example">Example</h3>
+<div class="level3">
+<ul>
+<li class="level1"><div class="li"> Basic availability check: <code><a href="https://auth.example.com/checkstate?secret=qwerty" class="urlextern" title="https://auth.example.com/checkstate?secret=qwerty"  rel="nofollow">https://auth.example.com/checkstate?secret=qwerty</a></code></div>
+</li>
+<li class="level1"><div class="li"> Try to log a user in: <code><a href="https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho" class="urlextern" title="https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho"  rel="nofollow">https://auth.example.com/checkstate?secret=qwerty&amp;user=dwho&amp;password=dwho</a></code></div>
+</li>
+</ul>
 
 </div>
-<!-- EDIT3 SECTION "Usage" [314-] --></div>
+<!-- EDIT5 SECTION "Example" [712-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/checkuser.html b/doc/pages/documentation/current/checkuser.html
index a1ead85dc..5b48bfa13 100644
--- a/doc/pages/documentation/current/checkuser.html
+++ b/doc/pages/documentation/current/checkuser.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:checkuser</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="noindex,nofollow"/>
+<meta name="robots" content="index,follow"/>
 <meta name="keywords" content="documentation,2.0,checkuser"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="checkuser.html"/>
@@ -68,7 +68,7 @@ Just enable it in the manager (section “plugins”).
 </li>
 <li class="level2"><div class="li"> <strong>Hidden attributes</strong>: Attributes not displayed</div>
 </li>
-<li class="level2"><div class="li"> <strong>Attributes used for searching sessions</strong>: User&#039;s attributes used for searching sessions in Data Base. Let it blank to search by <code>whatToTrace</code></div>
+<li class="level2"><div class="li"> <strong>Attributes used for searching sessions</strong>: User&#039;s attributes used for searching sessions in Data Base if <code>whatToTrace</code> fails. Useful to look for sessions by mail or givenName. Let it blank to search by <code>whatToTrace</code> only.</div>
 </li>
 <li class="level2"><div class="li"> <strong>Display persistent session</strong>: Display persistent session attributes</div>
 </li>
@@ -77,7 +77,16 @@ Just enable it in the manager (section “plugins”).
 </ul>
 </li>
 </ul>
-<div class="noteimportant">Be careful to not display secret attributes.
+<div class="noteclassic">By example :
+<p>
+Search attributes =&gt; <code>mail uid givenName</code>
+</p>
+
+<p>
+If <code>whatToTrace</code> fails, sessions are searched by <code>mail</code>, next <code>uid</code> if no sessions are found and so on...
+</p>
+
+</div><div class="noteimportant">Be careful to not display secret attributes.
 <p>
 checkUser plugin hidden attributes are concatenation of
 </p>
@@ -105,7 +114,7 @@ By example: <code>$groups =~ /\bsu\b/</code>
 
 </div>
 </div>
-<!-- EDIT2 SECTION "Configuration" [265-1407] -->
+<!-- EDIT2 SECTION "Configuration" [265-1680] -->
 <h2 class="sectionedit3" id="usage">Usage</h2>
 <div class="level2">
 
@@ -114,6 +123,6 @@ When enabled, <code>/checkuser</code> <abbr title="Uniform Resource Locator">URL
 </p>
 
 </div>
-<!-- EDIT3 SECTION "Usage" [1408-] --></div>
+<!-- EDIT3 SECTION "Usage" [1681-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/cli_examples.html b/doc/pages/documentation/current/cli_examples.html
index 1f7bb9b90..6a79b1d3d 100644
--- a/doc/pages/documentation/current/cli_examples.html
+++ b/doc/pages/documentation/current/cli_examples.html
@@ -341,18 +341,19 @@ You can then generate a private key and a self-signed certificate with these com
 <pre class="code">openssl req -new -newkey rsa:4096 -keyout saml.key -nodes  -out saml.pem -x509 -days 3650</pre>
 
 <p>
-Import them in configuration:
+Fix the certificate key format (you can skip this step if you are running &gt;= 2.0.6)
+</p>
+<pre class="code">sed -e &quot;s/END PRIVATE/END RSA PRIVATE/&quot; \
+    -e &quot;s/BEGIN PRIVATE/BEGIN RSA PRIVATE/&quot; \
+    -i saml.key</pre>
+
+<p>
+Import them in configuration and activate the <abbr title="Security Assertion Markup Language">SAML</abbr> issuer
 </p>
 <pre class="code">/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \
     set \
         samlServicePrivateKeySig &quot;`cat saml.key`&quot; \
-        samlServicePublicKeySig &quot;`cat saml.pem`&quot;</pre>
-
-<p>
-Activate the <abbr title="Security Assertion Markup Language">SAML</abbr> Issuer:
-</p>
-<pre class="code">/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \
-    set \
+        samlServicePublicKeySig &quot;`cat saml.pem`&quot; \
         issuerDBSAMLActivation 1</pre>
 
 <p>
@@ -365,7 +366,7 @@ You can also define organization name and <abbr title="Uniform Resource Locator"
         samlOrganizationURL &#039;http://www.acme.com&#039;</pre>
 
 </div>
-<!-- EDIT7 SECTION "Configure SAML Identity Provider" [6779-7657] -->
+<!-- EDIT7 SECTION "Configure SAML Identity Provider" [6779-7785] -->
 <h2 class="sectionedit8" id="register_an_saml_service_provider">Register an SAML Service Provider</h2>
 <div class="level2">
 
@@ -386,7 +387,7 @@ In this example we have:
         samlSPMetaDataExportedAttributes/testsp mail &#039;1;EmailAddress&#039;</pre>
 
 </div>
-<!-- EDIT8 SECTION "Register an SAML Service Provider" [7658-8110] -->
+<!-- EDIT8 SECTION "Register an SAML Service Provider" [7786-8238] -->
 <h2 class="sectionedit9" id="configure_openid_connect_identity_provider">Configure OpenID Connect Identity Provider</h2>
 <div class="level2">
 
@@ -422,7 +423,7 @@ If needed you can allow implicit and hybrid flows:
         oidcServiceAllowHybridFlow 1</pre>
 
 </div>
-<!-- EDIT9 SECTION "Configure OpenID Connect Identity Provider" [8111-8994] -->
+<!-- EDIT9 SECTION "Configure OpenID Connect Identity Provider" [8239-9122] -->
 <h2 class="sectionedit10" id="register_an_openid_connect_relying_party">Register an OpenID Connect Relying Party</h2>
 <div class="level2">
 
@@ -491,7 +492,7 @@ In this example we have:
         oidcRPMetaDataOptions/testrp oidcRPMetaDataOptionsAccessTokenExpiration 3600</pre>
 
 </div>
-<!-- EDIT10 SECTION "Register an OpenID Connect Relying Party" [8995-10626] -->
+<!-- EDIT10 SECTION "Register an OpenID Connect Relying Party" [9123-10754] -->
 <h2 class="sectionedit11" id="categories_and_applications_in_menu">Categories and applications in menu</h2>
 <div class="level2">
 
@@ -516,7 +517,7 @@ Create the application &quot;sample&quot; inside category &quot;applications&quo
         applicationList/applications/sample/options uri &quot;https://sample.example.com/&quot;</pre>
 
 </div>
-<!-- EDIT11 SECTION "Categories and applications in menu" [10627-11508] -->
+<!-- EDIT11 SECTION "Categories and applications in menu" [10755-11636] -->
 <h2 class="sectionedit12" id="encryption_key">Encryption key</h2>
 <div class="level2">
 
@@ -528,6 +529,6 @@ To update the master encryption key:
         key &#039;xxxxxxxxxxxxxxx&#039;</pre>
 
 </div>
-<!-- EDIT12 SECTION "Encryption key" [11509-] --></div>
+<!-- EDIT12 SECTION "Encryption key" [11637-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/configlocation.html b/doc/pages/documentation/current/configlocation.html
index da849dadb..5a11e8306 100644
--- a/doc/pages/documentation/current/configlocation.html
+++ b/doc/pages/documentation/current/configlocation.html
@@ -56,14 +56,14 @@
 <li class="level1"><div class="li"><a href="#apache">Apache</a></div>
 <ul class="toc">
 <li class="level2"><div class="li"><a href="#portal">Portal</a></div></li>
-<li class="level2"><div class="li"><a href="#manager1">Manager</a></div></li>
+<li class="level2"><div class="li"><a href="#allowing_configuration_reload">Allowing configuration reload</a></div></li>
 <li class="level2"><div class="li"><a href="#handler">Handler</a></div></li>
 </ul>
 </li>
 <li class="level1"><div class="li"><a href="#nginx">Nginx</a></div>
 <ul class="toc">
 <li class="level2"><div class="li"><a href="#portal1">Portal</a></div></li>
-<li class="level2"><div class="li"><a href="#manager2">Manager</a></div></li>
+<li class="level2"><div class="li"><a href="#allowing_configuration_reload1">Allowing configuration reload</a></div></li>
 <li class="level2"><div class="li"><a href="#handler1">Handler</a></div></li>
 </ul>
 </li>
@@ -303,7 +303,9 @@ LemonLDAP::NG ships 3 Apache configuration files:
 </li>
 <li class="level1"><div class="li"> <strong>manager-apache2.conf</strong>: Manager virtual host</div>
 </li>
-<li class="level1"><div class="li"> <strong>handler-apache2.conf</strong> : Handler declaration, reload and sample virtual hosts</div>
+<li class="level1"><div class="li"> <strong>handler-apache2.conf</strong> : Handler declaration, reload virtual hosts</div>
+</li>
+<li class="level1"><div class="li"> <strong>test-apache2.conf</strong> : Example protected virtual hosts</div>
 </li>
 </ul>
 
@@ -312,141 +314,58 @@ See <a href="configapache.html" class="wikilink1" title="documentation:2.0:confi
 </p>
 
 </div>
-<!-- EDIT6 SECTION "Apache" [6446-6844] -->
+<!-- EDIT6 SECTION "Apache" [6446-6893] -->
 <h3 class="sectionedit7" id="portal">Portal</h3>
 <div class="level3">
 
 <p>
-In Portal virtual host, you will find several configuration parts:
+After enabling any REST/SOAP endpoints in the Manager, you also need to configure some for of authentication on the corresponding URLs in the <strong>portal-apache2.conf</strong> configuration file. 
+</p>
+
+<p>
+By default, access to those URLs is denied:
 </p>
-<ul>
-<li class="level1"><div class="li"> Standard virtual host directives, to serve portal pages:</div>
-</li>
-</ul>
-<pre class="code file apache">    <span class="kw1">ServerName</span> auth.example.com
-&nbsp;
-    <span class="co1"># DocumentRoot</span>
-    <span class="kw1">DocumentRoot</span> /usr/local/lemonldap-ng/htdocs/portal/
-    &lt;<span class="kw3">Directory</span> /usr/local/lemonldap-ng/htdocs/portal/&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> granted
-        <span class="kw1">Options</span> +ExecCGI +<span class="kw2">FollowSymLinks</span>
-    &lt;/<span class="kw3">Directory</span>&gt;
-    <span class="co1"># For performances, you can put static html files: simply put the HTML</span>
-    <span class="co1"># result (example: /oauth2/checksession.html) as static file. Then</span>
-    <span class="co1"># uncomment the following line.</span>
-    <span class="co1"># RewriteCond &quot;%{REQUEST_FILENAME}&quot; &quot;!\.html$&quot;</span>
-    <span class="kw1">RewriteCond</span> <span class="st0">&quot;%{REQUEST_FILENAME}&quot;</span> <span class="st0">&quot;!^/(?:(?:static|javascript|favicon).*|.*<span class="es0">\.</span>fcgi)$&quot;</span>
-    <span class="kw1">RewriteRule</span> <span class="st0">&quot;^/(.+)$&quot;</span> <span class="st0">&quot;/index.fcgi/$1&quot;</span> [PT]
-&nbsp;
-    <span class="co1"># Note that Content-Security-Policy header is generated by portal itself</span>
-    &lt;<span class="kw3">Files</span> *.fcgi&gt;
-        <span class="kw1">SetHandler</span> fcgid-<span class="kw1">script</span>
-        <span class="co1"># For Authorization header to be passed, please uncomment one of the following:</span>
-        <span class="co1"># for Apache &gt;= 2.4.13</span>
-        <span class="co1">#CGIPassAuth On</span>
-        <span class="co1"># for Apache &lt; 2.4.13</span>
-        <span class="co1">#RewriteCond %{HTTP:Authorization} ^(.*)</span>
-        <span class="co1">#RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]</span>
-        <span class="kw1">Options</span> +ExecCGI
-    &lt;/<span class="kw3">Files</span>&gt;
-&nbsp;
-    <span class="co1"># Static files</span>
-    <span class="kw1">Alias</span> /static/ __PORTALSTATICDIR__/
-    &lt;<span class="kw3">Directory</span> __PORTALSTATICDIR__&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> granted
-        <span class="kw1">Options</span> +<span class="kw2">FollowSymLinks</span>
-    &lt;/<span class="kw3">Directory</span>&gt;
-    &lt;<span class="kw3">Location</span> /static/&gt;
-        &lt;<span class="kw3">IfModule</span> mod_expires.c&gt;
-            <span class="kw1">ExpiresActive</span> <span class="kw2">On</span>
-            <span class="kw1">ExpiresDefault</span> <span class="st0">&quot;access plus 1 month&quot;</span>
-        &lt;/<span class="kw3">IfModule</span>&gt;
-    &lt;/<span class="kw3">Location</span>&gt;
-&nbsp;
-    &lt;<span class="kw3">IfModule</span> mod_dir.c&gt;
-        <span class="kw1">DirectoryIndex</span> index.fcgi index.html
-    &lt;/<span class="kw3">IfModule</span>&gt;</pre>
-<ul>
-<li class="level1"><div class="li"> REST/SOAP end points (disabled by default):</div>
-</li>
-</ul>
 <pre class="code file apache">    <span class="co1"># REST/SOAP functions for sessions management (disabled by default)</span>
     &lt;<span class="kw3">Location</span> /index.fcgi/adminSessions&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> denied
-    &lt;/<span class="kw3">Location</span>&gt;
-&nbsp;
-    <span class="co1"># REST/SOAP functions for sessions access (disabled by default)</span>
-    &lt;<span class="kw3">Location</span> /index.fcgi/sessions&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> denied
-    &lt;/<span class="kw3">Location</span>&gt;
-&nbsp;
-    <span class="co1"># REST/SOAP functions for configuration access (disabled by default)</span>
-    &lt;<span class="kw3">Location</span> /index.fcgi/config&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> denied
-    &lt;/<span class="kw3">Location</span>&gt;
-&nbsp;
-    <span class="co1"># REST/SOAP functions for notification insertion (disabled by default)</span>
-    &lt;<span class="kw3">Location</span> /index.fcgi/notification&gt;
-        <span class="kw1">Require</span> <span class="kw2">all</span> denied
+        <span class="kw1">Order</span> <span class="kw1">deny</span>,<span class="kw1">allow</span>
+        <span class="kw1">Deny</span> from <span class="kw2">all</span>
     &lt;/<span class="kw3">Location</span>&gt;</pre>
 
 </div>
-<!-- EDIT7 SECTION "Portal" [6845-9192] -->
-<h3 class="sectionedit8" id="manager1">Manager</h3>
+<!-- EDIT7 SECTION "Portal" [6894-7343] -->
+<h3 class="sectionedit8" id="allowing_configuration_reload">Allowing configuration reload</h3>
 <div class="level3">
 
 <p>
-Manager virtual host is used to serve configuration interface and local documentation. It is run as a FastCGI application:
-</p>
-<pre class="code file apache">    <span class="co1"># FASTCGI CONFIGURATION</span>
-    <span class="co1"># ---------------------</span>
-&nbsp;
-    <span class="co1"># 1) URI management</span>
-    <span class="kw1">RewriteEngine</span> <span class="kw2">on</span>
-&nbsp;
-    <span class="kw1">RewriteRule</span> <span class="st0">&quot;^/$&quot;</span> <span class="st0">&quot;/psgi/manager-server.fcgi&quot;</span> [PT]
-    <span class="co1"># For performances, you can delete the previous RewriteRule line after</span>
-    <span class="co1"># puttings html files: simply put the HTML results of different modules</span>
-    <span class="co1"># (configuration, sessions, notifications) as manager.html, sessions.html,</span>
-    <span class="co1"># notifications.html and uncomment the 2 following lines:</span>
-    <span class="co1"># DirectoryIndex manager.html</span>
-    <span class="co1"># RewriteCond &quot;%{REQUEST_FILENAME}&quot; &quot;!\.html$&quot;</span>
-&nbsp;
-    <span class="co1"># REST URLs</span>
-    <span class="kw1">RewriteCond</span> <span class="st0">&quot;%{REQUEST_FILENAME}&quot;</span> <span class="st0">&quot;!^/(?:static|doc|lib).*&quot;</span>
-    <span class="kw1">RewriteRule</span> <span class="st0">&quot;^/(.+)$&quot;</span> <span class="st0">&quot;/psgi/manager-server.fcgi/$1&quot;</span> [PT]
-&nbsp;
-    <span class="kw1">Alias</span> /psgi/ /var/lib/lemonldap-ng/manager/psgi/
-&nbsp;
-    <span class="co1"># 2) FastCGI engine</span>
-&nbsp;
-    <span class="co1"># You can choose any FastCGI system. Here is an example using mod_fcgid</span>
-    <span class="co1"># mod_fcgid configuration</span>
-    &lt;<span class="kw3">Directory</span> /var/lib/lemonldap-ng/manager/psgi/&gt;
-        <span class="kw1">SetHandler</span> fcgid-<span class="kw1">script</span>
-        <span class="kw1">Options</span> +ExecCGI
-    &lt;/<span class="kw3">Directory</span>&gt;
-&nbsp;
-    <span class="co1"># If you want to use mod_fastcgi, replace lines below by:</span>
-    <span class="co1">#FastCgiServer /var/lib/lemonldap-ng/manager/psgi/manager-server.fcgi</span>
-&nbsp;
-    <span class="co1"># Or if you prefer to use CGI, use /psgi/manager-server.cgi instead of</span>
-    <span class="co1"># /psgi/manager-server.fcgi and adapt the rewrite rules.</span></pre>
-
-<p>
-Configuration interface access is not protected by Apache but by LemonLDAP::NG itself (see <code>lemonldap-ng.ini</code>).
+In order to allow configuration reload from a different server (if your manager is on a different server or if you are using load-balancing), you need to edit the access rule in 
+<strong>handler-apache2.conf</strong>
 </p>
+<pre class="code file apache">    &lt;<span class="kw3">Location</span> /reload&gt;
+        <span class="co1">#CHANGE THIS######</span>
+        <span class="kw1">Require</span> ip <span class="nu0">127</span> ::<span class="nu0">1</span> 
+        <span class="co1">###########^^^^^^^</span>
+        <span class="kw1">SetHandler</span> perl-<span class="kw1">script</span>
+        PerlResponseHandler Lemonldap::NG::Handler::ApacheMP2-&gt;reload
+    &lt;/<span class="kw3">Location</span>&gt;</pre>
 
 </div>
-<!-- EDIT8 SECTION "Manager" [9193-10736] -->
+<!-- EDIT8 SECTION "Allowing configuration reload" [7344-7834] -->
 <h3 class="sectionedit9" id="handler">Handler</h3>
 <div class="level3">
+
+<p>
+In order to protect your application VHosts with the LemonLDAP::NG handler, you need to add these directives:
+</p>
 <ul>
 <li class="level1"><div class="li"> Load Handler in Apache memory:</div>
 </li>
 </ul>
+
+<p>
+(in a global configuration file)
+</p>
 <pre class="code file apache">PerlOptions +GlobalRequest
-PerlModule Lemonldap::NG::Handler::Apache2</pre>
+PerlModule Lemonldap::NG::Handler::ApacheMP2</pre>
 <ul>
 <li class="level1"><div class="li"> Catch error pages:</div>
 </li>
@@ -456,42 +375,18 @@ PerlModule Lemonldap::NG::Handler::Apache2</pre>
 <span class="kw1">ErrorDocument</span> <span class="nu0">500</span> http://auth.example.com/lmerror/<span class="nu0">500</span>
 <span class="kw1">ErrorDocument</span> <span class="nu0">502</span> http://auth.example.com/lmerror/<span class="nu0">502</span>
 <span class="kw1">ErrorDocument</span> <span class="nu0">503</span> http://auth.example.com/lmerror/<span class="nu0">503</span></pre>
-<ul>
-<li class="level1"><div class="li"> Reload virtual host:</div>
-</li>
-</ul>
-<pre class="code file apache">&lt;<span class="kw3">VirtualHost</span> *:<span class="nu0">80</span>&gt;
-    <span class="kw1">ServerName</span> reload.example.com
-&nbsp;
-    <span class="co1"># Configuration reload mechanism (only 1 per physical server is</span>
-    <span class="co1"># needed): choose your URL to avoid restarting Apache when</span>
-    <span class="co1"># configuration change</span>
-    &lt;<span class="kw3">Location</span> /reload&gt;
-        <span class="kw1">Order</span> <span class="kw1">deny</span>,<span class="kw1">allow</span>
-        <span class="kw1">Deny</span> from <span class="kw2">all</span>
-        <span class="kw1">Allow</span> from 127.0.0.0/<span class="nu0">8</span>
-        <span class="kw1">SetHandler</span> perl-<span class="kw1">script</span>
-        PerlResponseHandler Lemonldap::NG::Handler::Apache2-&gt;reload
-    &lt;/<span class="kw3">Location</span>&gt;
-&nbsp;
-    <span class="co1"># Uncomment this to activate status module</span>
-    <span class="co1">#&lt;Location /status&gt;</span>
-    <span class="co1">#    Order deny,allow</span>
-    <span class="co1">#    Deny from all</span>
-    <span class="co1">#    Allow from 127.0.0.0/8</span>
-    <span class="co1">#    SetHandler perl-script</span>
-    <span class="co1">#    PerlResponseHandler Lemonldap::NG::Handler::Apache2-&gt;status</span>
-    <span class="co1">#&lt;/Location&gt;</span>
-&nbsp;
-&lt;/<span class="kw3">VirtualHost</span>&gt;</pre>
 
 <p>
 Then, to protect a standard virtual host, the only configuration line to add is:
 </p>
-<pre class="code file apache">PerlHeaderParserHandler Lemonldap::NG::Handler::Apache2</pre>
+<pre class="code file apache">PerlHeaderParserHandler Lemonldap::NG::Handler::ApacheMP2</pre>
+
+<p>
+See <strong>test-apache2.conf</strong> for a complete example of a protected application
+</p>
 
 </div>
-<!-- EDIT9 SECTION "Handler" [10737-12126] -->
+<!-- EDIT9 SECTION "Handler" [7835-8686] -->
 <h2 class="sectionedit10" id="nginx">Nginx</h2>
 <div class="level2">
 <div class="noteimportant">LemonLDAP::NG does not manage Nginx configuration
@@ -506,122 +401,57 @@ LemonLDAP::NG ships 3 Nginx configuration files:
 </li>
 <li class="level1"><div class="li"> <strong>handler-nginx.conf</strong> : Handler reload virtual hosts</div>
 </li>
+<li class="level1"><div class="li"> <strong>test-nginx.conf</strong> : Example protected application</div>
+</li>
 </ul>
 
 <p>
 See <a href="confignginx.html" class="wikilink1" title="documentation:2.0:confignginx">how to deploy them</a>.
 </p>
-<div class="notewarning"><a href="fastcgiserver.html" class="wikilink1" title="documentation:2.0:fastcgiserver">LL::NG FastCGI</a> server must be loaded separately.
+<div class="notewarning"><a href="fastcgiserver.html" class="wikilink1" title="documentation:2.0:fastcgiserver">LL::NG FastCGI</a> server must be enabled and started separately.
 </div>
 </div>
-<!-- EDIT10 SECTION "Nginx" [12127-12580] -->
+<!-- EDIT10 SECTION "Nginx" [8687-9209] -->
 <h3 class="sectionedit11" id="portal1">Portal</h3>
 <div class="level3">
 
 <p>
-In Portal virtual host, you will find several configuration parts:
+After enabling any REST/SOAP endpoints in the Manager, you also need to configure some for of authentication on the corresponding URLs in the <strong>portal-nginx.conf</strong> configuration file. 
 </p>
-<ul>
-<li class="level1"><div class="li"> Standard virtual host directives, to serve portal pages:</div>
-</li>
-</ul>
-<pre class="code file nginx">## map directive must be in http context
-#map $ssl_client_s_dn  $ssl_client_s_dn_cn {
-#           default           &quot;&quot;;
-#           ~/CN=(?&lt;CN&gt;[^/]+) $CN;
-#      }
-#fastcgi_param  SSL_CLIENT_S_DN_CN $ssl_client_s_dn_cn;
-&nbsp;
-server {
-  listen 80;
-  server_name auth.example.com;
-  root /var/lib/lemonldap-ng/portal/;
-  if ($uri !~ ^/((static|javascript|favicon).*|.*\.psgi)) {
-    rewrite ^/(.*)$ /index.psgi/$1 break;
-  }
-&nbsp;
-  location ~ \.psgi(?:$|/) {
-    # Note that Content-Security-Policy header is generated by portal itself
-    include /etc/nginx/fastcgi_params;
-    fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
-    fastcgi_param LLTYPE psgi;
-    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-    fastcgi_split_path_info ^(.*\.psgi)(/.*)$;
-    fastcgi_param PATH_INFO  $fastcgi_path_info;
-  }
-&nbsp;
-  index index.psgi;
-  location / {
-    try_files $uri $uri/ =404;
-&nbsp;
-    # Uncomment this if you use https only
-    #add_header Strict-Transport-Security max-age=15768000;
-  }
-&nbsp;
-  location /static/ {
-    alias __PORTALSTATICDIR__;
-  }
-}</pre>
-<ul>
-<li class="level1"><div class="li"> REST/SOAP end points (inactivated by default):</div>
-</li>
-</ul>
-<pre class="code file nginx">  # REST/SOAP functions for sessions management (disabled by default)
-  location /index.psgi/adminSessions {
-    deny all;
-  }
-&nbsp;
-  # REST/SOAP functions for sessions access (disabled by default)
-  location /index.psgi/sessions {
-    deny all;
-  }
-&nbsp;
-  # REST/SOAP functions for configuration access (disabled by default)
-  location /index.psgi/config {
-    deny all;
-  }
-&nbsp;
-  # REST/SOAP functions for notification insertion (disabled by default)
-  location /index.psgi/notification {
-    deny all;
-  }</pre>
+
+<p>
+By default, access to those URLs is denied:
+</p>
+<pre class="code file nginx">    location ~ ^/index.psgi/adminSessions {
+      fastcgi_pass llng_portal_upstream;
+      deny all;
+    }</pre>
 
 </div>
-<!-- EDIT11 SECTION "Portal" [12581-14383] -->
-<h3 class="sectionedit12" id="manager2">Manager</h3>
+<!-- EDIT11 SECTION "Portal" [9210-9587] -->
+<h3 class="sectionedit12" id="allowing_configuration_reload1">Allowing configuration reload</h3>
 <div class="level3">
 
 <p>
-Manager virtual host is used to serve configuration interface and local documentation.
+In order to allow configuration reload from a different server (if your manager is on a different server or if you are using load-balancing), you need to edit the access rule in 
+<strong>handler-nginx.conf</strong>
 </p>
-<pre class="code file nginx">server {
-  listen 80;
-  server_name manager.example.com;
-  root /usr/share/lemonldap-ng/manager/;
+<pre class="code file nginx">  location = /reload {
 &nbsp;
-  if ($uri !~ ^/(static|doc|lib|javascript)) {
-    rewrite ^/(.*)$ /manager.psgi/$1 break;
-  }
+    ## CHANGE THIS #
+    allow 127.0.0.1;
+    ######^^^^^^^^^#
 &nbsp;
-  location /manager.psgi {
+    deny all;
+&nbsp;
+    # FastCGI configuration
     include /etc/nginx/fastcgi_params;
-    fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
-    fastcgi_param LLTYPE manager;
-    fastcgi_param SCRIPT_NAME /manager.psgi;
-  }
-&nbsp;
-  location / {
-    index manager.psgi;
-    try_files $uri $uri/ =404;
-  }
-}</pre>
-
-<p>
-By default, configuration interface access is not protected by Nginx but by LemonLDAP::NG itself (see <code>lemonldap-ng.ini</code>).
-</p>
+    fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
+    fastcgi_param LLTYPE reload;
+  }</pre>
 
 </div>
-<!-- EDIT12 SECTION "Manager" [14384-15129] -->
+<!-- EDIT12 SECTION "Allowing configuration reload" [9588-10127] -->
 <h3 class="sectionedit13" id="handler1">Handler</h3>
 <div class="level3">
 
@@ -637,40 +467,9 @@ error_page 404 http://auth.example.com/lmerror/404;
 error_page 500 http://auth.example.com/lmerror/500;
 error_page 502 http://auth.example.com/lmerror/502;
 error_page 503 http://auth.example.com/lmerror/503;</pre>
-<ul>
-<li class="level1"><div class="li"> Reload virtual host:</div>
-</li>
-</ul>
-<pre class="code file nginx">server {                                                               
-  listen 80;                                                        
-  server_name reload.example.com;                                      
-  root /var/www/html;
-&nbsp;
-  location = /reload {                                                 
-    allow 127.0.0.1; 
-    deny all;
-    include /etc/nginx/fastcgi_params;
-    fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
-    fastcgi_param LLTYPE reload;
-  } 
-&nbsp;
-  # Other requests                                                    
-  location / {                                                         
-    deny all;
-  } 
-&nbsp;
-  # Uncomment this if status is enabled                                
-  #location = /status {                                              
-  #  allow 127.0.0.1;
-  #  deny all;
-  #  include /etc/nginx/fastcgi_params;                                
-  #  fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
-  #  fastcgi_param LLTYPE status;
-  #}
-}</pre>
 
 <p>
-Then, to protect a standard virtual host, you must insert this (or create an included file):
+To protect a standard virtual host, you must insert this (or create an included file):
 </p>
 <pre class="code file nginx">  # Insert $_user in logs
   include /etc/lemonldap-ng/nginx-lmlog.conf;
@@ -721,7 +520,7 @@ Then, to protect a standard virtual host, you must insert this (or create an inc
     # Insert then your configuration (fastcgi_* or proxy_*)</pre>
 
 </div>
-<!-- EDIT13 SECTION "Handler" [15130-18211] -->
+<!-- EDIT13 SECTION "Handler" [10128-12131] -->
 <h2 class="sectionedit14" id="configuration_reload">Configuration reload</h2>
 <div class="level2">
 <div class="noteclassic">As Handlers keep configuration in cache, when configuration change, it should be updated in Handlers. An Apache restart will work, but LemonLDAP::NG offers the mean to reload them through an HTTP request. Configuration reload will then be effective in less than 10 minutes. If you want to change this timeout, set <code>checkTime = 240</code> in your lemonldap-ng.ini file <em>(values in seconds)</em>
@@ -733,7 +532,7 @@ After configuration is saved by Manager, LemonLDAP::NG will try to reload config
 <p>
 You also have a parameter to adjust the timeout used to request reload URLs, it is be default set to 5 seconds.
 </p>
-<div class="noteimportant">Configuration file is compacted to limit file size. All useless parameters are removed. Typically, if SAMLv2 service is disabled, all relative parameters will be erased. To avoid unused parameters to be purged, you can enable &quot;Don &#039;t compact configuration file&quot; option.
+<div class="noteimportant">Configuration file is compacted to limit file size. All useless parameters are removed. Typically, if SAMLv2 service is disabled, all relative parameters will be erased. To avoid unused parameters to be purged, you can enable &quot;Don&#039;t compact configuration file&quot; option.
 </div>
 <p>
 These parameters can be overwritten in LemonLDAP::NG ini file, in the section <code>apply</code>.
@@ -780,7 +579,7 @@ You also need to adjust the protection of the reload vhost, for example:
     &lt;/<span class="kw3">Location</span>&gt;</pre>
 
 </div>
-<!-- EDIT14 SECTION "Configuration reload" [18212-21062] -->
+<!-- EDIT14 SECTION "Configuration reload" [12132-14981] -->
 <h2 class="sectionedit15" id="local_file">Local file</h2>
 <div class="level2">
 
@@ -814,6 +613,6 @@ For example, to override configured skin for portal:
 <div class="notetip">You need to know the technical name of configuration parameter to do this. You can refer to <a href="parameterlist.html" class="wikilink1" title="documentation:2.0:parameterlist">parameter list</a> to find it.
 </div>
 </div>
-<!-- EDIT15 SECTION "Local file" [21063-] --></div>
+<!-- EDIT15 SECTION "Local file" [14982-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/configvhost.html b/doc/pages/documentation/current/configvhost.html
index 45cb4ea3a..d25ba2ad0 100644
--- a/doc/pages/documentation/current/configvhost.html
+++ b/doc/pages/documentation/current/configvhost.html
@@ -167,7 +167,7 @@ To learn more about using Apache as reverse-proxy, see <a href="http://httpd.apa
 <p>
 A little floating menu can be added to application with this simple Apache configuration:
 </p>
-<pre class="code file apache">PerlModule Lemonldap::NG::Handler::Apache2::Menu
+<pre class="code file apache">PerlModule Lemonldap::NG::Handler::ApacheMP2::Menu
 PerlOutputFilterHandler Lemonldap::NG::Handler::ApacheMP2::Menu-&gt;run</pre>
 
 <p>
@@ -179,7 +179,7 @@ PerlOutputFilterHandler Lemonldap::NG::Handler::ApacheMP2::Menu-&gt;run
 <div class="noteimportant">You need to disable mod_deflate to use the floating menu
 </div>
 </div>
-<!-- EDIT5 SECTION "Add a floating menu" [2576-3123] -->
+<!-- EDIT5 SECTION "Add a floating menu" [2576-3125] -->
 <h2 class="sectionedit6" id="nginx_configuration">Nginx configuration</h2>
 <div class="level2">
 
@@ -253,7 +253,7 @@ Then you can take any virtual host and modify it:
   }</pre>
 
 </div>
-<!-- EDIT6 SECTION "Nginx configuration" [3124-5010] -->
+<!-- EDIT6 SECTION "Nginx configuration" [3126-5012] -->
 <h3 class="sectionedit7" id="hosted_application1">Hosted application</h3>
 <div class="level3">
 
@@ -312,12 +312,12 @@ server {
 }</pre>
 
 </div>
-<!-- EDIT7 SECTION "Hosted application" [5011-6639] -->
+<!-- EDIT7 SECTION "Hosted application" [5013-6641] -->
 <h3 class="sectionedit8" id="reverse_proxy1">Reverse proxy</h3>
 <div class="level3">
 
 <p>
-Example of a protected reverse-proxy:
+* Example of a protected reverse-proxy:
 </p>
 <pre class="code file nginx"># Log format
 include /path/to/lemonldap-ng/nginx-lmlog.conf;
@@ -362,8 +362,120 @@ server {
   }
 }</pre>
 
+<p>
+* Example of a Nginx Virtual Host using uWSGI with many URIs protected by different types of handler :
+</p>
+<pre class="code file nginx"># Log format
+include /path/to/lemonldap-ng/nginx-lmlog.conf;
+server {
+  listen 80;
+  server_name myserver;
+  root /var/www/html;
+&nbsp;
+ # Internal MAIN handler authentication request
+  location = /lmauth {
+    internal;
+    # uWSGI Configuration
+    include /etc/nginx/uwsgi_params;
+    uwsgi_pass 127.0.0.1:5000;
+    uwsgi_pass_request_body  off;
+    uwsgi_param CONTENT_LENGTH &quot;&quot;;
+    uwsgi_param HOST $http_host;
+    uwsgi_param X_ORIGINAL_URI  $request_uri;
+    # Improve performances
+    uwsgi_buffer_size 32k;
+    uwsgi_buffers 32 32k;
+  }
+&nbsp;
+  # Internal AUTH_BASIC handler authentication request
+  location = /lmauth-basic {
+    internal;
+    # uWSGI Configuration
+    include /etc/nginx/uwsgi_params;
+    uwsgi_pass 127.0.0.1:5000;
+    uwsgi_pass_request_body  off;
+    uwsgi_param CONTENT_LENGTH &quot;&quot;;
+    uwsgi_param HOST $http_host;
+    uwsgi_param X_ORIGINAL_URI  $request_uri;
+    uwsgi_param VHOSTTYPE AuthBasic;
+    # Improve performances
+    uwsgi_buffer_size 32k;
+    uwsgi_buffers 32 32k;
+  }
+&nbsp;
+  # Internal SERVICE_TOKEN handler authentication request
+  location = /lmauth-service {
+    internal;
+    # uWSGI Configuration
+    include /etc/nginx/uwsgi_params;
+    uwsgi_pass 127.0.0.1:5000;
+    uwsgi_pass_request_body  off;
+    uwsgi_param CONTENT_LENGTH &quot;&quot;;
+    uwsgi_param HOST $http_host;
+    uwsgi_param X_ORIGINAL_URI  $request_uri;
+    uwsgi_param VHOSTTYPE ServiceToken;
+    # Improve performances
+    uwsgi_buffer_size 32k;
+    uwsgi_buffers 32 32k;
+  }
+&nbsp;
+  # Client requests
+  location / {
+    ##################################
+    # CALLING AUTHENTICATION         #
+    ##################################
+    auth_request /lmauth;
+    auth_request_set $lmremote_user $upstream_http_lm_remote_user;
+    auth_request_set $lmremote_custom $upstream_http_lm_remote_custom;
+    auth_request_set $lmlocation $upstream_http_location;
+    # Remove this for AuthBasic handler
+    error_page 401 $lmlocation;
+&nbsp;
+    ##################################
+    # PASSING HEADERS TO APPLICATION #
+    ##################################
+    # IF LUA IS SUPPORTED
+    include /etc/nginx/nginx-lua-headers.conf;
+  }
+&nbsp;
+  location /AuthBasic/ {
+    ##################################
+    # CALLING AUTHENTICATION         #
+    ##################################
+    auth_request /lmauth-basic;
+    auth_request_set $lmremote_user $upstream_http_lm_remote_user;
+    auth_request_set $lmremote_custom $upstream_http_lm_remote_custom;
+    auth_request_set $lmlocation $upstream_http_location;
+    # Remove this for AuthBasic handler
+    #error_page 401 $lmlocation;
+&nbsp;
+    ##################################
+    # PASSING HEADERS TO APPLICATION #
+    ##################################
+    # IF LUA IS SUPPORTED
+    include /etc/nginx/nginx-lua-headers.conf;
+  }
+&nbsp;
+  location /web-service/ {
+    ##################################
+    # CALLING AUTHENTICATION         #
+    ##################################
+    auth_request /lmauth-service;
+    auth_request_set $lmremote_user $upstream_http_lm_remote_user;
+    auth_request_set $lmlocation $upstream_http_location;
+    # Remove this for AuthBasic handler
+    error_page 401 $lmlocation;
+&nbsp;
+    ##################################
+    # PASSING HEADERS TO APPLICATION #
+    ##################################
+    # IF LUA IS SUPPORTED
+    include /etc/nginx/nginx-lua-headers.conf;
+  }
+}</pre>
+
 </div>
-<!-- EDIT8 SECTION "Reverse proxy" [6640-7933] -->
+<!-- EDIT8 SECTION "Reverse proxy" [6642-11401] -->
 <h2 class="sectionedit9" id="lemonldapng_configuration">LemonLDAP::NG configuration</h2>
 <div class="level2">
 
@@ -390,7 +502,7 @@ A virtual host contains:
 </ul>
 
 </div>
-<!-- EDIT9 SECTION "LemonLDAP::NG configuration" [7934-8533] -->
+<!-- EDIT9 SECTION "LemonLDAP::NG configuration" [11402-12001] -->
 <h3 class="sectionedit10" id="access_rules_and_http_headers">Access rules and HTTP headers</h3>
 <div class="level3">
 
@@ -408,7 +520,7 @@ To send more than <strong>TEN</strong> headers to protected applications, you ha
 
 </div>
 </div>
-<!-- EDIT10 SECTION "Access rules and HTTP headers" [8534-8968] -->
+<!-- EDIT10 SECTION "Access rules and HTTP headers" [12002-12436] -->
 <h3 class="sectionedit11" id="post_data">POST data</h3>
 <div class="level3">
 
@@ -417,7 +529,7 @@ See <strong><a href="formreplay.html" class="wikilink1" title="documentation:2.0
 </p>
 
 </div>
-<!-- EDIT11 SECTION "POST data" [8969-9103] -->
+<!-- EDIT11 SECTION "POST data" [12437-12571] -->
 <h3 class="sectionedit12" id="options">Options</h3>
 <div class="level3">
 
@@ -435,12 +547,21 @@ Some options are available:
 </li>
 <li class="level1"><div class="li"> Type: handler type <em>(normal, <a href="servertoserver.html" class="wikilink1" title="documentation:2.0:servertoserver">ServiceToken Handler</a>, <a href="devopshandler.html" class="wikilink1" title="documentation:2.0:devopshandler">DevOps Handler</a>,...)</em></div>
 </li>
-<li class="level1"><div class="li"> Authentication level required: this options avoid to reject user with a rule based on <code>$_authenticationLevel</code>. When user hasn&#039;t the required level, he is redirected to an upgrade page in the portal</div>
+<li class="level1"><div class="li"> Authentication level required: this option avoids to reject user with a rule based on <code>$_authenticationLevel</code>. When user hasn&#039;t got the required level, he is redirected to an upgrade page in the portal. This level is applied to ALL VirtualHost locations.</div>
 </li>
 <li class="level1"><div class="li"> ServiceToken timeout: The Service Token is only available during 30 seconds by default. This TTL can be customized for each virtual host.</div>
 </li>
 </ul>
-<div class="noteimportant">A neagative or null ServiceToken timeout value will be overloaded by <code>handlerServiceTokenTTL</code> (30 seconds by default).
+<div class="notewarning">A same virtual host can serve many locations. Each location can be protected by a different type of handler :
+<pre class="code">server test1.example.com 80
+  location ^/AuthBasic  =&gt; AuthBasic handler
+  location ^/AuthCookie =&gt; Main handler</pre>
+
+<p>
+Keep in mind that AuthBasic handler use &quot;Login/Password&quot; to authenticate users. If you set &quot;Authentication level required&quot; option to &quot;5&quot; by example, AuthBasic requests will be ALWAYS rejected because AuthBasic authentication level is lower than required level.
+</p>
+
+</div><div class="noteimportant">A negative or null ServiceToken timeout value will be overloaded by <code>handlerServiceTokenTTL</code> (30 seconds by default).
 
 </div>
 <p>
@@ -448,6 +569,6 @@ Some options are available:
 </p>
 
 </div>
-<!-- EDIT12 SECTION "Options" [9104-] --></div>
+<!-- EDIT12 SECTION "Options" [12572-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/contribute.html b/doc/pages/documentation/current/contribute.html
index 7aaa7b2ba..912e39fe2 100644
--- a/doc/pages/documentation/current/contribute.html
+++ b/doc/pages/documentation/current/contribute.html
@@ -62,7 +62,11 @@
 </ul>
 </li>
 <li class="level1"><div class="li"><a href="#install_dependencies">Install dependencies</a></div></li>
-<li class="level1"><div class="li"><a href="#working_project">Working Project</a></div></li>
+<li class="level1"><div class="li"><a href="#working_project">Working Project</a></div>
+<ul class="toc">
+<li class="level2"><div class="li"><a href="#unit_tests">Unit tests</a></div></li>
+<li class="level2"><div class="li"><a href="#other_commands">Other commands</a></div></li>
+</ul></li>
 </ul>
 </div>
 </div>
@@ -209,7 +213,7 @@ On gitlab, submit merge request when tests are corrects.
 <!-- EDIT4 SECTION "Import Project and using Git" [1855-2905] -->
 <h2 class="sectionedit5" id="install_dependencies">Install dependencies</h2>
 <div class="level2">
-<pre class="code">aptitude install libapache-session-perl libcache-cache-perl libclone-perl libconfig-inifiles-perl libconvert-pem-perl libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcrypt-openssl-x509-perl libcrypt-rijndael-perl libdbi-perl libdigest-hmac-perl libemail-sender-perl libgd-securityimage-perl libhtml-template-perl libio-string-perl libjson-perl libmime-tools-perl libmouse-perl libnet-ldap-perl libplack-perl libregexp-assemble-perl libregexp-common-perl libsoap-lite-perl libstring-random-perl libunicode-string-perl liburi-perl libwww-perl libxml-simple-perl libxml-libxslt-perl libcrypt-urandom-perl libconvert-base32-perl cpanminus
+<pre class="code">aptitude install libapache-session-perl libcache-cache-perl libclone-perl libconfig-inifiles-perl libconvert-pem-perl libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcrypt-openssl-x509-perl libcrypt-rijndael-perl libdbi-perl libdigest-hmac-perl libemail-sender-perl libgd-securityimage-perl libhtml-template-perl libio-string-perl libjson-perl libmime-tools-perl libmouse-perl libnet-ldap-perl libplack-perl libregexp-assemble-perl libregexp-common-perl libsoap-lite-perl libstring-random-perl libtext-unidecode-perl libunicode-string-perl liburi-perl libwww-perl libxml-simple-perl libxml-libxslt-perl libcrypt-urandom-perl libconvert-base32-perl cpanminus 
 aptitude install apache2 libapache2-mod-fcgid libapache2-mod-perl2  # install Apache
 aptitude install nginx nginx-extras  # install Nginx
 cpanm perltidy@20181120</pre>
@@ -220,34 +224,55 @@ cpanm perltidy@20181120</pre>
 <pre class="code">aptitude install liblasso-perl libglib-perl </pre>
 
 </div>
-<!-- EDIT5 SECTION "Install dependencies" [2906-3814] -->
+<!-- EDIT5 SECTION "Install dependencies" [2906-3838] -->
 <h2 class="sectionedit6" id="working_project">Working Project</h2>
 <div class="level2">
-<pre class="code">## Launch unit tests:
-make test # or manager_test, portal_test, ... to launch unit tests
-## Same tests launched on a simulated install
-make autopkgtest # or autopkg_portal, autopkg_manager, ... to launch unit tests
-
-## Execute an unit test :
-# Building project
-cd ~/lemonldap-ng/; make
-# Go to parent test directory
-cd ~/lemonldap-ng/lemonldap-ng-portal
-# and execute the unit test:
-prove -v t/67-CheckUser.t
-
-## Using local platform :
-make start_web_server # TESTUSESSL=1 to enable SSL engine (only available for Apache)
-make start_web_server TESTWEBSERVER=nginx # to use Nginx web server
-make stop_web_server
-make reload_web_server # to reload LL:NG conf
-make clean # to clean test files
-make minify # to minify and compile coffeescript
-make json # to build conf and manager tree
-make manifest # to update manifest
-make tidy # to magnify perl files (perl best pratices)</pre>
 
 </div>
-<!-- EDIT6 SECTION "Working Project" [3815-] --></div>
+<!-- EDIT6 SECTION "Working Project" [3839-3868] -->
+<h3 class="sectionedit7" id="unit_tests">Unit tests</h3>
+<div class="level3">
+
+<p>
+Launch unit tests:
+</p>
+<pre class="code">  make test # or manager_test, portal_test, ... to launch unit tests</pre>
+
+<p>
+Same tests launched on a simulated install
+</p>
+<pre class="code">  make autopkgtest # or autopkg_portal, autopkg_manager, ... to launch unit tests</pre>
+
+<p>
+Execute an unit test :
+</p>
+<pre class="code">  # Building project
+  cd ~/lemonldap-ng/; make
+  # Go to parent test directory
+  cd ~/lemonldap-ng/lemonldap-ng-portal
+  # and execute the unit test:
+  prove -v t/67-CheckUser.t</pre>
+
+<p>
+Launch tests with LDAP backend, for example with OpenLDAP LTB package:
+</p>
+<pre class="code">make LLNGTESTLDAP=1 LLNGTESTLDAP_SLAPD_BIN=/usr/local/openldap/libexec/slapd LLNGTESTLDAP_SLAPADD_BIN=/usr/local/openldap/sbin/slapadd LLNGTESTLDAP_SCHEMA_DIR=/usr/local/openldap/etc/openldap/schema/ test</pre>
+
+</div>
+<!-- EDIT7 SECTION "Unit tests" [3869-4647] -->
+<h3 class="sectionedit8" id="other_commands">Other commands</h3>
+<div class="level3">
+<pre class="code">  make start_web_server # TESTUSESSL=1 to enable SSL engine (only available for Apache)
+  make start_web_server TESTWEBSERVER=nginx # to use Nginx web server
+  make stop_web_server
+  make reload_web_server # to reload LL:NG conf
+  make clean # to clean test files
+  make minify # to minify and compile coffeescript
+  make json # to build conf and manager tree
+  make manifest # to update manifest
+  make tidy # to magnify perl files (perl best pratices)</pre>
+
+</div>
+<!-- EDIT8 SECTION "Other commands" [4648-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/decryptvalue.html b/doc/pages/documentation/current/decryptvalue.html
new file mode 100644
index 000000000..9841d58ef
--- /dev/null
+++ b/doc/pages/documentation/current/decryptvalue.html
@@ -0,0 +1,83 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:decryptvalue</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,decryptvalue"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="decryptvalue.html"/>
+<link rel="contents" href="decryptvalue.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:decryptvalue","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+
+<p>
+<a href="documentation/latest/beta.png_documentation_2.0_decryptvalue.html" class="media" title="documentation:latest:beta.png"><img src="documentation/latest/beta.ea231b49369c9f6406cbdf58d06a616c.png" class="media" alt="" width="100" /></a>
+</p>
+
+<h1 class="sectionedit1" id="decrypt_value_plugin">Decrypt value plugin</h1>
+<div class="level1">
+
+<p>
+This plugin allows us to decrypt ciphered values. <abbr title="LemonLDAP::NG">LL::NG</abbr> can be configured to send encrypted values to protected applications by using <a href="documentation/latest/extendedfunctions.html" class="wikilink1" title="documentation:latest:extendedfunctions">extended functions</a>.
+</p>
+
+</div>
+<!-- EDIT1 SECTION "Decrypt value plugin" [40-274] -->
+<h2 class="sectionedit2" id="configuration">Configuration</h2>
+<div class="level2">
+
+<p>
+Just enable it in the Manager (section “plugins”) by setting a rule. DecryptValue plugin can be allowed or denied for specific users.
+</p>
+<ul>
+<li class="level1"><div class="li"> <strong>Parameters</strong>:</div>
+<ul>
+<li class="level2"><div class="li"> <strong>Use rule</strong>: Select which users may use this plugin</div>
+</li>
+<li class="level2"><div class="li"> <strong>Decrypt functions</strong>: Set functions used for decrypting ciphered values. Each function is tested until one succeeds. Let it blank to use internal decrypt function.</div>
+</li>
+</ul>
+</li>
+</ul>
+<div class="notewarning">Custom functions must be defined into <code>Lemonldap::NG::Portal::My::Plugin</code> and set:
+<pre class="code">My::Plugin::function1 My::Plugin::function2</pre>
+
+</div>
+</div>
+<!-- EDIT2 SECTION "Configuration" [275-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/documentation/beta.2707b90c7f00808e80f984a3026445b0.png b/doc/pages/documentation/current/documentation/beta.2707b90c7f00808e80f984a3026445b0.png
new file mode 100644
index 0000000000000000000000000000000000000000..85ee24446e6382052c68f9f4d3c6a7a299956290
GIT binary patch
literal 1679
zcmV;A25|X_P)<h;3K|Lk000e1NJLTq001KZ000sQ1^@s6(f?;r00009a7bBm000ie
z000ie0hKEb8vp<XK}keGR7i=<)%%ZB<sHZI_w$@HXD%$u%<Sy_HhY1EVY$dGMJSpy
zAT4Ppwl*MX3Wm}jDz;E0X%kIr$`7_R{XwlJ{-A}TEh-2sP#Xj*C<t8wh+KD<odIUp
zU3QjLW@hJd=FEBegOP*~ZQ9tRpFiOFzLM{g&lmoWBK}toPit>CjAYV<Y3j<hJ$1og
z;E9L6@3;Q(Zl|5PHD65d$OF^bH~wMU&V*%I0O(&OU~Nk<(9t!w%Q|wj^Lx{$w@vKt
ztCLN^a#YDLTU)29;Xy->M37aL6!#w>>@2_Zvd8n(Xe#xeVZz}sotg16J2_HEDi!$S
zhV|{mw{}+HFno@M_szD=+!AeSNGF>``FyxmJdCIaP>RLSr%gkpQXm9IIE)pIVvmhs
z?%g+=V$lWU@4)C%(&_gbYJA*-z`)}PytwAaW#*}qUNYm~sL}N$)lxG=TWgsr6g>Lm
zj&g0o<A(HlrQX(taJx~a36_O@>lSw6I@-i?^3OjH6&0xAAxhC06&Eg`H8r6%G@?@J
z#SK26e>9gHyp3sZYLbt)wf<oF(9nG%6lxL;_2rI5i>I19w)?ek7mns;WJ4obOAwSo
z_<R(PeMss2d2FS~z49`4G)5^FLnW@GtRhrbQ}+AcVVyXEtgWSV<toB7$-VX(o=4Xr
z>+3P@o#$B}i`~0=aB$~sOm#Y4vuto^gZr6h=IE_0pzDatIF9CKD4M8(iS$lF@8}@)
zqcs#>--fKLMBTiJv3fOnQ;_2LI9$AloE}0<@GxoDE>yuJlgm+xM$zZZqtxF|?%8K?
zMj|*SPa$_>1pDH}rNB-A4ImH<7QfrvywoMc6lWwt?z!j4J@F)kBOg#abQtU8N%Akf
zgf?RavZ@lZyBjPE*T#)ZSho(xqQy8Le30Vl)0B=Jh0HjvRjZH_CQ!PbK#h)JJiHvc
zw-*(SA!@2I?!O;9lOiw><*=0dZlqFa32^$-rTk&ke!IV)Qhz@}3hco_1OoS?YayM+
zP9`b5`YMia7=6J4R5pv*-A#VW7R;W1B0L`Sd+q_VfPM2OR$m_&26iroN+uBs^!f9_
zp;LVSebm?(&c%!HH#bdvq+?1efc*RezZH$WUh3`3o5zmfn7;spqIBjA*4dB2?M4QJ
z$c6^AmKL<m=?EziUN5<Af5kfT0azB!NCf3{A}cG%Z{7OYx-|_-7TKqMjk#wp<nt8&
zwvXJ_KV!uc2%pb0FO>@2fk|XCrc!oP>zIP9uSZl@Ap!vkn>S-$zmB?gjl%Zr6yAFe
zt+EmV0ZKzdcz*FqJnMfBx{g*`i(~FwR4$L*-;YYC(Sj|A#zwTxPRd?<0qvVh5dHw>
zuH87oVMO^PoTm9mg%DEv9P>#&U+na_8(QM=h0X^SW5*MedU_CEAD&IWq4>@LR5A%l
z;r{8*DD2pQ8XiWtT#!yvN+i%{&ZKzkIHkT`RH=j!iJ&fD#_Z`qYi`1|Vg>rFSvb17
za4uVhUf%#Ei?V1;TurBU-|m@$W!YyeYyZ+zdYu)IdmKw1pzy|<kV&J=B3gSp)|oR{
z$B!e*Cn9TWQA0x%cJIP``)!PsD=`)=!dSix3<t8R3Lylp4I6N-S%VM)+%7<YkXQo)
z<oE1BWzwb^9K0e0`W+3NY;QkjdA%8g^f<o05HyJz&ywA=2~jMfg+j>5laXE@MkIng
zYZm(4x#*z~T4N*VI(jICW9Ce(ksFw&PGN2SlPSI4ymj`RX^)O(&ehh8$-4SP@uQC}
zNT>U-%%p~IPV$d*_x29obtngZ_2l0hSFZY&^!i9W_879J21jcvvY`R#_oL08jW8To
z@dR339pthU_P_I4;ic19u^3X<2UR|QTsa(<)wTG5HfMI?g%6Kq1{A|v&Y$c1qLXtM
z=IPM%hki1%bGv)>YN<~PVULbt$K$A64wcDJ*tgdfH8m;W^(Cx#4~{s#{hcd42M-RP
zjYV_GuC61$?cQ_fi-!HX+=cmJc+S_Jp4{=5a=+hiojj2jF8AowVln$kAwPV!zOj4r
z!2=)Ta^+E^KxI)XJM`(N`H}xt@MV}8z_R%Z=F}K^;OMpZnAX;I;ZQW1jYgwi!MHEa
ZzW`rBz$sW;ujK#$002ovPDHLkV1h#RK4Aa=

literal 0
HcmV?d00001

diff --git a/doc/pages/documentation/current/documentation/beta.png b/doc/pages/documentation/current/documentation/beta.png
new file mode 100644
index 0000000000000000000000000000000000000000..87557d14ef4b2ccf0e6405207bceb1abc25a1511
GIT binary patch
literal 3441
zcmV-%4UY1OP)<h;3K|Lk000e1NJLTq002Ay0015c1^@s6aF~5h00006VoOIv0P_HX
z02bh~>rDUv010qNS#tmY3ljhU3ljkVnw%H_000McNliru;|Bs1ISD9Q>7@Vw03B&m
zSad^gZEa<4bN~PV002XBWnpw>WFU8GbZ8()Nlj2>E@cM*01VYhL_t(o!|hpnbd=?t
ze%|jg_enC7gb>M=OG3Ddgo}U>0TB>PxCnR)D#l|AuI_Ga73k4YtY?pkfCebEBBE%O
zE_MaMs<42Dki}gp;DuX&07+)PZzeOD`+S%8w|`7JfmZ0AJ>A{v={sl6%$a$=-~0Z)
z=Xsy!H@^Y?Hon_~eOot9MApzV&-P|teKCl)TpVbsfty5c!Bi4xKUOcBRxtAR^tUQu
zljyqGKR??`fA3#&&E`wF(vTr8e)MP#_32$Dbt{@crU57lzzL)qAP}sRCLy(91Eh(Q
z;Mu)PV2sfp$CdsXl53wfrJQW`GRGs2RmXq)qhiEj{Zxx3modRDIGq-G^k`Wq?E~g;
zK<HZrA<qMDXh1X$Y1mL$##KVd%|UY8Z(zOqZlqt|8V^7IPi_E_|MP^CiKt6^pw^k%
zwbLeg3Y=z8m7ObBkI~-w^%!_^@8h}->Gmq<n>Hi%><aL6=O7Lq0Qckn2zf>ojD~~I
z_V0&0U;yMFd>`_l!B<^N-|-%-H8n{8`fVq(SO)<(^uI=FB9g;*EzC0#{=PVWaR@av
z6)-_6<8J3bW|}2JNr{(nvcYbLICLm@OACbFy&#sBf;rugM+^rmDgvE73$eHutfU8+
zZU7Dkz)cVlU~(kt)&i*njAO@PxosL84=l{?A+=`@%u5#$Tf7Li`FFpOx8=3_{t}6a
zp}BJ$?XzbUM%JvV3XZz*m0)EhDFFEaQbmzM3m+iGokPJ}r%-Hd9VP1PDYp4F3eKKM
z=`&5Foj5^%7@WF>sinz?L`ZLLrueGWq@O=e>7z$Uku9VY7gONoO7dH6)Un`R@&V+R
zEyR;ax_opjUrvg{P3rh@^xqb(#Lrh0CO@g~&eB>B<M+Ss4sWjLc<%YBsTW?D!kaI;
zrHPdSwfVu%o&`A_5IkO3Cf^Ea#4sSG!90H+V#(h@96S(WX&FS9JG+wU_k&tnVfuU^
zpAUxL5B=al=#7mKB2jQH4eH#OYr_V}qemk&VFJX`KCn!`4cfc!!Tj<Iu+D(ax88)~
zuDbyS5P<ml^*}m}#1DUnoDY9jX`edn)2pHv{jAZYjvaHx548A!kmB)Zi9H{YI(!)E
z$s|Qz-Av&H3n(yuE=9L)CGGeZWCnx8BM~w~Au>ZD;;D2eavAJm>(^6gW;Ln(%1Q0n
zlfp}%B=wew<d<bqTuxGe%##V7?-}_4Y6B=Ras=ruEfn~}90;V?tfWX5Qou5EUG6K`
z65F(i%vh9EfC5ve{ruW$Syi>d4^V2~K1v?gPl;VSNIQ0n5(oBY0wxn(!BZ*X@i>`^
zN<5LcVo{}gG5G;f^71G+W^^_YA3(7;w^HKO&7=V2%gG_tos-$TEK#_ohWr4<-*}D8
zREDaC8tA$y0Qm)x0)q#WAB>dlMWl!#b*%VV_Gsu|enru>Ye_BYPQj5Qk6lxx&Gyj0
z0qiL_oJehb19>mM4B{Ltpd$6o+t3>tU<88@G!5J^AmrwOheAL&4C_M=!BJBK20)&C
z3-qmT0^u<Dxn@9;!DI<i|NbyPsfX>wmB?{AA@uJHo=Bjhaw3>ThVk_YFaSp5VF)$%
z0{{e19teO?)D0AigC$dNytoq4sna0!ErZb>MtaRla6k2QCZT}?p#8&R5U(Es^VsnL
z*F;!1%zl1=Li6TR?DZ{V5|I&4P+;V!E9e$_;&D>!4)O!k@#7z51uL<02N4m)-+C+a
znJAJ{SU?Iu@%MMq)rLA~U^c!2M!_LNi1RKv^8=)xI!S7287WMp^obJ`96vrgUjZn*
zbZK^ew62a~>(`SXpz!v07hN;y;IwHzKS0TS`?EAr2lT%pxF4X{3olUn*s-KI>=|{=
z&nKl@H{!ZZx~h<mF;YFAEENM46<ul^iCm%1?bBym7N3z~x07*M!hwnkO4c9D91}1~
z?%GMI4|bCZMk*L7g$1M*7LwV~kvRr|0O=Q+$uCKy4zKv^^8AE9PFS8({UiYJ)=P-3
zd>#N`U9cc4=klaUuspC3_5}-ITfQ93<X`}JFbG6rpimf6K_R5d@vwgXVNj<Tm`9Ev
zH1r0v_v?pn)$K4t?b$UgGphh}xd<hb(6(*svXUEyA~s_>Sm(ny)dYFkZQ!7cq7xtt
zy8+3y>oW9rIiMXn2;0+7K`bgN57n)9T@z)spimDlUQFuPn}|54<Zpj_8RasF#dp0=
zdTT5B7^r>vZRGcONzE@HBN)ukddCh53>``e%b=$A=}k&Wk4}_8$q#>*MNp4L$#;2t
zL7>1*<Fen!o_mfIyRA!^0rCN)+U%F9d*(AE8YNCd!J2z0wr(By01DSGEW0Ygv5gxT
zkHwmd`g%B*Errq626^1L%>8F9i&*lJM-iPj4*~?34Tm6DWylZJLiBnwsExk~XuAXu
z0WK$;Yu5rD5!fDk433Q(A%5?BUCQZnK^~kb8KvqfFs}#n)mK>-h$BY=ZWox_1%SXh
zeOeeX0wCT+SEn8EWy><GoG}CNcruI$hHk$m!r|J78hrpa5^+j?c9@8Wlz!!;02CZM
zHhY#7ujdNOPyq5<ETpxzl9^1Bl9NMfpHfnC+~l)6NG&b9s&K`Axv>jjQ6vS7QVk6m
z2DG)3Vt0^|n@8bA50l!v7e#)$JcHyNvnYJ$ouoKinQNU+GCS=tvSu~;018Z<Y+e;%
z0HC6RS_ZJ>uYLu6@7_#Bvt((;x*8ffs~m!5<}5hsUIub=07(KE1Jg7lSFM6zv%$V(
zDVWy-L}C!U9+*vMV6^$ZX+>Da-3$l<n8yn;O@J|Id-s3<NZpHpWD>AhVeH)x^W1sx
z(<cEC><b@6@|}0U3iBaOxEYo?bCCY<gHFU<a4cI2gd&13zgxjIQ4W-qX-Y{C3e`SH
zyi-{fNxDo;1q$7NKXD>bi;74Qq%1;#QKN{6D1Gi6slEG<I%ohXtkcq_+)5n}K1iWk
zr%-V8Xfky@Q?O`S=Gu~y3?oF5LW_QoQFG3-)mL!#EDFu4rr4G(#EFO-2I(hGklEHo
zJauJV9ox8pbX6h6>!rY5cmCv>KMz@t>wbfV#(OLiCqmn^2l9kUh$Bb9{Es7mt^?pO
zTP}hDu+E>4R9#)RG&c_)hIZ-%r1Ji-OrMJMtD6BLNH<&$?W2z~v+}(_A_=qQ5`><;
zz+@R>bv5|@eP9KJkb79c4}1!qPC>BRkay%iArGtglj5HY142PQC>Do#;UaiE4zsld
z=Fy{|fC_#80U(|LcJG$2nK0*k8-RO+VZ)K$_BJe&Cqte$55}QJpwk}AgNKmZz8&Vt
zlYqqnXj-=LHyRGXQr;gFXa|xh5EEdWY08?9IB*awH49)IKMuKPF93l1#TS7@9Mbhe
z|0FTXunK6055xHUbBJYqA(Zw4Z)t^AUk~Q-LP#W#+_@8?)e7@`Gbot=Y*x}g-g}G{
z6}~V3{UclO#FDEg>|DL-RAj^`NJWJ(+&P&=2MtC_mcaCk1F~cik-2jrh!V&&AWgU#
zX5(RSs|D7Y1sUJ2t^yB*AUK>5hgU$Jd<*2!W4=*5<g%=LAl-5a=HbKOZ9eG7kAp=z
zAeNSaS*=KI+lKVsy$}H)FBf@@jnI#Od4k0vU-07cFXbnf9-@2i{g4kE2v6_cKuQ36
zV#%Lx0I22V=Pa|Tdf6903b|)b0DzL84@9Eih7Q3hL(KJp6&FLe?m94s9jv4Tj%QXt
z>byz(8<f%b`s<8c*=&&d^no4<LpxXxefRsYR!#uI5g5LU07Pi@^)L=Kw2Dr5hxF*;
z^QotocZf`gNptV$kOmIgmGiUZ`~G5G%Z|F2mb+?ee@e+T(gzN}K6^G|&p!v2(jkth
zfTgSq%<Tpo4lt(^OuCXV=Gi9bXPN-n0&&m)$lZ#d9XpEj_U&LMA^qtmK<g!t!GU})
zSRw^*Gr*Inf9DsPcRJVoLQZYj{4qasy2J70PqfsgUq%Z~p41uppEqj$?3Jy6;eO^B
zQTzNec>m?SF0tSo)ZPx#(qL8_Ac_Fz;PE&*=F9;+d9ciw0ijzF%=%A}e&rQV&z>pI
zM<0i|>QA@dI3_MT9BJ#Khapr>SnaBw`NscyUpl(!Ratv^O*6W8FLo?h3T7H$PA80}
zCh$NITvfqOp8=^Vh)j?g1jXZEIW9;OC#dH6=F|K_%W>Pn`&4cB2Td%;bpaN~*Bx75
z5A_C8f0g~=@VdJCz_1F6u6c>tXWc=5S<3X208#|e2#y{V_g_C$4b7hUZhY^7Mc;{k
z9-=E(ZBD(lwb(pzq)nbO)f9U6+9TgMa<8+tHt<c&?r-(D(D@oaeaiA($mhQRS_LTJ
Ty!sDi00000NkvXXu0mjf@>)Du

literal 0
HcmV?d00001

diff --git a/doc/pages/documentation/current/documentation/latest/beta.0fea6a13c52b4d4725368f24b045ca84.png b/doc/pages/documentation/current/documentation/latest/beta.0fea6a13c52b4d4725368f24b045ca84.png
new file mode 120000
index 000000000..98163998b
--- /dev/null
+++ b/doc/pages/documentation/current/documentation/latest/beta.0fea6a13c52b4d4725368f24b045ca84.png
@@ -0,0 +1 @@
+../beta.png
\ No newline at end of file
diff --git a/doc/pages/documentation/current/documentation/latest/beta.a9cc3cd1e66eeb67af35a2acc34fd387.png b/doc/pages/documentation/current/documentation/latest/beta.a9cc3cd1e66eeb67af35a2acc34fd387.png
new file mode 120000
index 000000000..98163998b
--- /dev/null
+++ b/doc/pages/documentation/current/documentation/latest/beta.a9cc3cd1e66eeb67af35a2acc34fd387.png
@@ -0,0 +1 @@
+../beta.png
\ No newline at end of file
diff --git a/doc/pages/documentation/current/documentation/latest/beta.ea231b49369c9f6406cbdf58d06a616c.png b/doc/pages/documentation/current/documentation/latest/beta.ea231b49369c9f6406cbdf58d06a616c.png
new file mode 100644
index 0000000000000000000000000000000000000000..def24611c562b272cb912d9a2974ff185a693416
GIT binary patch
literal 8531
zcmV-ZA*|ksP)<h;3K|Lk000e1NJLTq003kF001%w1^@s6sx^MT00009a7bBm000ie
z000ie0hKEb8vp<x07*naRCt{2oOzI3SAFk4=iJ-3*XilmdiF)5(P*``c$IAA1>490
zV=Q7r77T=hyn4J;5ko;GFL|j->LuhQBzaj#$Ohy=0yZ&V1M!BzmTb!-+p;9IjiixA
zqZw&tdU|?#dbxd<bKW1PH6vpi+XO0s@T(eiS9jlY&-v}Y@9%d7Kc%12PwA)hV?*LU
zdILXhboJF&%X{v*N4k5S%>-vB9dY(dkM_I-rNw4dt@hvtDVb{6tOZ4c9_P9%?`NRr
z=m&n|6T$0Q-~Le_;3tiGdwaR_&O2pESTX;|k(7}1=t?E6=jVD<vA9;(yjH8J^%gDk
z43fiKzVT@`t{wfr>s<f8w1s@}OJ8cf^RByMi+}LH2lV8m9X>abP_y}ju2dcSl1oy$
zP_Xs*ctU5}E+dudva{{iYo$OdSXh8s4U|SJ1))NtL2IIKely|8llYH5id?@QnQf=(
zo8J)k-g__ade^(Y@1B05E#&r&_7n&kDPyvuqgkXHV!?s^F_dypDwciz`E*Unm^yU0
zOV7{Sda)cA(P#`OYKw-37+OnOS{zzi`$Q_$ESj4^DYOa^kqFd0L}Md34kDQXOM;Zp
z(12)ZLH727=PPyoyz=(HXoutD0N>Yj{X`4oA2)66LRu*tr^9*6t(V(FtGde{{b&b)
zpQcvp3P1hnMDb7m)E3Azwk2gOW{Xv;q-<%Cva1W7$)J--L`OTKp#hm`LaPv^La4fk
zAjICh5!u>`y=EOE9!EGf)qB5;jK_%xf&avlfjWIAsQlCC618Ka0YB~n`TXbqDW*@H
zl;OjV*x}fitqSu}CL3Zp@X>BnMz&wqCHn``!P8F-VO#A)qw9=Y(O8#Xp3*ZpTOB?U
z^LIVj930pmQ?oNMVo_T*WfIQjjZ!paq`l<|TbD{wPoGB>3R1f+R(CfdnLxH>k=@<M
zbQ&B7v~f#>A!v=rWFYDw8`5A|2q_8n?nO4Hk(XYIIC#+J>{*Fz_h4B?pz{6B`=4GQ
z@7#HZtw#3R!Qms0H#6<1Qc+roL`v0aQv05a4zBF6H*RXJ9Ur|)L?Qz^mDsL>0JKJS
zb)#Gls#U`AafsOHav5Psh((br2eJG6v2Wdho|{9B9wRt(2sJy4Os5fTt=MbVVfFSR
z8yf-8S|fy5dVQtO)VV1{#71<qLp&~#QVJ>42>F_s)_<5lwAQw_XT+)e*{2d=ZJ|qt
zwG^i&Ht2H6VR|}^kevdVDy|$_hbAGEY8K7SDQoo_hfu{V%R)z^=;8vw!Tr$K2+0Ii
zHj8X;N2F2+Cx*3k8}VQKMe}_uh8`P3#9~-YP0-wA+)NNcdpmmbW@1VK8m%>2X@u6)
z{_P>c6DPo}pb7=lnF*{-8?ib&Nxbj<FFRY}!@rKIRM7c3v<gr{!MW)VQ7AkMjDA19
z{Llq*=bd+==5jI^9hGP;0YqC{E0s!2=jNIbB8w1-+I{!g!RQI8CdOkrsAN!nLNqt^
zB5?G~OiVO1WQfLM*2)#l!nPd|PsE7WHqw&%>{&!}Gxo}rh}Kp_B7rq9fQUvBjcG(<
z24XQpEQUy?kd2M#cpMRlpc@;(vd}`Hr>7wdu{t`@0M#nNfdi=NX|xjo%SOba1TQ>K
zIDQ7JqYa(U6HZKkZKEfr(C@h$ga9FyEJkLtkjoKFOhBLji7J)*wCj$&7XN<e0=f6z
zd!_fx)3Wj>pLDcR4jS9OZu=H>W}++D{q$8LV&AAOYoK`7U4{vOkP-n{?|l#I>?Gmo
zGl;HkXlWsK`)!cPAO}{U&Ygo&8TWy&U|+hC=zHFa2#tGkR<B;#!_vAeyAu@zph9$C
zAKLSvTqb<+0BUj)vGWeJ=b@`rDxdfS{$r0pYb&Hu$gWP*=m~T_PwcLD5}qC>c;*>`
zkr9NHH2m=&o6O2_mhR<TdMW;)LwLJ(ffpc!O*nIYyILsB{JRD6YumQQuIlS`yu(K`
zXzdV&DK#^bpj>fCC8X@@%h+$)J`g^)w_i=2%M^e4mt)%Zr4~Z!sw?q)=|Avbvv%Et
zE|;2hJf0Pi2$7vT5y>Q?J&OoU5Y~wVGTT99{iVo(e#kTu*|NoGdZr2b`XLO63=csf
ziHt?jiyn9${=R+S`{;7nxC`GWJbDyeDj7l6YKR~})oS&+Aw<v3LA8n;Tmgv$GMh!)
zHaZ$bHf0cPZP;tq5V$pz<KR8H3tg_5;!P<~8t>U>k!@{6)~-X;%Q_7Zi6GKx?CZ9}
z=1tTd_!?IZ4yHc;KYw%0pWlD~)X0&e#UDr@SM~KeJ2z}_s`)~iP$fhVG>4^fMtgpY
zWI|e9ogLAwS8w)arY}|1YDevX2UDW06}e%ZBnZIsP-A0g%Ys-G;W%JfSZmiInle}`
zSAZ9QQiP{ZBjRynODnRs2O87H71=g27GGBTfdRDZq81jGGM@1Kd33c33k!sW0=ibi
zd+I6l+#KQY<A_QX;Rh(cwq!vUmQ&}?Bbu8L*(_KV*tUr+sT8uU4bj+$ER_ileYbv%
zsB>KtPEDC>G-#ohgo2caXcRfnk5CH!@gL}3yEe9J`<q(te{xrDgrl$DLKgQvlM46k
zzs3LT=l)1N`YmVii}y+(K_p^}R4Nv`=fl$8x>c4x_HnG$tBJn-c0_Y4YGQ)$+mEBd
z5EXdXH{Xoa)lKx$jfT-p8FN@E(P6lJ!-#{hEkrbGs@)}K3Ce%{*QoR73HQH9I5~-4
zTm-j<=<CJ4b{oNoljwXN_2h2D1lvZ}OpUO#j*y@g`T{fS_fYkB)qnVVBHOMZa?LeZ
zL0|&+^Dh7pe&ZpCSYSzn9Ra05Ew5erm0u;g^BqL5y_T0q+OiO_7|snhVE6Un-g6IX
z^ms@4PyX+%!RYY<kbB(%QHPJN(PLwMIyaZHhK8ivut92pgS4cG*iyE)OA(ElOk-dL
zLQ1T*Rs<S(#T96+P+@?zVi1vOLZp&lN0u0(g@8!pqFq>MDe)eB&<M)+OhA>AaQrlS
zdImK)h0f2T-70uKLMcSL5v#KkooYa-CqW3b04y625CrB`fM{()#N&i#&LEnbv4&Pc
zOA8{Nz#d+OwQ3azX@dPrxM8v_ghDhlfajshWr)}aX@LsRg#!NJ!&p7t(2zDt;5f+U
zX7s`W!RZj9QLwBSUaboi#$Ji<uPTu6%lF@|rl!{E(b25)JHLZ--F0Y7po0M1Dzc>w
zkw_AI?|YH0ZCH+jT)PHV4<l~6X*n<VedBAxuzsxvjxa$yk+|r{h88~ftKe3lP=G`N
z90z;t8sm0GkJoiupwY;cgIIn2*qz;=H2!BkYXl-Kq+=OZw76(8A4_7bU5n`LCH%q{
zu!dF=`?U`dxq2&BZyz!mGqGi{1VW(d`&o(zDg-T&-Cf2_mdlVxpyN@Pog+Mbn(DuP
znb<quNo3u61RzrlM21)6efPVl*%@eTf~eChN~Oz15H!Crfh?8|;<_pGiwHzxc)Om&
z9_S~!eLF-<93UQpy02D~XVJwXVWono`*j_LpcEpW0N+PdDu^I}FeGxzEy%Vu>@{ml
z+Nd@5B^%Jw(}abB3BtaQnx2J9*=VDb2q_R<U5Hqm@bD3wH*H7u_mTMUuR}6{Xlp_H
zCMH#W^S97aAZ!a&D3~<>y;vd~Jx*lfW`rFv3S`@mOn_}zA{x^WD)4;>LeL85?)MPx
zKY;gzFPNa8$)M)uQRk=ezwr&C+pa;cU1zRO#F0JSs7D^g-?tCZ-v_l?OwH!HwCBAs
z3(=lGLl720)PtObnw&(pwPAI3nJfj+zK5EbL7kl-ICcy@H%Blx2TCD>09A(<WMc;H
zd8l$3Q7)r>AGv0Y+4$PEb#)ZT_I8x(8n+gP2A(KaOqwdC@#9h=nwkvba&w4=6jpC9
zk*!;yA%*DfMAvHOS}DwR(n42VSX?w(?|JBa9{d1d)rBO4fkvb>+lj@DV6`?uIRty-
zM)bnM()Xev1xP5DP{&W8>lP^hZQBNJSzJU-O(8Ok=t9A!QcV+t&KnX))00n3dH3Bn
zSNgek<3I2K;l6!DZhI?Mf4>QYzR~i9x4s=cpGTiOQNOb8PF4>iZoiH2-yTMv7(-Vp
z$l+m}+ux4=zyqjbqm-U_0{fb4P#^y|&SjTjb#>wV%+C<)*+aN%7f5Mbnex%0j|hCC
zAN@G?HP?`M+ifq~vvt><FZ)amuQCigJBdC%ibj|{=5hp2?nd2q`!WO~1X4<4tw3hi
zF1#mqQTc;Upr>b`TtfB_V6Dwzzv)e=BS%q3>qWP(p;DppxzAA>8KLp_e}9?5S6l&2
zO$f^(c>Z}=+q+kO<|7|@i?!{V*33J1{>{tw{7M4(@|W)`?b-igMYOlOx?EOjV#2r`
zCu-O(1;Vn>p>H(tdq^)X5*|H<%w(|EuS2x7AcP=1aROZ`8Adw}dU289x#v*%JX$Ga
zHfuBqjAce5rsv@M0H}!xf<uSV+C&|#H98E@zHi>wKfCaqNF)%^mwN{t1ZE#WV6M{_
zWp>G=aYb$o?Yihv2?E~)y3!)TiD0c+V*>mV7wd&#E@x7Ff0-|`4#UgN4n%XaiF1>a
zS#{*_idW+OD+=W2-u>>WKmY7!XXNJ1MKwF)1$&+`wLwGL=vX9zj5^>}(Z08&dDQ>a
zQ|AaD_&Qeq0MU273v2aiuq6J&52Macn;SPYpr)p%{>|SI9zPCBVQ;(y+24;A!el9l
z1iHA0sJdt%c={Rqd+%L>D1;EE!gk#y&A#|M+18FoH`aG$vL_ATx~TK#QLbz5brI|#
zvRUNdAZlR|m7hmXpGUh@G#Wj99+^xM+xZTxp6=ySM<UReMjbm!`1s@KYSp+|z+SV4
z=(X1px$H8m!9lPr)ZUQ|;aBdz@s)UQz0!vOYx{bmJ8!;8s#B-h^=z&s^7gl*@^gg8
zN0AK;$c8lD!GlQ4Mvt9ZUU0((WKR!b^=hKG-G+1Jm5@#&90#@k0HPjOOnPh5SLZEn
zG3j$Mg`S?qe{mo7B^$8Tt|L5rcv;ZC55*!nH;4Do!_>a{P5j-v@t=MQ>#8e_uea<a
z<kcS?MT7xrX^jh2h)Fu^OD;iJ7FKWXl0dxu`w2^ngim~j@VULHbLW<>vv0Tok!rx+
zvIXza#|TD`u@q;cQAD;4k<DVYWzp5DX;5i}kOF`Ii|B;{n1WMd+wrwGT=%K&Oh)cK
zJ-*~-UcFL}$BVM3YrlxcuLX=XRI7yZdF<7zu>h;TpRl-iQK?l2*5V0hZNusx!0PYE
zT3A5O&oBK>fYBh!0wKW<!1s}vMno!!Y->aI^&wj>&JG2X%V@xR^ih+=`5q#ZLC0gn
zJ!7ddwrn9*cNhBHxtE`<-qTRCv#7IYUjm(rWCAi7!hgLV?fFZUw?LpvWk4W1IwAH_
zS12&<j;0LZ$&(PN*Ikwc0#tquEd<uOb*RzNn9AqvcWmBdqY2=NrFC9aAYXm{h12N|
z{`b>=-;lob_SUv7{_dx2wXi^VdK_o-<uJUO$l7&~pU1xl&hsCCd}$5Y*-q%!a5is2
zojOJ6)vz~hLUeW#JoBu%LQ2!8kmlgl@M_{8`6%8Ozlb-ox6Z8k>e(zJl_bpP(3L9W
z^GnPKo_h}2-j20#)6)H;zwiqXkK_K`-(BQXje|u>yoVmff9`qW7xlUAu5QHY5*4pz
z(%lO(L{s_o4=*cTB!Y~^O-AQ==v)q+GsSo5kw<avxP!<oHyg`|#;HE|AXZB&k>NG?
zhrXH!_U$9q+0nu2@e*+UH3ib0$#CW1Al=h5o-UV5YHlurZDXxj1F<NoS~bBsoqj30
zdeM7z>J(uziSO1>qb4KKizSH6ffOcyX0uCuX{|LP>L6QNOiZX&j5Z4a(!v@XM09r%
z?A~p#rlBDdxG!K&PV}YCBFjQXV~BJbDpd#qL}#aAV5tPP8oF3Sc{Nj`*tY4TG&O;3
zE!9Va^}&XVDVc(J9L}A)=+t$xq)Au~9>g9VhUR9hj!r~F+QgfBYOQNt7eO%dx&(6N
z%0d3$2S14Wna>u&7x&MoqenB=h7CmTc!$YC3I*)7YY9g$^jpO80Wf+PJpOIMXGie6
zyU@8g1k$*WTn-s?5S^V^*I$p-*N0WlT0}z{d+i#e1z{n-WcE51BXaXiSX;N^Kk_Kn
zKs%8eZZPqxu@TwYhDbNOB&b`lII^)3yRQ#*W&%|#VqbB&$%aNpp|}7G3w0>OF~VqX
zM+#y3Cqam?Y!jpdwWMf(`CV%p!MUlIjP7Va#G>ePQ`G+DUl8wqKarLeB9~oOmz!8B
zJ}H&A;MPWA8EJe~fsBle@t#lrE&nam;9h?1wUuD+2y%EB`;rZ)s!N#9<E&bRY;K0G
zPRP%rT^Bh#j9y$spF4*xn!^gM&=vEF>zerCR?*&ZC=@8|-;Zo+BKcQ;WvcOrgI1ut
z0FiBnFhF=UY7c%L@zgU0!&<kF`1{^xAecx5+1d(`mmf!Vc3|JS1OI^s5yc|mbI;W+
zq-=mftqCWmkm)osl``jXB8Y0uFjxrW#!Hbc%>*y*H&D^K^*FcOf;F^~(r<jcUc=ag
zC&ysE0Ir9cn!<nlah$il6%9Dsu0@?Yhqvzqlbis`bKk21?-AgeuPKnp`2t^=e}UU?
zyir;G{ht5Wqo6`$HjA2=Kv%1#Ll=*kv6tea(VW&+bC7fA(6t%@54~74OaR0MNW}-?
z)(G=?69lCs@ySmjA`wJ1YT#_8k*O5A<{DIB^f>5ItgbF(Tb9V?&9AooB@(F=)~Zzm
zsgy~3r_LEGlG2RyXj3<7#}v;Z5l2da4nh;(Y|FHS`+E_`Pnaxf{d(+eTZyb+kLc+}
z2#K^JsOeeMVhKDKQCviMr;YUic3&U9>(*zvOl;C&a4AZ?q^0|+Y3~KPebdHcYX<rr
zQoDA4NJL|3r3eonMva{`kh2}Z>gh$DI)$E^LQhP<+#D?BC*ZvM=diE2hUhQ+JgT^0
z0J<<-b}w}R5+Trwi#V5E20~)3Sxb2O6!-!9{4}y51?dLV_&73aTo$&Ccm>Naq`|VW
znp*I8KSek;hRie>6rfh)f}52CeWngtw+<1DW2G7>|JH9Cfuxe?LIHhd!YGakk*Oq+
zO`EWKdLWrZFP5l&`ftIK$V?;F=1o{@)?i<D8ML+#&dw4UGN^%?oWvUFCvx>wgolrc
zVb?o(j}niKhCwhIhT&^AsP;}yRsen`l~UUGWO(ctB$EioF&ZC_BfGm1$)v%9>M`Wv
z0I#)1rjl4gLx_g7Nd@awnz)cb0cv&@T{Mj}(P}DOUGogz(hUZvtX9pX`8>hM2(r1!
z;7--*60&S<*kBq<()eqUOqza+)=Ld2Y<tONT`1%<nBUZesZ|KBYesz<8jxLG$j&ZA
zdppz{W>!ZBdd*s#9XpUsO~_cxSWPsFY|J1B2aP*j(h-g9=tM|?{_592lalRigZS<V
zyjuP>1@ftpy?NN1&kYSJU8&+d@PM>7ZbWu;7{)a><6M0;wboX{=z6NS+zc{8673yC
zcif8iulEza@B*qXjHS8+2#*}W>gqBFUA-F7+YA4zWI)B<ZuHqn^!$Pm-pLcVpZZHg
za|<FKN1dHC5Q<wR@w>l^bHfb?X&Vr*vmK%iS}SBM3YGw+P<0Se&Ci=y_r3Pz`{;!Q
z#PBe(r<+Jm7oxixYtv>UBm~Z;EkstXBD!^JJ=1d#O_`-wcrgjBK`ZPnmt*yGQ~Jn9
z5$)|+>(WbZ5{tzm#o}uVWQm%ao~BsL>e<{H+0lW$em(wy1IPw52p~E;kShlXPmC=i
zqy}(6<#Xtgi80pjF!r`>_+R~++2n=I0_wyG!ofj;sY%l_PbRT9Z$!<`5*|5XrUkV|
z4D>;$2=*T^W1N;{TEt-hZVfd(jmpm<v+XAHvn=G$5Z2|FqsPXKm82W6L>dsN!$(l9
zZ7APEST+bj;txN8NG6flc4Si%A`v$h9gicLn~`m8X5(RKx`PcVGw193s9er8wSoX$
zE*qqK{IuyrPEHaYKaO4~BHS9x&PrZ*!DfD5!W)@7iO0`Uu1HaHO*WFvqGx7MS|NLT
z4A|D(jF6{5Eo;62<4(MqY2385VD<KL0Rg+vh1LN1Ji0KCDisYplT0EzI}DaoE+fJK
z4Op2*RAB)%J-xiYmS#i{8rM@UnR~(#k}H~<5nWyA(PQ;~cg)l;mIbppSST8oCpAck
zbMwuJOa^<!;7b(edr4oYlcG^@T{Cp;dIq?x)eLazR?Wag&4p4CJ(oub)5aF%GSq4o
zuFD$|h*s)LTI*|oYsJ7Ia`P5y_kIa`-8v#0H(_nthSSzY^_e}(t=c-X!>69X_d_b{
zHW2LHiy9j<y$7X?7F~RwxjBNT_uyQAJ+dK<%H^R@gsN*qC?vs&G1GyplK`xB>ydr^
z*xR>5QwIOwK_dMFOTUTTeK*maJE2@gWE!#R-@O{6oy}Va=jQN7MhH)zMi&ZLLqm{E
zBHOd5`8-ssc)Ooku3>65L>N+i@IlkJiA2ydv*=0%U9Hqn;RrnZ*cl;ZL1x>&E?2EQ
zY46zaxcvMVW;k&0^$Wz>xUr;8o^-=wqh?Gp8Z&{>GE2xr0-a79ZG@$WuEF3=v$F(G
zKTS9`X8H?Cnfjrrsh%o&W_r9KjqK}3B$8&`u1-|oBiq}TurJZkZpLg93B!nJ)Ij2G
zZCHaVkjW&%iM(Y0;sW**v6t4?UJVt7rdbt+XwOGiD)la*kFL6?LIGVYqH8sRBS#G|
zDS(pMb9nM3va1VgU;te#y1G{L2>c=uC%}nR7+P5pcEn}Zt{EH~8q(PD_>7E1Dmu|{
za8g8OMh+aPOcoXtya5Y|z3;tK{$r2L2mkgEA|Auaq>=H28S4RLORK4DZ3~n}gnD^`
z#PbLbA0{|_*rbv|8h_u^gj~N4Mo$>ib|Q%GZX(;an`RMUUw%1ZYb$!Ogm9u@+t`<F
zL1eSomtKOkYS{D~UQ3}enU{SQluD>-m2hOlWLkv<f-`4KATKUJGKJOAVKOz#!u$5O
z38$wCzWZGyb?eHciQM>RVt3z7aAqQ}7m7vUR=<mF6?H0kR=)X`V{&k1PJQP)j}VQa
zdwPhswc(^v;0hi(ag6tU{-2i>=k*F?=S^=;Z&@hr_?5F~|04SCyVCZC4KZu=T4YNL
zku_^fuI{?b4G)_@=Xxe>L>nPl#;VNBtz)v3MBGef)VJdN{JXJw`-pDa#)Z*L|ID~)
z<Ic_+-!G)eVq!5wW2341!_XW=m^4>5HX>p%f>Ig1SR|a9LY*2z7v_nqU2ihMnnzH`
z8A0R=s6v78^l8GACrUb>_oQXJqNm%HS6@{O_dM(Bvy+P1S(juoAe;4MOUsyyCkl6e
z?W+f6Hfs=!O4Y^p19j|Z0ox9U#VfS8mqaq<@$9qbwG)9<3OgD_+BSrOiBge0)60nT
z>$Z^lANy7@NTo`@+SOIjGc&31*ij;Hz8RTF7-lp!A~Ts~*jd(5S`EUI2-`9#XDVfC
zm(I?5AHj^vh(v<u+umjZtz6c3tFIpbd7=0IJrtfjYbtGRf-#YZd8PxCwuYq=;kk1J
zhYzFApF^b5;Q3Igq6#@PR)mGh<xrE8s556gJvZlyWJ8gLhKiPQCY+e4s6&T6DP&3Z
zIDysMTan#8&&$TfsRzG&-*=dtgvrTQX55)G%kQh0C$GK_y`kA&xoYUN^Gomlr`U}*
z{H(oVaGkEWgt;7*-Mfigc_nstH}Q{u3_^wQL*(EJL~|3)(9qH}Aoa;bkxCgWuwEG~
zP}Aqpr854>lg7naHnO)H(U>NZZATRf1molQ&+akvxq&9k%@Q0v0{J<El?BS&uOVfg
zb_x~M$G?-)L73ORe?sMEpQBQlO#anhJEBrOuNM~&AVfvPVnOVqAM?VolY#&Ff37tC
z*`KNCt+y&61WZhrzaJ63A%RTJ7m8omx9`wa-@m0No5fnS8a0<A96wED{d%+D>ecla
zqReP!D!DYxq3ewyq4jc>bOGDa8vp61jh0`4zJ);7Y6gremkGyDfmVc_T}mVpO0=~F
zqNPPirSKm8R-hLb(ev|4rc#LJCTMOQJ-bk-jEs-xgdfx^b5+!#DiH?fbP$Yb$j4rI
z-d3}-g&?0V=}N`J^MdGs{eha94uZu+72mZ>MM|X~I`dzNexQdwKMh~H4Su%a_kK@?
zg*@TulO*r?7}0Il02e*La$#I3pEvO&2*8dQtFWx)&YkO;DVCi(O}`+O#NM(6+1ZKA
zwxe^isG~>mzx6G`Q>UQ6-;HeF?xlX~w=1ex2&mOm{;I7dVOh$KMg#kno3K_6BDY`v
z$@_QjK6Cf~`J*R)cr5$T(i^gnD+gEdKW@22Zrb;PYo9+?42~Yjh_*JI9d9)g=m!s&
z`CPY#S}33^Rdf)bayh70(fRp$@f4U0%n!_OYBeLQz=u>akUiZMmCF^>+?-2k<cvtC
z1FNs6B8OKONG4rcTBdQ`lKaJbXWWDP-EjJR@IkFBA`B6(tHj7&#G%88XGTURbGh&P
z2-$x&dP4%~Zf=ryTycdAW@o(6t-4_@huzYOJv3|{hMbu(=x3>9;EUp-nSP(0MK6}n
z=g%APuvSCs&<LVfGE*aAh-gS5EK7-W+S4<$1zo9>)cE9>T+#2^8`c#?OUtzI{gOzh
z&Jc#h;Jb&;db^*h_-DqwuY<ev?BC>++3@J`9|g~Tr1S&1tj~VnmwxXZTQ=Vq{QYOP
z$^L#K*I!R?=rC$FNAQiWEj_n=;RZrVC7PO)T(!~*Yrdxg6*xl!yXDaEdG31SbpQYW
z`AI}URC~wU_W$DV{>~#`dEz^-`E=2L1^R)Wpc*-K>JY%&`}(>>A|b=mryX^6!qd4q
zCEBtGDP1B?L8MYe5p~?i;Glc9P*BgF8Vi&k1X^ijPfi{Yp)OeQ<eACYnI9{+@}s1G
z*Z<_O_{V?pnefbb%-_AMIUF0yQz*FhEpJgGk(iNf+5Ohg$^){cc_#UR59IE<?>_Fj
z>#iTxzJFrr2NK9H16zPcFWq?g6|0Bs58ZZK;xGR4FDlQD><tX&WV=M8MUhGsMAUKZ
z6)U`ni3#@X+4IBQ{ZGlzr-1SL`#W~*kmci}&K)~;ycV4FQ+gfr{{i4=73gm%8~gwO
N002ovPDHLkV1h{#id6sr

literal 0
HcmV?d00001

diff --git a/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_decryptvalue.html b/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_decryptvalue.html
new file mode 100644
index 000000000..42d1e070a
--- /dev/null
+++ b/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_decryptvalue.html
@@ -0,0 +1,103 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
+ lang="en" dir="ltr" class="no-js">
+<head>
+  <meta charset="UTF-8" />
+  <title>documentation:latest:beta.png [LemonLDAP::NG]</title>
+  <script>(function(H){H.className=H.className.replace(/\bno-js\b/,'js')})(document.documentElement)</script>
+  <meta name="viewport" content="width=device-width,initial-scale=1" />
+  <link rel="shortcut icon" href="../../lib/tpl/bootstrap3/images/favicon.ico" />
+<link rel="apple-touch-icon" href="../../lib/tpl/bootstrap3/images/apple-touch-icon.png" />
+      <!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->/>
+    <script type="text/javascript">/*<![CDATA[*/
+    var TPL_CONFIG = {"tableFullWidth":1};
+  /*!]]>*/</script>
+  <meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<link rel="search" type="application/opensearchdescription+xml" href="../../lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="../../decryptvalue.html"/>
+<link rel="contents" href="../../decryptvalue.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="../../lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='';var JSINFO = null;
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="../../lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+  <script type="text/javascript" src="/javascript/bootstrap/js/bootstrap.min.js"></script>
+  <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
+  <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
+  <!--[if lt IE 9]>
+  <![endif]-->
+</head>
+
+<body class="container">
+  <!--[if lte IE 7 ]><div id="IE7"><![endif]--><!--[if IE 8 ]><div id="IE8"><![endif]-->
+  <div id="dokuwiki__detail" class="dokuwiki mode_ tpl_bootstrap3   ">
+
+    
+    
+      <h1 class="page-header">
+        <i class="glyphicon glyphicon-picture"></i> documentation:latest:beta.png      </h1>
+
+      <div class="content">
+
+        <a href="beta.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="60" height="30" class="img_detail" alt="beta.png" title="beta.png" src="beta.a9cc3cd1e66eeb67af35a2acc34fd387.png"/></a>
+        <div class="img_detail">
+
+          <div class="panel panel-default">
+            <div class="panel-heading">
+              <h2 class="panel-title"><i class="glyphicon glyphicon-info-sign text-info"></i> beta.png</h2>
+            </div>
+            <div class="panel-body">
+              <dl><dt>Date:</dt><dd>2019/07/05 21:03</dd><dt>Filename:</dt><dd>beta.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>3KB</dd><dt>Width:</dt><dd>60</dd><dt>Height:</dt><dd>30</dd></dl>                          </div>
+          </div>
+
+        </div>
+      </div><!-- /.content -->
+
+      <p class="back">
+
+        <hr/>
+
+        <div class="btn-group">
+          <a href="../../decryptvalue.html"  class="action img_backto" accesskey="b" rel="nofollow" title="Back to documentation:2.0:decryptvalue [B]">Back to documentation:2.0:decryptvalue</a>                  </div>
+
+      </p>
+
+      </div>
+  <!--[if ( lte IE 7 | IE 8 ) ]></div><![endif]-->
+</body>
+</html>
diff --git a/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_globallogout.html b/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_globallogout.html
new file mode 100644
index 000000000..4cea13897
--- /dev/null
+++ b/doc/pages/documentation/current/documentation/latest/beta.png_documentation_2.0_globallogout.html
@@ -0,0 +1,103 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
+ lang="en" dir="ltr" class="no-js">
+<head>
+  <meta charset="UTF-8" />
+  <title>documentation:latest:beta.png [LemonLDAP::NG]</title>
+  <script>(function(H){H.className=H.className.replace(/\bno-js\b/,'js')})(document.documentElement)</script>
+  <meta name="viewport" content="width=device-width,initial-scale=1" />
+  <link rel="shortcut icon" href="../../lib/tpl/bootstrap3/images/favicon.ico" />
+<link rel="apple-touch-icon" href="../../lib/tpl/bootstrap3/images/apple-touch-icon.png" />
+      <!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->/>
+    <script type="text/javascript">/*<![CDATA[*/
+    var TPL_CONFIG = {"tableFullWidth":1};
+  /*!]]>*/</script>
+  <meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<link rel="search" type="application/opensearchdescription+xml" href="../../lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="../../globallogout.html"/>
+<link rel="contents" href="../../globallogout.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="../../lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='';var JSINFO = null;
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="../../lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+  <script type="text/javascript" src="/javascript/bootstrap/js/bootstrap.min.js"></script>
+  <!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
+  <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
+  <!--[if lt IE 9]>
+  <![endif]-->
+</head>
+
+<body class="container">
+  <!--[if lte IE 7 ]><div id="IE7"><![endif]--><!--[if IE 8 ]><div id="IE8"><![endif]-->
+  <div id="dokuwiki__detail" class="dokuwiki mode_ tpl_bootstrap3   ">
+
+    
+    
+      <h1 class="page-header">
+        <i class="glyphicon glyphicon-picture"></i> documentation:latest:beta.png      </h1>
+
+      <div class="content">
+
+        <a href="beta.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="60" height="30" class="img_detail" alt="beta.png" title="beta.png" src="beta.a9cc3cd1e66eeb67af35a2acc34fd387.png"/></a>
+        <div class="img_detail">
+
+          <div class="panel panel-default">
+            <div class="panel-heading">
+              <h2 class="panel-title"><i class="glyphicon glyphicon-info-sign text-info"></i> beta.png</h2>
+            </div>
+            <div class="panel-body">
+              <dl><dt>Date:</dt><dd>2019/07/05 21:03</dd><dt>Filename:</dt><dd>beta.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>3KB</dd><dt>Width:</dt><dd>60</dd><dt>Height:</dt><dd>30</dd></dl>                          </div>
+          </div>
+
+        </div>
+      </div><!-- /.content -->
+
+      <p class="back">
+
+        <hr/>
+
+        <div class="btn-group">
+          <a href="../../globallogout.html"  class="action img_backto" accesskey="b" rel="nofollow" title="Back to documentation:2.0:globallogout [B]">Back to documentation:2.0:globallogout</a>                  </div>
+
+      </p>
+
+      </div>
+  <!--[if ( lte IE 7 | IE 8 ) ]></div><![endif]-->
+</body>
+</html>
diff --git a/doc/pages/documentation/current/documentation/manager-rule.0a159189410beefd4339a7cac832a503.png b/doc/pages/documentation/current/documentation/manager-rule.0a159189410beefd4339a7cac832a503.png
new file mode 100644
index 0000000000000000000000000000000000000000..45b6a1f0acab149e5f7f523120b03f5af2e21c31
GIT binary patch
literal 68008
zcmY(q2T+sw7B`IRuDB|&iUL9c3JNN{gkDxb5NRqJLIQ+d5<1cYs7RA0p!A~D#Uuns
z0#X9fLhmGj(4>Xldy_AF-}lb<-pOQ=$vl%x&U60foL@On&kS|gF7aMsVPRp@eWLY(
zh2{Kv7M63Y7cVeB+1rh@Wxo9B{>0Rag@wKO-{-l{qU?MuEVo#6wI06o%UmHjrDmCU
z3m;`0d+9zXzGIr?(!TXZHQw@KUN=B0^xXN|2D0J8wrh6`Tn84{GG?px2NvJI=aU)#
zJ^jw#KNR2GbbfS^r!=;~Qnh1Sti9a+GonO!{?|u!f7&-+w&S6Mmx+4;W=25{A%WQ4
z5+bc;?^lnK1Vvk0JKZs92tf>`b=!N9mxb<bp9>Y<zL{~C2xaTG-~I_=Iii1KRjO|*
zyT4d%g0zUj2%!t}*HFn%^mU%f@%JbwC4PS~se>37D*@;NbRNa+eit<?SKD;|SsJjD
z@Tm!SJhg+iQZfr>H1P-CnN}MJj-NFZp01?!ur~TcQhDY>yA)KD0S1uKyW3Sh40KmY
z_tcY){_D%A7UfAqk>x#}IES<Csn~xGQ5$M6)#s1jo<X+Fm#RqvY05}B-qiH;#^&Z`
ztIO$E+k{?eMFhP7!PSYXT+IQI_YNhlB{;5jMRe~$ZmbTz)uf~d`NR>lJYSes%8+f<
z8ShuK=sZ7L-4<WU<ZON9tS8Q!<~-^y@)H{9$aW1<S#bOiRN|@Hveb?`eR=duuZKVI
z-hK}h8y-N43m^q=fNt?$Y$cQX`upFOl$6XM5<XnN|04fMg5cwS-^@Z%meOzm_kK@g
zZH$VF3grm>vEsW#^bN-t&DHvn2c(zHi3>Ge>2>py1KmLmQXiy6xVSh1=ihY4qrC5w
zmrT?!s5LhyiYk+{!*rrGk6%ZPC-DgRTMv7lI0a0QF4A%Xt|51_&~54EnbNAfuJ^B!
zE}qq*WXBSWG$0sWS4o}pU^#hFlWYU=3CB1{w&1#FIpFb$|Jd$?0TCg%74GP2C=?)O
z7*1Q3)i;XHnG+OYod}T4(gcRs#_I+-s@=P$=X#RP-_-M(peU#&daXX<whqqSy)c_g
zqw}#L`z2NmNmim-j8*09e2wB1>x~sDHAxX>(%9J8uzIuq(s-|_skyMSqUGybnMD3S
zG5K$BJmor?n|}|Fh~NnR%WnhUXpi^b5CIP6S953O9BnuUB+f*%*pA!yKrqSh?mBs+
zIMdX;+-`@>Sxim1PM}Lm@yNi6_SO$)7;&j(+N!gxnDSfT>Kv^+ucaH&nFKI&tcs-X
zotT1vyNio~8dbyM8vMd&F4Z$CuhU@+J!UAO<sptCZlO!M$ci=7o}n_NRjGc2WEe05
zsWIRj7=ZOO+P*nu*$iJpv1xwG7#zfm>3p}eDtCr}<~QF?NdUwEs{Bek4G52>MoX&-
zGSO@nQ_p2%Zm6#j{7Jy3+}~4OD0FD>jmduQA9><`W5LE{`1p6&uum1W)3yTJPt}kX
zOS1G&1#%hqdY>Pt&dL4@DbqH;QeBGCi~ikll=$Y`^*uk-dmLz=-S$B2v41a~%Gnps
zQ-q>lk+E~S89CEdRq@U-3AlBLwD#`EQMqDj_MSIelu>8e5DwKr>k^43rnlA|H68ud
zc|O{N@qY6K{gaQUlG|d(uq_HIu3bNHN4k_hZ<lkV62zAvy}bN46pIMt%dnwnz)Zw_
z>2<A3&yKdFAdow(rtm1wXJl)SXJq>+JDjN@0rZ)8cb9PD7_6$2E`hd*=H_L+Ytd~o
zWjXb8v+E%emz29obGkBM7?;zQec$ErjIv|iQOCjrDX`N-JNkc42v72oXdcCD5@U2R
z4PsQdHGbhRFBb1B^#Z;EJZ~Urtyxn<f?XpDZI%UI<xB8D8a9LD;tJ<Unp_PZkr|Xf
z@#~bwwqnrpN}KZs8fMqp9pZkOSu1|3a(Pvoj%<OWGo4aG4BR9@BOP?$(=qJR8t3i^
zx=X~_Vd`k)>bn}y8Fs0=6~)bdR55zLRc6g+Z6v$?(7iBo^G_=s9i7AXrT;z4|H<39
z=V_^_Kib;b8s_VI?2XSt+}=3UC1v#3(6WKWG>Lxa^39!MrFVJhy(^GOrxa!Etl@-S
zh{+xaxoV-ZVmf)5X8lR9zTU-Z-+it*dwR${|61(Z!<0HfMImM95@H<}*r>O$cy4IR
zX=?DK@`aI@(N?fwkj`Pxnp0JBHIxKhzB&i$eC}#N<lT@m{Z0&&Nl_vVG`dbD2gsOM
zm@|HsNg<|NZnYAI1y9FEB}x3ZcQFAKM}MO4bJeu=UgVGiy49CS1?)0*?YQzHMn9M{
z-poahO9C>Z@a`MK^Iw_^=H8DFYSp+c`pb)#l|D^lhJj=une!Ld|5MfS+oT_Ga&qzj
zfk6z;NAkLX)5$hJ<oHi}95xi-2fofgY+k?~W}p4%ESqG5%H*+fW_js(x~vm^M9aoj
zq|SF&q|9T)?x2dM#upuGG&YgCYxs6g;^STqw5R5}XIB8LCg0#nz`7YQ&Of;amCfC4
zr!xQ8o8xm2s*)R9FBCTANc0u6c8nlcA3vLRiohLWyuJs`b(Ez>G@0VCZK!xBb=)8d
zM*`c{&3_$8vQ`W6b2u3@ItL>zAAZV-`)yV<&#Cbn66tI`>8c9yxi+zhc59+fNU*TQ
ztfBsztYd5+G@U8MooxoXwX{<s;$oeytkc7R=0d5$zj#U(Aivk!^$x^OD_-|gRr<6o
zmUXBqncnHs6TQU$AnVW-M`0_P-92dPV|QxVn^H9skU&Mqa%?Njw_5WvwwrEAo!O-K
zF3U|KaW~S|{Y!VCYWux*8r{T<WxR194`DVfqD?s6@i#TSvNeLNJNeyG`?|g}<U6qb
z;B4&uXpY}yFuVHOQTeszYKNTYS8C>thHEWNzAnw#1rAdu1qLr&Gg#7Nuc~_NXZalz
zlTtC>Hj8vw_q9cIzp-2I{_7Evoa^%anrb&Sf7te1(0Y>Ida*^1kxd^}=IH)ET}hd}
zCE`FI$s^auFeTvrhW~PpMIet@&|(v>!@iI@Az%<?>YaCJwT~fIZdrQVPZUDK{Q>1G
zkE!>sdCB3bman%zf9*1e@<UlEL-n0i%O{}v&@L)Kocd2(_+zpiX%F>ykCg#yTBKNt
zdh-=8wkd1(a!;s#J0vVAEwz>dSM}240QkM&UU1LE)m^ymYsq_nS;fn&F2LS+yW=Nb
zQdu@p72KUl6G~x+(OrXk$mJ`yZAx@5S?HC#G?@3^+sQqDEU-n+u4OwrF``Y^O>LeY
zal$r3aVUQHuXeDU{ctL|Fay^xdD=w$zWY{Wv-wn`k^5}Z_<#{qV{f&^6){C+3?cAm
z9<La<>RuEc(0<&novCSwea1s|psuE+-W667@pQ+R%t7o_NXgp;Zq&c-7>e4nMaP&@
z-@LMcP8bJXi7slLrcpn%V5X9h!Y;_})=oPR936rVzR6YGG#yQ+kY|;Vu`fq=29y$o
zEY!;VC&D`!j;SMNE*2k}RIZ!)TZ63U3_ZI)n8G-55=701AG&9vh+p-9F5=jx7@{y2
zEA|AoS^iy4e}ccknlep23N@*j$VO0N$PX*#^F5#y#>c!86|OPMysQPT`M*Yjlyp?$
zwE`Y9EA*G0j5_sXr8esOmd-snE>Uzw+erAK!#szm<YH>_sG-jntH#!SjqCFJaA2xJ
zZ2v093?FSGvYo;`Wh#pN(bV117OcYhdhg6t-3EDb)y%iMQYvT@_tPAw!FM@5(0$oK
z{X;M6P+N7qOSCjb5P$btJot4sn@e^9dK~{+4Ry7~t14ShLKWx|w@2@Id`Cpdzh~-k
z9BC}Qs~g!<{g{R~uY=9KK$mH?dX_qUCj?gQQl8eSMltZ8ReK92oespVV5wj2TAM!4
z)PJreUN$<a{!C9p8fecmc03G<KGzBC(w5X`tajZIUP1>1rK(-1qN0N8;&Nj{UQQ@B
zQxw`CHT-cO6Er?(HSp)~`bASRhhgB6%0Vdn=zcW<Bv&LXC8HeGQl!pTzk^)=;dE+n
zMbCUQ*HrDc>qulxh4)k~-cZ}cnn!4%dC>ve&~{b_jK4zS>f~C4D-BHi8QJVfcrrmJ
zNV2Arz#EW&et)Gp2IBbHP?B9ymNaZX&i=|Onf9Rv)rM5@79$;guh_1t6fktwK^g#!
zlp_Xd%+l3#cUz64V2>TwW46n3%xBgmuc9IYT#qRpvC6U3o-x81j~f<${Iv%Je24f*
z2X87&MtPI6hWCfD2VE3}>1JB(Rc_p(cF<YZQvLag{WH0wUe<Fg#xpz_!(r<uAtCQo
z5;e5&jM>3{C18lc?W0dYa!*k%^o-CdhQgMsK~F6J?nMl`w{(BYu;*)qubhpeLY<Fw
z>iTzBe?~k~B`5HBs@aD?9oo$IQVi<er>mIBOm06ztZyuJJvLe@Uj}FErMeFFnDtI|
zGgfeGJ`5fq#{Sti$;Pc$=(1|uWyt2WTG#E<gVB(~OA>1PCLRp~>_g93(+5-2T~}D8
z<Ub@tdFZc)JW{nRj$-`q%<QZDoxA?{><6qzaYIWH6kbMuBnHQ@DyE3|$|}!ArK^p=
zs`=$Rv-b?&?5(}~v>@W;S;y$Dafq@LGRa-fhinf9ewIR6pc0M;>V~?DFXOlf=~hQn
zGjujj_`Trpv^lZ)x)f1S_E-&ijjzQi>~v^4r;?h0l2Ma4Li?k^sgNKEdS^aPZsH}>
zKV@h+>PiYohfWO8H<XZznFz8M-5+=0!qu)H#_s4k^+L~fg5QTa^K)Y1PQUKdJu%vv
zw%QlkWq3#x#d#e)i2mwc>b~JOZ}~otnt8E^<ezZtnGMSM_57yGZM4VokI=Xl#q|Ol
z`R=&yj2G?K#hSvm6K@|w%qHK)a;*H=*}2D0aued8AaJr3*USQHf0~Ye-)9I|4nE=R
zUL*}4j7v^+DyaKx<mCTzg17!ebNX%AN;9qq2l`Fww~kszwm!s#bkfUs@!Vzz$$mR+
z{d!WDK&N<g!|3mF<*=%c^0TTgHkPz>wwt2S8uXuH@Bww?qb>nh%4-Sy?OkkoS;^hC
z>pAurQ+x7%V5Lp>u>hyd4uS3>GZ7!`+~k%6$hjTnqjAmVZbI-^3JM{V#jSMxv9$Kq
zZD|Ba4I#;z(qe2sn4afS2aSOW46GsjEdhk@U!y+TU?oh~9X1^ygz6otYPy0Oj<96~
zEX43y0S2hX_#3MQ7IA5(k=Vut=HuZn!0pWf#qRmLxhY3+nPKQjs;t5F&X}`^k7{EO
zmN(7*GWE#zG{3=DDbw|+6$ENIQ+9)KS)v&UN3p8!atJiInc=VSNhkwFFlKRI7s<bj
zE{Ia%9@hRGUvC=BIZ*wz7hlq<h3AY0JOALDsJf8#yYcJ~x2u|b`>(Ob*&3qt$)vW>
zz&l{!iS$b4$wp2z?gSKV0jm&)_eXRAGQ7%Uxles&g}!OfQW@5gMTXeG)yS_m_#*UL
z@%?L{m?M|@+A*HEq4dhpUsFr>or6_o+)}Vr!)ccV=BvRG(V@@p17b!c0nRyDhvbK=
zW4uAhjubah9*`N!GrpTQo#ZnNuCTFv9dXXZ<CE(6Zn3Qj;Ih@3qiF4!@A>WvZvxm@
zF<(a<bE9~(rTu?a`&-spjGkFCFHbn=pXjzc$W0{Q#$kOwiv`kaw7ps$xHwkKo<<tE
zl<X-3D_3B9_S9#~9u?N3N&l>7jv;WP1$?IHdl%9)aD{Z!`6^K1qK-x7hwW#cQV2AV
z)V#Gkp0Rvd<@u5x-z=T78)r#j9#X}W^o}{d0G7yu!~hEkW|Dg&3o0;Ugr$gXCsv%7
z^*QTfTM+KEvRi9f(ZA;bGHdA#ykRPY?b==|IPi2X%``AHwD$D8W^QhNJb#6QLjg(T
z-CG-vw)Z+aZ}oox_WuQwN_(~l#3klTy0A8JrT|;=e6%Y!;@oqh{!LzDmq5cl9Wqqz
z9oSrvR_QMT#4HY*?Rc%>{l&7uD+th4N^F}MV(A&~dEA7V7ch$^!LIELovHGVWQY_^
z5R~`bb)@{SHKf5rk_DnvmPE_>l@7Pv8577NLR0Tlqq2$99}Wb5j)GO6gAYp;18A>P
zztemmss6Lt{u7GFlx3aa)X%XKLUbs0c#koM@wIgoEgSlmabYR-UAK_qjote5fBy|2
zPX+`EYj1CNP`|x1akFB=B`z3o?NsZ*ewK}!*pkN9VuP78@hHw*&MiHws%IOeE#0o<
zb@=|4NFCUjxK;98G$(Pk<Lj@NcaIETiRK6rm(Y}B`k0y6s$Z)(V*MHUDrxd*yi<V!
zVP-H2Kx#VGZ8l@J&ZMfIZhw<H^Yx#-kJ*cGW=^d~UEW5@FTL`PR#OANp8^+8xY#R<
zF0szb`;yNzhaKgZq{mgCXaB|X|A+O6<4?=Z&OZF}_Fu>Eoh1f(d>he93BIGSSP@E2
zXU)i!2>Y5>`p-!_#OAzMe??~Vy%65|0Y|B=d;k_FzPno#mwVD?Ds<T-ZuOpm_!aEN
zeJDo)U6&@*c$dwsM<qDj%|(nj__POhgAFd~qk5d}s<Iaa_9pylLyYofTm~ET@^+pE
zDK>W`fH}ZyP&Kr<A7~UTpz%_vcPhlTj^g0CSA4Gm?0t!KR3t1^M}7Wkc3GxQa6WLA
z$dLR@-`H^HWC;%smr_%Ujf;!h$mz?n(?2w>ps4PN7!y5Kds+2DirETrEeUz8rA|B`
zt8KLqCs)trPI$BZorr`@@Vvj5*9t*TqnzPf`wCO_OVIm9OYu1CNr<BY&F%W=*DYVn
zlh>#7nud&lNx8uO;ITER^2<YK5f0TFdS+8gP38nB=k)PD#%DEjb--r+Yt?}$psNzy
zeIL-ZO*3TYFEQ()fYI|Ki;GVB1_r>B_aD{&7n(guurZoFKNS<=BY1kR>_}WA(N;iK
zhHqlnta-ctLAcL!S3}?03E+|vuT+nMlO4&+yVl!D<ie_js9Hlg<$=1=+U|SsDd2t}
z7*!Qar{oZbZbUesL*45iXC2yIT2De^QyE;q@N9L<D}UQl?8%g+e%x#94R*#N;uul0
z<SCKr$>=&z5ax}&P*_+<kHY;AeE!hI=_JQ1Ytid>Yh`Us+r)%s^~cNqO(6Doede)8
zp-z4--{g27%_aT_4u>Cb_?Ob&{A#rm%b=gtj+SWjU2SmxC#dpBqhE&fWFq%Wwp^k2
zD92Znw39c#Ah57Wh8^aFt8F5{8NCeR3k3^(`dAz9>=PBgJDZO^2uZBG*{{V~KG*z8
zcQHNoI-Jp2?a)E{sA9lzs_+EjharFVHLy#iP;%8z*T=bPcwlf|fCW5q??>h^y=-ze
z#(&sr<MG{AZNl1ohZ-A<Ia6ECPV_fE#MOcNJ&UtMRDs>WXc=W?<(apo5+V?G2+QI+
z6l;I2eq`uu>>C$hN2s;Hyt|H((b6)V!UKZw@-yP62435$qmkkFNhu{oVWuiiO!f)Z
zwtj+-yR^vDSG8dx%fy{5Dn<k=&zW5Gk^ucg6RTKY{6!i3-fU5nn(II0_t#a^?XE(H
zXpnb!(+6SzcB=nG*NP8R12+%!KxBMP;f!@lAjS^iDVOH}z1e_m#lPCIb4|;k{V0J4
z>>Znqwf)C3z1S`rwUoo|;=61LquieSxx=ZxYYBB2GuYv_b=1x^v}Buq|EVS(rr5U1
z&Cag^_!NA{Z9w+Ds;}NedywH;*)^3xE03pVp6n`U$N4T(j`yDLh<{VRw*6N0miPu5
zfs;G5_-zg(Dx7S#{47VpH9cd89|;*q5tA?MWDhGA_s>aCtG?Qnn(Bu83T4wC%^w)P
zySGEUb0b=1t8Z$q3#wtzyVd_d8*RvQfm(|R_~z_{B=cgaC?ceGqH(&^TF)h*mhzsG
znQUxeqVjh>ATdBGBY)O6-$9$2(Nf~k*O>B@-B(DSnB9vqjku8}5+7QgEhf=!ftlJp
z${o{~4XQ9qFI6wxgbWfHP*&aw`20@mQ<LS*&v8C|QSQ(1c2<K+4^?2LCyskqXy@m9
ztj3wn@q;^qWsMKbFR?mItI`$!$%-F7St1s;?wNpVpkrbe#JOK+R2$;?FWy|(vG{ax
zpb)ITRXL||WA%-Mi&N}}t4WIpo5jXXTRn5C)SPNnDs=EEcfY7R)++G#l<IV#cnY+^
zNgX5zYc`nI@wC2bbQC`u4Kf{3C3PDvfpMT1Py7e>{tpJoTS}_5^tu?GnGb}##SXS~
zmzS72xj5M2)|QY<k>3kG3pHrQ8!{Z(v?C8lgGGgHQkCVL6!Y19;FmgUz_1l>M8w==
z;}1{t?)}(MC}1GDu=P&LB*n}HOXRitWy{van=k`ba}36$l6chA;zKcH9#?D;-g{{2
z`SkWtV7>*<Bq$gLASk|2geW?;EGz;=0YmQiR6A0q_jZpe1>jR+xd-Cws=S`OZ>V%D
z`qhQjONru`A-!{s>a}FsKMF=Z`i(TU@nEJMJWRdvIl2Xqk>Is74o0t_U<Ud|b#wDh
zfd)f_C~jjJ`+_0NtMj0rR}bgK%RQR^!u%#4+$qN4JeKZ2DWVM3R&Pl;DOsy&;svm7
zE*1oKV?aW;WaDkN4C1C=P+uo&wE1-3i57Kq`J5PsMUZ2_q8YA4Ttb??Jn%WY_RKal
zVq}Y<vz<rDv~MjJP*c_NY;;D-6V;y4345GKH=}jgKnqu5K&f@i-V4zbx?fyeYr{qE
zIq!c<K|m13>)Cd@RC&<%>f}AF!#y8((==8b-#aa>aXW_VhMudp)Zn#-zYCS2mRC5M
znpZj>5!szQ4VQGLZT~>F2yGVCr<I0PY|S3pRzUg-ZDcGMDK|2SBaVLgAuib!;4LUx
zr`JB6&j~j3#w?J^L#z$h^gB@F&##7Vr>JAhbdLurKA&gP*j}8guBIXcTZGCSLF9m>
zT8G6_Hu6@{?%kU?-Z>+QeuNX*vzW^R4(zPPD*eGlt3nB(Nz@1-<~S}X{dAHV-s|oU
zz^}=MyaE)TI$nXE(AANvmj|-RY!xN^79()E30VNIk0h6mMh6TV_rhwoVcKqQjwjk=
z<_qPlAil9-WdAa2yg7S^hXEv$PVDmb7FTMgW{f;p*Ui`htY@9K4|<f!>tMT2CWL;Z
zDvAO9jgAN?$FQjzVabjz&+lBlv-m>LsimRR$jHdX(eYx9&uZhs!awwn|0A*FS5|WC
zC5tsow?y}kjNA++zYw@+yvctstZGnuJP^0{riH&T_h=<b>00Gp$=hTBC6lJc3Gq=P
zlA9?#NJ~k*vFl6@+XDZ;O=!j_y<3>sy`)rCW7^wwGu<2iTv%901;q#XX`cx+f;A-U
z1X^`8?(V#K8dy~^K%?uNJfF-CSr+}>ll}Om7jqI75)$G80Gi+Zarqf;P~!sZ|NVAB
zmN(jYZ?m)cSLnpcGcz-gQp>kTpQm0fh`gune<elSa$)D|^%t)XPNVNIN#rd1ZIIZ6
zNCBN@AU?Vh5D>sSI5@blzOHd#o3p)GC?7v%qr8Yjp28Y#d1wi&<ZY)~%%N|TEt%3?
zZsa*sW^Egjz^`Axv9%8eKg8KJHSwfPmeAV{$>(ZV50)1;NAO<XzZV4sX^7NCio3CS
zPL4T0_FTS&(8)NzaK^FmHBs|sQejfw=!dvw?sf;!Nr<)0)!NmcS*;D=V;=;XIk=a;
z0!F#jc}TUqJp33u=;4y>{fpu()qkS5xUlfIo0}wyrKe}2x{CDkvw!q2{kZfXE9I9V
z5P8lKC(69x>Z(qDkUmT#BvEes9+<1%zNsch{mRqP^qkk(we|<K{!ZDZ=Q<TtuiWtA
zN&@FwthRf&sMUh3_K6V>O+#c1+2T>yP4NeGRButT?`1s2ef~(waZYP`2$4D-zawtS
zVUc4!EGT#=wEPk+;FMQg<l;w#LXd?X&qh&#-bqKg$F7EFwyJo);_hy&!XXsqfNn(u
zs|G)wpXIO3-6x&iMi{RVlMOp2$Fh5=5KdEAaqLA_@sJgaO$$>FQ7LjfNOcQO*?qC7
zLNr%&?7a_A^-*ebZ^ugqim&2H>f^W(JlnDEs%ZerGaT(Xj^@zZb5iiAK6>HmljAJm
zB%tc-+rM3Zl}lmH!x17cK9>KO%YCBezcFyFZAD5fIT#T!Qqin}aSCg{m}G(6Cm6gL
zvE0wg*I!3UKdp5JJ_vF#whp!>L8W!C4B&QJmn_g;dY<x~a$L)OAA1I+kW~q(xfu}z
z$@PMLy9pj2>Mb>W=U`j57o;|;M{%$^NY;~_u5c69;<(K9T_q!e#e+>~M%@_Suzkmg
zt_pu}d}xA&^X~Y|h*g+{x)8ut84I|Vrh(osqh)LP-7wb^t|G~$8=)r%UNI?pi-Xf&
zeCjN7Dc@1pRbu(s4R$Ve{&hf?nx@ofdWgMbY}2>9rh{Ge6b`~zZ@{e~_CHpBklF7h
zzR`yaCf!Oi+EYHY(jBt4w6REv1oY+4eiV9e1y6HKb-hEgXsW#U;Ie$R)#Ea4c4~4y
z(Z<S>?_!fBg;eq9943p9hZPMJ4{~C=TmGCWe+Vp!Q^uZbf106(&yGaN8y0seUTe8^
zDy<LgF7><FD(L^otdh~;5zUcZG8;>5aH=3eJ66k}<_HpO<`!SlrX%YWY>}x)J}8mi
z69wOP0REH9agJ^k+g-W$GCDNbF;z~Li}h~y5~!(dsj-o<dal?_GTE`DHb9iA3F=D&
zaRB|GBH|6D=u)ruzI%Psmdh@yX~|E-?h9{E-u`5W_K1#rA@?P5xL9(TrI|}pxaFyt
zGMrA>=zQsoaQUwnV7koO`iQ=q$*_s_XOp7IcXBs%Ob=3}rzfFsHn$I&T-B8CnDmbo
z#3mfIR4xV#EUT5x0&MA7RS<UV6@^qwUt?$k6;$qFH!1;5OJtUFaSta_^XT<qWz)>Q
zqhjBmdfT_)dO`6V#ctR$n1>d7LYIlMMs5?Tz$PIynrwo-P$1A7V%WtGzRc_pLdO}@
z{hMb4NKum&qI?b|t1?HnU-6$+gOyuuBbI(dr2!v82u#hCY?&358jNU~i4+bC4GT>M
zTn2nnPpt#vs7mQsK+}mq)w0u!7Ax$1blJZZFFo%;G5C20&DjHeywYa_%*_vBM2lA^
zqZW;<iR@O++46;l<y?k*DJ^$4b!#l9V87eaxGHv_(>BV`UuxDxil*#$EN~vWwY<+k
zGTI8)qu`wxDf3U*9IG)2$jm+KE%y5{5&Amx4@2*-Co7~GM|0Ds^k&KkPKV{wN&DYu
z&MtG`!!%BHAD4uM%MOgD!Lb)e79B^}7@>iXStNOR2MR+*nJ&q)7d9fArY%AIvC_a4
z<hM;7YudDaS^jQz4{ak52jVYP(^k=Jv*^{Dxiv^R$j2rLUlGBJ&>n6l^u)XOO~1{Y
zpDT6mi<bs6r8e=_ORRJ8A}gvbD{bDN9bo>+ZJW4Q|FVD1IIPn1Lv@|yq?DxN%KD$j
z#Kl=Vqkc0UWb<l(G?WE$Maji%5ntI-yloJ_aV8CZWRhV7c0zWWeZnvM-)UUNiLc1$
zMZ9(%=w){up>>Ct8^^d4`|8N*z)n41O;^!v+;+Qv2h%OOi*6B}A&?<4GQzm~vS(Zx
zs+i=g$ZTh=a-ZSww&{NATabFV?o6&T`GpBSrKXOT@dOLui^RawIMDX_hWRv8VuQR4
z){q2^+H+XU=qBzZw-sVMo^i@cR^!SJc^xoEpKPA92S`hg(QiMq9thB=DYC*bw7t4e
z_-e`#`*wzf4nnYzRrG>OTt$df4u9)q)~eW@YNoN^)aG;OR#&IH<M!<LaF{jvH9-~=
zrn_A<rFZwF*HBJGXX7AC;pY;%K9bKh@b{)9AP>ajf`w<xE5FVgy-n@WfzOJ|rY&s^
z=L4db%wa8%Q&;`CpW*RmTy=_jGADa(^*2Rm8Q0O*skL&CAh~l|_~OHqvZ8upjb!$w
z<cSoJ<=p3%>BA3yQ5%cq9^xCQ(Nl!2pL6di-zz3!W@WfcY0g=8s=O)rQW{)72Jv%U
z12$Dj!D-^)-u?qZZRsJj{;3D_U>0yQr@8S2hV0#P+PqcXldeU*<JsGYnX*OZjtqEW
zR+V_&3a}mVs8x?r-pV76=!TA>f}-7vxCp2Zk1JZjv>OQ-QEa+<D$S>l$wnSp`EP9H
zWx)v$wZJO^+YXyyb8i;|rOOTos-39>rmWHUu#=;+DPh)9PC;MrgsOF<+e%P!LZ!RJ
zihk~6Z8X)EiY*eTyBe}zR{sN=Co<E5^XH?oQ#TIODu2Rqe(A+XntnJtS;9+`9AxDu
zs;*}E#DAHn`MoGB<WG5wMdVQ*=l4S$Un@WN^Hf9icdQi#RwGXHmQ6n_#(a)7Qy1W2
z_+AYGB<tQZ)$Nq0hLt*%KjGqMJ1E7K?a40zQU5UNR>Pq=F6zD)HgCN;5G>ca|1&Dq
z_h((JuXV1?ZECi!bPufNVjzD#w+3nEK1S6I7|vfUU=;5&)9jEHfu~85XA~?VaFc$L
z6;~u$x+}AzTevgdwvc*JPag1H5q(hg*H#_)mUEe4*!^AX1$&SwTSjw}{7rd{M}(Jz
z+=^1CBc^}Gh@3W2`MQ?;!+Out8XIvPDNB5v*KLSap{f$9t$)c)X2Wsqb3;+!BHk2Y
zQ_Ngv2i$giRt;An$jTvZFX;<blgYuvk(9V3;zPkqN$!t~-hj7ZaPnV^e}Yf_RCR4W
zrluL)#M`O7h_}EJ20~TUVQTjWa^xobDr&2T*xeKO(`9khIlt^H1dro)iYU0SBKM6n
zo;&soW3ri|;%I%?^P@~jKvz4yHrd;8Bs#O{Mc~8;W$SDASC04iHVvhi*0t~FD%Gnl
zN}hg(|6qj&N?)i>=Ludq{JxVMC>1ntO+Q{e$}M=hcOz`H!fI;kp}sot&s{dj)?<wg
z3o~WnRT^sA<~w>`(5xch(*8t{h!3usMN--BwvX$0<mlRYi(hr{)?*9GTioex&Q#$q
zFZYp~-eV!hYQuF4ztt`^hWTx69((Mc25zqS2JzJY3ZJ)}7td*FRrlsByg>cpdvJf{
zplAGGj-#F<$anIMQSc5LvQg_`V@JEk|9w?LPTnkP^6)dwx>r-9S<NWU8nLCTx^W<H
z=F_tX(NA0hZVVu)&O#AJ{!+<2`EVzNfi{qHvSfJL$Y-y+5;u!{vW&avs$6caVsurP
zL8~&oGV5*md+3q;ZFC@Sk7HJOrlU<&#;3|Zb<M?b32d>4pZ2i^&yaOn^p3Zgty^7E
zoe<*pJHq0UT=OGu2hld-`{`_#;RuuEjA9^8!SR4tcRh+yp3&n__EfF2KAF21x!IE5
zIz8Cjm^+uU>eiJ*emgd?04z0S>f@5!bflYPpA<4;bZpq`I44Xp$ef9JA&QEF5r7mM
zC|0}oWx_DX96ZPy0;w(TtCxB3R!&&Bbi2K^EU;bK?DbMRWY|;_Z`%6qv%~b3Xi2lE
zgyKyb4iqrw7cHW6%V8pX@*r!nVZH9m-*2aeHdD>F*5v5GHonU%tbOEh7&sY5gYSvO
zjQuipHut(Yahkn9l{g{deyqmvbFp7}3G~G);GBg2^05cSj!){e&DVYM9rw)X`jNk?
zL$_40-|{IBz4FH7*$QZQ$XmGNgqg;;y0fs<>TTFT$9~S=4p>egahwPG`u@ar9mmgk
z3x8psu|1)&O7AQ4W}8rF$Z)hbcinY2)ZASNwf;=NML%RfwQaT_qHKqrk@VrQvw;qb
z+oeRlSI_~(HDXD~Y(L1?xQy@0AgqD}N5*Qq--FJ_=3nue(?mY#AFfqS{B_5|-h^7l
z9sjBctPa_xltNL7`*v7UX+7A)LruCRPl36qF*q2+-Wg!)Jwws%D7v1M%vx;Y0_A0|
zDw7pR&w9xtX&R$XP>zml{zgF)_*VZI;D=pChiExNPtBH`07FY1=}kw;natLQ)aj{Y
zpOC3wk~gDVti<3h#T(sUTOO_|R~9m7+|9yZyV`*YN<EX#v0-`-lv}T{j+}=asqD^W
z8Sz9A0ZtH4ve$g~(fg00a{Z~Uxu&?U78>ri&b_hc?AGS|2UNB?QL||~f6Jn3>QQD{
z09(3Vb~MPCX0^=8VQJ#RLgekM+!JJ`091~a9r=g(XxY?>x1tl9`&Ng<n2P+{sQWBL
zWv&ucHohKZVADQEE5t;A3U|M4sCMX)NkFhDtN<E@cI?Ntf4VxSA8@H3!QCD!2unlP
zfBczIX){?28Y;b51b3G=RQI^ylU2<gO?GX`j&gb}34Na($4d_6wzRYoP)3}*N#%co
zA&YWr%rBbZ#iJi0wO7s=j!I#Evq^oR0^T&``>^-yo`-3Lt%a?`odyEyGo~4<CcRav
z-2U50@@_uJ+LSZdNHk(X`14VP{CV<uQGO$%?aq>s>cagrj*(PQ4b+f8AMg|PDx50!
zEW{Qh!xxRGE4K3I;4lG3XNQfP4|2wCKi7{Gyh`EfEO=GaW%PbjiS=BxUV3&)lH;ml
zU?iyWRSnpgd5h}E?y~GqrTC!$*IF@oQG2Auwqh!yC3<|u@jsTcj)zehhaZ|tqR4+-
z4s8au7jwZLF!?sq=_PYDh|hF8q;|$?Y;#yxb-!y4GW=)En%_l*aX*nlnmTLIYwxc%
z0lb{XNvS22XQK)q{v0YR#j^rgSB92=3m5v%eK~KwuvmPaC~S|_Sxxh8c+0z_=KY#w
z0dvmrH_+?cBJ^dXd@Z1U<7=gj=KAk@vHDh)Er^&gAC5N?VhhE2;PcAWhy@lY**(Tv
z0Yf=S56lMUk;D7G56U_auY_sPD;HN~;TgRky+EpJ_y}SGTI(5;pvj3XgJyh6k(88Y
zD+-q+cC-JH&33bh+Bc{uRs-Em2u=;*K;|!&DLb&Gw&Y>MPQ*DL^19{2qYRdB(#cl4
ze{qEp@57K^7oXHKog!v|+l16XgPge^%kfZiDCj4pFnQ)4D>l;+@M(`U%oB`N=b;IC
zb1jBk$>@5>&YH#+A4+w*EZIpUKV%Zq_DV*_(UtXxstu~(4YVP#I)TaSoDN@NjSpfE
z;7NVrEVJH!`g|1W706N}BK_)-#_h~kE9RF=*O(=zN@OBDr2c4dVf6SORkC<0N~JDh
zxo-a!6;9->_ull{z#M7(+!F}muEfy8`g2g6M*HHe_+BMGy^UwqlQBZVM9TM{jdtJX
zrn-mA{aFnc{4P$`1c~(2Oam21UatI2Qh#f1r1p+gfF5^aIpu3*w7?t8BkY<^<j)%m
zF{MvD<;Jgzz$~es#5K6s(Qhz^&jqTEpb~ctk+KxtYeF`&${#dZuA3WUALa-2)1xdY
z2(WdMd@Y-L^-ZUYe_jnj^~-bomvK=Q#Yhi)?c<<=eety-oDg5UiD-66w3lZIWz^Q7
z^OXGI{tdQ_aE&0BU48q`Z%Rx?30~8?$Dt=u6aw`kDb7!iPJbENXYcdO+<h7zM#=Ya
ze7b9g4e(B{ftPz=*R^S)bD!-8zv2I*Z8xOJ%f)H!c`sk#Zs5YgkruNkZDvdhUM@F(
z7|e<H4R+@t(afT8r%jWVx&2!Exk>KrH`ZH5;a=*=;>y7FLyq_<{N%v}^<S-%KZahj
zN&1ZjddyumeAwHkInbS%4~D&;ub(+TeBf&`b5wt3j6zQ|H*Q;mrLfaO<cN7TpdOOn
z4cDr}3#dgt2b(4pcob*K5XW$)t`_b#^7quJLDwf-o2kIPzngfmd(RN&$lyEV%+RV`
z%iHr(stK&hg(6<_YJPzn2K-#2V9}H=9fA|&z>AkB>4|LRgkvfHH=zvWnjCzUUe|<`
z7L0TG?QmlgzcUGxfXgHP*eZ6(ws5{$wlty)fpA0@yQ&;qZJAwU9K;-LC@ugU1zF4Q
zxvon6W0e>HW-qX~Qv{t5JWb!!r|YjjUQ%rI7Pp9>hXT?efgg$-R-3SEpnp*)6JC(K
zT*J%<tsGu0*QOpl?cGRTzgI*EI<TCGh=|Bwk&=^p|2UfKYkhr=!ykX!AOM;*zSg~c
z_k?*3Uhj$hNNjj`Wyd#<-O|(fqKfZIbKR!XkV;^w?cq}~)4nkJ>|fad2o-X5^311K
zr#vHg&QYHjE6eT&Vr#$qxCQ;D2@Hi)VYmYo+*%+sYYY_sd#u`MnRlzY7=*;$StDGE
zY#kg15m`jA04)cXYnm#RHnct-UZSBGB;Yqgo`t5_I`iR*AjtqjNa);UWoh+VP9ry9
zOXDli(){|%LMjR~i{mp3X5X)%li9wYL(lGNuTDKpdTp3L1=-iu(J8a*<ifz~EwUtA
z<uVfdp>IovO|6P%UJ(4#v%^8G5xdX0t}g$05X6{`i!u>)4mK3mZb7%31*WTa8lZQ9
zQ)cMld0xCdXC#go(MtEjjzKGgkXK3E6eF9+Ct4yR?41^_>iHx`AhFtEb~r~bOX~zi
zlH!KjiKH*T6!dT$Yj3z;2KDjW8hzUBzkP}IGOO3-E1x)Dc19*pv|Y`sV$?7!Xq(Z^
z<TP7<{=Ai?AS3e*sN(YljlRtCY_!r1jt8TGs9P(`%cCJp5L;6*>;=0U0)fvg!#>GU
z*%S6itchUv_}EzHHA7qdm+bwqEuUn`D1sg%UFUKh2nY1z@D=;pVkVsfG&L2sP$@f^
zZocj<A@QdEs^=Xgp5m{XVbah}Xt#C%DaH5l=+_^4y68Yt+uF~WM9uwY%|)v<i{5J^
zvyL6U?`5k%A&Lk=*7za?6V-G879`EB8Wvhn5}{Te65!*xgH@9!rl|h~w)vc6kB{o_
zf9^b42V~k8{-GfLk+lKm3brHUS2b{*ZwhGT3orB+NiR*TY3Uy_bFB5GWq`#Qae?3E
z64di@TN>Wq5X<1Z`_3%qVsM&?o(SD?7Fx7V<VBd2U_Jbe<k_O&gLbhAlrI&9V3Ldm
zZ$*b&I!vjs1#{?7op3BBOg6nKz&E%<NVPTNWzCDYebczd{?qjS5mp%5H4wMcKJCC)
z&FH)q&pDx5JhMxR)WA(TdAsd8V&jOrM(cQ@y*e?txCKke<q{q2Y<~zf^6dI%6U~>P
znMkm)qWRs1%d#U>`;MZ0!Yya$w@r@X$pTXj|5^*VOdhlfvVt_|sP)S0q9(~DMDhUm
z=%g^}RAc;V>mt%+ieO(jLU@v^cBeezoJ-w~-CZWq9{B_TndAD@0Aj8T4QpCwRak3N
zMq;Mb2j@G*z~WYU9#Px`UFP(On$EU8HcdgqLAKvnMnDN^4GQi}VQ9#35xHB$ssy4m
zQuvgr1_Ge$@-9q`>t%%!fvzB!xqZYH=(4M_%0K#rR98GzTIxhwOxIHSIZ}aoEcI%7
zcP26<TC-m<HP~=9a2YsP9@en!virhPxD`^Ha2|>#-Kpkyj3{&Ot20sbJ8|#pjB1{q
zQ)GIqU%;F#0(zq#Znu;;oHp%T`y`+21xY#LJ^1F~XH?^qq}z(g&#xG)S|p-ae+2m6
zYPsdoc?iBTAP}gaiFb+mth1VJr!bAbru&SeGCTq+BBTfEp}tr`1W@@dfkX9z3Opc4
zQE9Ce#C~pBrw94Ayb0qWzEujjE4B{vb{lcvxr58kS1LzoqXMr*)mPguTg{C&{$Tei
z&L)fE_5+k0YMlytK(IwOY;Sq()64<kq$dKjJ=V@TN{SpztY{!U{P7-ekv9EBq<`#5
znc~8T<+AglDRU$kMqzbkhvd<Bk#0yLt0_br<ry6CFTQa+RGm<4+kwQI)O+=;=;NxX
z{4t<oYADe=d3ETTP|oX-b7|w16Qqw`cXfv!nr`0+8ldt&RV|0a#!OL4#Km}B!$q=?
zSl#9bLaXPuMMy3s+FKGxLz(X0ZN;FV%Loei{rPJOd`a?ZWzK$w8z`uMdB8hH(>D#a
z%Dep_XKq#q3Y=Fde_fmmfLma$UYX#9&RBGp1@<cwRsx7cQ!$=Wl|_%0c!+L?G4A)u
z*SkO4aLL<GHZJbYn4zkIK)&OiJEL=<<Fp=;tL)k|c$343!~VY|NjxhrEi}e>!vAV%
zZw)W|s;N$(?At$8j5>$!B)?oZ(}bw`Bl(D2F|RYZ@-KW8$5ejr$|f%GN~@w|B#N6*
zNSj4LX*j*+9+mM$?e}(HC=cVhO@4z@U7F!1mKAR;F<=EFy`;<NL2>rJ@P+LpdWuH2
z)-FNe76B<qekvFnx>$N-?|rQ*r7n(4raodsj_b7&QF>wnDO7@xG{OTh7K@4Ca(JmB
zsI&_xyV`IQ>u}jdG*yjVdsFMqlFk~3h4^F7uasEux`ntj2^{d5;Z*`+a^#0kk0a-z
zcmEJ)<(Eg+RT!CWiv@|tMT#SX{}n2mC2G_Y0k)Z2*&&3g&*Fz;&rc!2g1zSkIA9@?
z3}wBFy)T95tlrFpnuxOAb&8191$M{1!a%#k*nPxXYqf>Bp>#BDnYrH6d~k4pX`!6R
z=Ew-6r7+|sM*I1Sy=RT3I+tMNuThkpVLxx|T<c(`KO}KkG~;bi5jG1DZBdjvLSqyj
z$N^(H`*&#pkyJg18s7fi@u!{Q*fM&X|9Q<Ghm3REE%NMa(X(H=q5(APzN0*16a>_K
z6y>1FXk2c+QqS~?%OJf7OYbR;JzqPv=eo<-|AO|+#)l{E{vF;leQVGz(1JIf5pQJ!
z5<#jGSD6lJRyNVjJn}=Nnw;t)pfe8C6Ck)<fc2gFqQ+!o4u0O^a|pcKNlZTP&u<kN
zG}~pXCIrebVA^fYu_&t?=6tZ)M4xedWeq<UmH0Gpq3>M<`za=>yy+{^l4|v2`bmh`
z*fmak=cU5`nDaPEB+@WbY$TJ(U4;lB3KWC6ExiTlP9afW3sqI7lRit1{8bxk+<7<p
zp-QAI3L{-sy~~TE%0a{naU)EoeLR}phcJz9s9x{J`xQ{|uUhqczlFE}?Zl`L+dAHY
zYq(nTUDjC|tqp?;_Xu@g=HgobN|0FqHP?&S^tNd58ysy<gl>5{04-nefzQ5ab%qf+
zwDu1p#r5P!k#Pzpd)CpR`n8})ehF+{N{^Mp4gb2R;kbjrHUAR{K;|mmy)WAr<Nh)0
z6?0q7?1mDbEGlLj6GuEHfzehd6o9G9J|bD@7#YR$h9Edult+H||Jg?BeP{P4k*hH=
za~jK#tzYyzQX!=z!ZSpJv@e;Gvn^=L-eRWZzX$HEG$f0|q@<-2ydxj{|7&ykZJT$;
z$HyVx-EUuDWu+Kh9N}xh+n4KZy?v~H#fdghvOk1YOD#Jtmb6z0`Z>UGl<tgpBr0(@
zi&MKJgGzQaG2u>@gvT+J-RJfH*~9y<{+jq<e^KT5jt>=nlcFwT*F(U``2}2qAS8iF
zKZp^JeI(!A-YRV?nbRRB;Mg6dbpcxq3iC6EZGLfC;5xyNGqAum2SrbY|1d<qpGPn!
z4yk-Kb3$a~s%iqyXmL>s#;TGkTTbRB-}CX2R50u=*)upV&Yf<+QIpw3ea>i_i6~M?
z35ap`E|JzbwnP&fUlXblK(04n&FuIarXkU|Y^e|`axtj|7%SPR(jDx&lE6RSlODhJ
zrxHm*q^|Mdq|VgOvhIh>iJRTUjX0gKjrA`7ZcXvptr^JKJ^Kr+@J+xevl~y&UzLNn
z1S=;C%RjnUoWrzJlpo*dk+X8LW;$PJH`JYkVig2sQeM2My;2#IFjBJh&td<iZUo>(
zJSCJ7eHBb@`(Q@CPt!t54AfKfYl)W16JulPxD~`QbC=<lV1Uep<n!1<&?LnTr=Dvd
ze}g>rWE|l`Vq`I1?BTB`h0&4-{8)a3)gB@@K-|A!skt0U`4pk^fnuCzy-R%g;<!p(
zuKrr+n1i6VBk)RU_KJtT2@EFc8gF#Xq1orP(MQ1cnhq^<>Z8vHlKBfD$$c3YH|r|G
zo-Gwef{FrW1By#(O%(r`)SxT!G&ECT49%w2lb8Mje!bJBQaYX%-D$hMhK{Vjn_6p)
z;0mG3<cmu;q=XU)Nxuwn#yOZjVSh-j<_C+9LD@&FAjsK7%l<}NHu>&zqS}j-0g7AG
z2{TYmeQ8+@OjJ>Yt<V4pLIku&g|}ZbowsmtnxQH`R!p}pT|;JMqE@k$5s#NTs=LaB
zJUZA+dx!xs6laqCiWT9&g%Uy3mCX<<$}SNW3xP^tCelP@*eeXnCEEg>;BAYCV7H_)
z?SQvt9OC=Dte~hpv+k4_-3h$))(RA0t48mrC!|>SS->)NUCOg@*buD&kS%C>F<^$C
zUbJt=FIU1?xfvE}#>C;`>`yZ%g2{?k=Y&U%#YY#@+daS$GPuPP)3cTLzkdVr=5rPo
zEh3u}bwAn+WP|TO`^5aPPe55ib*PQL4TQWcK1tfK`m+&ws-tT0yF6U<+M-cU`(5Lu
zqR*%T9=Y1`WI|!ekqzHFouQX<D)hp9(A<I<GaOE|js!D4QC4sX!QgRIo=djA25|7`
z69s}j|0X%_p3nNmlt;$Yko#i=xp>-hXDl@g<00vr5J1_x8Qr;+O%?D`Y~8zsmNZow
zT8f;5s=Ss8q>i;g9Z_)rDkexis|g{Mc-|=9DsfXc!=gSx`bmhV>ujH}&6Z*(gHeKR
zW@^^rYmE=rD&5^H00vC2kqK@j0H!QMePW;s<S-8Co-S2<^)H0rWZ7FCjrbSg;c)9;
z62<JXw}?M^c<fbxgAA>;&RgQv(DusLgq9CI$Qvp4gN@nr&FSt~P-}fb5@$+;bfQXf
zN+vP(X?~rjR#SIrfX(9f*10xNQwm>(gQ&vUi{9ua{Nz*SfZ-{@Tuxbqii8``5kwzM
zwP7o4kvn-jlI_j51XQ*-c*sPwD%!Ff73kw-UFNLgj!+&55e<CQGcg&b_`s=ES$8~B
z6%q8<dfWLw;<*ukFg>v6)GLCPU3RwY-u1&Sviw+BxL4se8COyw!CcsO_|@TvA8Gz~
zAu*)ue^(Vh090Q5YdKgyla--_PBR^$xg%X?>MsB5oK8C%aFk<bViwPhx24RA-tg`Z
zCJ<x&c=kL54KLnOZ`@TE+%46rW84yWM?74yN()jIJB7)ot%9eWUwPL3`WciZ`cBCN
z_Zes72e&G9Ho3N$w*4x33}@g7f0(ML27&8FZau4Uv#QjJmVEa$@yRdDu$(}#Kzt>Z
zA-OLqg+-B?6YrVSR`uhs5c$C>iudcfSDFd9J;$Io<M@Dw-#Eu>#87nAMTK%V#I{#J
z442n+?r5O_1vQv6N6(@_)$y&S>*h6?>MMtl<TPXBbhq$_bP2$${{z5mFy?UkZK!ie
zS9B#@yR}vosr=kojM3lUe=`98Yb0tY^>>q4g^VMC&X4i~{#W6i!E-Pbzb9h67HJm^
zbgav*KSlo&m02`JJ<;(J-+ankifbWXN{S+2feWdI%@yJBrd!^|W?UC;27<t`CK}GC
zVkh*|OkTXatc#2IF|V+^(NVb+@*qvXNTXW?##e~M#(qA3Sz~*7^VtkfCyC3UAZ5bA
zub@r2O#a?_dW&WErn4^42{t-(hgGP;^y4*h)_=VK;~gH@5;=D0FzMHwpmIRKp{4g<
zi#At`Y}xLD(UbZ9<;>|Pi2-l=X4TK03oRK?OmlNGDT)3J-}{&}8cOi*-yQVqcE*2)
znE#tr<-=%N>v`6}V+(9qt)I8WpPjnzL#{g0mxo##G#<z@sgSpC--hP=Rmh3;^}rMj
zf$t#nGUly1i0j=cckDTICR8-8VlbPI>&m97rd~a<@EV7axFbqwz>Lyz53kO3j*pe$
z*`%>dz=Im4s*NpL3B;4?RB{+U&0@WNv0@;E4%AdZK6qy(0dS5utFm?>N<O)QB@caL
zLksl0qJJI*WKN{Bpxo?cx_m&Ayg05_v*mnq839DWzh<LEra1xHMOPP@4=8)N%~2T>
z6Vr8&C$l3^hzox3@fFK8_g(s>{BohyLYuBaP%E^LpeR%~$Aiynx$BkR@>f62x|q>%
zf<!i0Cv3}&RY~U`<i}Cp%gMZCV!{GtvB@hq6K<^hU-qyj#E2zv<&gOQQT5(IO>W`(
zw#rsinu^kkf`Ur#9dy%FnuvtnOMuXuKmw=;2mvBWuS##Bh0qDoLJdesAVGR3bO<H1
zFMG~+X3lT&M>6wHCV7)t&w9#r->Y0H!}%}M4g4yPtivFy2FxePm_4Eycg$8S((mpv
zxnP_SCMOoqP`y4#C=(Pk%?zmbIa^vcUKsYXk7Vw54;mr}yrWHXgN6|Z>Yk=Pk{kLq
zC)GRsArDXMHiS%P5?bUr5%flctFjM>SpaUr#UPiXah9>`yBu@7@sUt>hFypnB^d0D
zQ)qP=Y6I=~70ylNj;wOl{?~)b84{6r_!)(zv407^YHIxsyzxtekEbx8W_OHPz#4;c
zgg(LX-s-^EQu@tlNf5Xj?et6eBO4=fwDPOold?zo7ZYjDYPBvSJWz8PCc7FhL_sOG
z^zgTX)HPf}s@s|>Z?jRU<rZFQ-(yN|#ktBD<ajdvxXvG`6SW5N3JBIJhogPq%BFJW
zc_H}>v0)>Hwf=;Nf#bnSwQd6&e}{7uWZ6;*wyKW$&5Y#`P)U_*TJmpk9=Ir?B@M`V
zv&?w8k=huX8=*PLZ4m7LY80nEsaXQXu|{}3;;ggPU9cvWZ1$F2G>5c#TYJ6575!zT
zq10-y5A-f#YDb$H5>T`ze0c-};PwvrN0py_>}xk$LLJLHqb3|g;$08Ai!C+jJt!Uz
z(n)?$gteAD-9V22sR0RW`3ho5u3GG-s?lXtwIT1ybbdDh-829g4H*IGd((aGbC7h7
zqHRb`iU|r?U)E@?>>UiE`!40+fvI5|JE)odedfX*3m`JJ)&yA-S4mKS^!;M1^SCk7
zF9<<?fZlhqsk<?qQ@~PCZw3g&we+y`*;@J<=v=nzH^g+;#cR=1G`e^FlO-)}DN@8a
z@Y@2Qb;MVSzFK~`(kakBXKwGX`F*xm0+zdDaWjfdM)INnm3sd_n5v({K5%3(I;L)f
z5868t>#32>ZKC%~;-c><BZHtqN)Yv(+BMMCfJW_^YT_J}3za9rxAD-0^VMioaq+Va
zJc7FE!*&)a`Q!fsP(Dtiu!w?|%`6m(@+HNm;neX3iDTp$^+d<_L*WVzpx!niW2}O-
z#fT6hNrsL@IL@%yZBK{}Pv70;l1^=<u#6T>{x-h8_rt=%jH_(bS05q&FZ17BNU5A`
zW>CQsRd&?6vU6X;LM3lhstlx&67`7-+Xn>j6}!Wl!uOlM-kvTF-8&RTqfoO-1Eyjt
zkQ!lbbL7cdb8&Go#W~~r{JdzKxb*4&+2!7stfX&kxo`Y!V5FdwtLy7I`;;16#8K&v
z3q#O!p&72w4ObX6ph=OQ!y7ndF8i5xkduu&<ujKs+1x@ctlb5#6+04T#vNrs0A_#e
z8&7kWZyk2BreKzo&!bSEo??M^@!Ry^;~KpPpG^~P6Emr{WerbI&~*A0Hh)a=LGlmY
z!y6h07%HuCXjdA0%XoAs#?hs_siNiAW4V;DC+|Q2PBrlBMbnOzuKU5c7`CC}N5rhe
zrVO@d%D^E8b+Q_T)ylc3k<n=JOVO(6o8r$Q+QVO$p28x)<s3CTYD8WaJ7M!|8fvK+
zxOX81A`<8>d_etHHlW5+)QI4<ytid^vbnbQ5)SAX8@rFSA+BBMr#d2TNosl>)u~Y6
zrq%Jvmg!HXbT8mk!CK?<*NvJvJ-|x{ulCPCE^}{s2f;rSI}=AcS~IRj8kx(V)E+7B
zMc2C^)eU<nN8UF*E^##-8@<E><$ld4q@ds%Nv|YcZ%S~&D#dSX%YS}?-M6(i&c#IH
z|D5&v^*ll0GTvF~+XPl`1jr@HBITISJuUvy+6;Az-;C0SRX>HlWdD(46T3qZMCX;W
zP6O!0<w8<K-NjCE$ip;}t_d|@aP(BJd3f)^rb3oVDKnUuATW~LmHTxDFg|*(_ELkC
zOIZY!5cT!0_BK)E2-N#YW1;5WTiKrAl{a&<!~JbNs<r;pwSz4_!|_#l@>m&~C47RC
zs^J3SqKKA;#mU;%SESZ0^Y^Xf)+;L&77^q{OU0mZcs)6n`=wp4<_=Uujx#oRvdX!C
zbV3IA;;4N|*5Tacz;EnN%0y(Lv|Ib(FRudz+8k=$35lvZg>bX*c%7r!;<c+8_5Pem
z2imj6)Lfl|=qtGL>;~CUM&5}kKgO(SshBlWh9tO2B(|SCEY`@#pj6As*wQa1TE)&t
z1DNe(OwM6%ep(|YG`tpEoK4tWUa_VyJUI^Gf1(2p;lv^fy>5h?l*6I5V|;%{`C8qG
zbxWibNYGY9CdoxGCw+aTOlu3Bi;b$ouPhIj!k*%umID}Q+1zP<g!_~q)_~<eGjTHX
zJhi#(kj3A_E?hj3Z{WZxE-pEa9wK0T0xHs;30Tg%N0~R}uTH1h@xSYbqgU{Ko0t09
ziSSirH~fEgCovQ9rn0M>`<UechIo6re7}yt9JwJ*SNCX5ORZ+{5EDBIuA9iho^ug;
zT1tn=$MOi!d>RhSsgRC4MUh|=q|ngYM{ZnQ6FW?hBLnX4<j_V|WENXQB=v41!#Ury
z@0z$`Akpub*h=RAE78EQl8w5jn!b%zA|=mNP%_PlW9HURty8Dh&Xz+jRlH7KPwrw>
zPDD}SXFO*|tpVK<)&=~POVgoUGmv>xMP)+xGD^wVcQ<{f%_=}(aMFk7VxHlG_DHz-
zKC`61^_tdn+|gMi^V~n-R{)>k>OiQ+gU^nt(^_4i?`69^^LsrNQZF!d{(1<^8De=^
zsa~wLEJ~|2<{w-^Us{E^k$@u;Gjx(|-xX9<McS8sBE-NHmx1{*H7;uEH;=V^Okb)j
zSgvsvh$PPK)icNc4f`6NJO%V};usTsP49AUgkYT-d$R0n>7E5Y3pfpnh{9VpKsiKt
z{gzK~kGo;vqw+h*MqS)R_hbIc29BD;yB;DA96J!_S{@cw>Xxk3H~;n9m$r?Ut^WZo
zA|rI-Olr#-2#roDDU`YZe<`XY;rVA{jLY@xqHZT2RNl67d9r^z(mEX@#7XqpdQHU=
zycz@{6F=B=`AmPdI*qkzU+U-TT2UbxDmI_L{=1jyF`Kkmx_iiQac}xy-sew)hfKlx
zmCwW(S8Y4{ZDm2l1@C5}YHO4g7$g7pWV2%S^uyLQdE#oxxM;N>!(d?d=}tlaP}e+F
z?+({P`?4}tmxlN#;Np)8pES7N%yUbIA2q*h%FrfTdBK!Ak{2Wk7)8$O?iz+HH3C$!
ztTwN{G(-6Qa6m4?o0yVo0g2qD@#@56xLFBtNxi%Zsat(RX(o+RE*oBG#61uqP%mi{
z_?q|y102`ZELAT~hbEuwdZ(@TDCcw)yV*JiJ8|edX_o<MBZyw#PJrx6P(z|n*@r5{
zn$L#)zW|zCLoHNE4*l~K2v(TdWQNkl&t41?YqiWCx70Fojs;Q6382k6`y>3h_6Gm?
z&q|>EWz=rK?88zS40nfPX8J_E;*m+?bOUD3>Li7-wfT$6KaF*(ClQSn2FvMxip9ot
z@h>cGlkZFi^hU8XZqX|?gZceK7e*(1wHOZF@DWPqDqSrw^Djbr9$jOvE4uoHm8tu?
znP&$_%iHumcrt6daAvMrRdY=Eaw;Fm$k^E)Eu^GubfBg>UeFa$v~kFxZg%0Of2ewS
z-QRe!<|aNaW$lCXj!(Z#J)yWD(LEA+Tk#gITG2U+r2_rb|F>GKpyCAE$pg$o@gjMG
z)m^K+;L<gIe;_74#`|L~FQ$)h8n)vb0e)R+#wGkRAxYG=f#6*iF=IQn4<;Od(8@iL
z?mPxMXrk7pU#U`9OA-+iaGzuc_o1KRX^HK6v@n3tPp~W21I*l|?`sBg92`FEmD!Z(
z7wFGFsKAWxEw4GBOZK&8r0pF#C-KS+u6Ope@&Q_$&0{tw!p#33<iLMzzs|-)0|c~<
zxdgKToOwAR4!#k;*44+015QIvMMEwEiC(8F7t$BA1TR4j^O&x4i-~ckpS4a>A<NN6
zvwlOCpO(iS|7l?Xkw46}IWiWF4|`ql)l>>}DZPqWdo5YORwPv@Dy78UJuzLlLu$PU
z-EG;`+Rgf46>cDN$*X+)f#KS%<+yOI%A#@^dbnsQ(FtK6S)K83<*T1}c}e|g>Tu~;
zA(eAs_h}q-rDZ43c+`lJX>?9(#UA$oQLubqMfWCq-GYusFcnT@JKIK;P<#8^($|$M
zDH$m*;0PK{sdEedBpHoAlJ0B${h7@kC-z<@Aw0ycGmy?JsM+MV34(Ka@v;h%m*FlT
zw@TVYz+WJFBpEHDCz4jjK_67>Fm3E^66ZZnqQ6#_G;(TrM!2y)mlU{5uX~RM`eTkV
zB^&k(KrU`x2M9UKI-rnTKi8_jfbFWidCrlMahwN;JBH(}F<nrzotJTAOxUzCcN-TL
zfzw;~iM9zGYES8ZxlHM;6mT_BMqdz5(e_-YX+chC-9X`z8IhAK$;66P=Z7TC3wT`l
zwB>;a$M5ipb67nD&ji^g&iqzNKeAa{1J0?%*!kMB(NHtnxbCY4I1!&VCJVJiw=ESZ
z1<JUiF7N(r-R1hbzauS4pJHAExk6EZpj8=MJJ0LR|M{S#Bu#UCFy`($B^?vaU)Ek?
zNK+X+Y3VCnAlmG~puty|{fYm3^2K|*J3b{d&evGuTMGC$O;kq89ThTveAoRB3R+b*
z4?X9c*qe<#zJSTt?R{*hf*;xJkG(c-aiS>34O~9;IF@$xFAo#ZmVW~~VgszVj|Dl2
zFG@LI7}!=jvddl3QgYjLD0Af<N%II2T5(Q)&BhH9ua<iq>Z+;*QbRxVvlr^6NXas~
zgwM6yo#aMvk9ev9C1L{7Q1H7*H?*rA&c)0-6DvEq>k`+Zt3El#6M2UzJ>sQ8ULMOt
zuu$?n>V-PAfgJjPhhyy6dQRJKO}XUw2=b=YwY-Zz0y8okqNUBnwJDDY!!{|=SDyuf
z+4^(4UkV938gxAC+UM_D_b?THXT`+j4DHgVOz8rez1}WFMSSW?HK0lws>w>#6VS!@
zmuOvb{!3{QcYHTonN6$+zUqFtSm%kU3%$V|a$dSyoBTJn0<w)bUPUW!Oi9Pl%v4|H
zgzC2Eiv-;Y2^eSIISRe-GOsD;RsaQ4b5HAr?h1GjgvRH|p~qT^K@@_srYOqMhb<N@
zG2M6yn9o>o{S9-!5LUiyt+T}te0DOPz-G(2L#aQMD|zvW>;JQ{gHDU{pE2z*F}WKV
z2zY-NlD30P{r#hEI(n)Qb<;x;sNjA)2M^dg!y2pn`LxNP{FOkEu?<`aqXz25ZnkxN
zIA>vSorV_2g&Tvnx@1GA-uY^8bub=HMKy5+vSmWYtucGT+PWfbtia6A7t8LhXT$IS
z`$^G13Lgyy8*T#OCLb;I{zhv0AJ}#@6x!(n87H?|?lS0Av{(0@dY+G?pck89u|WLL
z{26u%vG)U=yYxj$v-U(ZSZCr_vW=FQOQZMSM#o(je<Z<vyc%62+e~$1G6mnfPT21j
z)eM3zs;&>20UarHJnriWP+5_dz-CfklY+k?v}r1qpR<&Njh89#5=9CGgXIC|;u}oa
zl7C&ZB30&9(+jab%AVl&1?hvpsS%Ux$th2C>GV3w9kiy8yxFRLVXqPc0W(#d?Wyxs
zgVz8mBp10xn2B`RMbG@ViT^5OUgbCqdQ-)!byXa)ZpcN}f!^5C*iEa6mc4(ojQZc(
zMK~ylx%KMh5`)!eEHLZqmMI-6>xt~;gKhM7=E1))g37mOn99+h%TbTH7;1|9->~xm
zZCN{hB{Q}wQ|G`OA{Vk1CQ!+6Zag9p%WV$k=E`1IZ^@+sWt{^c$E{gm7*!oX<&*b<
z!K5bvwh%eokw{0$cq?;%*5oG%YNNRf3O@`AS$-Y!LAZ^K(Cs+LXP&Q$x|&hrerNl5
zDRE--Lqy|SK{?a;T$*1GEE{*SFb5$Am5MY&)0(?sV1BQ;Qrtpkn}aca-=qF=uFz{F
zJh=Yy)1$JGrQX#v$nq!8QCLOSc&OxO31LMVDlqr&){qOY*_Q2gLSg7<V)^AQCU;qG
z{#eCm56fU`mqM#JEIZEnlx}>M0G9XaRWH11wv9Gw-H{|uAF*jG`zyFNc-$$K*$933
zH|U72-fPd>JkXM{=qfZxsQZOpFo3H@=W(pSNJ1Hhi(Mk8+onlJ9YiaJ5bWI1_ficO
z^#F#OC`*wt8=;^IoIfDn*ejOJ2ytANEdER)9qf2tgPCD@8x+N{O-wwPH5X@969!uz
zC(JsyibtBl&C=maP0~XPKlAOd*Vv&4F0c=G+0$BXYtmD<pxR_v)`|xT4OJ~gh656O
zX5(<5GZ@>RR7lZ_pWaJHzZ4lVMZqJfOo&+)j$tP;F(7}Ia$ocH|9T14MAhClUvqN&
zMGEJd(f*J(qZ}_~&b;zer?3%lSu`;4P@&46bfejm^r_)W8itK2!}GSV++0GK{1ks#
zcX+>EYHHD1%ki2_c^iL410Bf9@5x|^M<;BHtGmG{E20b9IE){K0xkCbb(Jmh;lUXO
z3^xA5pXqmHHVrrz2+AU9UrTObDdhNF?}#yFD@t}^718=O5UDL~CJIP-XDntyEl9VY
zbjsB>=ukLUok+F1PV6H8NS>o+Q2NTrf4K08v()RPxaD^+wW|$xNYFl~vFC-z`~wmB
z>zoEa+tq0mG=n?%CT5qq$^+jJu&HJFIT2GRO8%2skGM5fATtM^X<z`ApIMlP>|Sx<
z4VyUY&ThjnSj7QV!o+WtQS+CXM74c-nc+QsVk|QuCV+aS3gh4zHP_&}UxQAWwxhEu
zZ>gQe20IqwYc7A^?I`GKbNL>Nh`c5}vtJnHpmGn9STTlbcHHOnf3BEhr6ofW^7)N^
z0s#H^6BL0>ZUL?Fez%fiLW&T7L-B+FldTbAkIl31P5$2Bmby(5UxoB?8bJB}%}PU1
z%tC^rgv(622VT#o5U%;$)WX=yMfTlHJkgxqrO`Bo&Fa4;PeW}Mx)6r3S-5-3#J4Hc
zU;4mE>I05DarhdRNq0IO`&K?_7GKePZ&DMzOG>AR#4GPJw~)rYutck`jAX|Pkr?Ms
zqE@E+mC>qZUtaM#s@0{v&-(?YfeYnCtaWNx#acDjjBIzOiZtG1Pt&12KmIY{H4-SB
zTNf2}Y2@gmP`g!RbF!Yex>b~GqH?vATEX+QKxbl7AtF4C%J|RZr*Z;MnY^DA7vcKY
zp;D~S0(9rEpVl8k>NFaF?b1BoR!Go4t4d$*NpRi19s<Z?b8eQZmQG)lGF$Ogv{iTj
z7Z$Y4^T`wP2x)BV$q-AQuJ_9%+ao8UgLU}7=K|cSPvoTWN&@@<*M{Q}Fagbid<No=
z=9k%irtA^Y=T?xspzuxsXQRpv3>+ta!Yv@d)!QIx-pHs|=YvSy(ecfBYri2PENjZY
zYp7Ce%0=+A4kCB1x6OH}ecqZaEW?VT&v2wzTXwarr)3T~Y&ro0<Yt0!-+g$7cm*}n
zELd9;D7lcsPkY;xp3Z^_g&X4w(MK1;<pCmwQeh*XaXtM^-CEykUlD9Fp1c<jcZRmq
zii&6K1=U{aD+bI+mnm)nhpkGL_FsJE^8Fx1k$(lg0N!3;r1Paa_=U)gptyZVrs+ry
z|6W{WDM-5_-!yEI{d?7z3gbwJM9ZT2(pR^(WOrVBF~(9=X~*eZ<3#Lg{f$o<O-Z49
z%~EWK73KxV3-1r^I0cjveuSjZndFxF+m{J)F*O<O4<zA!=BXs{J4Y%_h;x|)<hcpa
z1B}GEN^hCT?Qei1`REFl#!cA;lsz~dC_3=>g7g6u`6xavOOY9Zqp(~`T$Nw-Ml}mk
z-px<QSkG=hztt(O`8Z!0!AVL+Y~fOH)VW|yUA;>3r<kV3LmakL-z_*rL`20DV%hp5
z&~}%JelSDiT-|4}ON5lVS=8FzcIf?<Jidnx5C{(9z}k)-uG}=L$#6c&y%Y_muVVf7
zKJtOHpB^tajar8zUc0*{&!xg(<DFFp=5_~9DfXkJD}hAI8p?L$v5rPa3o`j9&5aoZ
z?Jl;kR|Wgt%hj9uq)_X-kRYMgHPRM7Q5VQqyUE#&+Jw!Q$EJ(jx^fQk!lk`-ZQiup
zNKZj;X>$Fh0yEDI7%=4^>KGaAR9QIFuSLkrWkvdLUuIMSs9b(b$Vf)50WWTr5qg$d
zBxe8;l(Gkfn-yXoiIXarOA09g!A%Oif*vR3NImOk*k3xSOv^;x?L}76bEa`O6g%lm
zx|GxA;>I8AGW|eSX=#@YBIPN)pW_sZSYD<XV~^^+ALUX|g9Slw=6uzB!fsHIprae3
zqw>;47d?$&+*qjmGW=I9uqw;J>+d=v8@HsexC&RR1H@G*g}(n2QkUXa(;q~&@N;~-
zRE{Y*kAf`MfY2`;4d%aYFvbiOztXMriIZ-nWcgMC{A@|>ZMk7#T*?u#n5x4-_zkIz
zvO(5R!Qnxnb^b53o-W$=q%4|ij7LtrxoFIVOEkn;6R>5*RT}sBplW8KxO%~j4b%gE
zGl-k;6>VkG)2yP3PM_r7rA>68NYgdF5YpuFB<w;Vt;lYztD;L_&^&IMlX*S?+!_&j
zQF<AkFQD7`IbYz95!GAv&i&~fc||Ww^3HCPi_=(R<=#m}dwwbNuW3If+!*RJ=;C6*
zxY1SWhEe$oHwweyD?Vs!(IInr@?#aXcYciDXOc*9To_I(a=nM;z%Z36co;a41`a0p
zfKxyg-q;^*=)1yIUJS69Cw(f8L+$X_gGvIzo4;)_<B)2qxF@b|_FN@_X$(SJt9)%Z
zJlp<8|HNX(t624*+=B(1xC0FUHQ~G`O_bg=J@B!L;Kf*Sov>+4JjxDV9hAkC+@&HX
z($alsM%R=~1q~|`S)zzQKLTL!&0?+7DBHEytubN6<$&)0>Rj5>-QO=a&413hs4LQP
zB}=k%=`xwQQ5xntS6JBC+JFDPLOwm6x+2*-b&#q|Reln+s?NZ5FVsP=3Fo<JYb{M7
ziz@#I@eN68y$@~tJ<7<!<&jg-O6_+AQ+z8%SMty3IFw#eR80EwZtsmWq<kazba>KG
z)6V<8!VxVMrLEu`H(wrl$+J~v^|f^R7($C<XW?dTJAO}9<oC0%f<Y<M?<fBE@x)U;
zO2v#-7@op+zDLjmw`8Vpv3IR5N;U>D=hXEpKMfKyVK;jYP~FAFuZfm1MZAK8*%PIf
z@iDH7n>&eb5+e1T^KUHQgGF5Jf#qV6vFHp1mG*FeU4NINQ58LU_#$mG(#O`h%fBg~
zv*jr#j7u#ST(%?<Ehoc7^TF4$JmfKV;$jB#a`e#muex(TMJQl56E$yZKAp2dbp-Cr
zNqAx#lP;6n+R9BCMIg?wE>e`~p!MnDCS@*g?TT;Etnoc5@0EKGk-!Iev<XifZWJtw
za!npT^v5RIb(rwyz$m_D5*#JmVk$@0Y|aTuDt_*oGE4{j+iboh>z77}+wwtV=3l^w
zA?J;d9ROsmQK53<Gqe%~;&%^)uo0~qxu`g$#{PVoz7GAv3%c%ia44d9T<1VBlL(^!
zTX7`x!f0kA0146XwkvP2F`#U1=KD+7FJ%ro%>)NA4H@Ss^^Sb0xL1sC+^Ry_)@Q06
zVx1Q(FHE=;RZPuI7qDBsyEpX=(g7mToi^Ajqsg@`WQ2=2oR_XJi2-2cd}gXR9i+us
z5hq0-1S;-YpBs#t>=-<AYCm?tCL}_g+yW@19Xv$HEWRN=SUD327lQIO`m<3holb`o
zVnzo&m<nmAfs+CpiXpN^OEaY(pk{lhM24u>3LRB5@0u^JUGcji?U%&{y#joVxIN<X
zN_)J0S6e&_t&@GJdDfBa(WQGGs%?%a4iz!7J!12A(OT~X3vwkzW_UHMnqCNGV;njA
zv;4#?&!cIE8y4>VZ3^T7wjSJ8y!<P*>UoyOv(MVbjubktY_K#)H1=j|WH!qSVVz#r
zlol^723O=ZjIRT{AGhG>xzjk|hb)#A#jjlfI#q#!%34E{KT}bDH-{m8asyVn+|~`r
zJ}sDxE|y|}3f)E19tg5s#bZF>j;P>WZl;RIfQn1!D$sc>J{jb&YqBm%@1m5oCSe0k
zN4I6P=q+%Kj><kAlAV@!KJOc?A_Mb2Xpm90hfLHCam`5W6=yMKO8P9`lA9R@xWFU6
zXY_k#X7Sc2iI7C(7B*+nDmey!3$%(8#>Wf!o?Yj$>aUW#BVesF!?vG?=jf=_%<7yj
zf0+RpdFN}?_B|ZRu``k5M3ZRiC_Pdy1zt1K@bQ_57H!_k8eo7rloOeTNoSR($yp}8
z|H}dp<kj6oFYkiyrZef~$d-{uww7M$hVV%9kS$w>_Ywzfq<wswxo~encu9RbYU^q^
z&IR|!Ty&Ak-PIkIpqwSK?*?ubQZd>peUAzXqaNrDlGP4pzSguaW%xPghX|QBtb7Fo
zX>A1y2*YH2)_#ouo;3XJBRv=v;fT?q%vU;I!j&ay3C4LSA+x(N&uU%DD8Am`pJ+Wj
zq$EIzXv2?;V9)U*R9tB*nNv}EESAQKydThQCXAkDSAn)RkohtW2UUJki>!6(SY7Z#
z$PvK-qaGBbto)L@o?Oi6HArUM`2!36Iz^+~F{!fi$Q<R*P=4B^Hw%TqyV!@o95Qb5
ztR8`v3YE*fp&f-Pr+$A=#w2x{j~xOg4OO5BqeHvJs`Q;+JqUfBN-Z_1&0uGwu9?~c
z+$KMU{xI7;L%w&h)R?}z_?D9>9LPF-m?Sfs@gRK%qZiCk=a0J5N;>suD`|l(L{x-a
zwK^Z<oG`SC-nTrEZ(fRKo?rZ=ble_#8hn;Vv^9rpNrvorsGuiCpgW%~&mLve+53OT
z^W=wr2YVj4YF%pU5sqA6XSl+7W1B~Q>>A1I4_G#{ZTSi-+(ZOYqM+fz3zzQ6FL`<*
zfLbnBozZ5Hzfes4jSZ}$z3Q0DR9|Y0MF%JTXO68KJs{43<2wV>bhKUd;d86C;EKXL
zc~jScawbG#GKXTCn#@EGS%V%RS5*x$A@<hy&r@*r@~9d&FVV&b*DRw@9M_X4kzrg%
zN^$Cknn{|6gpPjMr*?l1IWgH~`90)(TN3lKM4`-(L-2o<#3;C%joLw}pmtQuS&J}s
zSpQ16nS?zHTruEVR#EWU@$=z0I-hkpt57)?jL-{yR33Ehd^`+P{@hCbyJ@_eu`<`(
zm0N#k$K6fwY~8LWr+MU_wy!Ll8A8RXH}%hECuce=CL4FF$1S1>oZ|~3mm7@rcJ}ua
z>Qp|Rx}R~Bqr9#aX8PZg-)iOJKIyTVrDg=qVJbqE`9hCb&rVcAsPyRF+JF~3upNvh
z^K7`0MYtA#c8<_`0Xnl@dCWx~CLO1@HZ$=Swy=1F^e?5<@5@6j2;0`96mm+Le1{9-
zs-O{>{o6?Sg#UO!Z|cj1kJYFC!PPFI?6d6SRh3{GGflRM^F^iOX}Ze@GcI@A4sut(
z@o9Ef_T~8pvG0O6I;G4Wn$%0e@_I#2N8HKjQVC<qAkP7McDsqx&}T9C#f{3uL@#L-
zpuCyf&a@k*lalY!EmadHN&^K$32aWpLG%-00o~fFR~8`EA-AXTLDdJ6WqVQ}e^-P<
z<Q0ECG>3@*(UWhyXR-z^WuN}-gSEAkty|Fsvg<<<yFlFiuz_?ObqiNKx=*x9xfuV)
zvS0N}l8g{Qz(bt-og%$>h=jJQPEDF^2;O`fi47H^ckyH1Os=kNCg@t3aU_VnRt9m5
z?P$34u2Xq)m0sub&Wd<V5d7~zgDknCuKtZGgy(YtzRT3epNVAq-4^@yc_yHWo7TmZ
zJF9u0Pw}sL#C{O?Pgz9=0i_f$yEVCU%znW*O&K)JCCywgo^@$%Q<Q4L9Tlzfcw=1M
zr3nIvSqtbDunbGKs=q_2KBF%|3zRoT8U12>;pTm%;<Dv3LO_qBTTl5&Oz~pzvF=Ig
zQqc#=N{Asti0`CQfJ-+kOZq==J#tD>cZM3zo+}=~`4`H%=oASlo%W2Y6er5o<M+)c
zs;zMk__N~@r(ghmYo}4(`tw?aVNwRe-1zkV4MEmW+KJuC<4)LiCvH4DO!x}Tct*65
z`AJB#?TOybG3LWUR`*u-Apu$ikks3@=3nUz{|4n{m>V(59e$yyNlg;+dm<e5a@{#V
z5In*SP34S(D~gpRzOph!<ykRNP5x%#a?47TDIPkIG&4m_Tz&XXOEAfNh5#x>D++F;
zVOs#9#pOmoON=w<aj;qyh}3NxV-4g$xJa*<lK*%Xwv)d)bhj5_>VlFThW74aVV;pB
z#p0pkd%MYmA&RS*brkv43MkO_kViR(=(uSVFQ#X_t=I6}%><k}aJQ63guj>pMkA;>
z;-Ra8Tz2*{PC?4@Dhr<fH>%RPeC7Ri9dzQLY@Dg)(rfl1N>zc|>}>dutn21Ax{E%L
zj5wsVgLt#Slsy^HwSIPU>J^<ddMXcSTyzADLvIaQO@A`mVnH`l$a3<Rn|>i&gywLx
zoVOU)R5FlE8E!C%{61Lx2d#-7zIr7XROzlxhgp6cfkul;i-i|*HPNWxM`;A*m_<~U
zTqy>ow<-dMCaV?*>AP6HGgggtEl<LUNGEm3T8lAwd4G3VMk(Cm@0kwdtZ6*QgVKXK
zBN@%niIiVdwDF-eHAJgF+z;zd{*{Yhw7|Ik2d*qIY;^Q2KK>|AKD{AUU(blVPE%D>
z8izhUxCl+K_$v6P=aWu)2UFE|%9$;3ar7}T824GIJe~&}-gf&pFIPH9%2tRTE}N<Z
z-6&R8_yY2B&U>|4X<mS;IWyjUb9oPny8{0k@c0n-@dWBx4saF3y~?Ud5gY&@V##}K
zHHMl1RLZ8WIl2H|!I3=9_MxTu>~f<eFk#8ai;rd7!O_qGhbn%PkF5DM^7+e`7Z0zt
zKV)^iing{3i`@-iADyxrn%LY;%^G!|3~mG~PAS<*96C!(C|M7<h-y51#Duu{?ar%*
zcbu;OviLWjP%2*fTw><zs>&K*@hJH2kwenA68DVU{pr&w_PbV{u_9Y7+xd^tR}%^e
z6vHqE3BNotYc;bCY5(onn*<fgnJ1;PDR=$8KAQoOL7ieq{$js4WnjR%odGE3asSIj
z7~av3Wl1`HG{)^v&U94p11nR+(CLdR8G32@AhV(O^hrS%iMP_ar@=~JFhfHV+_X3R
zcV-zp#By_UJ-P0YX>6XI58pLId8Z0lHnv-m5v{HwQ`Lk1ioV&L#vx^H#?l~|d1zwr
zR$Epk1g!y{CCU)$P^XYdPn^7jL^`2m$bWmn4&it>VFz}#cg+=|uyCV}j=a1o<aDf<
znV7P>7E>%?O$7Yoyc9Y<x#b4K52ilwpD*c>4kSZ2m_rw?OZ!+CDtRtMZn|*?v|0q?
zi5pgmz|2fAerS?4xtTzbWcHwT+FC1N!L}`#O-oNKj%)30+mp&U>fB&%$ka7w1yAeN
z&54FlJ^;KXAIg+!GDL1c#U6kic^!EzP|^P$MBX=Kaov@-xa3e`=j250?s`qux~0P{
zTL^r7e5*DLCu(2f(yCn+qs_}+BVs?=^e{El!S_C=9YXd#x*~>NX}Z1BFP|_iiO@GF
z6^zt2#yCLKv#|x=cN5#bIaj}mgc}wB5<UETqCAs_#@IAiaxCW-o_8xUBaRWEj~fos
zeQAWZkprd|;wsO}pL(nYV#qlpfb>`Zydn+AYE`6iT=g|<HSqn1RO5**b&_ZV^@%Nq
znqS(I#X$zfjl-2g%^3EWKIm+tI%Ce8FD{0@51C8>#3rlkB1xygX4Uqu*%;2lckY-}
z59lghzEe0~*sg<xZZJyw4Alg$^UB~~SCDm1Ny(&5i)|E|Pw!Oyw64|vd+>(H#oy_3
zST@o}x&=KjaHtZL96a9<>H%(T>@O!1geL>0_3(Ip;aW5L*X>_2gSHTE`>(BP*rzWo
zn_R|U`%eN@>?ZXt<xa!06^5txyD#ymrVAc$*ApNC)qRAo5vt1X2W|`!FWN4$k04XJ
zA-nyXc;b!2<8l+TX6JTvlCR8smXN~5eemGP%A}F<1;Zip<@wJ{`9P?J-{^14;|Lnp
zQ9}NqACpf7util_x#74(_76nk=Xc2^<JOrv!%_gg+@fh?Sd$w`Va@_#(<Gfo@?QVo
z)1kcZ9_!0dS2@$_Nfa<5^z?jf?o9qp4zC<Hvn{kbFg>*j@fc8sV3IcpA~6%GMi<rR
zXQe}RaI1g{H{|Gs(B&v`Q!X8&VR^}RdRmHdm-!1$g-aq5`7>RI<h|Or8ux`2F2Ysp
zJdTkvlc`#DlT_W=F2HQ$SkhsTBd%@<Xz6}Qwt`K}1n-!hwimX#bZ4ACKSgE-7juUG
zeRE0*J)t?AQ8{KkUDQOm+4aMa+2`k%)~)0XBu?Sv4R~~r>Tp*im~i1`H4~?Fw6gKR
z>Xc34!?|?Rd5y&8z%ZS(vRCu@*yWCbG-{Wdat{z(Ik$;j^5ydOB&a+91!te}AnGag
z53)?!YiUwDO53FC&e#r_Hnt_DT;Oh5+-|B8pBt8u-)NVWmUaY<mm{S>xE>FlZ}!U$
zp|@;R>PofBgJ7-+pEuNv5i`mTYHLOPE!|cN3S>iZ1wFW7?7#}UNJZ`$Fl3k$=UyP3
z?P62Uqb(IA1=`xbx2E)<fxY&y3Fz2d=UBg~qA6WHBQBygV|kNaBfvzbGRtB=*1!1D
zcg`BnEqFoVOS3`%HT;=OtAP>dHgwxbpF~uc3&&JuwR!moM`nXb23Kxf_#SSu1$^{-
zz;!4~sn)jZc6v%miiC3t)x5PRD4YCad?FOJB6xa!xe42dmRKfO+*CnIOWYce6g;q0
zf~EoOD>Alsfv(ko16=LgCmJkc85=k5$ETmLIsP#FT4e*Fqe#Xq;oBXtB+m(!!#jU4
zQvDuDCW6RxJtn&w-E*>k2Q*V!2`nx?DQlX29<|+S^7~N|r9SnK(>uaV7hds8$oSl1
z#rX>jhJURBFg@pw4T}vkfoMLb&PAyEYGBNlbJ&1(w>>(kFE1Z$Aku9YX_ZumB!V)J
zp^<e{v57usV97!bAkF+PID4vjgkE0FUw+CQa5I(4X{}>YZTEwnB}2=RKV)Fz-fDKT
zyr7Y5oT;AGpE8a90Da+a!3hSEk?>S2P_`8;%!{{#*rQy+;6Z~C3O+XKyv6k6UhTBt
z@~T{PGG=IA;JQ~^>ydGa(3b~FN7A_vux{ev{UJl$MB!31k$9_!t6fX`^9`7tBIVJg
zTWgve2aVBTsE9ur1IKqZwWNsswsyPf$Uk$cpg9!*%gQ0`NRk9vK%|7bWCF{UEUO<|
z{r4yGec-`K&(5C(RTAKoAUh!&An7C8uMnysH2x`bw<WGIGSSC`D}`&HdIcEr=-~5b
zRUiMqM{Zzi7s}#jkE#u_eO!|pEwPW$InjRbykiKWUeEk*U(O-3-lB|x^i1G>o3-?%
zijX=cghhMf0X%Ha5L8zSpa;4sB`PyeXW4iuC+>2Vo2xL|0xvM@p{zyNUGm*fkgMPq
z`=f!A<M-r_!(ZWlN@IhKXL@ijv*j>{U-M2J1Ct<1q#amAAl&6Fl@&Mw4_559MHXf*
z|CL>*>iuX-ZGGvAjRH<Szj6;RvYC{fOOti`FTa4#Rk+DmjM9Ap9@D6Xn*6W5-t!{*
zPqRZ}@T%7%UBMeq<8Fq*7_rGPslD(sHD(>FFsZ{cw!reDjOw5x)Vb`Qg;{!^C60MP
zru`T0ip?Gh3qq@~t0I5Smy^QxvU}MP-Sf|gQKVZQ$=Jp{EAqd!#tZ=Btla7of}Zj8
z`^=wW$T{)LXl56cT_5o(oaY~?sShli^!c6D670m$tC~ZAzM2rbSFrrZEH&##@yXZ8
zKAE&1CcMiuHqIOaT?E;HMV~uM*E8`6q5fNY7w3vdzMERHDvxtBy`BhKt1M?%&C0**
z3cLA<o@P3dU%O@^=3}Z?&6SXtt_{Bj4JlbXfw943d8tD0KPscYKU`Jn_=%&#I|S;B
zRhbf{mDF6{ce~Q@Y&`e4xh<NW)&AK#*?C&uLUgj^QE@D9$@OLSU;rJ{i9O1YGeDp8
z3w>9b=|c@`5$5WWER=T?G`t_9ggsI`T)lE{Et$f*^cdMsp4v!79Y{!p&A+IfkN|*F
z8xMUzaw)~s%X(|ovTp^4FIeVmjd_$y+1^FIS*Ga%^uK%$#5er69tF|7v0;|Unaq8=
zTP>zkdAVo58cAYer~u1K#S}d3LgwR@0myay%SiNh&n3kKNbTyY@yRvUgxW^Ar)wd)
z8pivM`-)pdl(TaXUVKF?cL3`3HkA**i@$rMAeH_(Emyj2PtNSLNFS(%)o@gW@BV_6
zXoUId8`y+Mq?_CiwdZYAvmbxsMloV31v|>D)0GqkW(!W=Q@Q7NQ-4UYpeLgJqwNbh
z{d1X)56cQ8b}i2l)Rlqjzkit24g5k6!7V18;${jZIAV50FNd!`5lB@of{blcMTe!5
z`X&UeRuD-pl*TwaH9K`=JW!tcT&{P818<uVCHy0mVy>INeUdw$xzC@A4+qZVC0s@1
zM5FGq;52-T4`k0}n_R_XR{4f*zgp^>R6RCSb)1nuo{x!^BlBH-AV#RXFU>7tN|k6Q
za?xOF;MkPWZL5}kFPhGxJO}ucTk5l~e#;}yOVlaH5_VDp!xH-|$X@yVsG-09-`i9p
zP-*^|43pR*<xh{-ZA!95FG{H1b-s*fl1_4hvlM7s8Y|xqc^s{RY;?k;RLZ^=QfGNU
z-Q@Kkay?9n1Sd<kx5*}SWwNR&JuOkF4b5#v)W2u22irU9fXD?ShAAym=r(>8iI~_h
z$VO^=n|E9VjeR<1cR!v!4Yp2$u|rAha(;ex%AFYXs_$bJa8)jy8UOEuB8vaojmKYY
z_x4kDzp$@8GB4YS$Mkqm0)0Z^y@g5?Jy4jb1dTuq1PD2hs!@0Jm`29`T@+rZC;*<w
z<!`cO+8ji{M+?)!kU?e4GXIlv=usErH9>>I9dX#()lw^=3ZD|bCCsq-UOt_2`T;{d
zds%n3(H0fFpg*r!Kjzk0(<baki@4`8H2HF2$(SkfXl*}FR6?OAf(+nmH(W3B7=5D>
zFT{7j&KD7nbxhzz$2(!pI2^R_8rg|i-H9f=+q?+A{E9M|yL-VjR>mtnd!s9_jPnrA
z(QYyb6+JO8;WGW9`J`yZA%FQ@AsLaDT-AkUnh*ZM-#=PLYX?FFd$Cxpw*&zs2A2^n
z4-wQN|11~s%ycX}K3bNd)D9Z^FbZ^_#Gc7|Zt^h`h)>OD^wa&imp?eK9eV%j+s`pM
zTK9u0=s!=>gCjn_?A5GNi%i=1)Y!QYta+T9@=XbLE4KKvz>59&llHCioQ|gG$qK_*
zx>{k{^zJpQek~jHjlHFPOWX3cI~GaCh-WH@m7A*fff%+R+5w}&jx@*n+$F3`jL}02
zPt~PDq`70O(Cj3dMHn`_o4ut(@t6WJx%e2Ie<TUl>S{A!S^I1X>K?`g(3h+XWOWx(
z#EB7W#cVb$>`UQG&k_8UNV{_r(v2snTs;Ato4}sI%I2MOt)=@X205-zn^Vc9CZJ_z
zB@asce?O552VSG@4+uWb70YI~XS7lG;t`ydZfCV|@a_rsJldL)mXmw-;QwZtBYC|N
zdgODIkY)4nH(;dsO=cleN#MW#lZO6pJ{q`8Lq;BaqnV@lUc1@a@|+v^^RMy`xhu07
z1r6(^g$SSG{fwhF#>i$)5ajn>u~VNr4k9H~54J@c1a>in?#p2-o|CeK#a9D(3Auv8
z+ozQw)#pz}xE-@unN|#b9r=>>-=79Or(B<^gg9|<SjKhA2bC-q4`!xbd^pBut80eR
zmu!i$w%k*V<n;jxtQ@!A%-rWre3pOK^j_Wepbq~0(;JbI;$g#DasU2Ss%^{RnRWUb
zkr$EvXFLwO*jeE5pJwln&6x)h>17X7>7*IpQT%Kr{A&L^5u`tKh-i;oewI!1==L~7
zbbvq3M)aXDW_-rrE>-%F3&rzfEC4+SA=0`9Aw!h96Q2qLNy|Pj%J2g3J$kovOkN_x
zAQ)f^2o+PhoA0d;0vTJmO#kauSPOKxzBZoa>>^g&A^d}Ktd0yNfOp{67mJsFlEt*n
zt>as0lTg*9zngWOH+-uE8<ONcq{h=cGI+}@?dN%@^RxNINtl{5!xIdQSI{X#D58Da
z>(o(y(2i!d>S6YJ^=GE<a~c??V6%^qUy!04Lk!!JDPGf9%dDq14eFwLx9{{B@g1jS
zFxMSj0I{s#F4~FH_-~QpeLXzO!fo*2a^m*g<oB6m4z<5FVke=0m=y-fOJpK`K_gGz
zg1)T7@US52b~bEo_wVKB7O-Aov8nZCfc{WFhq_lau*`#pKIb?m18gxQaHu^8Byz6t
zWL3-e9jl$#HLx;$I7!7`BPhf_HFufHIsb|uJj`&ShrYJ41=}ujC&?_edR2Pe!SC<+
z&Od}Q1dDyfVY;mb*DT|OklUxHH>#t2-)P^=PQ{*w-o*d<@ThY#4d&)h`Zz_t^TX#f
z;~OiLC$=GPIr3?LG}(B^h^p<5um2<wA1{=q7tTX%VK_Z(A4DzQ|Iu;5diI>LlZn$L
zt1h?hj3vF%^qcIGR-u1xWRJQ|4H${110(?p3!bZkg?07|6%XDsM}jWnY-Kq@7>uS<
zR7hu@hbfel{-r~!*G@6X>Ibm(V%4Wsn(6t<#ign&B}TSAZuE1Ew!r9r0*WQpzOh<T
zOzK>1HyS*WcY2h=GTfzZaeQVDle43;vE3g|3(DLIem^mg)LlUTbJcL^IyPVaZxFbw
z7XQi2>uOhD)-O60m*;oUue!A&5ZaO0jFP*C#8ruo_Kjkaqg0ounz%LwyEu51v4`k0
zblbY$Z47s)?{hs(c?&Z*GuR)yG3e=VkTc!37Yz}JB9~_W*gSnTL&W0Z>xzSJAs%4q
z_tN27hcQtVRQYBh<;8(gg%M#UO{pAG^jyzl!xWh!NU!F8)>$drZA&cZZ}enw@1H*D
zNKHHl7v&Xv@y`S?ASdxESfQ^qbm(iD>$7$T1_{=Ir|6OKfq@vzz`(@DhG1;N|6jcR
zPt>5ql-QUUN~K%TcskH<r`jX*+p!s#f0b`zB{@6Mok?$bK7T{4F62<#!kRZ`buvPD
z`uy~0axhcDZF{=KfA;sM5)Z`xja1&gy%Q5DLKcl<fO2zZiU7+e<e}YBz8rIV8gyJV
zxn?6<{8%fwQTtbVMdOQKEMwVx$Js@Z*xrkV4$7C@oT%z3C@gftq)F+W1y_(y(prY%
ziaEqvhqM0?%`D?qLE|LJ4oNmp;nlJb3BNlhLvf|ezs$wbm96kB`Y5J$*g9QVRy8u;
z_C-$6+Z&8TIehDV>#AH9)-5)AdzW~8QLh0XihyeKX7;+?Wk~MF`SYP%w^;nQ`-e28
z&(6xS1*s!Vs3OEh)E8(Cinmw5p(Pqvwo+prB`Hl3lSAwMT3u!Ti1ejD#Q%0MaqWCm
z_V&3Fqg;{Nl0XOCv=`U*-(BDl-4s2xJEi|6EiIkY{`Q<dSKli!`>rSU&Kvzt0_oay
z5ExTS#*puO$W4ZkmvTD`6a#;0DJcgc4i298Z+&|m`@cPg|NbUkJx3tW&DVFV)_uz5
z^k_SDo+7)t9%VBBZ^{Wy-J<7>ew{}_7}}-PVNd?T#COg9wHmY3;pP`Iu8W8n93*UP
zl*PheX00=!?MBOHu>*CE(=z>f2XO7hQt1k*K!X`=b$J>wCalE){2Q66^pL%AwV%;L
z!nDv7ELc9^BW<}Keg|PRZ-02du==~jz752Yn7*bab??M5h|@n0I?v`fb%$x0m%WtS
z{&tCf;YXL8>y*RcxS)y)`8ibPUIH^rtVv`H7X&|(^+lXK%^vp@?Xx>5LnN<t|CcmB
z$Hgd4$r;C0A)mQnJ(J*!Y)0}=<3d_Jpv)q*lqbq>^R6&q=ik*&No~1##ew>&{eo{K
zMQ+!#L)pH1yjbEWSn1Ba5q6gN?t<o*t8UVmwn$$-dE=ZXIN^u4GUZHcBTxsM7(q5C
zz>q!{NwQZDeECJ4*e9Cfr-nN7*^cbme&S-^r(1wab$ejof38HooedAJ3FJ-JA8^qA
zN<}$&P0+}xyd7#OA^Ub)u*%-=!HwlG>|43=jbeHA+CM8_neX0M<|eTvjM7q@2(ErJ
zKmj9}FHw+9^5fDcwVDqhWxB(Vu9x;&`2C!-Bp;USGjpVfgIo&!)TBjih>d!M;K8A|
zC%0OqA$JhMd)ZSC6PbUq&pyTd_F^$y6dWLEm8z>IIM#f}bL`*@TywJrP_Q#$TNI{r
z&#$-V)$;fG6-V4vB_lQ9zGB?hFH+gqh^`&F(QjIl+OVZ8x0|f@crG_QD_k{dCC+Sz
zs{Nuj)Y2U~BUep)f0fLcIH$Xr;&pUeV3iD`>~GzYj^AoqHZ~0Z;^mDA`zoOy`;_~l
za-ln-3VMJ@FYPn&HFlIvy-ZVT%oy6s!R2Li<8WHOPHNKnaV#r5=^HIGP2be0)ebVS
zFTcdUuHl;InylbC>(N}WUU-=1BkA>LJ9AyJ?NAHN&}rnyB)lT7Eodnjx7<hb>kUpc
z`3}R2csOL4WL%XK_N_hcUX1Pju25&&jWzq|Y$?r4j-?lK8eK6s0T+#)g6h~;=mTSv
zl7_D*%)8w?b{ecg%TP)e&LDL+d*!J#a?rBcJbE4=jZb^z>VmMb6D(X>8Hp$fAK{Dc
z>JC@y+77l)mxD?nY%1CGkH2jWG(O7^<g?N%k>N=X>2L^q4^}IfHgT&8#@M|xkCOdt
z`%?N$;y!izPqJkKuYET5mA~Fs+`YM>`BMBogg)n@MD(eZz8jc5HLK*TI4$b15Z$I4
z{7{kBU}07Q8a5RYJ-;(#5}dfJF@#rCK_4W9*muO7dGNcup!kF7gDXQUb?&4Fmc>^E
z4#bK4dq9hKd~7fFOtCK+7Jp)JV)x}8`}aNuUOl;pG@zRI<J6$NFPdJW;F}6*+kO)q
ziQ6fNr~k_W@RH1J>_dz@jKqBXAMiN{5cyqPZ~Am1w5Qa)u#4R)(Bp_o0qv!ieDkrP
z*=rwSfOsy>rJ2b+*=kbhnf-KW*fVn3p~!tBowL5A_T<e^@l&Ssj>MXRP%#Bs#_Bfu
zoes~pUZsDjSuZy5|8oA8fV`Lw%n?<i_F62Z<O|>MvIN;xw}&>Mc3aBiL~etF3m-Fx
z3yxCzs^`jd|M?Y_a^>Wq=FsrF81;%Ja0M)@O7W-MfJbrZ{88ZP95F^`3-9)W8u&;f
zq7+fc#z64w3uMuQycBRt4*I${AiW>%jsDsT2`CfP2=ApaGcxSJ%WI+_2Jgjql=5=Z
z(t<FZOiT1$Pv>R!9xOfTcuA4bro4ye3@u5F$vjY@Z1?Ed6ERoVVeN!Q%rQH@920nC
zLb`9yKUvqpV6SO2&>3GmXG2183>?gR3oj5MqG=d7=U8^cnuv1bG<SQ_Zr6r7<)Xj=
z>sqeTcm=gW@_*YvkhZ1(^?AeHrOEDah{i;G){tQ*>wOW0?GNHB|Mu_&?P}m7wy#QL
ze*N~``hoQdb#NTY!n$kTPA&Pd->p6A;ORR6jlSu&)6Lw=&58}xI(My5f#1^CG#dBz
ztwlu@>c?xh<z%UoP4%{U4FqDohH#}r*>Yg9*qH3}hOv_V_vpyz{#H%UgI(z`v8Jqi
zE35rfC|eq_8&bAmtB=aDoIQzMZ(C5k(2rBlE{kZn6bCx(zr}E1-F)lcwFlj<Zd?Dm
zVAqHbvaRQtyva_)3>YOaAiE!Nhs1Rk9a7cQi7Gq|F=W1r_NHI3q)V2NB5sOK>Ssf7
z!`%PGZ_*~`%3F(Rf-O!mHqWJk|E`2*n&brVl>Hak9W3MS(+4SWN3y9(jjbJX<jVC3
zw=bNFzYMaR&5ps{yw-(={M#p2^z-hH>*r=VduY52BSU-G_f6=`!b{A}TQ0M-dSeq1
zyJsuKJe&4I7UOt+E|u|+-LCGAlPU0J3GNz}I+_XtOn;k@?ybxY?6gZShEdF};C^`>
zw)Rp*XZD_@IyE@y_LBN8--H?M?HB2^`?-)LpX%ej6V{FYkE-_!YijMfMz`BXqXI#s
zcNGPsL!=1=m8Jqhq>GeL5~K<UQUd4>y+x$gC@39)M1n}$f)Gj|AOr}ZC`czDEg^(*
z;`4p)Ip_VIb**cy%zNGUoMVnLW~cV1{+@#_9tA%rk4g=@C9HSsb?`RNX3`yCEqVO!
z9971iJPBz%yP&tHdW~x=5B$nA{(P0!uPVt>@7cisbJ7zYI2AFbJ1jCLfw3)_y5SgB
zeNTvmj%aCq*Nj(4%~h4r4WDICZ!E0nH<=P^|1RvFKKf5_l0Kitt$QW<hPYz3zrz-N
zLci||40phkGyZu#bOyrfp}F+hwy$X<o%Tc239A^j7aWd2lMhCUys}$&HF3euodII)
z{os?PHEIzxf`aIS35yh9OqU#;;XY4%IcE<vnTMwIiNO_Rt;Jt#>xtQDuM*U>*ZAzV
z4h1pO72Fr=PuW7+Q)ShCu=8rE6c)R&qwUi?1-JZzm$sd)L$Q7-LJI>>U-==%jv3v}
zK6HYM{fmPb8n>c0-kSb`^5Wx3a>QP$_=IItZsGH<#_Ne}W|-k4E$X1(l(YIwSgq+`
zDy4U+bx5J@_f31{OX?z@QY+7nF65+5s-N4nb1;YK)SX3os?52Y&fopqs`&gIWb578
zzGuvqs?%rl){fi)P>3tKo_g_NY?xZlBvLi8kSLKPJfOEHx~GE@UI37UI|c*hA}aPt
zUnS>)HStUAQ1cwSl+acahY}HnEmp+RtJ6gfJQ`NM=Qi<0)7yzA&?0}0kc#PDzY)R5
zKa%7<5QmJMg)<Be7Ct}51~}sQ9z^|FuST~35hnNW<F@bPK1UbH7A7mTg{-_tsDLQo
zE&rY<&iM7{SCQGH;>CG3q$+<b1^;+(E$_wCI8{EBo$4i2C!rcX&3xq(^@FeZz*Rk`
zFeJ@k3$rx&)erFvyt|@B{dd>8d5cxFad6hw8!KuN4aJTU9RjK2>+c*aaGPHhC&P6E
zlH@ga9yQOs8S!S?9DfBLlJM(4HhhAYs4vL4X#j!X?Mc@Qro7m|^;(rp_IhPaPL3#G
zj0d&IlJ|fBR1^vPd)VG*z#yB#(mmiy+jh<{N2&Hc6bCfUY^DW27&2@&*{`5Iw$ZZK
z8Qkg0q|Vs4IgcY&9JOeN{1kVh&eyh+CQizdZ{)wFcLL$2$Qr4~>J40&JQ~ADxco8J
zJ4GV3&Nhd$8@28HDj@5ptE9M`qdTaNb31AKUk%Id?tp?`*(%NqvkWgkVMZUVu_tRY
zkYE#yTDZ8tLQJ5y=RIq%h}-@zE^Vpq<dVcF>JMhumBdLeodCPZHL_aKRgNVGsJYAi
z7SU;B;_u9r%TY6Yw>aw#v3mI(o0^@!F>D<6##txpdGA7(1LrT(rZqy`0*9DuV*_aA
zq3cd0bu4nR(%8cqF`(QWcr4mMFn!}d!{D@~(f6)#l?J5xU8sDS!|9|^{?|k!SNw0s
zI4Gp+<?Km$#lYYMj?(T)vGJ)lc6we^7|_k2C1w}8aYh|^1#cqhlQneudXtT#H@q-7
z)gfe<ZT*+3?(WXN*|k`me1-acr@F3(I%|)@_qx2O_UPtbF)2-<T-&ErQhb!T%r&3R
z$ptlQXU$(hC+|(E;u8~Z+;Q6zAnIN_tAP=-<b5-L$_oH9^d8<<v4643wq6sp-%Kn1
zK%o{<+P(UTUxte41t4m2V38NUpPdVR%D+q}^4UgX64-3vdfWm(iTAO^NuSWE9sF}H
zN&QD^<4nU#5#c1V{**z!>u3(5I&n?fH->jCBR=V;D<Jk>HlxA;=^bdZ)(=z=JcOhu
z6Fl20`!Rkn1V%M!yJl`+d0z<r#Oe@s+;78kTFc}{cuy9-i0pTCSe{xEQc@ovB3kDe
zW`~o!3dCr#^G}AWs5QfLPm5CEIpqf~L>_C)k`&}wyf6Tz0IamV`mhe0?1cJ`L&t4!
z4$CIhwg|sF9M%;a5HP4sbN$bMuE&x4we|c*#qPEG1oyhywx%|gZGU|xQD7FSls|<f
z8scpx_EE<JL&u3hxcwiUIM<~NQ2|lxLXzP?HJsZxd$KQ+dklmvY^IZ!x2?<$zq15}
z7xJf@2PA!v1V~&>GWDVf9z5$9u_8gMK%KNsgX<^N3ZBL4&|~<?TlS7H#m~%n+6Pn%
zzU_;5O5wAEP})C%W8~3eJ7IBjok0Y)C}pD9UDo^e@_VYTQr*nNRKxF-!nC##y|uD?
zn>(B12_*3LE8s-A+UQO|GU-zI;P%(NOY?$#97&|LI`GRm>-v2}IjeQB&;p&ajuSxP
zna+UoxTcEF&Epunp;yd$ML~TVAK6{oT}?Y%uxL91HqBe)QB$Imx-~=3lWrG_`ZWG-
z!u(0@<KMK2Kpw@_c1Ju#Ul|+0L*7;!hLhAY9lG>zlB$8W5uu1x!rQRsRhxKZvRPWh
z`*~OCpcdcxAL;d>TC19gjsCxX2M#TDE}3)<1iarKSX36>>kB(obsvO<d@`@TA^n%5
zE@qy}_*Jsl^-t1&RP|#>c<Ye@uR22xu7P~lW@h?u5xF?QKn?5K2PDv{)m_wbrhEWK
zSrgy(%ToqTD6dxR*7gX%^;y64bbz-rY`#Bxf-nl!8d@Wl=bCO5emdU2Wq&Av#p-VB
zhW~geTJZDp;+(w;yk(suc-sIq89|?Usvfzx6TCNZD|~ICjC{Q|B1tElsTX`g_rnq+
z){()_$hDJw1`%4%e!Mj03{%S~Y{;#+zm_788RojAeg!hh4iaXm{mF+zE%B@ne!8Np
zW8EAn*TM2zR26VL&9DsfbnX4I6WOO~jk6LdEFXwlfsGM#`#)Y`!9qk|4fdpt3@*#`
zhP8@-ck4F}hp#*$8FK(2M{qSiKV(<J+})=5?OK{uMqE6786@0)kQ^4ME;ZRHVIs%R
z1wRzh-}?wGy5JOxykPSyu+3}aPj~Wtpi<xl{MfjnRrp4foeAM#Txb8#iTGVb!l}IR
z1SxK>v(r!XJHBT<mTs^m_%d?4_(VTXTrXY}6be@<9gLi{E<nWYi8c4PF^>w>uqVpQ
z?vxjkZ@33B+-fzALG#S@F+W|mbS8a5=LMp(jgGtl0#TkX@(CkOV9Y^@aG#Tp;nXB`
z9S`9_&Hhw7ZCDaq%4dy*-#mkT-#DSw;P#C8JC5VY$J1Kg+drxYUW-th=FwEY*^?U-
zFm8BIdrd^ke>#UsQFo<Bt{l;h&1OAut8QBK0(qQo?<tCF|9Z~+_@wKLSs#=(*q!+T
z>^$4H<8O~$(YJ5)@Ll&T#OPZ*qFieMdM;Le#Tt84q5o1W5YRT#gi=UxirM{AwDj!G
zR%S!jw)ldoJysgMaB$Gpe9<emi1f?a-zwqwpNc{2#f#P3)`20ng?%^xnN$xQNR2x%
zUG+POe0O&&hA&f{@5R8ohWwI25iWq1u&Opa5)=5k6*}JTe{tSZMB6eo7zi6v+c|Rz
z^I^kSa4PcQ%@>0w!G9;{4#^C8KrdbyzM6&Z|En**p|QVB&}Bl$H^|F|WooyK`>60*
z(8)bAazFB0H=knt*X8({*~7oX88H-U`sM+Mx%`!j@~n@I3U`WVtFfKLqCc~Koi&>A
ziVEwL(K^cDz->(|u(qd6cw2|#(G;Dm8nstO`<i<lcWkHFpx(OfW)J>?SD3`ifNAd<
zDFbLnFMJ{5OCbhUo3a}g%p%!NF3&o;pKLNYCxvJBT_{6nCfoYAULtO!eLFH7A9cvG
zWQEuVb)2ECqHmGM=x1@ut>O(QVbg&1AIqObn-?B1KkTTnlyTYQc}gvge#}7sH+Ks@
zUZABbYLmLdPlL2R(T3dZb?BR<oZ3JqR}cBuj*J3_s}Swn*iO$gP-uNfv*7GGsWp!3
zR0t4q9DyXPDie-FH3!Emd{n%VGH5K=F3`D`*08J;^SNWSZ>{1Bv?cLSsQ|3T%fHjV
zcq9KFk*VKwH;fh8F!M0M6S=nXY=$kr3spjAGdp2b*87MB0KXWkMV+}{8U<>vh8ye`
zAD7oj1F!1#C~lKjUs2C)>P=v=ZA;Xr?!L2_E*hh{rdl5y#xk%H%gOzNxmj1+LRkaf
z<D|1M4_(pcb>_IJhFZDNLE6t(<kO#E*}tGHEG%fhJ2@$f1NjzBx7C2T>Ke`z@z5bL
z@oG%EdUf6Oi-_JCW-o=RY11}S6xAoh04XOa?vUja9AmV$3!efTRF!7G*hz~?Ps_37
zwy{ue8KC0L)bATVF-`|PU}CDQ4ye^%9}%y_!98LDG2W@!gsxuc>-xFDZI)RGr7v{;
z>?De38JiiHqz#DMn1P?L)E1oR!tSqS>HxBibh969Z`dovX_xUXP7ITfaNfSblT=_F
zSUZl5VA9BAHTHjCz_3=wLpJEj?dfERm&32_POsZ_l(3z9Afk0sd0K9<r<P7sFsZCl
z346wI)`Ip!ew>W=%deL&t7+6h&A?kz;N<&jS@wQPN~dEUMRsouOn$7HZS<SncA!v?
zr|+&QVmOGmW(UE(nJKjWMqLLJnKBR2zEJRZb=F}Z4|ktL->XJs-2uJlZ0EPSj5#mk
z1=|7Q{?@+svC3vVppphr5R|Mf%PX(t%+P9Z^ri|p@}coH2eFC6M0bHBjgEhnl*5zb
zayjmkKzXP|1MMxel}HbN9zRuH+A$0H-7FTlD%kl7p&xPxQuH*tu~hC@`b<9rB%;42
z;BO8^9i-1m<dwNtN8Dj3#_Y-eN{9N2X!F?rL74iX46?2wwJOxRU?6FC0wGyBXvFpI
zwaYI#kkt3yRjh$4K%OQhFV>lDx14P1^gcPmMCv=z;JZE4ULoQ`idbN_&S#(R)`fuy
z4q>ZLg9+Qiw&Pukc;*q8aPH}lZwIY<OUn5yINd4371mF*;ULulI-iW}g7R;6Jf5WE
zavsJSkr%l{m9)Fr8+p3(ir(#F3)}*^@U|x8iHpIOUWC*R^EPo<D+&HB-9*v#AGOEt
zZTh9U$mg6sIYOe`Tb1)|Vio6tZ)W|xOp(gf-^=<LU=8>=@N8%ert#`IMw1$#!43e`
zXX7#namXGxquT$sxd^M^M0o?l(93}dXZ-aGh5P-luOH@3SG9^R1`aAl54$M!USwO@
zr!SvHcXj4nz}D`X7n2P>7NC2ro`ST-m;P3D8|xV$7-rQpf)s82hyh&*hjsKg7lHZ(
zFSGik_FbNLx^&G>o9=(+P~D)<X|;Jl<^rREqawxqA3eo#pHyynAA9ZR*LMlMc)mrr
z;PqzJykl2eAt-?^tmjjh6+8iDV|>(n?*>e{$1_9F=vZa+sA)y(=Gh<>Enaw-vapuX
zyOvd|BK;ff9#J)|h|#eTrM<W?ss8@DJ%@w4V9?$xx3-Yi)Oe)bM;YdFD}7c&gI{82
zT*G#WjdAE7P`ArlcuIhO$QIW&k$a=l?>f6*d*EtH7GV6+6S|Ot<b<{#_x;7!Yq}sO
zca@{7b=|QFoYT66;%;#ZXQ10(a*GW^G9#i-EnLN<>Fj3Waw5ru4362|oYr%)TI)<(
zWAuz;bUvw>KG5SZNc3L)AdWkKz<8iCZ>KOGxuJAbR}S3=tm5cO@SUO%$8_fS6FC{q
z^_PzbQvu-q*2lyE-<yL<jCvE)w(IcE+5-G)+=?vJmaFVyyIr#2hQ8`z)2nC2$|R{Y
zh55qSBuqF{X)ni4ue+H&_OZfcT|zd!3;{cEJ<GrCFxWpPP6_-&zCZ;74fm1;Qwm$(
z*ofJWNv5+$J_p{#F$JC5a>(wL#veJ0URgw1{w#*QO@xpQa#Ugl5(Rnx?);|+j<|8>
zy<v)|XmG1ybV`?~YTjU5Er*+g7H1b>yR-Y~Y<W-g_D?j!SlY|YJCF*-3hA$vz5m6Q
zBsKE<YHH@rkfFn*`IiskH_=<w;R82~&`zXU#BnhPNXQkSfVzIE`#z7v>g<AS$J&;%
zJz4oWImNoG`oI<@epkdY5G1l&U?Jkh!rVUv6Zn&Ete)|v4o{U!ft(^+Gt9c~@bNPV
zbMF4{G_24N?Ym1-S=?^+TPF8SkFbmsq#2k6l80%;dluY>rSe<DbHiYo<~r9p#^7<>
z)-Uf_zTtX0`s$*N>zRRWThO)v)t^CkY#dc|Dw*JAv^wDajV!e6G#CK*T&>=3<@hy=
zPiB$dL#o}Ujx{?zE>`SW1rfZN1r;0|J|>lmqyt!9Mbt+%A#vR*W{=-D!JAp68~Iw8
zGEZTD<yD(<!-+51{%&*7py<Wy4vpolx=EL~N=zGBlE3TQn10vByi1c6aa5o$aCCh1
zRtV4#VdP(25CRDooI5>Y;Pq;iTSxE6(0|Ak8oI-TE;&(cWMDUK7Emkoh|qQx*X9Xq
z{L(^GY3*BoKfsC#usHJT`oZU1&XXtPt(`yNKPvE6-~<53xot27Eu=wE;$nGVX$Sw$
z&1-unR|xUXclYIKGxW%*w)TTeTAZJ@lbEN#vr%vJuZ$(Rr{J&acJDh8<%S8*Nq@^?
zBvux$h^nd2&r)bREe^c3jrg(CT}f(xXW-AN3t8-#7Yv8#|HrZ+%f~PhIH~0M+kN$N
zNAc>%(h7r3!6++ni1wq9;yfc|QZ@9K9@+hi2X<g_YWz|3sXdSP`8B<dKN{R3Yh<{s
z*GJs=4hKl9#dRqYp75E$I8+*zm)z;g&@g97K2k}s>RnthJ<X@ozLS)!Na6$q|96?Q
zkX1;w*?Z*Rb%Io7_9WKw`6B)E13~IpTXW>sf5VXXnS)ESu72SZsrC99)a_kEZv?eB
zc%>?G#xaT<iVH)0BfRvjg{v{jBi6dt*0W5Builyuson`nFpLvl0LaU9{1BFG{&pEX
z9P;Uh30hT_q+N`>(rhW=z!SH<w!|nXc7b`ls*^}?k*6|3rTGQF8#r0BM5vvvJuOB-
ztIBTA3;|&=XHpnT*WtW|?)`WH5*8y$vUqOp9O!ke&q*FYnuHx?)W(C-z-tl>4Jj@?
zW5KcQ7vMaBrD`AzL9+*t@UM4&SZW$6*K3d+bL&O-tZS>rZb;-FX3{XK-@M`B?xqEv
zPRY;ISSYg^aIA&{GoVjm!_Eh;`R~Ik)n5BKtrco-vAqkpDL|MUEy7b@F@q=b_?^6$
zMB2L#0KsH>dqn!tbksf_7j<}2=M**L8NU3gP_6#hmQn}n@Fq$GFX@GQla!?<440mV
zc{ciluPamP=`Z*A6tO|VY7><S%6Zk7IKu{b-YNzd2HcEWF*LZSnx0&E$-)#n;BvR?
z)q4Gt45F>v1Hgh*zWRG^)d%8eeC?roUcRTT4E-GUh-(UXB;%^R^zmcS=rUNzozH?r
zd4>f)@12!R1bOj8lQeqfp!F4<96Kp$coU9{O;DW7i6GSFxIa|-;fdWI;(bY&wy;gB
z%p5jRG4Nkk*1Y+8cy69T#9N|tRN5xANpwX?SkSjzNJbYvE;)C((q~~7|1WTj9bVf0
zN1y;hh$V;+#zZ^U@fWSX!L!mg>`XtB1)DO40|IWuy<D3~u4zn)T1=s3@%z;K=VP?M
zJ1=PH<9RJA4nQa4v{;AI?`9iHU=(w9VzcF^_FB}u18ps8*FAi1^U#R~;OBV@T>s=3
zwGlzv;GA{Vg7J~RB6TR+BkeBj+p9@F^C3~Go0_)w(r<@3s-&c*HD&b(YODUEq@uza
zhdW#x%2hwS0}ZI{S-aoWv*H6&Q1sNRp8n5J%LbNcY&tUdB+QZ{3=9(8d*Wc3A@A-)
zzUx&S(iM>UoOf|Owh9Pww5@SdXA&kW!}`SJFl%WE&7}|dFt{AIgXgB4J!21f0O5;k
zHjF_rp4NzlBJb2&FWsKKHNG2-+9T$D_FAkA>f4QiNu_t1r0Andc8pAG+<>VKxKZpM
zN<~ZsBBD~Wd^>Bp*-AU@Bw3;J$pf19Uo6k4yxo<;U_1x95#`rBVpt|c4OgG_K&2MA
z)oS~)hW2vaG57)Wrgt`y8^rf>bZ}c%w0ysidg{S<r%9)%U*bOfcJRrnLA!{1x5>gG
zr9Tz}_aAlTw7zsdBl^pjvi^2+2?j3lGdL8$K<0McTt7#2uFV*QSSpZXoWUGyWW7g}
zj2zvVJ3bHNC1g@fPWOE?=eD8R!qV@Ct^UKacPSb*0G~qp$rW+myVyp^zQ`54sI_|D
z#L|rBT6yBO9tr`x@&FAu#_ITfD)p#_o%ANVd&ZI<Mc~f5e)}3g_2dlb{N*V?useQE
zEYWPsDhW((tfE=D%T|)V!@o&cZ>Asv(dt0Y(9*!6H4OG?hP_pp_eXrk;yy9=2o3#1
zfc*WN)S5f(>2x%~q>j~dVabAP^0RJ=p(B1|FGY>P?hPcZkTCJFkWP8g-cAxj9Aate
zQH-Gc=?L_Z^V+TE&9<80-&3k;hQK|Kw3fGbci6;K`6SnWf7eO60ECve{&hvAE+zV>
zb@W{hP1bmyQ0d65lR>`i6=5Mv(wJiNoqdrjSBnMA9l1VE!Ua`~f|7UbxMBYLBIOg1
zC!P*=DHTr)i&qmx+0Cg31)<_%C6%YFP(3(w**4Wxe%^Tt1etpD*=nXZGU?fYW_6=M
z&LKSZzQ4JD0n}MlV2{7HHmspB;jpB|ot{(PDBDZh^w22|dbAg-6e_n6K3g`_@;!A<
z5|dW(f(KBk=XaXiOMtclpx!L*+ioOE5_k~mJv|y0Mv><48><V9P1B50xls7Rulpfp
z{HV4a?)Q258gp^><lRx3*T9&st)EwxBBr+}mjmVvqrDvfo>j}4@hg802Y}Q-AgGk?
z$pURByU?pY9HgeD0>%5xxJg{CGl5jZ^s7ne>dMd_HhRzH`jaeQ@4LW5q5H-n<bg8-
zif9Q@aSI;B$-nFrh6E@Yplf&cdAb84amsah=4vV-<UkzMh?wSsOQ`=6|GVOGqGvPr
zP4$kSf$0t?5BXf3j5YSN?om0n`U0-37OE0?0bWdFwU2ompI{QA-I1`=MAJR781+s-
z!(cL!V3fr+d}zYnr<lYsK>Sfd&F|dJSPn>cKql7;Md+6K|Gv*E088?b!wc<**_Eot
z{f>{)MxXr31iq0v9<tya=C)i;ncUyz#leo0X)S1mRd{bDlR8<Y`?OK#(|FjttT%aG
zA$+&3dA%rn1Gnb)84r8eywI;kPQdSZ&sq}4e6?p-jhhJx6tzBg=Bn_GzxDVf#Gl_d
z&UMOR7wlguzmkE=0e-Qq^Al<T+TS}NFP-ah7&O=_>DW^{Lg3UEa!@0>dR|Li6qhzG
zHE|?9zU~E%2hh^KVYN^@x)pM<&4W;zlDD>Yp|zM^9(g3-1v}?g5jO_j-t1ypH9`Ed
zakh?`3fmvTvcB8wky^8~SuNz0n5~C3Y;&fpwp`&D!Bttm02U!L2ecpeXtiQ7c;XkU
z#GY^)NB8R51aVQ>q`?`W(K1W9bH>*oDCrZZ&K+uhvaEOOsQcHoOt6aPoe4`vJK&$J
zK^OptOU`VY_)=$FB<}hmK6&5R3vTa_Y|LKyg20Hm_&2&_ypbeKtVbWN7_aAV9<oOM
z?eJ4JTesz!e-&ra%$yF4!kIWN>aPR?oSRY|nM~H(wH9mcay(egCey(OcHwwRn-5YH
zHBlVs=uQlq*#T~)_>Rj!&o!F8{PJNOfrX@oQgZ!nzm6=uXKXJfeDw|e!}d}=tc?TW
zDlL}9xl6_qdNP}qna0|c+%UG3ihdU4^vvDGFw|nN^e__*5;p1fwX~5o^Q4lrKcH6M
zed6EawBqdf*pd4F*O!hppZf9g<7Q3P-~vAP?4NzRF(${u@P@Y4+m{$gE+dO}GXKK`
zfCXi&Fgym*QsiKy*-QodKoTd5?#?+YA$Tkej#V9zkYIXJ5he?=m2jN+=%lN^%#8lN
z;G#za*_KsKzeU9iB&_SEYs4QGha62U%Po%IgC-7km~eK9&!`7eCsma|6f7K7^Q7rJ
zOXIfqSV-g(Ui|ZP+wp);@L?bkJEB&Nf#lb-KnK^^gGDOt#hxauct?%A!EAS*ZCQil
z=W2}M3T}GNG6p%l=d+U5$!ozBQ}rl3&dj@>B@1S4EC;WqBbcJWC$7ytZVY8yXulmU
z^hibc)SbHjl!Q7AJs4fMKrV0kt^d#AWv%q|^#2#zvCR;-{FH3ja~4~eqAJwy+@ppe
zy!*uWLXA_9nJZLCG>rJX@N7TN?_um#c7v*Ts;n@%DB$y$wa+cpW1x-B7%jEz?!=wT
z9m?xD9q+=z-s8jky1Vc8-d(>E*D0PS?0|^v%BHe)u1D-p{UJIxS$T$-LX^h_Djyj+
z#jJKXfhr#yBy7mTV4OO;uT4!%CRRyR?@s;)!tq{@JE62oDMW|UHyU_lt$(mVFNH{v
zVPE;w_1-W<oQG2K87cP&i*G~Mn}{q2?@@04yW*~~B7NXKuMGYy;|2bdOmtc+Ay1Y$
z>~3De-=ENj5=v6zSl~=yF3oUOCV6lZMq@A~>zTn4Q(Q(lrn-uq7Mrv9ciWK3-5p3v
z<pzi-Xgzj1L-b}@hKVRvs9$6hqjR2-8p7fRMU>+>VTfYQ+{gXh^VcWYSU`qYWk~em
zm5A6Ib06k@C@~-ZYTxY*;3nl@elBGehiN84{GIk}GyJ-!f3gPgli_c7)XJ<UCJ8n<
zg<qYY^~7AfA9_WE{jAxsR<y(4LmipKAtunAZYGs@d;0T9*{Ex;%#rdX;Msk@4@XRu
zT#o`(ZZ!aJ!PSsl08e1T$oy{xZ7aLh+o#yHi_+I^GnkN9|5(q@hO6P*#K2x?ywKfl
z#l)`hy9qH+m}$DI8|szM-`>-<7O=1$-M*&@uSohUr~QEoXBTRo*kruO9Jz#={QX)U
ztvkA-eNy81coicA-Rs|upG)#SnBaop#v-SW5Su9f-gZopxr;N=R@`vD+VQHw{{E4O
zC4YGo=2mqL@)3#(k0cT{8f6|@B9o=0jjpRT#9_p`S9x1)l(PZ_tw-^Fj2>LA;%I)F
zso!Z*qmxBDy<X=VMK5B+RWIicM?i2<A_nQ+64^QoE(0^+=K$Mr&x)IRoHWs07TsVL
zarGTvm5CukOf~(|IWIL6T}-DCToaWxg%{{bS}ZT#i7c5Tx@_$rK2CTomF?oy*k`M?
z4OvxQiBZVW6GPwk{65+bbg^gI%jhffZVf4(#5Eavc22KRX+V#)8eGmd*1oGxqp;%C
zr>tB=MHr;mI}BQ1H+A)4{ge_ID=-`zr)Hgb;?0q9aNT-OjO;7|Iqs(qe^COKaC{N5
z_)OAxV=}wlW@S>zUp1la*ex5~Md!9spDC*}=9Q`(Asm{Z3=gDJ%iBTr5Y8JraRC(}
z9S1c;`6SJq<gGFmQ%DJPa&O`7EXvLYu3ObQ+iuk49_k)S(=bmxi~KruQqB(g7mU5z
zEA~<4zS!dLvc)PF8-V(U+H>pZccrmK25-JT>Q23IS?03Ue)8LD$PH~z2TVRhzwWz2
zl_u%1*s$7#x-0mRz3jElXtk|&uB7#<e#(P|MCfldmb|8-%JG$&4zE_CsgB-p24{D=
zkW;x-T?>57U`t|EYB;ZgPG*%DefuAWcMeqj-*x77l!RTq^-{m3Dq+@@)@F4$V>C)J
z)+I;23b4VJo<nXIQk@D5%OiPwzg>w|?-QK6Ty=*el`{<u3uEo0Khg+yV8$!3!T8mw
z*u~7_;+-`9S@qYuVXaapZl9hH-Zt0~c=y^-?dh<F=ie+KbXNY0-&=w>%V$@m>{)T>
zj2YcblZel}Zq4$wc3q*kZV^k6{)=zc>i3DuIvsDe=9LGRE;&|Z`*cUProA2LTyyhk
zLRgQy%`I<$<O9OH>navYm98MT=;pp4#(?jXiILAkvW7}NQ%RU`_kI?#b6b%j?iGHa
z&+Zd{h|@XOfm;SND<9INWh9FVSL?ndktz#>J#*K5_x$Qd>`~>&zy{Jz$6A)nPVc{5
z7wl)$e}FK$dly?!Q9khqPwf2`zd!slf9K?iTU>ED#C;aqZ})!fmBbx>Znbt1*PRl!
zhxf(&;(i+J7|%*e@^U`5#Hl3{906qMr7AeMY(c}GZMWsyzw3;{5Ye$~qk-a$jRQjN
z&mmh4AMaHmGQon8*V}NdW@@@SQ%eJQh%2ig2ppaSL0fjfTu#{hBDxi5Hqd-UKOgfL
zy?#fwQmWft&8C&!3c`lM0^ZZo%dIb3cYVD#%XAN1+|iu7oL(+zso*ttTO`>9BI33-
zvSJV}K;i6H=F{57yKF1NHOtq-wAdg<f-D743exj9t@|q>cYL144Bc(|RI$CXrk2#m
z<L){bWm(#Ns(GlKJ|iw;5_M|(PF<(mt>;yzZ(u&eSKZ@Ud8?r<3A0HPh=94-2(+Tg
z6DqXbf^4w~N_GEOYr2?z`BVb@P<=mhEuXyJf?Bt|$*C$3ZQ%bEZ@n`$e`6;p?9?`O
zYiz9U66#&4l#+OZrj@M(LRA|MHlHpJg8(WAAC98TQ-_LPS16u<Eu7dng?5M;@?BP4
z=Xva(EA<Q-9T#g~ZB2FyDBE}J_fz{A0ErwFc`pb!(r#BDP){X%wPdmP2&0ez#BQ7a
z>-p71bs%_0)7E8e=EaHIVAQcrWyyC(!LnJ!H2L-@nZt7yOK=vv+;jQC*}QpvL#`~*
zhqlTUU3>T4Cx!!S@pEp$Ev9POU0l31SFz}_B8jNV8})|8d3k+>Xns{$-R%3_hSwTW
zhL?KA!E^u6%j)Vvhi_pt`WVYfKbAQ9JK3!zb4#t~$HzH3OAZ_pOc^fdlBEySb51qW
zJx=tZJtTBY5eX61pEwjUDMCgj@3FyTlK|)EYv<nTdPvVgL{^o$eq)Y?maeX`&Qjo3
z<ik$@rF<51cAQC!H1!+<PqL{T3gO0H`;PAX*^P$_Si?T6Q+fGx9gEmN1=~x;!Gi<O
zE<pFZv;<zBQ1$h<<=*u>x1jFflfLj|d?rJUu8+(=^3U4Q@h26BiXYnz+?ilL$~Hrt
z|0y5T((0jeD8wwL3rzeRuNC&{KGy7OrhgEU>&vFc>8s`uZeef9;1L9mw#o<|wnQhg
z#ZE5gP0j^_h3KEDh>$y>5PvMZ++T*ha*+qnsuL}ncqU=VGDESUja_^dBqz=_YuQQ~
zlf|Trag)whu~})kEAS{rXnUp`YTjX3v6|tK25}eyRKR*4vqKOLmit5>d?-}c(EIDv
zfa@OeTBSOV#9UB@7q8L$kKdtQBH9>@iSx}Y$_}1}dxZYkKh@f2vmo*1hl=1Hr};Lh
zJFaO<Vpfn@^ji=Oxl`}|>D+p8d0jD_U?eGKcq!_J9_>h-vq!8$6ndM6S^MVlXbYnp
zQ=2@iyOST^C*E1Tow;zjzx7~Uv5Q?#5Zm#u0uXX!U~3g<QE*!`K|x*2sMIi{?WB5D
zcSp!ah`gr{IIH?GzzJJQa4dazv}lJ_BPeuM%=K4Clmgs~#>XDg3+~@U@7cD;DYMX>
zgIj|i&kGp^nTLx(RH>{PiuP~-gAh3wfUIeELdl6+a+*gLI~F6<fP;mz8vBGL=Nnw&
zvAO-8*CqiV{|s72`v$o{SJ2>+C_Aa~ul4-Dp4-#aj!w-G^$vR4P_KAf8xxAE{(-vD
z>Qz+g&c0RflOA^$>!XWFdEL9m=}<ZZi`f-CtN6iZVH{<&7T5DbxR5^Yl;(6Z)n!N3
z4y=cUh)Ph(aT1hxc$)k#l)uCX8^)_^kqPgq?RdNW;lN1JsPAJVaZIyMuL9YP0IP(W
zs}3rS60G)W!g%_Oqp$bH^?gNXyjzz59*A6K_K5e}eEa$k!RfYku?wY<^Am2lDO1Fr
zohFLPFT5fknThn)kvXo^&RJ=#kL{O{jK=z3WU>N$OJi9Vt0*{h08>nrF8$7lsf~8n
z=P6Yfe0QuH{Q>wTXa9W=ap;PO!`mS$UxdX^>i$*$@Jml!zv(aJ&s}~UzN&Hgpx1AW
z*^-(IkV2wKq*`I2o%*0aD=}Mka4-+3PxEnSKwBb;!9t@EA-ea5^6K_2fdYVuooe}p
zRJ&#wMLAs$(L;ov#CB($Qp<6K<mRxDVQU<zsxRrg72-~yiWkqGsG?_zrT7iJ6?>wV
zhdcyzdq2aWA+n(%Yr&aOw6`6P1fvs?!;UY1OQfpE?fi7^F6#iZ`e96kHIy`;_30i%
z7D?lY9PHDk3=ktW#cCK&Xzah=4~?uj)K)X9k(fi_`4;|OIe_<dvjXmZHm&aOq~{ZJ
zZikl(sxKZ*eYduZUnqFQdHqXrQr9=3<V3TdJr_mEDckS8vy_Wtvn%qYgBR5$xV~~l
z(g=7SA8*L~F3l2%QGH}@<l#8#2GXu*5GOf}4tcJPqu%9QMYBh70C;r~q6ctQ8qcOx
z<ftK6S4B~U|0llO6m*I^Cq|Icxr^=L%uAmJE%tw%1oy38$HEUB3BUpJkzp6!#W`^J
zPT|k$-lh(9LYR`A3=Zn0*xdH#5E5kPnt@*clpN)e-H+omPq0mi!r=Dm(j%-U|6M12
z6P4Lg{lA8O3X`EB#s9dn{p&mT;pCjFCSL>=xqHz!Q+I()9^5DBdC3G&BiNasU@6U?
z=94A6C$eycA-nWe)y0%&p?};=Q!z1}6f~+tI(TcF6XnLafE`WJc#EhHW3iq*&$7fH
z7wlmmcZBS`OIvZ|hrEVLdpFe2y`5smc#Yy`MqV-de0%qKk$A2>sc4D5>_#+oIuXw<
zfyJ}bdfAl?@nf=K1B37_380LeV;reb2>#FZ+?KR2d?#}nP(0;MlZ;hg<?IoE^T)8E
zBmr4I19FvnsESHqu>RY`>@?kdws%)so%Z9`!P1*$2(dFcyng9Flk+67D`=*sJ7{Oq
zSlqn?+6I~7f}s>UR`FKYqzh>&jQ!SH4+lGwa+p9`ZcRXqCBh?FwcdL=`yZvZ0z;qs
z8u3+!B{nBw<o;2~L_Pnaz4&v&RVm-aDb?oFZ@=7S+zu%Ya>*&-fRN3--mYFwkD_Vz
zo5HHX7sLHWk)ViFDzthqqEH_<q|sUJQaPYY(X&hm(du+gJg{Kou3%Z7=SFKh(9|%8
zPr<o*H+F~`Inw}J9ixKH88}@fRu?%;eEJ6`3wR&!nw&65^@t)amxur7QgAS8ovDnS
z)0HXF7rgxnYp`+Ql4$UQW^nm;8^(;(<y*G!ymxem)ygw>WAbklY=j0AmI_tNHgqI1
zi0F=lp5hCfE5%`3%Au{&?f2qH4{^QY@kGVS^C!8a$WL4nv&({%=rrHn-eg6zlXW1g
zqZt(Q;g?9Iy)J88+gr;IGWDq%;3eP9Kb<E|^19~!abl4>q2u2%k*&g-ij#s08{X4v
zCzVDjKv+n{7!lu9clD@TVdxIBEAH79a1aqPUDtW8-`>(bv1IiJcUN>#3GoB4^CEe@
zh_r#^`Y0{Amn?d#Byan8RIr*=8<_u}D+Wgjk>29TgVcraU@>TLT8fF>y=<~keLowN
zKR!zS{>wZrHhs~vCC;spqt9N~#VEL1%q{JoapuUBziqkBu7%+e9Xf=!TSra{yo>Ys
zKI5lObT!B6oQ)o?<$BC*38?;9{KecB6jUShFdEsFIFns3@v!o2>Uw2^3*bU#Kc-BH
zlAFRWde2g)81AieHMRbW<yvuftKy>g`L%{s=UAnxFXfu=4Q)$^!`(#SyBXbi_vlxo
z+PTa5thb)+V=>)lWj_X~L40l7or7wC=9Omp#A2O{t<)OsH;<nTLzUlnn;dImUyX^7
z+&-1*Gdx*=*A~*usec82K@^b6P1#0o=c1j!@F(seU+B_<tZy3^zg`!8;mV~T0Vo@f
zXm`e2Jr{b*H7C0#!*lOCD>_OOuil!<oB+jD1^AXe%Po9-(pQ@;{U^9eLsv#A&T9)t
z`+Mg8<)#YQ8#ka0tN2`WJf4*rLE$??3r(=oYejIO(rt$Wo4|`pDsi<Q5&hsf^nj5k
z6{F{vVDDq;(RT6#+r-J;zS`&^*1_vveimSV`d8Vg-X2mTeih<h_YE2FL$gPzGGa{E
zwc!n!`;bX!vl+B%Lpa9$bT*CZ-{9;4^xb)yE@}-5vMF+Z?Z+!zS@P!t5BRtp^gf`j
z0Qq~gU_skAGo4_EggQ4^(*V|rzh|#lst~?@qWyl^^Z0DB&}mHPg?rbfWW4nsWwDWL
zTUzgptBXbVuT|>#<XUWU`dpOpE$s}zuh-{HTme_|8+4egU#QwfDpgI@3A_f{bF=t7
zPx?Y-9HR@nVi1*!8_IQ|a$?=Jd6VvYgZqoFRwBe_MGJ`}`N@LTRQiY2cv3*AWdG!i
zy{kpo2046*X>LuZsqgCucjUsUpLcILvP8C@uSR*y>WjGfV-XT)8S94Z5C>JFu8oLg
z8=|_>(A>AUs5Y!Lk#_(ZN{bW#K*Y@dtBx?z0`MxFBqFkIMT%9PmP|u!2jNpigQtVW
z$!GYVC;=L`^%SGMf0}bc)JC;$rXF5_#6<5R<{}_<f3sYSL44_+$ug+~m*6?|Qy)6F
zQ+ietQq;IJU(iHqIQq_e-j?=VU}Ko?T&?yN!{!QFm|hh&HkA5KRC_B_xE*0Rvfh-a
zJ}2IZuK3__+Cm$ynH11-a4{b>7AWv=bo4)Kry7Ei567yd-awh$+vzFpIfu+8i1+X@
z-vH5>;9|W~a_dpVJHE!%*?VSt;xP5jBySdK_Rl@VzS+9Ze?VAPS*Q<`X<zO?#mD_c
zq~x>bpx8Y)%fXmdL~p^*94@N=(U5*f&1QlBETV%<{4(F5{`4X?416wQXrqA{cRulz
zyu$aSx~r`wZ9^hivf_UFPtfU)6gxI%v-iHX`EP+iArG|32iw`gs&P6=&kWmg2g+O&
zs(PgtAL;f5Wz{-Lb$&hPBss&r<kgMfz?jyFz=J_Lr)%hSd#?`uViI<*3Y!!=&czI*
zgvD%kB3R>;cWuRc#)7htxth6-DbIP9;=1sND=j+>0~$RD)_(Rvxiv51$pWSnJ?^X@
zsM7j0r{$0MN32Fff2)L5T{fyPS4Hpv8*7JYMq>5!*3Af-aQl`p?)l22Wv7T?2ulRI
zoVEI@L^%qSx|n?m`vU}4`P|Yv$#(vLFWMpNwKy+#;#YjtB7?{-(FdBmh?r6hdO2p~
z@GsUjjWa_$Hfdpc-bJ7fE~nOT<@qK#r!OWiX{IXA!mD`BrQzdxu}vm-kooPPwWSKl
z)a_S7TK1^;bavN-q^^#2>1HuN5-2gB3>ChTWUzILlrw2*g>n(Ge6tb`&N9)t@o}tL
zwGXxVLd=L!u);*ZHI|jJZB$+6gw;{`!S7(>@M_xCbqHDyY**kJbsNW%%`2X!kXSKl
z<dsjw{>ex_q?Du~%fZF)$R`nlEiBjksFS1ModI=<m*b9*R><$S)4>!U91Aqo49rZ%
zI2&&Tj@}La@!G*jsYh*u{)G?~d@AjTU9jX(y4@prg%+lhpPO4hJPaXUGuE;CxAIlR
z6BVa(oR3eVjT&%$ZFruV4~b?qH#{#_f*~XQH<fRyr$?2debgSHNV!hU+d6aRun4jj
zkFh01&QUeivqX}<z+4`>2u&WlJ+RVU+-c>5>Z^`Jm(b3-bNllTxE{p}^nXLTK;q0`
ziXhf<Qo?A56S(4drFhk{cJhwXE85w!dWt6bRgP_a;GcO&?kp*wIJuX$TkXq2c$}lJ
zW9TMJ&Qj~u_H8yqZ5tK(N1<61_@I3H`G{%oRu?~IvcZdbT73UyVFZl~gN<#{M~)4(
zN*-XkqT6E3FHfkSyC;R|y7xHMU{>X=i#uD@^A=Op#iiU_mN<KYrKdJEH6?%lU<|$U
zZtgCJQH{^2ewreWy}FSPPqKgs9u<oCAkPP<KdE_#svW)4)Yly?^cSXc?#@;vhw|iK
zR*tz*wQG1wac7(aSb04%g%pMz_>1AP*EyD-Qu5fcz^cuBsyfTEC|6(eE~{T_<?7uk
zaB`G0m%bUq1<Nun?ew&$u~Pqd0PHNIab=0)jBc<72CIa-X^K&0Wt?)wG)zP>;CH)M
zeFynV=4`(qO*VgjN$jtjvE{f4bYZ3-r<T&b-LYmH#=a3=ZZK>~rGr>fXB&s0%vM@M
zZ9{|C_@ve><6(HOv7?Kyns=QK1xKEk5SZTV4;dhYH3w6L{x7}r{|L&T4wb(J{b!dA
zBp%fVl;HFFM<(mLVXz4Fc3bNpOX*CVY8naNobl<;lCOIFzYH=&7%DnCJ}gnTSqr+T
z2shpQg2Hks_NGoYjBTF$*5#kylw|b~a6xNhQqPwTdp&mL@838UPJ1*<acdk&4iWDG
zHrHd5WH6|<gx{N9ZOZ2S1~Kiko0PsxSs!n20&8)*YXz^ro;|Dj|5?O+|FxXemBjzw
zYgWF0h-2OMIqKaBBsb4#YogYxuyA?2bD19pjfCj)J1nA(p8n0W%XKJjb)s?K4BHH1
zvMfLBadL<0kVUNn3$_pVfJe+Fj$EgQp!QXauHbDnx$DVM=&8;`Z>+9ge55ig@O7k*
z0wUR)I;u$NdlBtGcK&Q<!gW@yd)?s61N<6DXN=k6xO;}zo}Ukp7`MVuwnFwextTGx
z4swe=Ag&6_sgcqx4|5}uR+QIS2^WFo*+#Zd?FDB)YF4OL49hoBudK+kZ7o{0P-T9i
zqqiz%Boel{Rx;|ZB+JGAImo;3h&Uze;pJ5|4z;a~SqhxH`YsC@ns*O8t9Pc?R!$zd
zKF^VvEeR#h-O=Ec)U8EWHR-#atIZ?s+98d?#JtoRljR6z-MGfgr>TWRX|Undtnh9C
zN|<yi426J!tMYm#WYF%Rwhz=4d(e+v-{Z%05*17EhsyaZj!j@P(vu_8)Vk5L#3qP;
z>oRi+_3jqL>(bV>xi++om!f@An$Kty!cpL1wDR2Bu<p4EvhjnK+?h9D(e-J)oWk@k
zT!1u3Q>V3S{nuj^CCH)EPolD1m>%6m^Ow7ei|Rv!0O%%>>b-%sbJF-`xSc{)FeJ4f
z{-JPP^VD(FIlE`ecJ!%sI&o;{&A-Rk2WLBe<e&1qAg%eKop5!Z&SFvryzFjul-!gC
zwqJ1@`+EWVX=%1(&xr9m5^_btd%czZb(MEvk_c&X4SKc8v2d<yHo+;|gisDEK9CN|
z^??BxaOHglm@bpu(@tb#9m_Yq@2r(=7i&;`R8rxqm;4PGH}<qQ(@x4$hi+jQmBAQ>
zivX{07IHh6cpZacNv~cl)=kwP#Xv2ac5E{_(3}m{tDt`F&T2$)<hxzZXZ435c5k$M
zWXXiBxMh84GZzaOV+TNhf&grI&>t*&xbIF(ldxXsh7!Xj%P1IPm@~u}*M;*N{%X!>
z6L;=<m0?`Ad^O>AsJ&w?^NHHuo5<_KlsjiGC3qI82DkV=9np1V(Ch0<`BnAM7JmFS
z`5m^a%37?s6yi5$#Ycy)u*!{wm#Zv)tw4y_135YHd*b2fq5`sT;mrNTrpGV7?Rk$7
zCJc9m4#Ftj@|HgOUU-f2xt@I^wPB65s@yNGIAf-_Xh{x)oeLoGM6jq1>>kVXgKhq9
zeaJ{wl5vs&!o<6J$3F7$V=A5t`Z|FG#SCn@Hu4<5-~YxPO_{fZ3*SsV$V=oNa20V=
z?VEuI;-9Gk=QLQHOLk!KPBXnXz_G~6YYoWQK3JBsbPR623=CTVb)HLBd4Id)eetyt
zdJmtc%mVz=x#>VlMEU0j&={VDuk%I+(u&KijWOOO1tHq!u%6$KTZ#3Lbqx*0^?XjV
zxNnnpl(YY{8=d&uUHwYT6_BH=ET(tWYDHgj-LXXM&DYlzK_`z{rNp>uOJW^t{F?0W
zm13UJ=GX)SvJJ7nXcB6pb}@Tmv20bJ+=m$a74NgFiZHmeAe~gphg@~#YCFeI86i6+
z|9<P(HZ-;UhTLq~zH+VeYk3hDFdEOiy(AG$bnPwR76PmxVBV~hM#k&~i%~oy`Q3{C
zce{<s)H-2}x*zDJ&cB7OdAfo=HgdoC`OVvPm2PjAcsuKFhqFsT{l8==GYYp%V9zhA
zsg@!RK6^$m>rFaQV`-{_qyO4!%W)<<A9t+a54B+<6lhQ!n5i8?@ub>mU&wZ1+m!7~
zz$_^n?NuNua_l<Y8<L+@slsfz#JZRmYl$|cDOOu#zFq|#FDn<DcU<*Zr0b0xB|y$T
zPR^{HwP4D_&UXlOW%p`gsk2yraoH+fzPNGXufM4C(h9^owX^3FZMG(omM(V))&P<u
z(#OlC>ZdNFP0(ceamkabhbEREc>z`qH-UqD3wx|cKLG|4GY1~^h28@!G+JjkxR2->
z?EsrD`ciNM!Rr$cj=KM4p^~TF>h9+DElbfUvZw1e%YLcSs>&OIIJ^NE`~RDGNSXrM
z*Js;LUOVY=HeIAKBZLJ7&!^Ps+T7KZc!4IP6&Yw43GSw~oqd!bbYz+0;(p6p0h`Tu
zT6knq>!N_iuKg3e@Q{4>Gbm~fGMIAw<nj)v`2fVTw<IHDB;)9JI>m@M9I|KzwOl{W
z9k1y!U%m0y$_4%Z;R1Xdt#;j&y0046IeLK5xJWh#%x$a8UN&>JY-Rc{N_dSEp<!tp
z(Wkp!K7-LNsXEm(HD)gSP}1S+N`5Y}fpvs<DfXe~T+Z4^0=SO9<D#s=bPZ6wVF)NZ
zP%^a#*OBq_?P@}K)YvYr`)gAq#DqnX+Jd`8+zNQDlcW#TpSU{x7`ir3&7R+$z2f#`
z;?!MU*e<xl=7F^$MNY*w)2AUMz9&~8mnu{}6E$#_dts&>9(wz|WvF|;)k+)`{tLxY
zXwhAhZ+jGUb*)zkSbnq;A^4uHZB#XJs8be?%JO2jDCN}mhd--Ys$8jJltbZaugaa=
zT?o6Rb2ik{OuN}_JD&}ZEhhh&Bxf>G=EOT)!M`HH1X}2KC=Kqm`Zd1fniJ8{j;cFo
z{d*5teZ;DoCUgv=)iL7GyR?iWk4>S{@jrw@v0jl~bX-$)J=-2)9m6J-DBpPn%kt^)
zH1t+zt_NvJpNqW`&Ky9DynVLMW?6v(=3M~E8ZIKC7D?2j64l$m65b!gI_(Fcnp;G3
zV9rN0>Y2<GfxjbVrUX%fxLQ38x6ZCk?Pqa+7f5WC_s8z#05N4kp51_OM~i;XhzB|+
z1q*uqBIF(A@|o<F`_&s44c$?DSBOD;*>lqUY<;J;3(5Zh=_EtV*LuR7qg5aCiyM6-
znV2LZ?;Sp74Qs0L5lmYBAd}V8hOw}y0xwCYeh>cSRQI{X$xnDiqIcbgi*q>qlVWzT
zxkJg}Xti=bSNM#E#*2slHL?Idgb70p!bPwn14P0W&Qp1?zA12N@Kr8(rZwDWp)b?y
zP%HXDg|+1?7!Z*ABS*eeoRPY2kYKfAt_<7O@m5foFz<wN$fuhvmVKIK#CyMOO7l|%
z_^=N@HUMLTe$ES(0x@$8z5#oWlM8zC<JdOOJ<ytcI)1&N95DJjmw|c)pMN9}>j2`R
z-(~ddsswAuZHf5a@zQnz>PHU2RbL1=!Tg<SyX-8gRBe|64SOaC`%3m9z_E=4uA=U*
zF*`_bRa57_3JVi|BC;FEU+Flca|0=F(RjV_L2g08ryBdl$>n9vDB*SH`Bukc-TFMP
zGkmJ2I13!EwbaGFA)(%X%5HrYdeW0ce8J;-Gwa5~=z(_lJ}E|C7Mv}n9v0i3A(rmp
zBVcWn4VK(QL2n2By9i3yMnApS`D}(M%D#B48{DTsnsoDFG#v|WBNws64@zL^iro2e
z@OEuol~B@RI7KdsJOyK(T8)s4^5iy(v{G~pVqyI$2GHJB#nC&Kd-#XN4VGw73t?X`
za?}w!wDjhCWa)+gdJ(($0Zj;FwbGgr&QttKB7eDhh$PpulJHQ;XRm8qX>uhq5@O?{
z7uMM1x;Gl0^arG}GRre6AigsTr|LT!IpY~NT|%ma@74pSWJk11B#|zH|Ml{|lb@G|
zSy@?Gb@BTjvpH6Z+dC}5N~Upcy_bZAg-e{i6l)O**sgqWewTzkFnGV1?-<3^KcOd3
zV$6?ur=(oKstlXwg1D^3!{L4`AOIJ^49;hz;bgL%kj?+f(|1{WBg;aYMU0uixcC3k
zF*?4Rb97(hpv&ZlaVLd1$(A2x@L6YU{llm5RHZ9X>shIh6$Pw26>7cs<HG#MbKB6+
zkngbU;J+@-|M!VS1XTpsy@P|tXdBaBtfB(*CoL~FNP6^zbV4~F6}tMLqlym)7DK;n
zG=wK!9a-Q`-jeq*{=%nr4r_y#&F%rPBf-v|eL$AEm8g?j#Fm#-hbmqyUi0Apq3S(@
zn%ds5Z#|wP#{wJ#qy<n>L6B}B^uN-SD!qmdQ3xgUmY^cNS?DbY(jk;c301(*A<_w<
zL+Cvu5b6`3ndhB(zhoveJ0G(4T6^E+x_?*W<{iFM;E!M_T5>^yGu6@4WYe^~V#@LV
z_nOeZ9{Qd}($1jmu|EJU8lrDCHm~*IBU`%++y63ZW)hSfj%H6&x&7^oacXz9C)4S>
zraFOruF&Pz;KLX*?<$$)FV9Gk@D=yV;aMscONrP$z9tu9Cq5c=0se_scdu!siiX(n
zPKD$*uj<Y@a2YGS<tG)E-1a(zAlG!Y(3d(+N4kC-{TF6s?ctrNIt~>vQ3?rSDyCzi
zO{6G=yst@GRz}d8>feDKQ>8UB$Z4m`83Ly@2O;f*tKjjf#Wgdfj`&gxX{ek-$r8gc
zP7ynIFbxnq`Tb%lt71DH?%aY=nx^o{-Leh&c0zcuc3UVe^p=ZXODz|jSM4a{^C658
zF@1(ZR;goh*NTQObT~)MIXO8oMA2a<Z#4av{A!aN=!E|2J3-#9QabVDt(tK$#veSg
zccQJkM`gDT=rW0t(MrDFxc4z>oVh3ZuEXGDw{y@S(Y-Q>Eq>}%Oy@l{CsAj&v<{w*
zi2)<n$%MWM@YZhKp~(~}@TS}YOUlo156RmC<9C!t{WZ!2x)2P*n=}|r8c+0-2TFWG
zCtL6n@tT!4na%3RzEx;5YpnpUK=?2l8aZ=2cgg{lCrhH3q9o#4GYbRLLkhNXQrUeA
zMh0TM&x2~-R$qWSL!n}BDPBg}s`7RKn+BrgxUM0tY#|4C?Vw_%i2RyeuMEMkX%I~t
zW2y?4l#dSmH?Li$UskYZPk;MHiINl5U~pg2P`HHig-q1Oci3K!42?&@PxsmVyTR09
z&D{av)k+MlH1c5DQ6xAs|F;r{f`eW|1RvMd7i3T#7&drAN(zl@30mUc;#EAk-?$MV
zS`FcC?Dw4uLc>?k6NIBWZ9)mN$d8GZokza?i`fHPh@UOTIAm4DO!Jsjwr6cQr~Dhg
zomr@R@W3O=Ug1SADnouir1d~U&TGK;bg}Vrwk2TxS>pj45@OMMD%`kGD=tUbTH4yL
zIR6SiY>e5?1YT?0oMmb}@I!PO&xT}xk7%6zTHdW1)~;+<(bHm~tsi52Qq4;|r(67r
zZ|mfL%;`-3nBr0Lcw;G0{PZn?$KuVH7`#JGHMFuDcs0ywN?rEC2;19f_>C{PH=*vm
zw;>`IXv;pi@^LX9%GcDZ#u7rc9HVo2%`sQ9a37kc#<Kqb-+g?9lh_<M9P+BAm`!uE
zrpd-<J9gs3lNNF(V(OV}4ZWQGcgeZR(Hqt+PM_oSok2x*{X3F3D^j4=dbG56G}tMK
zcf_D}^!=^%@zK2AZyVrlH7BrXh@q(q<yn}0s-me~+#x5OJy%?)dBv|&@0ELU%8nDy
zyatU^3`UtpWkf?$u)3ljBOaoHBx!PFWB^KG_a6)BbOChxVi&Juea=d#^_!w>H4V&?
zAt6rE32wEkP>#Ayr8B9<-Jcq#((a1bmh+w?0%30dhMfP@Bj1Ji1iaGBneb^_!318{
z`XadT=p=!_?+do0d1V<<%EnH&D58jV)XeFF#$z7{L7^_VN0HKl^<A%Mnk?8o{sLdV
zc7!K$>Hg5>60HU&%-JI^H!tmYL*6ulk2CGJ$4lpI{S;+gTQA2ow|7EL<bqBcmE8M8
zg2T9{PgonNG}6l!hu6{zHtAN-7U5>n@o+*&Ty($YAw6At<O=oZw!u**>yr`NR6VN)
zgzn^Cy|<!V$hx@k9)g<Bhu}Q&05n+9?R!_c=Hm&XBoSF&+J!qSsdwJ^;RIM1^ys+N
z=O--1i{9X4@*VX{6s64(**E`<-E|eZkc2ObniHV$66Z|BFA6cV5mGP~7brdw^)Onq
z{C;{K16Qw`Q-WSlSy##e*N9#f)iUQew^`DnP?7N^J8q08Mv*b}>zLIaEi11QjZ3w(
zIhzO3pxch>w~BM8brOZ%UlO7u{zWgo@Snebx=gq%ouPcoccOc|{rR*NA~#{}bV&-}
za=nzMorQ~RyrX+?7?_%Czx_-7V)BBr!AKYo4Q__7x>#2QB{z@GUbtT-WmT?<1a&c9
z{6ujkh7a^#R}(+#Ke1OpuN(Q|GeQUmYBd_VTE1KDQV}$*a~@_wU`;{V%c;B7DV?|1
z_%8j^x3!be;>L)g*<tL>o!`o+U+wdqUm$FeRD+B5B<Y@9ngKbC<`r9Kd9|L~J<lun
z4+t5%k`yxf-&yK|GG_{2JB<3G_CFatFVf$JpkVnjx8UuZCN-{-guc}uheRab%$p9I
z{cqyo8QAwLLAIM;$yhtwsBDY@QGnKm^87@@ASZZ+9!l<y9o!@JF2*x}`s;e>OVu6O
z21v)BbbhSd<gJbpD+ZdJYnLk*=%D2jpw<3{6;HOm1qea}jDd_~>)QA-r`~|rP-yw<
zc)hF?-&~*P)aRS87o+Xo(E3{rGQkBfk8gjMQ%6)a<nx>|*>xWm28mT(yqr5Z&vp$t
zW(fKo(r~_Ud3-mhC#`F;**c`(cL(0z;yKW`HM_}{hQAp!zTUU}bMO@b1F0ZSxL4Yz
zJgp_36Ki1|=9^0T_c(9&Usw3*@>_DVV%DJ$HD}Yu7B@Lwenc2A-mX0#xwJ_@oO9Ad
zR%j_+_h#+{0tNn6ssZ-Z)$*Bh^H}Lts!wTID{t3oPu{=p?hdnk;^%Z8E)q|o4R>4c
zeoR_VZcndF-|ShkHX}g>%7Y!3)wQpzC)VZ-<V_23TvtL4^gzSA@Ah)XBoROECj%{i
z+`nJuyrdHFx~AXb{(j)l%6F-fZZ#_2KF02d^twE^;YITY;ydiXqCw4vz1-t5rxF@i
zSZCqIet=fD?>b*}LOD1*w7(*~&~tGP5}011Jbu)7vEp@S+e@$PX~a-AC+v6Eyecu3
zD6_HM3vuFAA-$%DY)xdcvC|ph;sZnHm|15#pNHD#H`5^2tMVf<k<MW^rcNaSHB!c|
zlyVsx^jfFI3=MMVr%FosW;UNqASPx#d)9rAfR}~mjji>wJ1wh<1X9yiXfXAouvx>9
z$T_}lO7#3!kFQ6UeQjaguvDCq^BgA^8V?R~-Q6k^mh=Bj*}}WbTsk)^jn}QOKcQhd
za>xu@wc9~X{iaW8yiv-DlarK0)$rrH<+YGYTA?x{<m4}lCco0{R5RzU+dEb6mU7OL
zwCb#tq{TDf+n^(@DVv>;6eqXf9W%q*#Ck!+nn>Ej-k#QfuvB*kI#z)ZBWz)GA`sC!
zRODo8r^oJGS=uDQ1@+qV)yp~_F#X)RBDMf~aF%~LtaJSu;m45aXpSk#D8oD|1~@pJ
zE&HtMEKok1<h<0|uRO_AAb@ms4Yp#fIDh}BealCqsi<XgszjTI7-efKV~gmMSBWUx
z0m=fZ6hEz_yLp%HWiS(CZJ(1QeKKUcoj~0O3;XD^pp4kiqQT(i2d#=CSd-e_>M7El
z?b5O%wVEEg11~=0pO(p+t(QypqU9D7+P7VEnyb(HH`r}o$UeOru6@z7#yoiTeKs;H
zaHw?az{|aw5$shnbKE3M`G6L!66TX8Y}W-3wD|PfQ)Y1IXoaSQo2M!6GJQIr9e=LN
zP9I8ksZJe4H)NzGxJ!o%aHMRosXJ{G<aUt_-#6f`Y1Z6DTlj5BTF_S|Ux8xx*(Na=
zs49XR2Jfcu_OrqTtyht)$~Gz5y#9jF1PhHrER0Z437OCgp3~f!V4Mh7ruank1IY)B
z&Of_#-iERYk@_OT&yokK9s*(>O*y=l&r*z59Uz6V0kxA1ki3SYdV`HJ(Z@Fv5<-b>
z6*pq|oX?!Us#2emi#^|0RtCO6u<Br0Swvl$6d4RB{<SV<<2E+c&b3UI<+-+G{Lx}v
zyy-S`5Kb(`_p|N~GjyC3;plf@atk~E@5j-9V`Egv-2$TBDHHpo-=NZ~$tD$r41zV&
zMpCRwc?t~M0r@%Ed7Wm^r)sQzk1q~5&~jR$BHKX(rWAHMO}S`Yfr%owKmE!fP)r=Q
zXc6()qw)vGm^?F5ZrK1^_|OaSTB^57ku&ov`=(iik{vDKkvhoR-}fn;(rsG2Nod+F
zrL=@J^aOHQ+quIxU7&b4vbyz*)LM&Es{UnlcEC0{6{SrX7P59XfpVZlgXb^NIK<Jr
zEdMEST@YeCsnxkcK48kN<s{U%0~JU4FdzhVaIis3I-P&kqoq|f+2pc0-kPc*z0I6*
z`HL4pBkq^gS+%QoPctr0aobakkZpWQ%TFEiIy~aUM+qXTK+OT4@Ayp(5RxZf6(Vi;
zr2H3KlY1Go6lGcjXz;mEhT*7{fG6ic+|N>2o1KF-f+hDJ+WIpgq^uV0;~w`ia>YnJ
z+6^60KZaXz@XUGtKFQmE`I`GQU5&oLce@wo7@upIB)jo*p{k0LeDQjO#C7)|p;8?f
zQK=d?MTkE}iRCm2SQCS+tz$#qphaCY#^}wxp2Y`>#7H0Htvm^OBg`kKl`A92kjUqo
zqfV)|FVa<={LSg;-w|lnncN;%8IT2KRD*}c-9JkM2<ib0sRM@=VLe_RraJ$3%tD(c
z!him;)k!|oi@kVA?%_Bs>tmo93(=A~ArsUO8Zx8kznNHt&y$Z_D$hkue-bYIPB-a9
zsxB#Atxga?qxYbED|?Z@VTWzRLfDrwSC#bG+2!T$3TJyAwE?7+(K-f>#@L@`3d`5Z
zWk@EW!jhsfLe&*^sf@``1RsGY>F%y5gFDG~*Kyu{s-jgSEf55hxATuM+cj?;I)i4Z
zd!YkK3&&!<x$KjQUy9#%v!PSk5}SWPCPZR_Qe~q$U3|u<_n5mXFIHTnOQn%y-dbx>
z7P`LGtlM7kZve}*`TmHyj4`=PKz}A%^~Gw2`ijXw(Au{MsGVKAaYgniB!xEm{FtAH
z?-?(bl0E5Ax|>D1b^i|QN9XI!JjY0t$6J1ZYdJ*Ml!gnhsGe4J<hkh)V@6+gQlOwt
zL0{)t5Q|Vp45v3$YrzTBKz?%Tlk2}Ua&hEJ4!g!&w|bPSt6&=aow%g^z+lBz#Ehvz
zZqrHXSzy4a6(iAX{~N7;;OPH-V`ze|PuyZ6l1-8E=B;6M_GTVV1FpDXp>rzFI@vHQ
ziS%033B+`yso*48!uV0<00&LJLv9^pn38lp73Avk_++bsNVGDH=-1JnDOKzXmW<Ew
z@2yb{1e!`T=VT;!<ONdLQ?1^zk@+2v#IDt0r35=iMG5h57w??a%L_y1Xv)6G6~1Yl
z3WG$fVud2Ykg-gsxjB~maAQ^V!$IN+???&~u9tg-J;$m761wl>d%@~nTepLE*fe>X
zZck{<{h7qbdoL*Y?LECF9=TYPXVK87Wv_!<m>6{b^OZSxXrDo6&PL?#&3Eqa73o+b
zEyGe|@l9ypprZW%pMkX_G?Hs5I9wU8){<*^jJXU6vgU-Y8i6r8@UMs8`4#BLmtQ@?
zCA;>-i~DQb``^1yhHC%*J@v`^tA@TeKlhg%-n0gT8Sty_(PEwSkDtUIu~fYktNq#e
zZeaPUg@0{Za@eDQPvz@x1BXX4P9iXrp<(kNq)<%G0>P*xXqP&O58AffhNEWD`Pb7s
z()ZiR*=u&+!=uo|t(4VKNn(&T_xRyeh~(62U~Tl*#ve~C84CNV4x}?!1(A4w$4RwS
z-k=ZHSGSD^=3bKg8{m>;qb#|(Gy?v%;J%D?u58f|@l0?6U)%mITPVZLS5+1e!g^Pl
zUuGp@q;yO^3i^bhfv2~glR*mb^#5Je^%tFFqmDD>2@h|4wz-~9zdo69L~g!`pO5p(
z52yYPnTkNk!Mh*hZ>p6ys*FDq3zMAMja*$^pg0cj3tp+ifrl;IO3(F3D=YaPYChk(
z*A#`$_0S&s^9pYFR0p!p^|Xf;L~%*`Mu>)EIk}r&DhDt5mtX*=#^7vR!~5+@70aHp
zK5x~~r_P^Ht3F;m9x4Cwm;+2q7)20e)?>F$bN5QkV*>+?Lx75o<ek7TwE13RSivYS
z_{y}G$?9jNA#>lV-YpP=6FS*PJ-`SySgBGgA@9f|iv%<3U5qb!$j6+}X^!hQM7_dv
z)=Zkk?A6QgEEKOR)6;P=WD5ZLSDfnF#T^JU)0+$vzTYcm#5YtvPi*TwTrC))cBHUf
z-?@3eqg2d`&sILx2rt5AoP4iF)P>?^EzS0%mJ0}sXag$y;T;t8%JMQ(*sE7icJmZ<
z`g;fWqkW#``0K8iglFJVR&%d|CC@CgN^4%Gl;X_w<ZX)gEAmQf;~&i2wElSRA+8ea
z1<JEEmRqZCu^MqPO(~(vFAXkmRtF0hmP5`B26+AU4JT!Bz1c)iH>rbozr-Tm+HhA#
z*Vw)HayU5yd($G(WZa@d*+|JOPLR8wdBU%en15pFRqQ3pO*fNY^%$~cGOz`Mxq~J>
zDi>_dn$^cDOND*ZwoT4(^;`?yrinkeVH$VF|Na=0IKlEc_eBC!HRu?vQRZxl0)ai*
zHOC_@?TuhD!TM4zoUbuB@H=jNb&SBK@xB8$>T_vKel@nEjmkpLAEt?Yf27)B0lYWy
z6YN@Snp6R>A2(rECI%Ht#u&MtW5Uavb@nY5JfzqyTtgk^06X2j<;~_IvbUKA-A>et
z6G#gp9Qc3KsK0hut^9PNHaM8N(39hPv(zn+saKi}SG>D(dEUgB^NR8zCOj0cs=ePB
z-i2>*J7$e42`c34)jm`lF5O|Mfr~U~sbxl<JR!J){MQ=VM?8Kbam%KQHorp6x%3#E
zor_kqw5R#N|Jzea>bdjZwjNv9fe~2h7^qpIVI%xRj$KmU^V*<D>;^{Ye=TCFsr6TV
zyoP*Qp6IcUUD<fdP-cNQwoZ2rcL?YtYErGZl!5nVavU?t@}{jBBxbp6h4zb{e-jzA
zG!e|+IpBp;`@+96#}}V`Fx^;^^(Gr+8&MJ~P=1aS26e!tCIE$CHIBEg9fVM|r0$^+
zW;=QSgDRshcpF}{j|nr1G10}+q(npx*Qen46eP99Ofc}-b-K0`sX`8q4Fzb1VMcKk
zZnNq>GjSoP)`>OGR2I6tz}F-lZ0;yAuqav+GY1n(XNwQb!o_!#MdUBcw<$^k<P~L1
zHxg9FJh!u6Vslo^v<H%c(15?dXVz+s;;6rdoNFpWCeDw$F3D`i6BfLkJVTM7w<6EC
zUatB;36H1G7L>4;)c&l=T0i|S$XlkYhcN?=r=j(f-Ah1-&y4bLg}#z?cH(7I!g&Ix
zDC56lYq^iR2EM`t#1BsOt-ae&`&~?84-y*1(A-BYzj_d2pV8NI4$2O)$3$-J8p+rp
zEw6d{Pp6l>GO|xoNnuP*pB|luWk!elCyKHL#h1!eP-IR~CZM1}WDzR&)~Bf@ZxvHe
z7gX{<7i_7a(EqA#0`J8ZmfmK%5w{^(LfZP0OYuCb#$$uH>Ck;q2SWoTp4M+OT%<R)
z2kDI5<C#&q2a2rxSQzV3QA%=<i)d^~xWu3Xz~MHuYpmv=bb5|<aPDo!kK+gTf3`iP
z3zlLAijML4sKLG&OYq7bEQTnj0^fJPzcc;(W5#40og0<^j2PkGR-iDFI(f;`0vlo5
zFYn66vS%%+U>vxcq{3Er8tz`6Cn&uyq{Lp`mNIXKudT0N)nXQa3C{UeoQok&8810D
z9~WHxF{F0ungX3Q!qRK$s7%hq)GTiqj>7L>6xkMgZNPtwGr4KpR91UtrrudA*XJU?
zHmw+jbXAwp-xt9(%9l1dNnrwty*@MM*FPT9Ch4cVyA#@1>Ow)Ojs3I@N^9MLQqx4$
zhE!jXA0t*Mi6@4$tQS)a9+Q1Ob*-J!H7F=%(h=sRtQZ{;Bi$82E|OjLGAm0`G3_()
z;aHc)fz~LnGw@FCt&|d<q>k!v7x7XVPI7x>C=-Isf>o%CnLj>Mq#~B4F#S;h6^b=u
zG^nzl^EZ|P1iuaGXk$(ZO>^+moGslEyQ%42@VG8bpkMUDTFvNx41Y-h-zzlw+Bi%I
zbQTiWGbMRR5s<vqpCZuN>T4tDy9>)S!W+h&trkkS+HV$~X2ILGZG8f0!3PS91gz+n
zWs{o!*4^srCh6Mmu7OS>?k;|(qK63S?Z;~((7Bddr=5jE(k=`uxQtK^_y~Kz$=fYg
zdb@Eg8yu=Rb%XoYtC+i2@^lx4tWU4IS<BH?%<Mf~DKq_`i8zFKxb2FCUpG(9=IomN
z>^fN$#QS(CrVVqe(!>A1?cy6-1ceXWd_f*I4RIXkRlAEOv(!lpN8RjRfc(K^z~o;4
z-KSs=K~x|KXItie-@N>8LFbX}YB$5ytXz1puaXlzy}kd=(?eU{?71KR&|MD~YxKL_
zNZC>^4H3C3%A*!Su&xJHp;B`@!O@&oHeT$syew{CB$cUy<!9LLJI2H)kc_fcCou&}
z!S;G8G}oYC&p4X^a=_na>QOc032*i=>H4dhjc3ziv=g*f3M!I}ov<AYM>W2~fE)p3
zG^wJoA|$w1=`L#s&pW-~Jf3e*A%$4s#g<-plzLY2K*AJPbAt2W;IG|Rzd{f^*y(lL
z;!hlyhxIXKhWKz}NslpM7R?I`z<Dk>|0I@AF9o{ADQyLHR+P=MTqhPrKk2%^c(1FC
zOvhSrVAjzV9_qGjx?-~|hkF{vAMJ=y>SO9kniEpcskhSLYA&-BO8wPsaJ2Z9_e`wi
zWLe|~B_a2+Y+}g-L8djFeIyaPt>?mztx1sM?x2u=EyfW%A%_>O*h9i4lRKQUyI<@M
z{dw`8YrpM1_V}w`&6QaDKKr_*ypRiy=^z|)s?WZ~p4=r-!4yc62|gd;ZR2m*<BqKh
zdjHK}KiseBmQn!zspV;7Yb@6h_+wuMd*_MVZs*t2lzH$a*$>v%%{lE)GLPNLdLMGU
zd9~?u0`b=oe7<g<jBWkcdOT2P_hxfq?=vI(wjbP&v7o@5UGcJOk9Y2rp$t^XFcGq>
zZ0dDs{Nt38r*Ns?L^7F+{zj+xJ|V=1&lkYn)*9?D9&Xi&SSZ;2e_DXs$dim#EMH+O
z<HY3xtLf1I@OX{i?N<Xg^I96z_PA_fetY-Atm$Bxe7t#d!NX(f`N+zzQ>3h!bRUYu
zaJKF%A=oM`#2?z5XEaGf5oL7Ts8+zuVHESkYZuPv<LuM_Gsq2RMd~RJ!$po{tCJwk
zbPV>r;rdh=5;hC>3mdat-`N$H56v8M{1#ks@LKAgj~Y;U;xMt*3>|A{5X98u+yOi_
zFWW$muz_2gk9o$t%ot+{>s|^1obQOFe=SxFeBYMD1&!x92N`#+mJLpduG~AN?Sd)A
zUk$8BE+F;+p|EdK2%y3^HJ9Su(KFRo*^a7D1An2SV_IeNvK@~;PW8D5s44sjWq#AH
z0So{Pefk5I<h~9M$Skkwxw$N@Ew&+4eGuJBa(W-&;sPT}lQnQj-y@MO-Ii0O1^8|Y
z05=1Zbi>%6$F!dG1kw)RV9>c74BvBZ8rZ|N&x=@47YkAo6{}*DqtwDylHA*X6>`kF
zb4UM72jkS_gDz9{qBeJaZV4fnTFG1!^IzJ?$Nl8Gg*0x1wcV^=s3E3)5OwUB=rSAY
zn76ry0Up`4m6$A48x`h;v<dC)SYN7^Wg0ZpGtQkY&n>L@oF6ZQ9AzBGxmbm!;bucE
zc>S*v>XZ_=4Q}n_?FNb>NDA&h4?C=}<<>!f80&L;f9#VEb}NcT6EPi$4Tw3B%eLKJ
zakn4ny5wNg$&9EwpW2-_ne%0(%=mGmn%5cRLvq5hDJ&FM!Us%g2xsdd+9W5WZ(_g4
zV!~dZ<)1DKZ06U2usf_*q#ydV#e_%p7LWM6E;p1?E+lLxq%+$`FXji^oaYaw*JCt=
zH@mOHso7lWaVo$zkl~1)&r-NAi>_Z=<c3<-z(z{OTi>g%_w}^#K*|~bxjKz8RjCJO
z0{Ahl_5P)rq3!L;f=eG7-_)-TJ?f>h;2refJy{8hU+_=D;GXh&7!O~UaCxK=yxxLA
zaL!O61;=92O9BE6O#yT>{T_g=mBqe>dg<ce5`?~;hpADlzx%JY^u8bM-=NX}D5$71
zGZL_DSu7ckw2aUz8-*kb=m4i9H|o)}&7dV3lRFk;=B3l#G}~B7Azel{sv$eG_r<sH
z82VF%;M>CT|B#%1h>N+4>zGOLD%cC>C@>dV@7-*oXuJQ)HE4}tL@Zq2nx#CI+M0|M
zCa6~uQMg53o~+K=!t9Ptikf_*m(tW5TT1%~tcPf_a6t9i&u5%_S7T9Y7rgf1HY0tm
zf*5b1h;_7?oF6L%iB+J1bM_8OJ&0o|_GA4?AY#*mt@E4vPI22mo7!O0L7P7QZ@h)F
z3DV&KL6kiAS-XDTEoJK<9v#I1@o*_WJFzHk!o-qX!fuz$ZqpqTYhUr}egkbCb!SRt
z_(~=VKjFWBcQ!e)Ek^S;-xQL9cKJ+%ux3cRcNmt2NijuPYku*j)R+rv>FBiV%_+ZN
zmJ(WA)9;i*7YsmXvh+oXC)5vCC-d3rkjd2pxb%0g+N3!S@v(oT@33B`KhIb6lLX0_
z#Ddosr;{5bV9H@+NDa|L=(gTqq9{?)Z=Y8Ffjk%#bQ93B4B4_+DdlX5KNU$9+`<1-
zA-^gnn_Yz<(k8D4Q*Z!Oyb3u5j@p*ld10&=<H<wD|0}&}nq{CM*S>XtYXPl?OWuSm
z2aV=c_vLQ(>EWX4zYJIx_6>A)^N%lxl}G~U3JD6d2gi~d$iHZYre!CR-du<~@#{4g
z`}pw}7w^){u&?~D@qGAFZWO=u(j7C@v%L22ju}a}erNVc6IEC#A!b$nBmd6jgMwB_
zWmw7w85xE5J?l>n0n4`gEi(}uk`UV*#<eVkz4n&kSFyUfcAm~6BK|WOd*LH1c7cI6
zx6@)gcD~^K@3`JR#I<jwDWql(MYLs074R2|y=A)g^Xe9FhMIdLFT7be$NgVTowTd5
zyT8EJ^;a)Xuw;KCA>?X`=xnq?0s_!``r)tCO!;@$n443@e@FOoy{S9-J$FqjR@cVa
z^X8kH-#f^t_p@&g``1+6b-9kMf*FP~9_AMo(w(25vvYG}xA17|NEr5!B~#buPGCm*
zg5Ff52$JaKhC*E}Ir{AIx6x^UdlbKOr5UrnGJ$C_t8_mBK99aBP3X;5bs<U~VKUM^
zak=P0)Kb))y26!%*C?1GU{*&Vu@=nmz+#Yw3OfMy3U9`5Oi=I8qd0Yn;4`-k*}gul
zEn#$^6%{0u8rPeftl=Wtm}7_Y#&BdWWV{fn{$-!WzzFa(1^BMoYg-HYr~<sj`wsLs
zgdnf(GCL|o>&9LFNyla7y5#7xc4s=ZvIZ6jarD5Tu1>4t^MQ+t3pTPE2@x20^82zl
zRssaGxs5|vC-j6>w9ypY;vq{j?5?^CKU?%-k8a!ex{HpNhp=yEo4wQ4E$gTSGn;<g
zh0D2W+e0U$poErN`~wfgMAOrv9Aoa<&SsuZMyP_0GV}dcs?_(URYXsM0*5xBu2<=v
zyVU%4tNG1Ih=<he{M>tf8QIxm8ZdihXQrAVL9yY6*U1i+?!t-wM1*=Hvx;;>UWvqV
z_WPez`=K3CyWL+bQ>VW6bCVB$|Mj@j*M=~j#m==mzuh*CDYVBvq1*edJlA$&g8G@c
zeYCWo{qwC!c65O9Ip`(Li|Crsjg9T?Klf5xLgGVJm3V)ucwY2m+_T}AeE;vGJL-wO
zz5SnCK0kl&`t|EqM$i9we|F=3i1Kchc%-C=Wn7!?T#RlA6mV;0uw7_yyRB~b@-a`t
zN!NZ!%wW5HomGs|WoaD9=OjSukkQ83`7ii2bk)|VL8a?9+rH=oGWPOJlI~J#_tBec
zAo7>e{RWc|F6715+yah=vy&n$2b*%4i_<g~m0#<BK8HMssHDxx+}=HVta$NRcY#|8
z?z8XlugS$3!DE8Xy_3v)Y!Lj`Q%=pP?5A9XRb1E{g1rz<6bU{+Dn(0%(^a13s`~G>
zxi4h9SF|s(##FfvNW-?f+}c0zavW!)q*g@a*ecG8rRRHa!8dr1H`T@JgZOHN;q-`w
zniSjh%mKyrk&%eAL-EsOhAYa-%4?gO9Xm6PRrX!+ds_eBn*CWlPdm+!5G5KzI-;$u
zjV;9S*@?vQqOP#Inp(kC8=5U1I}cCi{Cv)&e3SyNyzAPLVzls5DCj(Q4D|L0emov7
zHE7w)*;jz<oH<f>e}3&&Rq+0QwXU=8)`=!dV-N;AQp4$fxjM3Q^n;hjn5v}5TncYn
zEZW4D+-o52wVGGIUrRRi-w}f0Wk_NT0o*(Ac^DKg8IRXAwjuU<ReI~(N|^JN%!VSv
zHLYqm`RSou=XKNXAt%X82PVkS@y@Qjayp)lompzV4VgN5o<-Q->L+;+OC-f6ry}AK
zP}sWGMtXaNP*dMQLCavugIM>Oj}bdT|KYaYE-WXd%rCF=!*==Ps=UYYO=r<eb#o-}
zkGq-iF}U;y`ULrCZspRwf<B$LU$f<=M{COd!6Uv}WE}P_q~ccq<Y}806gy*Ge~Zrx
z*ItSO(J2Q>&2QEzy=x|kc5a5OIsCvTz>PjQBUH)|@Eo<2)3La%38v|U88mN~T+@)Q
z`b>qRLn}iLqB&>9#JYhBI2Zh2fkUvio%g<SGNBe;wC6nL5y_4nIzQ2+xXA55wVz71
zCaJXcGLJQMwCNjkXee#I#^p|#;PNCnOnM=~R#XFf&27J$q<#6`uN@_4k;jW?KJZj{
zzqiUMIy-|l4;6LsR~5m0tzZ?zrGrGTp6EsKMaM-)RrdsDG2(evr3tc`=CD;4YC2YO
z3b*Nu{1P5YPiLf+s6D<J+)V+s;*F(ia>aOFMID<q?h@DjoVR3Qi{BFybXP>-_W`u8
z(-<!zTYJYppSSg*;v)%hDyjgc211Q~Lt8e@*~TSZUF9&{GzFn@S{=R<ys+vPqCJhS
zAMG56`-<Br@qx`qUXu^BA`HIn05%6aO3rt*s836?($m*#TZ{nCH2B?byg*fvPcrmh
zjJ!~*q)sJo>=^7*)r6Ibzq@v`BinyrSn6kNb!}^6phTITE6rDDC6nyU#e0{SLeeg$
zm11Wm4#7U1wk2svX>(?ALR&-ArD;fDixc_VSwD!zCs`*po0U1+;c3;4`Krz~zDH?;
z9W?><tH-w%?zc*$e@3J4vU+3gK6;(y2jSz&0(M$&2u;YY2DpEmDIa@Q`z9o@JH0av
z`xEF#vDk*4vebIcL_P2bZ#~Pz<{a{s;JaIfckO;2vy69FysQ|><IIWH{x}p>itH%H
z6x~l*m4E|NS-KiH)^?0+<2>2v#UG_9hN<sQ5sk^O3U$~0sx}G~b0s-=1Ki6+flYCC
z84L2m0K?|o0yiTo2@ApNLxJO$a=R|HrWS5Rhbj~8XPhy}@0ao#G)<aHBYT2ysg2up
zHRpse{XdCj)&z4{C{SigjiHX`fy^CtxqYSO5W&1yf$E}LT${aLa$3q%v^BGeoBc78
zgOBZv2VQ`CSvV~BRmE4)v3Z@=og8rEi=rcqhz=%&7$~MK&s%V~F*E6u@AjaYG)Ca4
zzA5?3I&l>ho@Xk1Q3Wb9n|AiRo7EGpB6VowzR2_a5cafT!E5{|Q<1eaHbq2arz~(~
zkd}@ICyNiBJ)Ou!ly4Zo^x($iTyF?%0<{FrfdnAI+)n4MKgt8M+vh7~^d@`BoYuKs
zX}dMkCFPidrVP59A<__MZw&kBN*K;(umNwPm|#Z}-v=k3j;;RL&I#%?AD8i8Rh<z}
zDNGX&<Oij(<iXRDkci(Lec9rsWX#jq?gG9RPYqUBxTdW>#5Cj~$1JC{L{`a_q`@NF
z(##ZklLaG)EY9#-O0CP8&jot6=!Uv-=w{V*<#n&+Jid(Ke9reSxli4)a4PcA8(qXn
zpxmlOrzQ$$gysnEMm&k_S@3Lu?Ax4X;q(;L1CtQ5n_|8ryZ|2Q`Mj3CnvTp!XQ2aa
zm}-{L_Si4s=&z)zUy18}z*Kx>;D_pM@8T1$l+Q&@XwA4UYx+xvXvRS$X(XVfNEAft
zaX7B}i*|uFtefTriqp+E%f#ts@K7mfnsychru}y?gGBgkzfR#W>5S0N3j8y_>iI-3
zl<5IbviZdmR><E(pt`JT`!J6*eT_QaaMI<b>VkfYP_UVDly@<x(Q8Y2v^yXn`dbHh
zB-SW?3=`iH8@uIh?DuG==tgzin@GWPU})OXm$AYnJ?RczDwdoGOF&|jVxQw3z-i6Z
zB8J?8@P3>pa?$Ns5n#e-CsU<L?@R#qgrOwRphXR2nbp84>f^x}dC*H?uiGph3_;C7
z-v|b|=^Cd@Yv%b+950<kF0LI`x-%p!{j&*yqeQ0r;{q`yG>rlfX3HgVw+ThFT!I@;
z;ISiF27!j6-Vi>9@k7V)-ND2LE?S>Qen_V1>@{U<cFk)bEq%40xkkDdyh=ShJk+%Q
zSLXNUtJiaAjPv@cJ&aqlAy{mbq%UfHa@=fgZ<)_MyE@MPHJZNy11j}GT_pt-hH^dZ
z`aX)S^27OqU#b1<5cUWo;NvI_fy-zVOcf!Z=K~HBsqUKgzGl9k_K5TMXM`dz_{HeE
zB~VIkc&xdB@*tLA`<k8hU=#Pi=_@Bq<o10GLT!vvEu(wimvWh~nF*K1yx$<|n8fiu
zMe#xaW$TU_06G`45IFd8`i-m_x0UzpX$$cy?}CVm=`dZqUOj-W4|fx}m@|^MRo}3H
zG4FdmyIHA@K@~evY8GrzF}P;{`3sP#0prY;oW6cvRs86zaz{u+W!@WF+<xlkj$K(*
z6Njwd>CaHOwyo^L{aqb=reVX)Wx#w|={PdNj`X>67x^r<<t~FP?iAf_vsijd%bQAk
z5!aHclA=YHiB@(p!N&$0G&tKQ;q}>!$F7*MO(;tvN^$s8fs3bt$&Ok{AspjtX)aSk
zVUyGq=a<_(d!8-13QTT=b7OZ})z|~T^i0G$G{H4iqGjSRb}bmAOB|=NWQoFPx?g0B
z@&FGRQ^0#LyQS5+UsO0|SGK^iSy~Q{$nOkM>{!hT0aB)eJ*FLYWKrUjjsf@a1X_JN
zU__XWMTCu?hUcEmqTVT&;m!3gO`HAG`srw!t}VsA%$2h#5F(5W%+!tgb?g4yH{Znm
zX&vr=HkhzLiwRDT56`(g-nE#jShM%S&uD=+XPyObhf>q7!tqi9f+ORo)x(%IBw0Y@
z!@=02@%2SgK93ddu*7TUMe&v_ys1-$Hq{+gG3%v>wi9y6b*g+)Hkj~+=1m3xF82j5
z2TR1KAIp?6s3%6e457d1M|h($BvJgM&qN}I=q<<kG-7)%??l8X5xi>p#9`uov=@6h
z1(Pb?nZ8g0`ZT8Xi!T4GJvaFsG<na=NGQ$WB5@J4R_Q=7bgTA4G0=Ri7-NB_UtUi=
z-4@gl;J)e7nHJyj)GBy<Jto`l*FwLuWz;5rO;DfY3}u^>LGZNKx1&uN2L#BAgHp#3
z<=Iecdg})4Oq{nE;9%~*<hjIh{RW4koMQLoGvTHTQC1?vQL<rcZ|<)mFJQ%vX2n4S
zPF36vPLxbyTTMA_&;MR~L-s)KONxwV$HR{Qi0bRFt2`lwd?GF}M;_b~BDE&tue>=b
zdXh?oh>~3$*qJfDQ=HUforEtylo$~mx@gEk2b6aS|Ipr6H4mzvtST=-JPG!!1t_vj
z4050#NsK#>prTyUP&uxhc*(O33MgCfDe+W-Et+>IObs?cB|<CR#*VU(vB1Tg#fqhz
zUbs}<qzQ@x`}~3#FRG+2voQI@0$R8N4G5Pp%!Zw3l9mS1mt{f?T`KTL>94q(hj=2=
zT>sQlx~mLoCv^t!2mM3+ZEK_jjVS(%{m(N3?!akb;-|~LBK_b<ntzkL&k=n+r9f_P
zG+Qbee5iIdY$4h)tM1mRu0**v7;-AQ*d+>nU+lUG>xj6xzNs4^iJ}$@dCa%q=D)h^
zw2_w3m5b5R3&QU8ETNrkPyZA2&uZ3#c`}LN^CX9?$g~0Wf?z}KAGOaL9{<OxRlC#u
zowGPP$wjTq0@xx@s~4Q8BYm&$v6U1eOcyJ_)fD>*n~25!4{vzkL#VHQ-|g~ejpTL$
zSQ=l7ZaTsBnoCRy3Gn!FzG=M+w5+F0LSRlzaS4CQrdzOK6D)O%So#Y<zD^Nt$o%uV
z*7y}f5ueK2n(+8dUW^pN|C5X*XLMUppO*Bbx8$5T$!nP0Ri9lw6wrz`*a)DfOU#O-
zD^uTp7f?2+x)|vHC+u)$B*b`>qG_#m@QfNcbKOaPW_H9hSI*i@lpCN!cMsucc%yW(
zbpd@Gs&sOXhr{B7CXTb64|#H{>GFjC_ncB>bB0@o_L2O1@M)n~HC1Q&FpOVJaVDWE
zLg~Gd|7BOzw@YZ5Y%{N4$XUqJC4vgm`f?!AV|I`fI{iy_ckCa%@+730E@tpFkw@L(
zqQjSa$204kR_GtZ*e)&>T-R~1C~t)KBGdpW%s>`PZ552r=3thAxX_UbW|{miB<eG=
z_)K;Vpqr>0i(4=f_o@XsG5B?YFZ!v*n<8u)Cela_zfR`lDK9fCL&ZExFYVF2VcTfu
z;j!nw``!L4Vk!YnAw~c^BVy;|ZEY96w47YD!s0}9?|hzpgQztaETW`-uGVY<0;6Wa
z<d$r_uO@(AcUZ@({*vo@P7dpUeR6g3YNHx>y>|x{!CzlU(tg^}7D{}xd@ts-@BN#E
z;Z>)mslr1v4iF>IqA_>)<2Xt0?bdwW@u0TL-m!{OGBQM5$2#EtU@GHu>q_5bv$xD(
z>zgOpmZ$&LZcjx(c1~_)n^*qDmR<L+ZZMT=vdQJHh(Gop5NVnSa`k7agS!b+balAD
z6CRn#7~ajj`GC2|(l1C(D%bAyY4yC&Z4{>XsHtF3EW7CE=ucQf9|-L>YprO~l9)QJ
zSet*S0;_1_UXR_-CC)LWZewUHJ$U#Kp60p**h4rb$mDZom*#Qug09O~%IGw8R?z~#
zNhj^$1w)L(*~~Iw`w6T>vIZg1+0BN1zM|t0;RC7Z!8yC|lWLf`x?pU(vC<lr<wXj5
z39!^89V`d7t%xB}WKi0=n)W1YPQNIq#K3Rb8;Szi9;NIS?HDpXMLJR*WY?c_&;=wc
z*+`-P#0gN)+NIr#SIeSEgIY_lZ|MEuuh?rvXGue$j(^G3#@X1-xdpEd;_P=jTy6HL
z^>zz)4jF{o@DS@rJS_pFL(YBVuB+&J)fd78L8V4T_$Dm<e4k}{n#8qlDEba71S5X=
zD(3sCSpL5a459GOZ!?ouv}mQxF-jCEBWE^LPZ}acW-_To2tA-<HnuHd&CheHaQ;sZ
z$|1*Gn7js^00t-3{j2=!rKJvgD;I!)twKG{6s-0@o<X^MCjCgS%sE@=Hk5y<GSH|6
z()@v3azPYx1m^m0fyyW(B44!o_mTa3iyGdu^hUG1^!6t947zu%Yrl!f#;c*#$}zVL
zo=HyMjyg`Fnr9pA>wygASrB#Vue9BLk5la}H+zvqbx!*tFidJ=LvQ`=h6%B2faB4h
zf|Zk}Jgl-4g33#0FKz~|CJMAbs6MsJY%h#GJf;H0<mErMd{eZfdbP&aq0*zWGU{wD
z=l^=TnGuJ9Aj3vhg6aKceVKisTV2tmBG>~=sK1l3=n161!v#eZZVKoD`9itc-oMAD
z5@sK6J7GCrseCMZ*9#Qk^kLFpr2*EusAKe>UG`L#qr-LIW@I=fGS>EOmPtQ=OU<(f
zX=fXT_P!jWS}M1^`JZpLI@SAF#u&A)+EH`Z26T+bcNzeLEQLp(srkKnt^8U+XgdkV
zay?1N(c;EtPdHDjXw?(FfH<)tFX#xpde|6#bJXx-8d()!2#-0BKkjrv`95G!W4mrt
z$KdkodFSTCO~z=F-nPs+szSAan=YWDR5FFngnuh&Gyx2#mv#gg9=m{wysLD=?w2@1
zMB9_8ytJBa5fTUp?nzln3)Ry`D1BE8k>XDp-MZ?rro_MYmmZJIQVDP8hZ)=wN)*9R
zH{+?GxMvdbfpMn#hQS;A<9;-3=WU1od^m1#okJ70;J9k*>%wCUhTV6vyVY{C&b6N;
zYMsD%Mm*ggl0*K*pkd4%FdAr<S~A~vWVx5Mn$O@j&Ll6i5?|yrAa$JSVucb*bk~5W
zCpfF!lvXNzTau3;BDo&cXj|e%j>c{aBa(^r1*k;&2=QJ_jNC4fl&?Us7*jPSopssj
z)v~9=ysvI+NJ=PK$y+T^7l>uxB}Chqc=asI8te?5q#xWbQF7#4ytnCr(K}6qhe<Bk
zu;^O(0dpTN+W21emhtde^#3OIgo{bZRKfy<o7nI>uL|DX5@Kk$mAxs=)M}Pcnii?)
zY$bDP$qN&o_sZ91^Kukgv@vew;K{F}#dXigW(yF7E(tmp=i`?e11Z`**1Ic~4<mx_
zCq|gN-tJG2a4ZyQn@&4V^;(eIQwq6sHLWBvSo)nyi(wYyj%(^r?YFON;~@(rCg2am
zTdPa`F>~*P26<FU$3n462SUe7N9Ta+(!n>7=IFa{w##Q1=UliK?w7Zpn)(Xf9YDs-
z=Dd+zyz`4Kb&yl~8u_1Zw<~XYzT!EuTsQDHS~9F1J&p7pG%l7C44g>Ka*KbZW=@eb
z-^?_ywgm8W=2K)Y8-}bGjcUFhCd&9-Go>$oQ{>?D{VeXfp_G86g`mmJkn!#r8^NP0
zFdLgsxXTRKD)-havkd1w)iY6X0bZ6aYV3xbrF8GaAbRQqvg2*QRwAvUfAFv*W^4E>
zwLs)~T0*QSp<+CDw&c5UMdMG*s*c2k9|d$<1R@gQJgc&ABFlnEDb(WK6tKo5gG2PH
z;sYZ)Dt07@lB*HvJ~aUEdM=ua3oS})kzt=<%XDXA%sm30vWr&8@k+j>v0k*U{iF@j
zip$H#wzVl=-j7Uw0BfHg4Vo>zIR(5*ZqdpP;-QX|w?aj$x$&j0zJpQ~J}T?pwT27o
z12sRGfInWgPVrLB^IFvkqgCsqG@=eH6#b+cqQcNaGP}pbJ+*-N1Ej(d`^31v^s4j8
z`xw=MK>E)3`jeuCd-eikpN_USZ)CM}B<2_jtsUX~OCI0zYK<Fd<SyOfa`F69UlAvl
zLCV5jPN&<mAiR>*k`FnP>>Hyn4CZPb#1uuK<DhrP2HCsnB13Ch9IK$T=IW>ItRg_a
z%C=HwkhXM_f<91IRyLZ3G|8zu3cCz^ebM`d-_-GUFA#ys9s@Ch-^hlrh^&^~6x$sL
z79^|q_9>MmF!NxeV3_71Gq$f1;jwYzq-+62L3RASc`xoP4vZ!t-&#XS$(~#9njS*6
zqyDhDz<4GwY5-^v|E-k1vn?>ORj0M1f>LTSai~Gqffieg37z7|iDS})?t^^)t>75D
zEUY$hcz>2wD0qcI!u8pc=*QfX=vONajMnXAqxn&VRq&K+Vf<5@&L&v~{)rXw(j0VI
zj2bC@U!xsq186UW*%C#P3J=VlA<_Oays|+WWlV#Sq0VkkxbXRz=L61RWDrAjd~B#j
zE2(uMXCm*+733f6@tc_LlT>kLWow8-H)f1*C{$n=lZTDfIDRyo$>wA(Z&m;LXXU2x
z`Z77PXyZl6cp^wYc^C7u*MwDf{A;u9LcxF3Hk=`|UX@4OgJ_ve6N;JArg3g0_j>&G
zFD?R)e8)>E4xup<hT8(?v7#=^Lp<YoloWDFdQ+(d%u;0R%9VdlUa34cT=~Ais28ij
z<%muQH=&kLAaRD|+H`=L@^8E#t=De^&;3<+7UNmuEoUvWLQFq+MNG#%Q79=?IgdZp
z4-XC76zN3|gXOfqEt%Fjj1}qt!+l3By{0jq6&pk5t;Sv>sg7Kpb&)qa@MjT;U~JxS
zOG$*=N=aZRc@5O<n|EQ<lHkdVk3DmtZI;(qqRK)}DF@al;?b9v5ka$6Gullqt~>|K
z?eT5U@}`{8JGps<mKFCSnAQL8Eb{QMtyHAF1}Z8m<02hCD<G_=d>s~ZO<;=<5gi6(
zdppciO6IyqfwMdPXUi>1Xv2PE#^Y}G2WOvWp_RptiPtrwVth*OuY`YZH(jJ{1~ErP
zA%^5#BjIG(QIC1A&n<V9pEa>S@ca?QiCYIOR6@C;&-wxnl3sa&IkVh6y9zArm&k){
zEqaWf;Jhda(C^e4yWJ&|ZtoUf6!;nt8<<sE*qywTgEksr8<qDJH!w}Ijt<qJ1ytp4
z?#h)}YH}C@Gg#?3{Kj1@8CX}sLn9VNT^(UAe|ATueBV*Row`OBhX6fs4;R5%=T6AU
z7^zmj?6&F+{iyga>pxZh*8lqnZuFBbP)Elj5mcyd8<igBEQ?w%WfusJXU{+13V7li
zLe-+?+U4yfHyDvnHAG5rvqpl;1yFeqh#h7`y)v;E)R|t(;%2)RpT8JhGICH>o$pzc
zjhR*t8vV3H0^r_=R$wwqzL}$nXBW?+&%B#^$9{B_K{4h<3pUh#`sZQNOM(@}=?+#Z
z3W@pQq0uqDyZvl_ii>>qWofR0l(dkom|?7MBBG{i!9X%mTtyMB%@#A&5CfH+HhaqA
zX0)`?G|V+%>PRB~dQi$0CYNFKe<ig=fHG{k_Y;MD#oAK4twq#f3Iby(SGFB{$br{T
zKL+r3gLO3M*ef;J?H51T!_Af!;X6$o?By~_;OSgIB4k=N#<{kPZ_2<+Z^=hhXY8SD
zg_}0`9!ClZOkLhf$~{<0cXhx4nT<+`EdtkXGOzwz7da|1FCXIoJ~GL86jGl(jetlm
zR=X?<vOT(P5~}0=Lmh8YA^+0w+=GWD0#L!CXcRJ(W85%9EGz3vuNUAJMCl<7rn>`6
z785r9IkUw3n5Ig{c2V=3mDlypHEG3|U!c5mR96WAb1QC&m&`hW(^P;Otj9vpAsgtW
zfVaB)DpBc<8_mP{6!qGf{?`qFoj-L~ZVL0~(AekYFjQ`;n%D5FxCA0;>YV#?tHeek
z38F4lS7+%(pToED;g^)r`^x6@>vyP3w#&cdxSCpj^s&8|-Ha~p46p9-pMiuaZ+ju?
z&xt(h>=WLycYt0#@m~Gf7DO%Z>%6n1K(pKveV7Mu*={^wr7}4vv;O)QDlSl_u1u-K
zr3?Eqfs03j_w*;QBv6M1k}?6U^yG1=M~SEqsgatf2+XQroh5<Em?*v4J|<3hs!C>A
ziEH$4zyavuAuJ;TT_`^pdBNHEP*gVPF%X{R<K3Z*eQx4{N~pJ#kh&;a%(MF`n=4=J
z|0G*53vV@E46PKIMZ!K!WR;gO^iKTWg&1dkA6j!1xbh}o946H`QIguwj3>P`c@lBf
z`z9_izT~Ln{XUJr-S{c7O<1W^vZN@JWZ8|f6<f#!6@|}JNUNNgS}b>se#eS)-P7xc
z<TUsw8f}fq2Br*$A84-|1{so8L6Cum?cXUX9iQQ%N)Ym*XU?G0z-JdzAgU<siRF;$
zy=YiLU1CayWEV$-E|`6iVL~4Q9&;EsFqP10;52MeZAdzIyDnny4c8=_g_+@veKVCx
zq#?3^x(5s;t6Th<qa%_G2a?!1feN6PQmJxH7g3@QU7ZE{y`TVKD3R%w%}j7^E})=m
z4$_uvMkgc~d{wspJQ(*>R__sf8m6<BUUq-}%{uc<<E@|64}vRAc2U3<G1%bDl7$Pl
zErNIcG`hB4kZRVuSc3U|5VRUPWnx!~c_^W1<@HZ-HVOM<)Jzhfq3}6`m_4;x643Y!
zySxgQKRzyVxsW$ykD(E3EjNU``ebn44eSl6Nif(d`XqKs&dQfk9PDxXILUs~uKZ9I
zmh$&_ekGbAqAod9BZbRB!$iu)tfHgqLT=7b-uXl`(LO)aN4&+nQK#2bjBdv4NPaPS
zc;M8Ku{$tvLp2{28Jd52lb;YJ@+&?g-yP*Pb|Fw$b0)GcP{w`wSr_kEZJcsqIl?zB
zk6UDF9=9^g5*4woK}YBRsXKNT+GmA+9`&qHlZbD&T-bG``Tf%2x3-})*=t)1{Pg$S
zTtZ8W;t#_1{|PYy&izA*I3pGBb!#O!M-cVJFWbX9BQhx|n*hJBX@(sg>cUytaEVn-
zRmCqOk6U+N3bQ8bVo;vTbg1~b{PP)CJIWWv<6^*P*%!60bVScMkCENzneso1o3rn7
zP(F|R%xciZGQ%6iN#RiVT-?-|Y)EEjYxu2nMHdK#N7;5faJahhiPsr(4OeU9<ZQ5x
zQg<}yRZKW8wH#!<E`}}_&bMg(sF|a%x%%mbTk18dla4Nhn|<KfpT)t|U}Phzv04r~
z8|-UMK1$s+HSc`N&P4cYW36mtem5NSxD<}azI$yrc=U77-3wh^)x<_&cIOXQC$CRW
zPh)(19HXP72kGwZY;Lt$IB?(qMn*<n{6g4BBaJlDNF$9j(nuqXG}6eiFH=)f7#kbI
z{{8z8`mWatyzmXP-EO0=uMd-xlNcQxwSQBPN%XCrzqQtU`>k2~e(H|wHPT2Ujr<_w
zNcFr(&%d?q!<{)Nim1OqKiswNhn^!TFK1TQ>OS7;&H0tBsh{RVYnkq&O^$Ya$D-8M
zPG|4o)Z5W2*-x2&&{8vFJ3j<$x7&w)Ap~CdZwPyPd(qR=gQ=;h!v^DiWchL~9>=pp
zq^P}&HL-1^5iKwG3raT}?8vb&)Q+?qiP#<wF*{a$J>0x?<Y@5eSg5zCk3_hC&{&VQ
zI4X>4?FWVJXv^jIQ)>R=;NQab(NLF11D;w8oiBtXfBrvZv3O9@z+Qj=0000<MNUMn
GLSTZKB65HL

literal 0
HcmV?d00001

diff --git a/doc/pages/documentation/current/documentation/manager-rule.0fea6a13c52b4d4725368f24b045ca84.png b/doc/pages/documentation/current/documentation/manager-rule.0fea6a13c52b4d4725368f24b045ca84.png
index f8cc24ab3f59a60f54a7d1477e5dd5fe4d4f79e4..0f0210001723aaaed24cfc71d60f7d45476a4855 100644
GIT binary patch
literal 16539
zcma)kWmuF^*DeSWDj}dKEeze#Es{frv~){KHwXgKFmyMF64KHQ(xuWM-3$#wo`(T_
z-*cVsI@jkPC-$>*?X~W8-)jg`kdwf8K=1$o0RaOnDXN5kfGmlCfGCWH0(@d5lT-uz
zhiv~E{00s9=YeMQ2?2o&0W2!~#wBHI#@jN+IqeUun(-ikv>16ZGQ9s-!8a^%=g+pN
zlV%oo&^vQOsMD?t=gt<1Nd-3-A^%j+s0Q8h?ka265d-OH?)df`QxR*X6^9RX{oL_7
zk{0i;o@v$k{7h6DdAY7ZB&_E2aR%LKG2E(IEU8xL!tZ6I9-&{$kr%jVUwLj7CYYYT
zHS{GyaBh%mbGpX9ps<iZsQ`~_(UI4B<<iEa-uc}{^}(vp%xYcKY6GrUMB{8tiSEe>
z2flUSYV!6fYxHUzar%kexd3C1i%nqD!^Jw--t)2T>$&Yzyg`q4=eiDi>g%hOgSjHU
zJ^Nbig~W(cYjJ*!)xmW6TzSFNkd@I`(#~xXXspRWZ&T{bkArFSK`u3u1Lw`n>C0@_
zhDHA^)ywn&j~eB4Q>LqMn-iDS=)HcXv?+ncsck6KDa?X*PxgE49^=QsO{Wm*Xm4*e
zm~-#o`f-RU?_Pi48#*ynxBJ~kzA4?Cu~?prqn9}L^g2yUvlHz?q$T#xueW#k?T_l`
z4lmd)iFVotyT>M)bf71EGffc|HN#DdQ+o$B&j*_n(l(twT|2?1P4{60>3fWa-*+mm
ztxJ}j&g&bQ8ewPWwGQh_o!3{5>j!&t{(P%*{x-p@QqBvj(W$8dt|`%8Be~M?ryE~O
zzT3{<!)JQ?=W9vhS!ZB82n+#%Yn6>mO{1fuMVy?DW0ufZ;>Z$zq+HBndF#2jBq-3d
zml^l2aG2e+gyhsXt&dPPUhGR>?FI@(Mn|(Hg1S+tdX)xJ`MR{7XT*Rm>QU(7Z5`Nv
zZtYKIoaI+uQ^ilo5Fxz%ZmZvOMs(YgKNUT_MOo1g4)@5LvA$c6KDqsZZw8oa-XU3H
zAsH(xIsCJiU^hV{DJ-1Z1~O5N%Qgd*D3tKGPiupgek?I@-b@b!PFzV6kc7X201sh7
zy0tB-zPF3RzclteBmps%M!~;+PTPPQB&!MULrJ{$9e(m52NxGr_uOTd(7ceR?cSFt
zG5W@~6Ou1Wa{?+YC;NFqi%`t%rM)rLZ|6;yB^UDc*qQL2aNcJ78V!6EZ`AJ8y)x#R
zOY@-Uo{0ADYPn=CKOha9sCK6JX0LXRfj3Ty`bsBROjQ4&0G#Vn58dsWyT1Af`f);<
z<<P-0bzCuewRhcDK9_F&E#BL9FXHwY`t>KE>I$&MY%SD|x$R=d8I0gHrPC{PJ=(O;
zb{Oq7CATeft$Z~aIF@qnl#%obdL5P2bsggk8@#6Ut}Tjd;yttou(8{M?}E90Vzss<
zB>kGAi6X+rlRjbl(Z$B{Gso@pgPHV--IePjs{ZR^zKgcOjZ=9EFTVUzshj6={I{ug
z4D4N>%e?D>B!HUE1Dh60ypNqzE(Z)_F89WjQi9m>Qj!g}R)2B~Jiof;c3HCjeK|$t
zML?|8e6U@XzCWsa9lUx474gtKhMwkgVK=}R*F!Wn?q?*IazS`?G2c|P&@bk3o*p}V
zdeO94SI$Vr1EZJIx!{a~<~wttpYDiksvph@?aq0lULR_er)b@tYm7}HSt9P7>&MPB
z#>Kkvw@XXc<$?I#N7`4HJEjxtevDov5TX~|tMw;+ZS~Gavd>9SWFjTut1|yyP&bb7
zZEflz+HsT0xm4q%Pj`1d9l8Rnjpcd^7MSoODs+a<u>&W$f|8?ven6ut)W-&QqB79?
zAeA0Uyjuj#N!TO~f!onYtHY*qY4=on`n4-<8?>os?t+d7=7fzLNu<BDuLY97Lb^V6
zJn&dO_i!GDa`QpDNH2#;wXf!?@A=xy^oHT(-%hIUr7?ao;n!!0jqbfyzTO92O^Xd`
z*8$$o<Ue^>%<wjP?x{IATwy_8?N^iTj$K2&S1q(+mc&lgjOP~Ayhq#TJZvFzS3AxZ
z5#DQmVpp$Hyyt$lK&`u@Z@c%`lfr@&78cU_an*<PFI!nA@Qym4s(J6B5f75A#9klh
zU!4t(wUAyvFZI5Rs6QLKPGc-V_BgLoyozr+W%D{2ReO=x*luFbD0We9dKIkQd&PF$
z^>uJ>VB)d*vHYp^60^%ZGl@xu%E_(K*H#@qfE3!V4#=+Hot>S1Ki{caW#hcP%*i_^
zP1gdwag22xe=n{zo3c}BBDW;z?bDiTd0Phd#{X_VORn#drXT#|!4GF*9zbB2xA)sz
zFh?!YNb9f9P;|Qw9*7l?lu5W<wv2860~}lm_=B|3Z|(63oy%{1L84I)6DKa}`oB&&
z=>PhVpu0&ab=Iu_ZAvI8C=Q+{!!37&F-nIW60IY5@0-*1BrH@G-t&4MpX0{QUjmZF
zmOts>ORN~u{^bX1@D;rs8TV%7yZ)7^z)<0ZJKsf1k&7QT?swbF803Cup`oUCE05V5
znF?Q07lyb(x<Qwhmnj17aS!pC`kcAp9nVB|gy5GObUaWkehbD%9&Kc5@C9{|fD$Pa
zW$gBsz;O&3tzT5W{^;&bghs*_Q2RpH^XSRyK<eUBcXXjvwe=(za+vj)Uh<`kx3`dV
z9K-yqJCu@|IuMA-(S|pJ<nXD|#gfNLy&uzd-h-{CkIv1>>+8=~6j%C!{8EAW{Q9bf
zi~OPc@y)_Vd?TfDe+&$)?9@S54%bIV<sx%V$ll{8KeC^1z5hBh@^3TNJz_3qW*hMa
z&QY%7?kZo<K>`u{U>MoUVZ|2rgW$8(v^7a0E4|xAWB$K8*qN*(d{15YE=~-@Jiuvw
za2qFL-WN~Y?Iv*C<*3~<M_pJ$>RMv1?61wuKbpBdsg&JzI2m;OeqggE87c|tj2ec8
z-)?_@Ea8suh&!mWDk+}Zg8>mHW;v}cBZwZ}FxrPJ&;H(F&E%tiu6U4h2YA5w8GQfE
z<!02eAj8>Po&_O@`xEt>2-lSjVZVQmnG5Y#*MHANIOF9WpWt)a8A6{VwD?R^@{+cs
zFmrtfo$4Vg?`BX;oYL?J*i@QhISOq!m_T#!@{q(l=L`R9kf!kVhdqk`OhqkCDRW0c
z2`t%AH5?0}mZ2c04f<?Raz(mLtf+)XE}w9>!+yRI4T=fxpK}1Ql8E?LeNmE<wlIeZ
ziW)ldL`i<!-=GRVlnb?4s0r7XbQ=Cv5R-I#U!9!d=CqVhYEABUR}e$V1QGD8a;wN?
zc9vef7_Q}l*?5nEEyP|#W?a?~Bw;y=7}4`NTN{g%B|AHfDR`UlcVi<XH@}jgM-9xf
z40{^66;j?*8gS;EVQCTLYed?0%xVAK`QidWlE}zL;uE8m)DP0D(Be3^cS(HRC51U4
z?}S0#By)k6s+}X=IZ;U~ZJ-DA1yjlr#`?a_1O{8%B=<X4vjeME+K`Q>3K%e1Z7+zE
zw8B|L1qq!k^Fde{pBNq8#~WE4L`WNNty<u1xvx=efE(&F1Yg^P-B`aGdJUc^p*6u*
zS{~1WorXr<NUNwYGRnr{vB-?IV7ejNy}*}T5u2D$mvz+UphO%(rQ{<lC@waX03&oG
z?}<)&2DH7|3073m>iUiGYM;%wjMqS=@@H6s@ZcWukn~s!Qvj{O<^XYwSnqhL{X;R2
z&dg(O>`-c#05luVsIxD026a{Ch|hL{qRHCN%wn>zvGKmWm*$CTeG8xONGdaMQBh51
z{fv0e+y%3-elXKDrbyCGzT)<2oLvO@wC+{=?Vj>vzTOvUR!GPy<x<zcz8COJ*5)3h
zDPUL1$7BBhiA;3(taM`k;Q_kOk{Qn0qA2MrEca?F0~<G=AVD`;0wJ1=&u0AP(Ylge
z2#+W=6pG&5j*SN(3m%qo5>RIAz5Nd#aA#7;dd?18GI5Ev2XeV_8jm~XhSnXjm?)kJ
z^`x3-inBPT6$Fo;y(2a@|7z$vG;S~R_DN6b#h%5=txI{>Eh=c_Bp}HdQ(l8`TA13f
z9n_1Vw!SQRV9$Th7g1m>(9)B|fro%3FcXcTEaAQYg1mBR`_*f29enRMKEflGBrVbR
z?^!$Mht#vE(E3>(F9_ZOJ4O)K8{ya1=#`FIpM;zf4Eu%hE}Bt-AKE`(ThB8k1Akj#
zHTbpp;!VeIj6m0Q7s8_>g&KXI0l&a?iuAIL;O=D(F0~iQ)z*2HnIUbmb+m;{`kxI+
z&m+Rh-jB_V@D`DE64p@F@r>Ic(9zK_S1Epl@6W@IEjmdbg`B7=F6UB5`^T9dNWzIj
zqRIL?yEa@Jiqa&}$YfMDH-B28vpG1B_A^(G;?n7Frj1QJX>ddjh+Ph=*Qxf;T2egT
zw$2k!e5IjHFZ+Z(pQp`@?hBVP_9Od?T`yi7Cn~tJGk*cjRWb?-4b7pVlk_^Dnk&1B
zD&f*xiu@$2EvTd*K0fzGk=v$n+O-Zr5rSu*AP~rAn)}92+BilnP7U^#U+;Wh4xhH0
zVEfB^@BkDuOm!DbK*nF*&~e0(b@%inLDk_)gjg3GdVKmD<;2TSZ@ujZ_rLhV1$fa!
z!@Y%$6d`Y~#y0ptn-8Q4d8YvZNB;cct6L<EeW7}(Z@KB<q%%AeS7hWU(W0QDYLpsu
zgcc|2`GVRC-_}4fGhYDVpWAt7+9MF|bVe}voOg&kJv}{O%ke-9yUsCFW8)}$+=US<
z2DE#>i?k$wNYn)Dw*m5&R*%42qs7pucVVShE!3N-bwn0sS=>}Eh(U+Q;2|UW`}^ZP
zeLCPw1NX@N$pFadHs<^X`OSe8BH8g4&dS86Hs*%GJ5-{w3%Y&P<3e>C_?0@#?>3^x
z<(TXiB|K-Qj+K&~I63)QpnO0C9|1hlUk;qo*V*30&t!=%4Zq?04FW$*{JWw5)lc*j
zkSgR3io^;GXZ(`7i&F(<CDR?Z5QcWtNVg{BZd!Sz|K`AROxDfcZ3MZx@)}4J==Fby
zzruH$M_K<^=m-J!`98f`F$m39qd&?J3(^OXq2h7f2LUl$|JN6lrKP1lXZXmVnMfe<
z3kIOrdjJvu`^%LL>K4_3<AmI%rgTc_I9q7L2?R(6RaN7f+~IMYm_Al2N-FpJW^vu=
z#lhe@6q^6-o9*P7yazQ9tlMsI$p0_yvq?qD{AkQ}j|?Sw@su{VqCV)<qsuPvCKJt6
z__6fq<_yeR5>CUD<KwwDb&}ai$e#0x_G3BgrbeReYbci`ZsZ%jDI82yVX5Vi35T!a
zY0`w(Sn7zMk<$~<earE;qJjwE0Nk1Oh=#VE9mLmxnx6tph@x-JrLdn$_~m=q<3jhy
zrPy!Tx&Co+Pc=0)T^kz0@<V*)xrt{MR}V>YIaI}5b7Dp$c~nY~9I&+03_hPDl=jd7
zVKX@CX*kilocfBG{m#;}nCv4(De3H=q^aK*kc(n-W8!`f&3YGQh=YmDv+`a_<y6E-
zx;`nb;*QRD`i)D=n47hZy<Pf%Jj#vN^!Vp3R6wjn7m&0=w?mX0(ma23<AqqO0tHHO
z#3LF+tu8Z5KX#a<#I5RNZL*=oZ|iLa=o~}0jS%#lw4REb=onx?v8h`}-JKLQfao*(
ztY4zD{H5?KghvkB*+nIv$`}c0zwe>O!58oReFAF0Mr5kXAb#GiPcC=Ch8A2^=7@wX
z^kaUI%;o^oKr0Jb^v{|iLG9%FT2aOqD0UZ$4+fu0X=(853~r4UT+~3*OP1`+us2XT
z@;7*twSw(5sTEuf@A=bw_6>gcztu~?*_gEi8GOZq+y2W*qC>LvMHjWX80X)X6JpAR
zzDG4f>1%{vQP$u62}~Xtlo}dE6=^VBbe(6xO@`uG(U9wHq_9OLlNzjz3m#XpE2n=n
zddb7dvd7CrGbtH#3lbqOXMw<S`~>8x<x*K5g*G&$(-x7ucz8sKu05Q>VPj8R^h?Yf
zio6u~VRn6%2EBVT{eCu)l~;H?Zvc&3VG#b;R@;h1D`ss&q(5Z%2NY~vr(jg5C&9OM
z3B^|BIN{WlnN>m_?MoCaQcuW?->-VuMV>}U4E(g#ReMpazoUZnm*uL8KN!`=#!(nD
zDyjuM{DBH-Q&4y-0|c!5!Vpjm@(Z+O{7BSC)Hu;KkhDbsWxE$Ot~IY9vmf?2zg`Lu
zT~FSN7IecwdWA?xpIwL*sQ)J^^(_azK>c|q^XU<)&G7LRzH%Un(EK8s7(aGed~;(b
zTDpVRD+A4Lj+@O@%IifjQ4@aI;r7K)>xXGVaf3S#FLI2faW8>n=gIKU$Ur7i82^DN
z21nTTVc0!NW6^^Ti{~!IrC~@#tVw(Ud408c-#;O6H`;J9qGAq>+eXfo%m{L)1K?~e
z`#_IRVv^8YFb+ieY>lTi3YSXSy8Q>L&}y4X#Qtc0)}yP1)x#W05{N((dFk2tbd%-P
zLS4^~uKKCp;DrSbR5$>yO_f~|DI3MI7Nsfk%a^{l#wXL;Xf3WGZ?zd>IhP=j)sQ&j
z&i9;gq9>$?HQ4^cG+Jq1{)9S0P&g+h30AqGM0bqwb9#D%pH{Tw-fPdc&-u_uzGm}2
zV(D2^iA8+TW8fH5gucc%-8w6RsFkc^y1H`DH?3`pkN<p@insr~NpiPAf_xg+>mzB=
z8Kuy*t&!c~sP56X3wJSwrj6Rig03g`)4c5nr>d;7&kDq6PyZY)(`7PybrWL9msw45
zrg>Z$^9p*!cUoc8b17y(WQO)Mk>piu45zBzrM+`W3=e`twqO!e2@KZdGtXIl%l=?B
z*wnkegj)Y?@rjq?j#_<bc2Z|}OY(jJ+)M3vL<>k#VdkZR&{cNN=G5LAW<&;$MZ7f5
zVUe=3h?%sIV}D?g#XqAd&iz)BX~;bz2^6WDAmk;N5ZsCMhCNSP_3Gq}j$p>J8Em=K
z_P*@4TKjLiPrasi_DfL0;XaTM>^?L?)aB{}0@^1*HzAv*Bf)$wfu46b9vA4-Cq}1V
zHc|L=SNxrs_gxkRNzj=WLUbF2N9mbu^?vof!N(YZm8+fVDL!#O7I;1X2ep3Bju3rk
zJ`+LjV}y5A;H7ES&!+mo^LVWNZY_7S$pe&=`eQsS59Q_-s<gQS+Cff`i-Ru3@KiyW
z*v&n0&`OFX0hPaWOZjajWHJ?z{-@@*6J}-gH}~uJXq?|D2^uR)*9eI{PvQ&R4j;EJ
zcC{cy;53{HLcLNxwvc!UsJA1XXuJL*YudWt=*?2$$I(GSo<8uix>##u^Khv^6&IZM
zlaJpYT8zNfL222LeItakvLL389C`8aM5z9Ui1!)y2{Wqtz-5F`57Me&&cPVxQ+VL+
zFG^I4?2DboF(}y~hm8pGVsY9tBuWSmo21RENT{6t4#={3YUSd$7USG%=?>#S5End+
z9GwsRe*J~fqA}y-QDN|O^zp3Sjz;6B7B*8!%ryPT<;Cs@*4~|m<?n_|x-e1PVZJJs
znyH-cza^>kGVibBuO{^UhMRx`5>>Fc9Tnz^$j;dV0^O$HcEmH!As%P%eN|3WbhEF2
zurnr2T*7^Ik~A*;JK*x<B(5(n$|D7nsC$N$y3@S9Z|XK$jZCt1m>9yKTbZN>vx{T<
zk;oP=A%TNFAhX3=ULWcHH1)-MUPjuNb^)V)A?l8UN(fKiM@3a=ze91i>V(q}Nr^mj
z9pcZ|LgY^!So%&%HiYhdOCjaI5D@2`TWM%Vi(Cr9nmiTDij-u3)Z5sFG;e>gkDr<%
z_j*4B%j{gtR}A+FWeXDj#SppR6>RG8(Y<bAL9cUduLciXEN^C?<&$sk)}IS*KbLRz
z*h7SR^8YYuG#Vz?iyY0DkkoX6dxtXu)yTDgu!}Q8xxgm*VU<gXPKLQdhNB2nhn<O*
zDl7Tjc$<jbA^CJut!IBoNWAR$PSULxnbXHRm6<*IF1-nie=Yq&#NwZLr7~aQx;$ZJ
z>As*bD~Y#fba}kzMUA!V;`lMD`Wix=?iRN?C%HS+hV^Z2;q<ueE7#txC&h)qiSpJ}
z$NE<TI50qG!VfdTz`~M`i}1LDtrlw6InDZx^y5c#x$d^0b`K1sK^1&Ti^-#5v1y!X
zlb%UmxCqA&Il%bvIM+CEL#VH1N6^sH*6h^e%cUBukK{&oRd-bz8D~5e99QlS?>t$1
z4sMn74X+l`+ikSi{&b6Z`&n~Q!JUKxuNjo2%w2K!VBwU842Gl1gE-oUg0g&9q23MI
zQM%a6Fw<U>CW>&lZLqNqJAq6W$g&A5SBmp3H=SBxlz4s442ecCq&HmkGDjX=FK*`5
zqh9bP7(l(H$Y6152?R7{9W7~?M<Dz=0O`}#jrXZT6*Uc2VkD$!!(x=5@Vz?0ekBxW
za06-D!w)0Ur{rV-6cj8Tjw$RceLpw%u>mTtc|j3~APBqQbLP?7DNH2rGb3YeMQs>`
z6-SH&o!JJ;vjtIi3XUg=<hhTto^Y@egIRc=kB)mRM*;K$MT}a9S#rXG+v1qI0b3Hc
z9qd9fCU`>}GgJT+nNjp5W@JQjvJPulU0V)>lUZLIMA1-wCVES!@_+w80-`o6@(j4_
z5}$ZB)t07?p53LBRdt1ZS(uZ>)VWfxU#m0OJDll-Sy_Q2|MXiflQ;-j7#jf`zHMPx
z!60tPASJAua(UEG^!%Q$o~2f_D4+Y31TAfd5{~Z`Mc7YvQYuAt@Jt#n-9y~^QEWq-
z6Plsk4`*(eo%R!_hfDyrZwVMS-102`aIBNZ>g9h$@pFvbmL)CcvmG^GwK&=l(MoQT
zCMF2so-abi|4ULhgwfuvWZM*=T%QM#F728|R=c8>GAiC9w>_l6(B5`9R8>$>7uMFM
z-V11BAES~aA<fg1#x0dJ>tW9<(=>QOxun!*W=f6G6+Zl!G}mMCw5p^H(YT~qv5q7o
z{<sq$AF|w5F?(8HakrFOo%8%8p;k?imM2HgyvHftOT*lkYq=<n)Ar)Q0peLPo1n_V
zu2(HehMom(QK<m}c_y;Ztb2;z_RO1(2S4uXecJtvUr>T3j8}WTL>Ye44pxxc3l&m_
zTfD<pSwNF{e;@3f6@jSt{p$x(>&f;!S)rUvi)WHUqg+k{J^Q={ga>PUUMU|g7=Lz<
ze=JU*ep_z>5JXulDOjNAYsB9@UhA+@Zc<~OaSx*owar>3k5`!ECRc6eqdt>69F~6k
z#P~kTkXT!~CAp?zzx{dmu*4??Cfk`khip(S?yFbB0a?9!PoG4g9#Z0%KOw)5_asb6
z!|MeMktL?Sh+gt3vrZrEV0D%65q!og)4&@bSKI?q(DCmkD^Ea+`<!FLn%XhPa<9Bx
zF1m&V-P{7Zyhx;m*bt)V*+AVD=@K=X*3Bw45AR40`}>*q_R$s9y?vU(9EN5mz|Qr_
zhS06$@p;TNuLFc%n<6nDqb{dk2xXObmXW2I#y*`K-*B)uNg5!zQTM{L8*uGt?tk*(
zl4O<p-95I5uvd1^9t4NbGBM?m0kI;U44Fmhq){BxD^8-@P>W`P`<wtP^1DHrsPmwU
zPELB-Ac~LAg+-AwVusJreFUV?m8Xht0r1Jq9%qF9dg-MoGzeK_{-r@!Q3dhFQq#`#
ztH`ZPw%Lbc#Padd-?<-w)_G>_d1li{0zPnviK(fyO@jfZxO->_8_2&?07|d14IVDn
z15){%!y6j~Z&W^@1<&>-6@-E%nFK_sHBq+0a=v(OX7+*c{tVHydqSFTQN1gfI8AB9
zieLI;%W<%_C#6Wu4F7vu<}g(93Kf6q{O23f(w-K+kW9?uj_62Tak1{PUwU|DuA3&B
zgtgq$70Im|I03xJVI09TN7WT5?={~MtUa(YazA<+?5iK{d=v#r-#znKgI=uc(SNMA
zG_}`4(%ueh_oX9m=dt~Uy3eVkT|=_g#M{m%ij54g*x^8q>~)Yl2M`ASFif~1<Pes*
z>=~#Qs<+fSZgz47CZ+`~b7*L2lxrB2r%nFG&#Z}U+wR|@ir}EsaxG;NXQeiq@{CMd
zBB&Zu!J)!;Y9AljdlY!WX-769-hIl@@oNgb>!gfX5W#|T-@%i37<){|8mW-MX6b1D
zY0?z$M0K5Ch8~i!BkKm8>b+(5s>9*wNjZ0Eq_%FK3yu!{DhujT$n<7}uIpgzGJ7SZ
zxw(1vrXHL2Qfb~PtJ8L2ZkFvz`uH{#+Pw!4AJQ_sMZmfvOA=%tk1#NDsd~VI*BAD`
zi?!XAZ9K9nAy(%?**QB+dv42zy*luC0a@uOP|jBeRN-Y35a-6NkdjE#fZ83JTmdIQ
zK#a(^y)#cmTK?7oSRj-I1O_VOB2^pQu^}TK$?673hOwXt+{C}qtKnZUVi+(AWje`1
z&@DNVXk-^MclZE@9t<B}iK@orj<^56UjB#C_{XXY{-x{pM(8E&Mz9d%Qh7NB=ivtj
zn&Gz?E54tn8o881nv;IJw2H{Tw7xO_Ka$E><vt+y{+*@m|MgDqZYDi0s{b^Ve;=)j
zQShin8l@S%1Orr)>0sJ&tN+6T;@hyxWdzV(H`G=vy&4X3OGSw^GeLK$FQ^<84VFve
z?}kuHt5?2z!o$OJKn%|n!CXs#vc3QmGNkakLL4`L%kqI=Dl!<{2cv92p{BqC)9%m)
zfRBlcjWxEDf#c>bsaz$1F59WyWV$)lv-5LW28NX1mB8*&Q5{IznQ*%wGkjGm0qh|f
zu3qKbe*q9Osj2-l&U5|iqxt!%WQikw$lm}B22j{PD9{+$!Bvb3JsFRt{@&hX#gcxD
z9fRyX{kzYH`c~?!0dd?iehdy$bNu!4U|~TA<z;0*Q2uUdU-YaWh;Zw#vN9M$0`j>_
z#$(<C^8AOylHuF4uN~C}*s{Y)abEN3V+I?_6+Y}+|2qI^`;yKdN1JjM7h7QAuWy!H
zfdEKc&V{0@h+bEF_y@!RH-~DDC<zsYunm^3VaD)ZBA(B2H>0Lw+C}B!3GSl(5^{|>
zj}HsO^167++_Wc{j@kMJDj;<vlD^+Ms8+gK`L1<wv82**f0J!hZ=J5Ox*(YPt9P?N
zGj)joc(jAsb#sC=bZ#40$Gt4bUcRwoF<nr)ZP2~uhjo?bv)rpn>Y8gp3gXPwhV;G8
zI?{s)D0A7`4hR44TJ*(I6nUKI;`mXzBK)LQ>%RDkCRG_>p(c5CQh%*JP_t?5&^jmh
z6kgx^klFbq8q2=)q|ViSe2Sy`<KKb=q|cXTs)gnkvcwF>(!JsZn29J|Dx$dN+(Nhr
zNhweNJkfE59y;0(&mOB?ES-m_A7yLTJI*YjMY<%b&64OVw+UYLdc&COk3C|doV`1z
zf;L07q0ixn;-PQdxY@Db_JUu_xl6?c>NGAwZ!7=)sR+Z_5vm9OJ&&^&q`DqHqyjqa
zcK70h6gsl87?SEQ989Sj{IQguXv-oXf6eA6(H6@(5GhV4Pt1&Z3}FBuY-w4<vRK5>
zX=m@7z!Em622;4}U_=AVM}v^(;Qne{aUP3jLH8Gy6Wf4MQ$3^INBHq21}ZG9&#)V9
zIB;npY^EslX|GjtbsOEDJW5MD-v~V?HJ-X`*t*90#XoiW(h7PBY5#H5ReTb9v#B}$
z^Ism|nColG9>T`PPt*nv){uI+M`0)!@*E?39Y>w;OP~1XrcrI&li9Wr`}}oT-FJ3W
zE%=27M|A2{9y}o^gDeRt&txE{hwS)W5vu-bE%*&N_y#FFo+vx$5h}6B&0-1l9!8NZ
z_T^ztAETl`y{dEahr`saSN`H8x<|B7Qi01b!!dX98@nB81ssM+$(lZA(OHZ$mIr?v
z^7Hk1;2=MulB{GJH+y2epUaXz?Knpl_i2g1+TAH(meXlG%cPl~J#jtv8wGuc5=FIf
z#I&1R3H*+#uHu3P^6JP3`#g4=^-h-`wQi#EiDGMb6b@phR&4CVhjNr=&trJGx^49>
zts@87hkQ5vwQoaIx5Eba(@#GFUbPzb>ydwf+ZFX&k420$PlL#ikT_hgjNsMu3&dW8
zIID$jYN3_bDikLo^`0-NB)Ml2`huR`7yG{=b}tV6>VN-k#uchVlYZ#>Cu-I8%N7a3
zPLTEL9+vLBKe2q7<u8Hhlii3<#b+^WpbtJ-{g30C_EF>o&e4TDw`skwJ!BJ_1tKnD
z(hsjfkuc<U7ivNnYU?7QV(H5Tvc2j9V-YQ7HeR<|=NqXb4B=pBXP?MC3Sn;4+n%gE
zc$#3{=)ynXhb1WKbllHC0xV09+<C8~Zt#FqFm%6Z+x4Tn^@29stP{5Z)Z}qEED;kE
z^Y&y~IbW{Ss2iu51XTMRLV7S6Ek87LjP3`POuO<yf}SXy4k1xVzzw82_YK`L4q<=k
zAH*-|o+;^-4SmYq$L{L2!RMTpA5Fb0+`?@RSxW?9_avH%KWt{b_WF5xZ>rVaLkoW7
zzEQEU95sEN$U!U9W#^>JFnp4RZf94Y{8^WfeCvH}_!tkzMD38t_%2`F*ewX4>H(=j
zp!A=J0J!n^<O)sjofHjr8<sq-oV^XbnrnX@DZBNRdt^HyEi)q}&Spx}GkDKR;?lWF
zOF2pfwC7hkV?!_Ad3{eljfJAZ3TY=~jz(GOey<KV7Q%-GbIA^f-tX?C2R|79R`baN
z0rH5tHi*<caApSSBW5KwM*sVqyN2CHK+bVO-c7GBA^nh%k+GtpV&Bc3P#zz#?LBYp
zhgqaI@o`F;jy|({(&7>Ap8y4V)<Na6`}+&I3N9t($COG0FEkZJMx&6k%RRVnwh5B6
znYbnVvb4{{dI_h`&R_OAO8i|CRy0jvj<q~-tUvm!`KQwADZE<=sg}oN%+ILRHpR2_
z**0!q5cl378O>zRZ;a+<nYQ)ZO+EZJJjDikRAYUzlt1HDmqhO(aOuPQ9A4iJWnKd$
zf1X6pjpY4-B*r?kU=@}+k|NKPHKa9tXqD`iEUDDt@I$--6V1D+C3xNk&py@JwglZf
ztQy;0T;cZg1ix0}FqMVKoWsuU5d8sirthA~x7#hUw~=#;#8cfd+5{L>Epwg`p<|Os
zX{P2^z8@5Q6x|krY$T)bzBMA~`3z5!2Zw~vVg`2F(Fvn*Vcyc~T++vd^pbh%@{X1d
zVUI>DotY&9ePYG%o**C*S8Q1?zOoQt?1CWc@=4rik5mzem|WX=+X{R|M;!c$%DuCv
zLm2H;@aZ4+mzmD_8GTVOLY0q49&%2I^PCA)>I?7Owq)>08{nM8?fBWriF;2xdTch<
z#MqUhWXvj)#x=&XF4<fjPeFA|O1YzlF!-(pCE3Um5Y!5S9su5W0A8IE4*p;2hzuGp
zUHPf+<SWRIk^RrR8jAG+<A0#(AC8L0_*Z(N$@vdwN#eq=|H6n+jwr1E3H6bH;734f
zD0@r>7P?iBdq4nRI)Vki5|Ecs|F4Fo{tq?U{HGew<X=sQ^WWOO-oL#s{)3A3v`=nF
z1SgtF-TznCL-kki)MR=0?wyHa>fN9tz6#39ZJQ-cf?qAR?=aAg3m1e4@viV>gm_0h
zn&R)0YyGqniE5%qKmh$>NmyYL2S}s#R~IlCrU?ArXw<3NEgg;Nu3o?n7<B4g#O;BE
zund4(P9bxBWw#0A<^Y^W&EXpvqm%$@VEz330O)BjX)g<sKqv#UvEFW*9@BvoeZZ;O
zKdZ9l0`$OWYI!@L!m`{0AO)GUdFO749tV+|a?C$}$eOM%p&HfJ#KPEbPm*q(DNs8E
z9$@^WTpdM*rVe}s6cSyma5VwR5`cPdZ^d8KYcSaz<$wzaRU^INnCHG^8Q;D|wzjsy
zFmLDS`nM!2W_Tn-9H^ZuHP441T@MJi*TSdwzvND~C{TCRE%*c()BQ6I&M2ZpC1C@~
zTYmvO)*S_$(m#<D0>qMNF9h3-p9QX%^6<H>uV~acF|q*VM%0&Nx3npMAhy1cfPg}V
z+t~w9;lJPgs|MOD{Hx>sC*%0{kxiC*``<jIlqy*4=4cQL$+}toH=3)tZah#3h6Ge*
z2?M)JEuUrt;QT_(%HWiglz$oM{x3D%_dC-(H)#Wqg#wxY*oF^sqt%Yg%?$#H#P^d~
z_wMfQ7xeVKa}789xE>xWl`EO6H0?O1eZx>5o}4JFt8;H#Q0v%l2}3k)IEIa1U(tP=
z?=)0lpz&SFt^L{Ix;eEZP&miNI!p``b3H^Wm88vGmTg~kn0yvBqSTYTV)uKh4G@yi
z{9oV2(1)Gv&eQev_0Nwc>q|*M0M7@T-}#D*BP?hk#i@Mh5E^_`Gm5zqu=J0CoKE6n
zLi_u4zh&d5+`90+K08-gL_$vdD6ChIc~P!CL+H0Ucb}omr&*aAGCYR*Jr)+UO;4(C
zPpi5zkxFvJJ<@2<<Q~Gl)cEkoYw4R{Ra8Ga+c_%MY?~6kvuE!XF+%V)iyz=ib5g#H
zBi05o$+Nm;rK+pkR5jhmvlU~w04G`hzEE)4%oCs#X^teQi@Aj@jA?UoIVw)<k8qL)
z+{klt->?&B38)H#l;o+K&3q|jE8oOP(1eK=e74THY+o}X5}85$q#{nexJHx!yJb`%
zI}Et6NLm5O6*(qhre<_ai*)_#Qbo?r<8Rcet!t(6pNoV<g_>{l+NAZ3=ag@&{E7(O
zCYnm3^?lZDH277pu@R88&&@XJvn+eXA3R$yvuDJBI^a&e?Ml=Bg@-|u2TPnGA|?pQ
zuDk-&Rlh7o`EtiLg!2<p3LffofB1!})xIe$LvMS3++k25PeirQF65VCMz6(%u;)i~
z^=O|HN>)WF^$IzhBscSGYWVDfFK3v;zfdj5TSCHA@a}bVKS<*q=Q^kE{U_H#9zG&|
z@p~8*7NJN;Z-}Ju(j&BZMQ$<z^Rb32Pk7!LPcYnXfo6_ZKBIz3yXx|&9{;zTYlx6>
zLjXz%(F@CyJ~|2yTlH^~v20YX$o%9(C@+I7Mo62uhC4MSLXQ5ZUZg+IIWHxCZQYp0
z^<d%F)mN7Qwb(r6X_Ph(OPn}y5Z$IMPT$+7G&X`V>66M=tctTMYiYJqeJ)sr_+|(x
z6ZhQW$>P5r57UmfrsYYEIKRf+Z|hsXYQFUf;ZcCA5WvTM`d^_OtNDNA*fKBf?fcA&
z8oX2+v9C9kVghk7<4cb4v2aoY3T?W%zJ&hcd4y*K<XrquB@_ig=xF|S=udQ>chLy!
zk=!}1ist@)CQjwTeBLU5kAU^bI_E-|dADj+;RhoRQVhmzBHp1NZ1O)9M#tsmXcUyh
z*-5z@BhK=WDylopcAh1@+)P>^zxU^~ai)TZ`;}pvu$yVEr!CEEV-3Vd&cjM`Qts}A
zN0l5uf3inxtCs7(BSO{OG~XepoxKHs>zK|!c`Uk^)2;&;!86c&VyvHLv%tzTYMbyt
zvVyDJ-G(~*hQ{I$f6o+2_~Q2=JK@8O)m_2KaQw0xffd72Rki)|l#=Mx5bNZLGd91f
zgyS>4m|^pHmye%*R+g=n;`r|Pv2#HeU3SFNtUaT??EZRBw1r;2xK88RY-V@JYcGAX
z>p6TXK!NRVsQ2}G_m(8Uod8TtYIXBk=wsL7kRiho`<zCjs|EGug*|R8!Bet{3H!3z
z+tQn<&VSlTjhEa!P)@_3QD$U)x4WPj^Wu%Wh#O-LxQ0Hj<hkS*ldZ!|=}<EGeNdwM
zb{F%_Q~m=I{=$I5Ab_brzpJfDq;iWyFv=%|^Bf@KB%qYFY_u1=(!ciD0FWnolRwS1
zPNkU@<y2Gv#gJFY_I@rD%elFt2B}=8UT|dQ(56)IbNK;8OA|aY2Z$pnomz<)`Y|rb
zJW(4?R3k57QFK){a|3Z0nLIUZLs8G7Btt2(7j5uFCu%+U_<CCHUpB!foy2!THQ}OG
zmqBu_)lp}_G~bP#k=N#blp;c4@pBp)N?@z*xBWs=_4IO(3iOBBZ^pz|H&EaPZjL!)
ziv`KV-DX!+!w!p4BB0Ixa)mG>vS=9ijuvoyS-I}}7cPc8H*!rXwhi5??pAoTkxv_k
z8iNqJ-kKTxjW`oU6MM7`5~qgt1RZylmX6$%nI?sUo)O9osj5hsn=@|D1ez5xQR4(D
z=*+Z7>2%VmN~Qlv75wAEcAZrbT-9C~Hy#S%9ubu_j*&E{9S(lCf#tx){`j?bN|pMP
z8?lE%k?sp2Ps}sorfaIS&1V5d_!!BZtM#2Y$+Ou-?O%F=#HE5n=|6{8zIRwS{wE{3
znD#EMDyVqVY}?=Z279X&0ZH+Qk$oAqK=;?8hVGx~d#Q)_a0V+o69=46IiB#jT8bb5
zg%2|w#a}SuQ3Jz=Cvm8oaz5I!^qCSfvXkuG&$yPP;OGwo<EbiD=ZE*SB175R$EO4y
zAR{Bb!m{cQMDM9m)*v$YbIQkFO{7orru8^Axr<KqLC<*2rg;`j&A(G&)%qR5Y-Tb}
z)s9D!nU`;P{JR37pAQf1&74CUv>QIsJD0Am<8XT=%#?bjkfn$5RVhPI724x!1uW-W
zj>=Lqvt@tsm!}thU@_)%Dx*k}&$3`1{8_<r{A_VBid#~73W2a%wT#s}AuZe_sY?hI
zZfoo(b^!1LnCVe~4(p>nJ7kjD51|eD*geDDoY}_w{=$XJGsZToz73B)q&Em}XC-y<
z#e=LTG4ahtCdS-kXKsX*o0&}w0Yc{CqqtE03Y=O@CsvuqzxbRLo}#p(hg(ez0=227
z3*>f)&&cbK#5U+(WBcz2xdtr?yvM0o7A5casI!s9-1M<57>)h|t}^*%{-Pc=(o%VD
zW6&hz?Wd>MlT#hduSi7-U({1}7Bl+C#KbE|J{H*4-n!o67Px#tm!%l|`aFpG;rRF5
z6riMm%kgU95~#t9D63T~h*-I2yo7auUKc^Upm$*&Os%^52w!31r>M${NB(X!bDp6)
zE?C*I{)>aO@ZDG$>2r_#xQ~vLN;Ez7`al5!)CC=1tqoPsNj55au|^#k3Kc&pc_EsT
zIjoowf$NDNur*T^)UZAVI$O&%yU6g#%G&D*yLi2iq(|fG8q~*i7K$4L!p?K)cOl67
zmZGi<J3Xa&QM*1~9UnI%0#Lf0=^pz>ZU@fPkXNjfgj6F$^t5zzK8ER0l8;y>8bM8;
zj{FUU0v<d>YdKxDUA$A9G^#8oQu?TGW<0XJaEI?z#|FOp=3Eb1r%ic>W*G4??-XX(
zo?;(yoUg+IEX4CudC`kui^gJ>o|WNc6~E|(Ka&-`ql{PBS&FdNvWhaxe}BS9gk@!7
zx`{~+^CbH0X<b;-9VV$m-C);0sDFGTWlWTtY5@E`qZL2}+>G5HBbED%h{&iT_(^%K
zpgTFw%Nge0bjOoO<W^&?ph7I=W&|YjMd2Gb($KINONj2~7Er=EN;AsLL#yYB*o=@}
zBZh~MuS|p)7Hf^1`JC#tcvIejA;#wQ_3_TL&qWj%e@=CM`T23*7>W8N8E!qFPLN`c
zyr;78;OEESw~vciWxuz6e@yEe^2+`@nzf8Sp_$y+D?>Unh1?!?1#T%n0`|qyZ`40n
z-y)K~3fIGahJNYYKcG1>Wph&Gf7#y{5$@-rYej-mRr#ZRm!%Dtd7@`^oIzxltXuCw
zka$=-IJeC;#a6X-(Z<0Mxf!MAsK>NQV~*jTA}`;7JNNp#ipokwx>y>#2ld|9SLLB_
z3mS2ByS@_efBm7_W^Uy7Z>Iu_x2MQpcL_cPBm2GkA;K}S{%XjI8Igvrl!LZvDRQbB
zgMx+zd6H`Si5&*?s6l?(8UB*kh`~nqd5O$eEaUdGpIOfW&JtkyvANyU?E#B1ai*?O
zGr6l>*DSc_ADgu(L=iaS6H-GW2_%Qz7BH+1Jx9ANtz(zh-)F)6SmS=bNZTO)-6)4g
zQ^?F(ryj6;e?Llfoc3E;Ot$Igqm1TvuqO{k4<e<8y*JK+ppd?mIQ29)83%e{2e!7i
z#WF)Y?Fu%%_i@DI@sSZvc4iFS-IH~_VE%Jn=i6tfu{Tj>onWTMKJcc*)BR-UF><^+
z-eN0<q(K2IiE&qAzexg9=X04s7EPDd9}eMt(*y-I!XpuOp@SyfCQrw~VXT}iy-hkx
zw4_uBB#%5L_|HS%T1WYtrTnZx$1&SX{{tIfSGK3`6V#wG^M3Ubs2ur)VwryKI(hbt
z;K#Spithc_0pV$Q`GHoO=}W8oc=D!d>Mlu?W>6zCfzENgN2lS3LsZI%3=c=O4*665
zz}lXWL^P7|amicjCH=G|?N$C-$lRb;Loa+?&@P+f?7Mm${!*Y$bjAFs=G3~3paH`r
z<H=xpODwvtk2-@m!!d0loHK-2Hw`6o*&NeTO9pq4J40t1))U|n7gGFdbF4%j&!NE<
z<4zfxqVgCfxJwkP#VAP^?r_4-Z*(wh`8#zeVD;~(yZm=RgdmRNt}wW*9OX7$9m!;|
zEyV@ZF+bnj&a3l=OgoCBG;=1-Ti4b#88dlr`@wx!4$2dhf1Qk^zq=g*#E~TQi>yGL
zmTU0THdxe#tKrfwbfB;lLxI<Wh?;evXJ@$1mFKs#v$OABrFKTUxQTDn8{gR-9h`#4
zRJtn@0`}~;y?=GwBLL-F^|SGw#Vi|8w+UT|)-tz##gB01PY;x2?oLB+vMVek&Et2n
zFI?#vO41{nZ9VQq7tf3P(S-uOjxk}0TWt~w-P?+#z1^Wh*EiaJMikNd4UhKb*+qho
zyGs=z!!I`z#W+6=C5PfFfU3*To2{+=D~Uf*LE5#d)V0-(1LXop1VD+B`@6#ksTVy4
zD`(Qpw@|NBwL6fV6#90W3Fd+5GyQW8=C&~|oy!l?{yxX|ivI^hTT9=tFeEjWflm|+
zTCDgsAdaXPZF+s0WZK1?%KS}im2we|fWW-E%RxyiQmbWP$Ww%S3v+|Jp8Tha{$#Hu
z9uAF2za)w5H|bu+#VZs0gc%uHO;jgEEh3Z;77zEXPhHC;zwP6UJ+_QOf<uxi-~Tw=
zDMKcRMq69k!O;<$Ha;^q*3SX_QS_zUtF&LRM;7-#9p`ZWh^Vk{BF^|>Exp>Z%15q%
z;)}*;8h-oh);A5=a|ZVH_Rmk0{rJ)J?5%x+U}7($vmZr-?z&h<@6WrF2Z8o7WUS4D
zbc06X-E0#sJ`HpIl%N-jqe^F~PS7{;_~;!Ty3e5Y#X8`2daIv_2nzO*(TDaJuhU>@
zjp`qk^W_tCnCz~TNnO)+me+z3C4G(fxw)U?Y-eA$keZ52o>9A`kz|zDcWy<~zJxhJ
z)}K=;Tg6AfjRUlf`=%%S<7~aFeGD<}(~#)~_Y<nS-K=#g(QR4*SR!hRe-<fahs^TV
z+(-B3HZ1M{HAkToq#gOz=-;XTzGG1^`tR;h!Mw&DL&#CzgATd8^lXilxoxdPQ2>&7
zoryi)Q-1gJ+_0rS0+6h%tjFo@ytwb(sSpWzoW9~F60Ae%#@F>|85kG{Lx#sw$RW?x
z))qEqp!`oVbHVp1AR<Aj$eW)EAPd_@@4+n$q@8G2(^uyVrHPfgxH^Zjb8(SUf|DY~
z$jslpGqACV0Q|w;@wS$r*M*CpK0I*&X{RdCh|=Hz-$J)=LFeb^>>M1AANZf1?oj|!
zQzK~JdrweM#9iVY8!jaBYi-lU!a_@HTVqZ+U4*f(Np*5leQc^?K&_PI=%?yildB_#
zYn!QhCbo3VcVSIVi$%^yWdlc5%+|^t^R@{M4FXBY$>{#Csda>Sg>fGEhd+pUQ$}<2
zhu2!XW4)1S=Ws>vt8R#uSmovDv>Mmu7bsK~I(mH~vXtei0_8msqxfucNw?wJKwx!M
zeFSZ@s<S!r(zUj~cv6Yy-B5TU)@WlP+)!vCR@CM0abbI!LA0rxMpp2-9(F1wSm`}&
zd_C+%IN4h~C-(b<|JPOiI_Dgzme$n9<mOcxj6Rn8%Xa$7>e2Y`)>>b*>R#aQ1n}Pc
zU4St=t$w$+M~z>XVPl(@O+P%W+v>m6*c_2uucpXT6nQgtX<3|S&mM~bBXgWrB%Ov+
bgRfAJYSA~!I0xH+UJ$@ya-zkr^?d&i;D*R-

literal 10244
zcmeHtd0dlc+AggfnT~8d+A4dgD7b+V1;UoLNEK1g;>wcPVUu0<HH6j{s0%2otQi$S
zML<C|S*;Odjj~17ut&B80!avv<h!3hzv+Bmzs}70o%7c@zh7;_oA-Uz`?>Dxy6*Sq
zla@!M|Dy002?+^l^P`8qm5}&o1ithByb=EYq<w`bA@R9{`Qfil2WQL<toU_tz8B34
ztyJYsTHm@`t(kvvB=U@!=3jRm8`XKviK3ly&r9Bi@16X*_N+yIO8yu5mrlul_2%f+
z;?hkPpLwW7%6&m`&{u1mUNMcfy76J7<WV`Ik#iPiC)qDPsO<qJq!o)L@ZaByD<X-6
zGyN49+cK{cwzlc&=JD`f_GXXi?);vo4o6D8=~+BF2}j`1y_8)LuCQ|R^7g0_7jLcK
zm~i^sxpRXgkziH8B2mu;GW%VBOj!FZ>R~}a!OXj-+X+3-1EzQ3uCHBQH1mSC`NwQ+
zZJ$4XzIIJr+S=38GfH3Fxw>mPhO+j}eEUf(MOpvymuOJx=I#5PV%8h~=5y1GwPz20
zm}J^76s+u6dqmp$Kb!eT=eNxemxiO)nu(9v_4kJ}pQ$mwmsB}=Y75!*mmfb)#kg2@
z=i8p+yIW@HAFxQ#G9H&*f6D)ElBu1G3*%!>-3HmQ>zKCJMNZ94S>fzPqotuMsro*D
zZNoA$P76#nYgo3#@3633@>n1CLuR&&k3&PO@kj|yFln{x>K9a#6_5LcuIsaD-+JFS
zrmxJK{xPS6EIhb&ryf1LSZPFt#C%-b)&xCm>}O7-d$(m^{hH!rWqqP?%=hnKZ?-bJ
z<=T-m-h!dFbUw6RSnRMO&-JV=MfR|`+xqK`Frnt&-rgdwf#-HUuRi5-%W5-~4FeO)
za9L{1t+h*LSMR=74(h+<LMG~pge+0kT}^hUwN)lt^4ql;7@XAzh%szWKeWZ{)&doW
z6Rp&W42QU9qRXL~u{?snjakX6`G8j;T%N|bwr5)lzdW|~WWyt+5d#AQ%LioPVlH;{
zI)=?|)|S0A*?wOh7ZF}iF_HE`8E*P<F}sg046I{#J)g{JNyX%@29HpF=2JzhRDXYe
z$JyQzSTk1DLR;j@<MU6yxcAMCCgwn;)soB2wHS!XOE93^P&VYo&{T+vZ?7vH+6~L8
zjSI?FW7aEr8%@da2qF#v8gYQ-c=yzyx&FF*0?d+DE94~NZm;jtTZLO{UazixiaM+2
z;rSKYrG4lkAurB=l8>)8FgrEYb&k+V5VBLK&-@r|*20VHvpkZgG{R*Lgnca-)4-wj
z<AP_cNXyo+uIb)27a|Jo+)<OotzPEOmwNWKzj<>L>o<`|HZ-Cr*F;RDx=iTR@>?Sd
z1+eDhQHox#vy8(me>1mF<VOZ0R%T)C$D319$nI`#O|%+r$*Pc7ONHGaTWD7ww9d6O
zo{}pIVhtM2)os8ov|tucl=irgTZz1Z6ra)hahz}zXUX5NYwesU=Rvc*eSH|W&Ibn%
z9ZDkimHRk2x27c(w;Ak#)>^$I7Si|HJbQoJv>(R9ZYBtI=mKVt9~$r7Yg$d(B)$bT
zYVA0-Gio4!i(TT@wj=wyCOM6@Zf<<}_v5%bx?I*|>7Slu*x7$}mLVW4*7xi;knlI(
zU(w-U74d$4{=O2M6TjYdM#cwFR-$h10ObSp`RD!r`saquY0k5flKUkkhxYB;CvI_4
zv!t}txjA{?B$KJq&gzfS|J&(8S}`m$!qS0(0j&S~wb(Q`27kGFdsFLgC|VcNBn8!d
za*~PYG!j?1{s95^&*q6&D*LOcsi`LJY#%0(*a~;(dc3;{cfim0@rAj$xktqPD&G&S
z&a%l*M!%Gl1iYbFO8b2I@c#WBB{ut_Wt5MRNTP=(GBCmL0uGPIcyq_}VV9e$tE>DX
z7lzo`-X0%X?e*gZ35iIxDHhAB8m~wBpzGPQXW6;AjMJ)cUBYsYv9U4St6-`Gf1P%T
z*{~afmg>s@xTy077xg?$`v<GT{Q5l0oSG7MVOM5~F~sG?Rc26a^BvP@%dx6DMx+`V
z+atwfHIxIeaH7B6V)o4qg)>6GQ(Gzo+&-(t7P6sr&T;coTOj*1JT&>s^_WrRk%_j<
zbewQL?&ak#;Q6IhXrQ2?0&8~45%6$wX6AVODyNWi!qn6hPFxtPI_T?YVbuZ3ywif2
z^2ld<&)@9IJ4c>!fM@6a6wn@BK2RByt9kXhit#e$WhX$j4#2|dq!sB{{0zMo7eprp
zX;sbra`526?1v9`dDrlrLss%_%W^cY+6DGFg^b-gqT@3{Ii9Msqp(&OnygL8Vudpd
z5uh<^R+x(%&Y2owyhmT@zJ-a_=B4>j1c~Bf89a9}-mxK882|<**{CX<i?;KBYc?*B
zt)+0=EwuNMXU}ah8-x>k$C!OtVSV8>h%sR+vt`y>%oG$A<3cKHYHC_Cuo!?NbPlUR
z7IZ=v-vc^GE9$EAX>!nlf`Wn$^a<AvIMh3KJ~-v-;jx#s06oCSAYt!3e)}fGs?&=f
z{*-D$424B&)uU&O5ls65yZj)HIrctt9jB3)6^wXwcUnO!!bxb&sW~}`D)FOs(Xhe@
zccv!+mRb+v($*pyF?VIJZRy_X>gsV0m&@%B?DI@L;P4F-Ap5a>rS1ZQs@g6vG&JmZ
z_wM!vNtwhlLWQr>XIgf*)hmXh6x-oyeSQ7j3q{#%Dq=%du#=|!*R*SH-__I!<IXq?
zGGTnjAw-r&uE8NnP`APf{9)9GXm$x`)bcJFw_;;sVdazV(NIoQzwqqRDY#+e)wMlz
z;m;abkl#b*UPyNI^rRYxamQ8{s8$eS)nU9ywSwwuWAmcm`4O04CG&aS>V>L<N!sbd
z+eSje!Z0M^YQG=VxaXOxHKfs$J%v>|R>qvu@gyPD4TA4NRj^N~M^F5xd(J|vJX9Ll
zSSh+_YUl0kjlzzG56cg)-wQL!IF5F4I=`&x``Pm{aTl*`)z-q50r!GVy@}Jd=E6gi
z6J(R>s@CC@AG~^>?J{Rq(gj)&;cxGnC3%w?l!K&#FHCCK)<zJqloMG-6|13nXY&>2
z9#>H08d9j2rF;~1JzhJd*eBcMpN(La(D2QVFBHeC=bbA=oMEGpDU*Q{g<vVtfua{t
z<rE8RIMmzlFsi;1_j7#TH?S;H<y?`FE^1z!>_ALH)i1_Sw7QV6>K;?M*ly9>r=-%2
z<~sJ;wEv_xsd-;nw&qnM?mLGIwGo0y$bW`I-V|l-R9>ON$WpsvtQzyxRzk}Sy+QpU
zzuDPYh{2X4s>DPMa<~pU%#wB}2+)8?Vpz%TeNyE<1p`mNtJ&V)pAm->>YKBHaxx%_
zEKY5?P#HM;2_bD6xDNE&l4+>dI4A2<yWCX>Aff`NlFfDRe%uJzFcCuRw8{wdL6VxB
z|Gr}YR;M{dThwy16oT2;C~S4U!A~UM$(9R&jii|NU*zH1<;ueOzT$ywcRn9gURqju
z{PzAkt1E5^J5TJUs}D!xR=-<bS?QqBQsgntiQ0myi8S}7J{X&!c@!yT`u+Q(fIs!I
z%ISUHwZ^Tjt#HUYa!yzf2=trL<t!pA3@&Wis?`GdEqZa=i%E}id|D`fJSAn67+(d%
z$<@sb@SAit-zF)quqL$5!Www?+Yhu)7<UU0;S&uyu&K53t}y`97qg|B<x<ougII0o
z<RbXN0*msUf3?*GxD^(FCL~?3!ebOvGMoOi)$V3gR1{=+C&4mjoHML45<limTCsJe
zW@W+;$ARg>z>Xg|awJ|VBxYq)RRkf*0w}wwx?SHs^R*mrnjkVr*Yj363HQLM@S826
zO$>&yS|?i5iz5WfEm_8u;l)2OnM}klLx5=)15`Y=tI#=TA8;luJw3tk%?gjpod5)C
zy=!(2<-RI*)1Hc{M|m5id}ss`F?pYDGU$cPq?>SBhODDJV>Z;3TRO(Ldw8rKryBF@
z;>WJYn!GmV^(O#FcV_liT!2`NbgA<MoYfofw{~v1eQSkPi}S9U|HiAD)6HJK$Rm__
z*`wS6PfXm2R%uE*<PP2KIs5qab$JYXEWt{p;ogVPUxPEGIm1CU=3$_liQ2Zf89swd
zrABazKQWes-<7mYl}`3N+%^)(8q5T~?bP+?45XbFz`vB9Vi%W}QPSH(QEJo2LzXPE
zK0w*gxXhXEfGD=ms!&I1V3T&$O`%Zu2~OOethhY|r2mHeQRly#WBZ<bXX;kc`_Keo
zV#Zmw5*r&^TgmE7H5pCMo}wLwfiwDD4e(QBM^mh_q0Sm{cwSkFc*wJ|vap|b!;eyT
zb8|J|`1Jt4lTk6!e?KejQzyX*H3r4y>gjpH!s42kwHX}C&(C*tcUNrxbILX}Fo}zY
z*FQh{-~CMdRcB=nw_?`Xye+@>`ERrt`N0$?6c|%`Z*N+1@@HbY<evyjfr89GC`fiP
z$P3o<5p5dH5hQ3T1fr6G|Iu~I1b@M5xQy1{cu1SRA{>O!ItG*PsUe1e0{u3xOFaMf
z&jSJioL0EA@=Z0cBgYV&)(}_V=Wh#X9UUFp#r?*9TaCBMKidqyz;F!Svj*0A6_7I1
zXqo%9wW8CiXp2o~02Y4l-`weRD*=Kf6&eOZ1S)0@oa+~W-a0uTXu0@8#gRxi8ylPU
zjt;*^afq7cCS_%*z`ZxtxDo_Ll6cAfW&jsc|KK8!BIYlfv>{DyP%sYl&#@wBb$54f
zHul>gDWe4Wj}I~fdza4h2c`;K0yx0sM{&O}GS)d+x0+XbwmAZ65Rx5l-kgjzDzTY8
zOf`0lD!+rF95}6^L#c-RTd~S+_M01eLA9Hnoo)T)r%fFL1DTM$X9g;HhvSgDK~{We
zK&f6~R*o~cEIJv2@xJEODo(d;199k)l#eNmPAA*s>)tipm75FX4%TVGTg3IQ03=<2
z<PkBkOcL=(jIvt6EW<0t_Q}Ps&KBZ{;?=2h^`b<TtEU<SxLv)gNxCyo>S+rYlrlfs
z-~yu$8TwvwqmhL(Yp~kY%L~cz1eCC;MhnM*3?Lz-juJV1huqk-V#MqB+u-E~A`z0*
zYhDenIwNEvHFf`YU!&x0Um3W=JaFdSEg&JlXyJ*Sh_vOLNH<x)s7%k)iUcfJ#~Q(`
zHzL|SRUv-RFc7HXfa&fJ82BPb^BN(ikby`Vpl#nGkEgnzbj8@&yH*g0&<ZIn2ALG$
zRWY9YfkXY%0@cZ<y|p9~B9V5%!#}xRx^&dq+Ild2p_RR?LFGdRQrl|pf2uxCl?-y*
z5D34*D&aFriv~lA=U^4KY%tUv)Voj{tb+xY0&V-}2LZEn5qqEe>EIWpc930ky$3Vi
z-aF#bU+#l=^Y3v%O%j$hJ-r8~2iY`Sv_hxeKHy*(9McDG5NMbbpyddCAy5z@V?Lj5
zng%8cX|TD1kp-#S1VfP?pTRh{ppYvREf?-R|KxMH<Lwbu<;zSI3?PP!om+R4O1Bci
z=N~YF8JR(`e4?R&fiJhm#iix;fwfkV@{aZwbi|z@5D3m~8L4+QeczgGbsDS+k%#z(
zwT_Zj+?e49787i=pN?nmGdAl(6WCMJW!_I6)Oi`7I3xB^>?M1WfWvRV2~XjtSuE<l
zvi^7gVycu6Fw4ej-k>-;NaB{hLMdo)aFAUCXjw5^+J{s@e+VNJh==C{l}y0ny8lHE
zD+Q+@`o=r4UjpP&56Oi1u|J@pL1>eK3g+bG0Eq<@!QqzQ#=)v1%BbT#SY<R%*$f;}
z-Tv~6KW#8EF;btU*NQOI8HJgdXsRyo|L|FN0+6IsqY&RI&T^z*9C#qG`<C%2&jRyE
z!G}(sqRvAi4?P;!13d9;)=ILiS7Thn;yvh6IusVVYq$?~<kff&IbwMdM&n*k;arCW
zy^;=`UcC{>G{igXc!8Q=<(ElDa8x<sXy*vT06q&cdv)S{i<D#<_*hxdsuB9;kZM5?
zq~b^spd+$8fYgHMYfd_cPtDB=-Q9>2Y3RDNW$eXQ>D!iiG+zC5PkU$QX&Ij@1EeQv
z1!ZM=n?Bq7+P$zk8T8I*SRE|s=i3*Zr4ux)wCGsQoc3T)zfZ#_4bSgt76An@5-yFx
zG~<l9=lKDI2>y5iyS)=c+eAw3suM5}zrhd&aYEkjir_@Wi?)b&Kqi7IR8^B82L}g!
z1$2?&Q!kHvlMXtaMDdg2qJY$iSY3j3z_jUa_nT;GM9M<UN;g&uCmW{bhRQ)Tu%%Xb
zED#g??y{OgL-T2{0U_yU^3F;J=co{j8ZeX+$UUuThsGN~qXYHO#0g)j3Qr0JudQT$
z<?Omc-dk(9z3$^A-XHRHee5?g-jsYmA~;Z>54_^XU=MdimvW|QvX=n$_+5n&oK!Wh
z@us9BN+W4$X-$3M%dFSLP`gk#Wxn<DE@HRNt5(2e%j3x^BRR)YeLKnCPl{Cofn+6`
z_GplP#`VhS0X}6Axjh@A%B`{-H0ivTvbYxbm$Az_Cy~B_%sOnE(sXE&8WW@xZfcYx
zX8koomSgtTaT9HZti7VaVU6f=IN}HN27^Z<`%25oa-Tju0G##|@=RBk8gMF?i7?P{
zIlXrRX=Kk_Py9r2#K6$7IVE=|OzMbANOl#hoI4wWYrO9J4dcahz-ZQeAT&fG5uwD!
z>mai|A?^_ZK%Q={JrM9%jj4g-n?rsOb$0+4w-1R?oS88%0_Z`;AbqJ`PX|mdJ2*+>
z7+)D#pL<8*v<PXTON>lV%crOZ-thzrWKo78v;1DTUK0`mX$N<K5(5Hp1+Us<VJ$10
z3HG1y6js`Y5UvpxV|aP!OC}%*dla_x-w+xa12M8bW~ab>(NI=a2DnGr!w;l>?wYv)
zB7Aas+M*gyMFt_;DK47s!%5g~TaDMIzaB!63#qzUZ?k@{T$y8IJVffpn|EecR8&-n
zo@NbmT(4vbATfzW^A<B9EO_$h5XAj$$00cyn2>u4%I}63N2S1NdBE5<vr+&`9YzE2
ztk-|p6wVCt2CpmXX#puxTwK02_;`3O-ST*r5te4>cY?oE0}1<xajqKk8p~1E2L&!*
z!0Cw9$&?&C9Kdml2MJ>w8o>&3807e3x2{KaL{8TReA+V99b|%Cr=BuN!7+xbdNK(}
z<wog42v|Oc5CDbITx-Pzy^1ww0}a?$>_W8!akbMj<MvORw&vWscdv?yOzr6u`@jpy
zTJ{DP9W8|X$N7y38o4lhup6|=hXS9e6`ai*N4l-eVEXZKvWf9Dt&pl$Gk*hCiZ>YM
zeH4_R3(kmpNLM$fuuz)>$qoZh3cip*x~`|fTzqe|N~q@MoyT7X)huKh0XU4)aJ|@#
zVJ&!oNz@=X=7C_g0B{`~Vs$7_FW(Yo4MH)(k7ge<{=+6M{Sg|5Ld0gys4-tisw&MD
zF|BGZyhIuoSto$cZ6Fgckcil=p8;|Ad-dtLvEgXdHb_N9zT-`H0bOT+$XLdI#iIB1
zr6Z&F+GqQaOSsUqr*Q01UV*}X3QBLFg)RV>wd|!r>ZwbiK9Ta#Fm-WpK~_>YJFI5z
zmrZ1TrBCj??bVGRWmsBH$OQp4MK;X_6JDd5mbnR(Fp$rYiuH3wiV2vtbnwQ0u&aGL
zPUty-U0xv)t}K9=KGtpPy{}L<Py{T;35WoCLM8P59pFdKb#i5YeRUNw_;xE3{+KyG
z6{yFO?{dG45Abc2w2|#j5G~XAP%R=Ck_6M@k^s0%0hG1_N>V-<%&5^;h1hc-Gx^_6
zzRV&C`KvQ7I72gy4?*T^UxAj)*)Ry?%SlU1i)#qwBUiy=3Or2RFK)oZ%CsLOHU{Xx
zW1EuQnVFd(VCEwm$>ZIV;nS+p5M>*e>|}lF7#$4P7>jtoPITT<?0n4;mE4LCRuc#W
zxy$F_#{J+}KA2e$bEvw>IyuSHAPrz7Q&K)(I*9}JK^t5w{qAKH@O*0`O8olyi1L?~
z%7hvMWA80;vH%k4^DDWBf{CN%N*YMGfS@3xNx&QC{jW3d+_uA3R#xE1BlV_a6nyzj
zA83RBN&0kjck5<<qP6a3$NU>^HuUu0-EYn4_1c^H%XF7DXMDd{lK#%Uf6&+ecgi8)
z|EW{{kDhwbsQd^VedLUS9VyfC5H@IN0ZIU;xn|q`i+R1{um4~b6eS#>%=Q#(AS^=!
zS#@<t5+MP?&%Uy<GDc~iS2H*rzL5K!p=N@pScu>}j|I#hXpfAN{>i}z$iNrMFMk(5
z29>9ya1}h}Vn`-xnIz6s7kWagVl3V+Xdr-(N<i7}R|FX_!tju7Bauy({xL`duJRWE
zI(Uv?cU=I-r2r_W5vSAIT*$}eK&8uZe&kgT9D}ou&m)5C3+Y&RMH+F#3!v@rVY4M-
z0t%>B#u&M#-BwIBNpDTpV;~@eVjwtfK`riAGB?Ay)7}b4s^{nbBu>ce#FM~{(gCre
zE((w85qq6}Gr#pZvwJP9ZEb9P8+W9P-HS6h77ypMYQA0(+<=BE-FH|qNWn=;%6u=!
zg8@tcz$jgY;Thk!aRb%JkyA7Q0%AULde6Cnz0u__n53fUa*+JU!B0Kpel}wM8X+6%
zLjW9C@QO3y6{=WYA={d8zRSi(08vS!J)?2BEO4nvbsR{$6=J*iR#Z9E^;CIsDXR;l
zWT417cE!MkBx}*T0L>0@#>sgF&v%2N2!hRMqU1%}#|YxDAz*T>I>-SBliHw4vcp3f
zpmlV1CW5#@zz4LP6Pc1@0?8IqZs_9`RTWh4Yo3M-V!%{m4g}F#fpa&-g@uOtjwhX)
zfZC?<e{KHvbJYo{-^o?%RA=*z)g*AfwW=4}p>n7RC0HuR?|2x#Tb*1G49^9^U~+0o
zp`B_7@QjoR7*5SiNqbPG$fKud{5EZ)p$3E(K@0h4o0Y++{J-G($%JxYkx+=DazBdi
z7BUWp?DWOnlWWTxjg}V#&Tc4Pvw_Y^E%l>PD_Jn(@{(%|5p%Iz9u7cMSWI7aSP*yu
z$w2w<7Z+nt;TZX<P>hl4<9!4%JB<82MJ6QK?m_~2Vq(G$A~99Z8;=K#|6RzHD<VEw
z)Cl!=pOz?g&=}1A;(j#yTVmI3=vw{%ly!bL75$&S=mlOlc$fRlPDx!_eE$}ei@<q{
z4lf6f9c=jUg><?Sn;1C^poa2dR6tDnLDz2qL@)tUov4DQc@=zgwGtc8ql5-INwU>i
z*7Q0bT@H1&vQ_lz2F9zu94Hy`FaGhSzk5Ber@Hcr!Fh$-fM+Dp$YIP1_zotMcH^z+
zaxj6#z5tZqcAiK}lvD}+TvAp=sl6gH;iVk1<GOCVmP5W1;ED@OLtf9z4unRWd(1Rc
zU4Q&|vknXa85JG5R-ol7_!H@Q!v4CC#kuawfbCpoX;551kXok;YqQiF4pEFjkb~ZY
zg7!sd2ncFc29OoF0-k)qa`A?S#$WqQKLnJyBAn3)>Ubx%MvWP3$kZRHgEAe&1A*fr
z8Jn<f!9A`0qzp>%FfUdFuM(An4nbwU3_K~9SS)40w|U>X!i5KMe?!@VAHC7?`max`
z6%-d2hljYase1OBSHA#7WC_M8Q19kDvzJW!K^f*j(@0gVKL1UnMC!MV%&Qe>UR_*V
z%*GcoV7ezjSwWRn2lf(GOK+Rn0W(9@MW8hO@J<3Er(inhdfF^6FUO8HNXEj!f#rUr
z_*5+6M;qdhG)8htJ!GL(4->*3gP?E}uJXq*gR#2clhcLVGN>OI0-Zze(4e9ql=61t
zFqeOjLZa~G0Fc?bt?6s+{_A$=|8sYy!K)@%(8Yiq|GjvRPy5R{b$u}aR?`My4+h|C
zZGoYl@StTaT0>lSuY1g~GacGT1Y@|cZy@1<(FQ)aCFcO_$IvtIsuRFj{>mH9{4r$R
zK=I+%--_VnB`GHYEdG74-97rt4}h75zYDf-UCQ87d~Dk4Lh5A@NA`iUy-8OjWo4E*
zu)Dugjv(|xvg#NdjOZkJd3v@YzrC-|Fq>W>b_yi+e<&XNAACZ=fSm*ekPLr78HOzp
z=?1h2S+n6zjJ8aaOS>3=<G?Ah+uGXDYa0Z3SE2_DWjN2q7!<`4mhs>R`UeI&gUKL%
z0WJwunHLuwX$AK1Qky&UvG&G`dgeuVfvy!4v@clWsPr#VJyU1@U1)Q3BWlRp%<^!-
I*B5{I54)-^EC2ui

diff --git a/doc/pages/documentation/current/documentation/manager-rule.defe1afc3662d4c558531ada63b4ce37.png b/doc/pages/documentation/current/documentation/manager-rule.defe1afc3662d4c558531ada63b4ce37.png
deleted file mode 100644
index 393490c0801e70921720a230ab2e4b75f9c6dd90..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19906
zcmZ9!2|Seh`vyGHNvDOh5eB7`ibD1wiZU&XgveSXWf=`)-zv#Ij$}8aDZ?ll+1D0K
zC`*%l-?9_3Z}0uk`TgJb{d}D2jG1Si=lOo``@Zh$y6z|78V<XA2hR=^3bp(4r3=?l
zDAp(NZ~FFa@Mk=yLmvF~_k&9}9Z)FtGUPv&2oZK(6iN_v`NDY}m-z7x*9W|Vo=U&i
zWW^rJma889rzMlU`kBq*wWHNed<r>y7X#33mzl@#dl^n~E_-ETaBZf~?zYQ}|Bk-<
zOzM8Dlw{7c);=LCo60~Nk*J1dU9-`HjsnjwT;F?QYTNcb&0PW`pTtayCJT4|yG3x=
z^{yPssdUoP`B6vtvf26XlH%gG%KHdqeS}xnPl)gO{O2bMUt}Vt$j`AiVC%}13!hi1
zz(4=|^UFmsyy8@KY<F|$z%Wgw<;PH@IqiTQ%l@yN)@4Hptg>x5?Bvjh{cbcS>Y0!`
zai}gymHL2`niw8()sGZze)C`jgHfxj<U0N8K){7yx&OXwm&1LF2M_jmO<BLBiJ02!
z=#|8qSy7grw+-(IZDSPhxVB9Xr}W-+#j6O<`)5!+l;Z~KlC-xo(j!L8hw-8q<cqYq
zv2W_-X%_WKk~f7Tu6z`E>GX)vSBcU^A87bA=GyC77}AcLZI;p?mSLD4?h0iLUt-xJ
z&e8r9xgFi0=o*_>n>OcwAqF;RWovg-&0F}eqv62&E2dn2uU@G?XgyRHbB6l<J(EVG
zRoyH5-<>il7@nL|_V#_({F0}^<fKGMyW=eJ*x(nvJN-PyhD<3q;<tL=&102P(qv=I
z3^7D|$A{~MD*88Xre5HFdVBLH`l=)=E9>MMdy>_iVJX^=Z0$qIT5s;jzYR*ql}t)y
z{7V{H{C9W5%tc{YY>C~{tBZs6N!nwi5jjGk&E_4@$G(x2FK{9b^^c&|oqhjZcY6Hi
z*xWy-tGc_p%Sz9T{9LQ6+e1PtM6L~wja_hdmfaihr0>h@Sj&5Ee*POZ4ohWa8tsh-
zzE_qfOUg6u#44S-z1#Y9GLP(_M&rAu(r<2S5E{kR5BI^Rvp)5_8{H;W{CjWXo0~p2
z-`{0HT~FQrvi|r){vdz5W0Uc(MUU2;uBFCYamyM$<b`k(!he^`eQbW$?%f|VVsCrf
zA71O)FX8a>>qoBAg^T);zIV<9jJM_X4Mdq%Jp1RWxNWOcpNgX%p1A(`VlKNAd39ZC
z3^P>{x8$MF>oDr1Fsxp~IjB%9gO5`6!_nnizD8N2W+l}8kefa|_+@gp6LFFYpIo2R
z*N=MGmHDIe;c@fctaE~><$3n-%A;1+)=a%^nq-Wx_iB@OIdTr_aWcE(WbG<`ev6yp
z@}A<_7tEw;ntzLxmh)PXQ%Tx$Bi$&#qB`<0_byDjk5!4jr4@xH_Jm?>xr1COk2i_4
ziTraW&IW87YZLCxur)mvCqo>P`!*lM(a-rxPU8YQzoP%7=cGI8;e{iQ%o(JfM{NA(
zjE&K5?(S#>$;vx>l~;!~d*+v?@@qZW8KDA<r@MLU8XKR+NLrp$KGpPA0M)l@=5R-Q
zpg$8&Y%g}2mU2x%%O)m6Fo=?xYrawadx@JngOAj1Vna1NhQ@?DqT&ViwC=umPWl_}
z=-!X*`3@{7y8bR<T>LprO-(h04oz=wWef)MD^=5Thpw*fc3+j|B3DUVqEZNa?_E)5
zmKT1KEAI31VyRv1U0QtuGf6ubC$n4>H^YYnOkHK7IZdM2t}aRP5Oz`F2`)y)mS>`9
zrsj8FMTMH;`pV2gH=A-aeM?_o-yxAbLFIcw)aXv*23xm0`u+Rb@#lD9(%k_=?J^$Y
z!k~{5whH7iKIU5A-L99a)Mj!epX6pz`9*^7+R?LM@x``GChXEyNKy6o_M^m=lt@!k
zNGALJ`?ui1Ad4T^Bb@E-lf`+{RU#5HGEZ~6ym%cQ9fvVg!`#tiYi9|$WLs)D*}T=e
zeasM|y-+g7{OM+}HWH?X>hk}^HR^5G711&_4hak6j6dssP+D60*Yc{%R5@3DUEM?D
zLZ{amD=jBPL_VLLZ}+iGaNV}^py)YMQ-O+#ig)+wU&c3H<Ue6)Xlg?`8(Q;2zCd%f
z-DOS@Lp*(up`pXSamP-)p;*Vgz3hjRAx#DdCoB{!WNT0%3|d<avT}2&)QIQL1$jbV
zW@jImot=%AFyE%8rgjZZ2zFo+ozD68?OW8t$jE~~e*Adx_U-P7hzM>To=;i#nGfbW
zoGD33A7|bEm#xI}g~Kj=aQHo>mG<V%*M(H6?v+v<qV!_$2-E4qs;OU<pOBaRou#s_
ztX-IJXZxGm(3tWO{~5>7o1b}*@Gmzsk4+DZo8O5cw#x|#2~DzZKlEQjM^_6|D3o7!
z+rDJ}F8vZ6I>%L2o$EkPpC9P`GLDpjjetD;%KT=e2qQhL?R!#qTA#ez?-X4FgOTRw
z|5DY{eB#~^wXR~76dv0VwHE~`R;T-g#ahzC&)U}vXp>Xzb!NkhdDMj6Ezc~Y;PieX
z7sutCDNl{F8m_A>p9+*5GhB|^Rc@+IoVglE<H;>;ANql_R5;6W5-WYmlvMR~R{mvp
zp?O!-ysN~tHQaYP24_2VUwihjz{YyS7zoFekkU)xH|eCop?b=V%a;SJpZwnmF6;{`
z@78>Motu|e<afdU-CS4olM#=*Cg&-cnVEH?pZ@oYehJ9zgKSU2E*-VJu+m8zQFt>w
zS<x)r;?>pgTS12AD52r-{>{z-ao>QvE|!>Oinao5kZoAKNvY7y%@{?&)K<?A*Tw9x
zymM!3LVEh?wA9o}f0HXQwDH(C;Tp>}nkvL&HLSk{j{36&xA)|<wZOac_2X@fHZy>W
zaGY0Y)oWE@Jt~ztxbpBFovsz6;dId<wW%XfJ@A`^Yrc&#+WD!=r$%yohiDKx+021B
zi=*$}__)KAT+0)7bU3r4V|S_C`Gymf7T6qX_3UXyW45lh<|8^5%$_PgbLB?cM7%4}
z-kFHDq=)2*<|n{moXhr=R^^Ni<j~ChH!h~XDeM%Pl9r@ud4^<qI?IxV5j}(dO!KX*
zfBV8}K)oJKq~V^&&7OEpi9MYYH5nvL%yb@W(>XcdW@`SYR0hdAc{l&?n`_(W$jUE|
zb1d+!w2kKvs<!9Z8m(4FdlYm3=Hi2XOvlWLT1t3f_?6e<;^Gh2*1V2}Uw+N_vn)~9
zJ(L7aiil|G>b@=-+Ol15`v7~^Njzqlwq!II*Ld0auP^;_yD>8Z(V_&y4n+nr9$lR&
zj==<e{CFNhO^|z6fmQXNV{uuFR;wuTV<B}u{wR3z<Vn;Wui_sWtU3e-T}`7$MwkwJ
z1u`WrnKvsil)UW#*LN*ri|6Qu%;EkC7e#)kgGsMmZT)y_k5XbNtIB3P{d`8UxVe3s
z&+!u{K0?K=s;*|vl&$4-opvgC`A@|+y#=D)Ub2;rPli$Y(b#Pn7!d(dmF_9k`J%eY
zPP(`AJ2+s{we9@1g{G>Fy9LQVD*=je^TDxy_LAZp6s`69aw;-K7goKt`kW6Yk?#H$
z8Z#_iIA?Mx2hE{v$w&}$wkKBq*nLc+n$UNrEj89kIBpS7t(VYzFW_EmGTwdNMr6`*
zy8F5wRJtTSLP<MLS4fj<GsdSU{UzjSuEe3}WOqe=mtqrh-T^(e@tUW3;c+9xFoiQT
zSA1(UA2}w(^f=aIt$$x2(|$P5xy<z>*70Se!eFMRA5H>;F)WD~E!)T&<WF+PRBeP}
zop>=sby87iAUn#X+_w_VN!NEYHDb{vr@pPMt&oT**zZGeCzKBtSkzb65L%<ghS+85
z39WX+btj&fH+>=R4yWwgOu5075$|eJGj87NydUXACad6#0MjsXY2?L%z7c0(2)@83
zW<s-3>n!KA)0Y#^h44{TTHjzRQ36M#4;W9C;5~=xPHbZk-=rL=VV(-w+}B;4gK>OQ
zo{!kk!dN}?uDdI3f4llAIsDwk&L{V<r{^|;Dgfo2zkfe9CuE`of04*+$Kcz|-bxgw
z<i|f5ibhjY*fIH%IOOW5rI>LKC%*kbj*XnwI;68?cCroHHDPR_d<)^J#m%9Ki3;VF
z&&s!I6V6_GeLW>5<-<rr+SISl9K3pE<2wS-=tUXB!PzELMh#hEYKRj05^{dSzGQp#
z`I+Ioso^`5%`>{ov5dZt6CH*1O-+7=`2357Vu7}fB&M~dUyTl?AmwNEpzD7af+-b&
zg(Ah&nPK_7epvnW^@aLSuO|p_Ni$tN`Li}LbTGl4-MT5gob22g(Aan*9^<&f$HxcC
z<vl!J?f(4}YFI2`Wr6VI^X*+6971~o1o!Xg`5Ge$7~|gk`{(WK#Gd;3X<fhmxV~QN
zM^lr~!JymF7C^mDNliU3dQeqQkL%ecUSpE@<R6cWSixaF56&dz=N|$%(VS_qv(sZn
z<Bd`N-uITZPiqIY@lnM+$v!tH-WhMl+GM!1TnxockeE_aQ>oh22fbx~ztN|wv{jho
zRC12S$8(u_aE_0U>u27nd=;N+Ab{aYWWD1Rm}1}0(*Rfi3K(t;-9TLQ$Uu-39$hGK
zIG6m(dwY4W!(h#A1__<Fwlqq&X*siX3yVj;kif?`H{b8szV%m)!esYy*SZqmx-j))
zQ%M}2+Xa@J84tQYuz0M^Br*Vd*E5+u$;rolG&Y*ePjtZjaG9<Yo*GHZ=p9sEmrvGA
zB!vrWnoaeVb8~Zlc*M%~VDxQn?@Z#lVq>~-ke;dMfk=zn0K#3y=!}2iD`ILrwlx_!
z?5>HI_o34zJf?z7%iuoKohMCp?b_A-O}6WTySw|6_1o#3)C5u8khn(|Pm@M`uWLw>
zZw=iU9Af9z<?UE;Q6!x*%((?iU~6lu|LztGs{8javpL6>7m^$g56_-}3w7=7!F`NS
zsQawYA0qFuva)*ctNZ*DmBU%t**yR+<vbR|kqanxpYMfpKo(kCTe||2lEC3!sKZuh
zRXAkSN*XCLZ=LK&|1UbtZ^n50s5He;RT-6G*8MKJl4tojmX?<#0N~wcCLi9j9fjiI
z<)zyXTzMW9)kjrcJprvp$yA74cb~wzoQcQO#j)1xohWg@e7tr=oS|puxaTIjLIVSL
zD6TE^T{;$yTm}kYRWF^v|5-z}<B4;pE1PqNBNx9*H;YYM&hFBc0WtdR&)bRsqJQQp
z`Slm_Vw{Yv%9)t5g#|fi4g8ds-z%%?>K^c#iR*fmkq)cZJ5e~Pc6`76?5k9a8S1;{
z%ZbYPVDr*zw88ctm5@J#)UtF*`j)i-9-80XW_6nE++Et0Sds{9Huk>uWofCv>guY?
z(lE8Yr6r)V(*(iG{^e$Jgx;+tZo~fs2M6Dp>@1eE@86E<hHZoFc&H3e!hGSbB)xp8
zl5bovsOoiEz3t-Qcjq!jujdrjsf_VoCoZR1l8vU$5r>BO8cI&oR4-7@d|0eeljD2Z
zHOct!0R_<oMRD7<Z4Uq;qRv5g7<tO@sq4(oBmkC3BUjhZ;0tZQk-Y)kOQRWBIX*R4
zSNTXWQ&P)&OA3v)V*`YHE)m;Z`a+tE-DT&-T6_+O+;{=|gIC7p1B4J#iA~p+nvhe6
zZNZ+=6a?MRvuAsa+{d%^v+i-;t%(mvN;(Xc3HH!}htl(ih}Y|jFN=)l%;`S=DAgC7
zFY|psq<E534V2LHBq%+K8hGcQUk{CS7W0}eeB!#MrS)iO$*pLrf*02Lms@e(`r2~X
zmDdl(nk7&l(v1u2zJGt*kfvvT@7{LhrTWkZaFW4}sD}^af@5QOq@<+}^RbJteN1NY
zX&Zm(;3`Ms5yr;jHo)tSzLcM-e7fG@NQ##>F3MOztAsLq;A61akqm%r_PbxBADOQ7
zav{q&MfF~yA|*UvpD+X_lKi022`*K#!t%WcsIEhcL)aXL=0TO?>=WyZ;)C!tDjFIg
z-y^93XpxTa!;ExhgUNPm(SfF$@oJVMeA@AIsSwf6p(WtnwFL#eD`$vWeOFf~jdl_W
zt$t)gCzeuw{7Be#;BT&6xw2=6FT{Y%N7!(O+Flz9EYjOn!)gXbqe(2AY2Aawbbojs
z1Dzq^;ren_iiL%j^qD=|yOaF*KMf5XFM%lNV<xUic`bYv=&cgTD1+n?3`=^eEyvcS
zH$eE;Y=$>F=-{bOFE0i?-&udL>99$Wiv$wzNHOSIop7G&nDpWj)=ZFEOX6M*ZH7Bj
zddazDoK@2#a%F34=)lKU`jWaNISsy+YUu(4Ouj<0zjUh3jwu(#RqY!$p2F^cKnM;A
z>G{?384AHiq_Y|MaRO4mIbdO9V`J1qs02u@freygbW~M}N5eFqpPTy}ATrp(W^{eG
zn94iX3%l}eS~k8@3wEh_)>bf_wTUcN6p|Tu$n2*{lUGfbzBhgDd1r5#o{_=WE!+O^
z($UAzgtZeG=mm=Mk`UCbuVe+T-Me=K6BaFN$FDRKQ~Ls1FepB#hyPrSeDU(-7C7}F
zE-^JnM`?(rpEcwl*o#oi`dY0s%A1?Hfj)ZYGGzv^52{2vk*T3iH~R}=*}Rl*yfyHJ
zo{j|tEE)Yy<z5{<J)y8mx0ZenM=N_Pjf{@=%q(8Jc{2c*mXAO=O=-{HC!NHrwT3%p
z($y2y0P-B-;ZZrhAAYLtiD9rLzK@gM>+aAB-)c%XZqBt6FfcH<2DelrPNwHen2;QC
zXoJasfHvzY@oX+|6aixBDd1!yLiqvY`f}{Lki2aM00Sy`1uXHumyW)3ow@saZti7a
zA+Nc)xqgn#p@M>fci!t>>WNBcSF^PU?nG8|*A9)%6eMG&&=B|d-cVz}AMme5ZW@^X
zE5E`7n%`rVHa5GUcZbHveC^jSaYb0o$d#zwy7i9d+JE>n0pOAa$#w?9%=5!e#bQtT
zl4as7>Ij4JimrQm9=LpZ^uj<5Py<OoIiZuoQ%L{`z0Axrd}rPELneYw9jP{=2S3+S
zu#f<{=a=c8%T7>)*miQAE`yX+-_a3rP7rCHp^6CchxU~P?DJQnq`ZB55%!L|yTUd$
zHo|oO<*cl%JA5fLTS>GKK0yH!mC%>9%T+#kM*I($G#}|M92TxmqBy_@B&4LCL`FvL
zq81jq_fGDKbu#F{op#pI5jm;UX#3=BM^-&PaZkq*?fP-yrkca#oug1UUZ$txZc4h(
zjs4BkPTk*_VH)bYlk3yyEK(69?|yyAa9DGGU~O$J{KHS>FtR%P8d*>f<V3w;GD$eU
z;`h@FgWnz7<EiR{x2eM$>3;B&0)Ob*mM7W*(a^aGsp(4gWE8t7E-CxJ49we7KnhSa
zXgGwMQKxj;P!D{kQ`}9|+tdd?VG7O{rzaN`@y&O6D~pb<Om?T66!X9WSzFQ?{UCGr
zFX!VEEq7b%10%5CF63;jQf_rNEr-T~Ari;cNz}BoYAYL?uU3M`oz*g9Zd_uVSbR|C
zddyHZ6o<#@=`}sc2(B8}sBY@`4m1_}1_c~^dRkAdoapRax*R&pGLu65bo_e#-*koJ
z(^A6NhKhurPCwol3h1f}je960*Tm!bfwE<mST^~OTU>4Un~F3x=R6Y}6+$+f<<9zS
zS-{P*B#U9OSE#^@;8^}a9%@ZUoKs7VqxH|WN~fCzT#+PqMyBXipO1g9|2(fNsayS0
zRk(}f@ltQM=zyye?_vn_yO1IGS8%p9EB8w24%HF*%FHAnXy1lUVJ-T}1|?$Y@rtM7
zYKp4<)vF1)E#T7oHcrOZsa?r5{|y^ioeJf!qoYF(@c)&oSKqhl{UJ(zngv<hgiQwI
zfvSVU`<xm(E_cNk?`vxDr`fyPJupYQ^kQ0Ug73#9YZ|JLUfYfxpjm0K-o>=YM_K^x
zc>!2=u!j7(yZgo5KCVC9OaA`esrYq)NevB+;r04-9_GThS%Z4RE#WqiN3;VDqy6>`
z^{JiXsF!u5l?Ya99YJQr%X`W6ivM!b2))RLn${0j`kg+iPBNmnsc)9LL4PLj4OZBO
z8n5`Zs+8u+YiDnqsxyhk$JU5vb5dJE9Z6Nh%$?)SZ4@`cKuT+U<u{4(s|7rZ(yvqp
z%?M*o_8}7<uXb!iNM)%IPO?}JI6+<ZhcoL=FH=)bP#)#^492F49~<5O83TRve#5}=
z_DjfjM-}!-y&x9yVThT8@9Rz~7l_evfnQ}ZZExPF$TH%SCCro!FeMu9zV{?%I<$|u
zpNwKB2Q?4^S1ONe#$&vBQ_50TW_b0Bhp_egzC~}DC0WZJ9F%u78k3<Jx*Ft=;&9<s
z1q)^SKS`Vo#b6I$CeYPqym#w+h~{uc0q-NB;1t4Lzkf0fKfHnaZ=(xw9&a3Us$T(v
z!uD`Ygwj%xc}C2<6`CP?`g=#>=+<a#%i;s#{D1*d5o%b=nD(@_2GYnm5lO=uD!P9<
z<3azK_$8S)x4-E$!hZj(4ES_n0{=gzNIXgtc*AZEXozfVq)b92G)nhKM_o-G$$!x|
z)=VhiF<;6Gg{v*+%uuB5qN~kAY{M??Zz3?+xZ0RWk_T{_nzdya!6SnE;x$6zSO@G0
z?XCGwa1%MhFOraT0R|;HNHTx!;?2*oM%KqxBD6j%&i9nnr)Y;%RV7RIRfIKRv%SiH
zMxW6opT&&$XZWqOreN9&aB>LOmKTtouo)Mj=7}>Jq;%yA2uU`V5!?zv!YlsvU#o<B
zl_GEBCj0%R&EE22bNS(>wDl6FUjXBVE$KbNuw_6SYv#~?!O`U9#!V?7NJ*~tjJILi
z1?;%I7h2HyM%jHDDLCChC?mxKDlNaQLby;4SJZfx3C-dsGi)?IM<d$?laB-hf2dHz
zm3*bklAFra*K+Pq1}k97TjJX@n&J|+sgEg(ust!OD}EcNwibNx`Nwt7fYdLYQ`*uC
z-*<meA5Gw3+!^rzt`pjarKKexqm3ui{-|IM5|AMPX}y5tEZ?~06-(0D`r#|_aU#C>
zZ6un3Z1tWd-2qz8Md$3)Jvf=##F46_<S{Z}*9#OasNJ6@o4nZnBLSn-p~fQ(3>1f|
zsw=1%F4JSbgLR|!=$gI_=cMmTkEIqKp*Rp{`qPvPG6=M7ImwP+sOC#NudE8o>nb}A
z9XfRW^5wsw@$yhIRWtlA?tk>ox*-iSaMKr#aH3-R4l2Lkw+Wbc)T=D3$)9k}R5z`a
zJSEG8mDYc-)Ox=Jo%@uQ04?wawX}Wfmf<Ef=Zi)*eRoSKkVWGw|Kq;viv?0n|Bx#d
zt4lK1eDCci9(GARg=@43)1LX}?{}W2xhm5;s^>MB>bwK}a;`Mt+<!^w#a0EpL6B8P
zXK~!Ss#sO!r&<2#g5<2vCxNfIh|ob0N+1WWcnLP9Z2JpQ2~RQ-?yjFdMD9Dlb*C#=
zYl`k4tw!xtY}sR+f1^`Qmb5?#syX%Ce0pGzT=PT0iPv@g4Eh#+P6N3AVSn<j2Bp)D
z(JFtC`A{csKTrJ&RYnLUR#?HyILX7b=`z9Kge-bKl|~30zV$WN+>JhDB!|rv820G+
zm>LIUhJ+mMX<OgpKS2~m9bRgsZ3t+uGWN78+m8*K2_1UY77%)te^oE3Y<Su;KV-~b
zI$86c4x9C1w60FAPh0qQ^4K$L1;Qe~CSLCmkgnHAo?bd+>VOmNPv7;9bo!+bu6oY%
zNzK6c7iRzPu*j3?njI)aIYX2<FC)NY1JzOH6Ycq^GYbElRLwo(WP2p+1ENRWh8OdO
zljE{xr->b&+B#(V&H>OjfLhq5XY6>Ob0%TFzdvs`+ETd9;;sVZ1{KVl6d{3`uix-z
zF)KLD?KA%d!lKQsoGns%s;Yf7qm;yD;=*EAvUtpExvi@=#xmh!xTaFTJt>-zf8KQF
zKgv1b(318BiJ2|WjUSpJ^N~+9jpD^#0hRg-fNT<lqH5hH7FiV*mEoq&C>Bz3vdXn>
zlTn=gp}lVn%FlwFj7{^y+0iC*0G1?D@dS;BI(tY!04sVh?iXKwuX@8$-3c$O(v5yY
zrXu0ye_O-TbnI(2NgEVW9THmitl)}(O2;Mpo=?6A9ij!$SK7L<+fRArFh)T^!n|S^
z(&IxhR0YxO;Ata>_#mL!Y`RL&0K&7gvxg=p8NKB}_0Y8L6UN<IoF0I>i@;o@$9($q
z>EG1~&`GlkDD6T;%R3xvZEGVe{l1SJRL{iqA9#bfU8f>ceAEZ%gmP@#p6ZJ}1zO9<
zbs%DBe7sy?vdCv~W{?74X??kLJqZ2{WK<9EGmyM5Xlil*M}iyymdmCk^RL&hUxOeD
zi1Z^I4R+j<TjKum4n@B1rvG^Xe!j@bIS69h^86$gKK`jk93j=934yB`YtP^J`SWLh
zrsbb}clJ!V{0h+Y*aE~1>LJ2D!EFZBN5#QGGQDW}3N+6|BJo8=1_vlcLn9+9hK9U%
z0mS$CK390y`@t~bm|ExI)0S8p5jCgYDY+b*mdDf6_Iyen+`vyhvbc%#3eZ~80n|e-
z!(wwqUD3MIXfzsOO%Q?vvSR-jvWWR|d=2zoC+Htx4NnwNtokZmK?s`1Ch+eW!E`x6
zD+3KGG%i3Ey~B546qm=|1HA>DhRezngHU}cx0|87CV}i0=(K>}c#)O0-+SKK+plZo
zr>uT19vvxq^D&f2k3og5kMLFkuzP2UgCXH5F7}7ZIZyDRkPc~KI;u3-hmE7xZhg*<
z(4ecAR8YWUx>%(L1RTPM{bp+R0TYUa?g-K-zxN73N>;Y7t!qsNU%Ki9mvgJHB4nYp
zsRSv<D@^6peFlbx5@*hANv!qD@S07_>kSn7C9pmv0B6oEAizNSb;r@h+eG4iqzMAv
zLTP=m)_k<_?Lv)nN%-0z38Y4awSLXDtzt#LwjeYe++n1Pt;Y(Kzs>Co^j^;O{!G(N
z6L+34@_-<$K(^Dh<4-`pR9qUO<PAg`zVljjvuV%cgbv^X-JJ1YAVRMfp<1E4R=O?N
z_xn?v)oEvJ`g_XA69Hu}KInI%&$>G;%>w7qT<WciFC3Q{>nasMAx)d(=nZ5GLGOwj
z8CC<)UGFoG{hpsU|M>VXIrlly&iRu0B-k?<rE3_F7$1DzEqe=og+!5|U9s<c>H6yM
zqoH_thhIUaD_gLk{N)Iz=&?BcciU^8Uj;3vWmzpTTp1KAYYa(U<_{DTs`y><0%*OH
zj1z}U4`thpFWZ%_$|$W(g__TfG`P&QSWeMHJ$D6M*fQFbfl#4S!<ybaAYvlFqFXne
zE}Cn#Uijsw9Bc<PTeOmAL0ZH+hq<wvMve`-$R3)iQ{_OY7huD;p#Y(`d(3=Wm{DGL
zfR>IGH8;@_)MVnmyE;mY@tH$8xTHj>2(;joH*d<2|3!X<tj|R8yosnm)^^mMP{vfH
zrq^C%_h}g#1_6n2y7-%gg~h^X>6&%C9AQgwaq-6KC`{zB^2*{bV6kjK<AnfajV#;3
z5LS6dX;&zq0E90L2?;?+k_XG<xzNh14`n$LiQP@5YtsB~Lx(q3y+O}3gqrAuS&b-z
zd{DX=SNbukbj1ScaG|hmL5*J)YO8aV?NyqXQZM=*4Kx<e)?edfIY9RHXY_F&I)unW
z01Dhn-;3^qC7PU4UY}7068mrHMW;UP6uaf&!G|~rKv4-y%P8T=C|Np*C=x&;DX#uz
z9v2g1WH*@vLCX89&}m#nisvF+62Kt<EJ&7uocH=_R4;JR6_5Ygc`Sa<m~G?k?Zh^V
zT#Camrk5a?8xbXpW1fooQ$#r_n0bX+=b<_Yd0gd!@)Ma`8RsA^O_Z*CA*A?ub8{hN
zQ6PX}>rtpwHiT1!7Y~Z+KZMwWWQp{*{uhn_=~3eJT31A0ON#}yuvqI&GF=_f1EB+c
zP@StjG9U~<LPgbZ2##ks;aju*2Ic)j@F7WvcRElkAkux9obQV?#9#I<m*QhL2cGYq
zot>t)<B!gtY3T(!fCRVzLOmE(I^9N35uKcR;l1aN@BcJCP%Qy@+oO-S>qA8dFDJVn
z{18A*M<{}f^`#8DWi7wXjT^Y;bZsgQXxA<8?|xH(B81RA>FMde9j<9>`v9u|^8M#N
z`St9J9S+a04i)jzXHH?}ej|&3d;pl^^wKpqpgD<-j-cdAtZJTRFc<`&&qa+3_9LVk
zBBa#R;1F`l)6+9=rbdC#;n>tu!E3h_g=|I$8|N-h+4SN$17!QMvGZL^FJ<(dzj^cK
zQedu}v18Xar%FfS>9g42)O{~!{%dCFY6+9crK)~4cjANBRgY6sQ~!pm696h1Qr_bb
zUfCo2cO<=evrD$qMTp<y*Lgk#CnQ2ap@hPU1b&EYr$32Aa^~uvrvOC({J)&%lGMxk
zdli{p^MzfvXMTQLXdhJa(>dvj<iWGGgEJOyEH7UC3n<A4O~%eWKjZ8wI*Z+rTf1u;
z<TiH1S^-QDxNg*dcR}59ap4Bb3l`{QkWGYF*ePf0-lV6isj9Ln&8BJsMcdc?(dXX1
zdmj?cy8lX;FJj|RS`hS_d!N{YfEh^jq4%T$*#tcH3=9lx=v0G=-uzJAE*AnYKnxO<
z;ldKujiP+=_FLhV)^Pt7{RXY)6dIjsJV9z3Yyk2FlErEs(0g#vAmBsJQ0Lfwsu~0U
zb&lq$sw!0cy5|j`?>j@sIJQCC_PsQ5NBsIV;B1upSfAZFbKm21zhe%E{h~(Yw{t!<
zuLl6K)<;AMDc#7XY;-=pjznfZc!KWqrI<CLK27c!*)fJN-jR`Jz)kl&;0F3`88OEo
zkcNsQfAZl_@@M0BLCJOy_j#@K3G`ViFCT&e4z(IethoD}jgF2ELfxtW{Rmo`WTcj!
zo*(EqkYRY>c>JMkz>&7@z6nAN!rD_4+;%|PMRaR^uZ7zPP3hjX%-^}bHcx@&7b{sX
zTe5mxJNP-bWcCz@=U_^~^1B}Wy!wGn>0xfC+s^fAvGvEm&_YYI(qOuJ0M=^it7Pqq
zq$C#0+Jtfl#_!(u`g2QHPXQLHYikPv=*bU2=>BA^b^6Eeudhx`uCGn%zrVX1q`|2#
zLZPoR3`WeHmxyhXIzkisqY8zTB6ly-s{)|v!kR&OU@}3Wprxe|hUyM~jg{UBTmBp<
ziwM*LZ3to|D<=oxD^U-hKHUal*NgY>_koS6xzJe*L4CmX0hszdJDUWnv^smQdqwwB
z14^rN&L}si=JjCne0iUWVpR1w5zW2HkGo(MC*vaj0W3`xQX4qFo)YZ2{DGC@LuSo7
zp4>EAZkyZj6c}FM-rK#`R}ptkO~TnAgf#|k7xag``A&BUu)jeyLR2!K_#VNh0F_Qf
zWO)2#SrZRx*gnKvCGYSPNmn38sX_oCnWS{3y7Yn+Pr0t1v2RDAGX*pl*vv@HgH@Hi
zZ4S*KziU4y68LavNNo&A&~>0BVg)?+LuES!01|cvf}0Z(_;qx3d)_Cmib7gP*m>*p
z{B2+{OI+y}*3#ByMcuQu{@heDCq34d%K>o?nxZraY*QaOy!J?1)*xsW3EkNSJ#ZAU
za44^cBe)E1<&)1nzaQ3ho(362%yal^Gu@mG>P~%QW8~V^)VZdeEVo*-?jyP+f^)`$
z(%s+o56^jG_F0!P@bQrI%FO70o3hR=dTfZN2ttG&0`8m3q<dEoKws#K`k+Q$gxs;^
z5emF_a79x{yw@tPE5aRsYdk1s68!!9b!dR$VwBHA9)=em&gku_1^E-L;H17F5J|Ju
zv-N2k^s9N@H$>VQk&02;6m)yg?gdp2ZemHQjQ(gV)CXomg9YFyi?4f}Z*>F)&_#EG
zfQ@t?EU2rIq8|$!N8b^LuX{kAAwMYpx}Un+(J&)+ZMs^l4^enaX2_GbDuNHmD`?Y|
z@J713$?fqV+#ca$2eJFk57wo94rgL6h#tJ^eToPP4({`#b0}ClZZ!I$;GT0Jr=5)W
zRN}e3hkZi^2XonB(7+pLx|fdb<>uqN03U`MvE%|)O*N>~$M-*O8r4{j3jj+BFqyw6
z8wy(HY;s^D4?~mM=d)3f_fskEUwInUlkb9%tE#FB4M=6m@Wh0YvY?HPjn2diyc1rY
zjf1~T%zN=FBC3FnoHyHO2-{}3s@^fMo!`dEUBNz%tl(@0Y2D@5M>YUPaqs))T(#u!
zZPjg}28cn2CCT#u?#(_8-T0BQMW_`Z_aQDgFxVhcCSp@iH*Ikm-RK#L(D^m@l{Nw5
z8;biI`+lzzh!_Cr{L{m0#P6&s%R7>ShcJTpZK@d61mUi`eR($pa(#l#?AxE<oJcOd
z;%!aWl@`<)U!avD@t+NZjfAl1+1b*<n>2M#b7l6-CN&V)1rApGw_!j76%-bBt)f*9
zT@O*~ApR&P1*V#$6SPOA&Nh9#phQmP9;=Iq2lk-!27XRnSL6Qu`xT{zmE|$C*(3*7
zOtRY_1ME~|f2;E=#J<#&dW)9coOcsPkJTRj5?OVSI^0@USp(A5@cRAK_vFaefP8(O
z#uk$?`4w3}Xu_ro_hyspGNp?;uO0>y9VS($N-p6l$M*84XWkgTa~Yiz{I|{DRyUN)
zH&s%cp3^fWXWH;JmtrlXsa?E{Xzzdm&%|M#kRuUSP8csrH=<c_%Zl(F55VF~7gTdL
z^8a6vH!fwQa}HKd3W3}k4~6)iRP5S%%Sr5Fgcj$Gj;4;-iE4>&;nwk1<HA?<#00Vm
zeB=a3%$c#f81P)8QfM?42zoa+w>`VI8IODa$BEIwH3VjH{YdE^(-f9{%T*N_!GV<P
z4c%XC)zP!5_Ue&FhL^C?-@ZNcuj%K5jvQQ{koz3Ozig76M$>S20CQpi@_8sFIvL6K
z2rz>}%2U#VQ<Ky97VW7MJL2$yf;oEfz2=M4)T*$i_j^bauFodZj4&-g%hnEFT^CSk
zD0yuytaM}C4~T0@-`xbc#LdlK6V{h=BL{qdjV!+=O38WqU%Foh>fXu{(+vHolW?5*
zxdsV|Q=9MZXVkl57?sJ;u!6Jg?34&4(xSvbsH@<<^_A1MnT}<yxaw-Za9eWRzQ4(1
znpx+5HfatFq=J)JJD4=VeT|$uX0RB!`NfT4Z9{y7eBzM0F9p1dtpVkKwfd*3y^;Rr
zY$#HzZJSaQMjM`9`q{>5=h!A{2qrn5j4(cCkqwv@PdpJyjMK0!<LNNp+#;rokT?x@
zWP1Qr)LUbP%@t}>HUk6uTKyqhLO7*BOexZuI2vci=sXzl4=&skC};U;5BFFX5izXN
zF}TvZSf$hbZc`!W6;JCh_HBe3knoy%@-!gf50JVtMT0{_MS}j{?(;~CkBOI#f<Aw3
z$nk$($J^7<7ml!ai*sK9Y0m8>)8b->qU=n^g`yvqg=genhsRM`Wjn@doz$Z`;5xPm
zw>4MXIkj;SlCIdX(jmSnI{pwKoYA9u17^H+k|9t>*|Xxv9pfxvqnYZw25+R**Ua6}
znXVzo`uJ^p@v*p9P-hkW!`RGw-=f|7@2`K6wlCJF2I&he;n4*0MQpCI?*sMPDCW#1
zVOhqHznug1LBf?#$j{qkl3e0#mMW7CKtOOTGUF7V%J|+Ks>>|DZx&Kn?|6q;{jaAm
zHrvKE7QZ?@@MT`N?X}w)Sn-;}IJQt13&1`dOj6WPa+d#NzVZWOn?Tx9JFIO53#!!k
zxYHFKg*1Gf5Oz@g7zUf*B=G~Bn-({rFG1R|g@wG)aQQ#84MxGR-Jwf?9q(5=7$=^*
zmvO?2@YuMYSYC}6Vn3+sbH&)u^`eFkj;fVj#Ev74Xve6?W&UGF9m#(c9%tT!Kz|e{
zm)Va0MPTYto)9yr9w7EqN$~#iW>rzZ=@qN%ebAZFi8`)Jh^0E{@V<Jl?&$lV-=L$L
zDRqw8*9k)k*pm@R%K<@`lkjJKPe%Z#L)tLF@KE)tGQ_BCPqe3Iak|1LYfGuxgB^Hb
zwZXjN%%e>$%pK!j#x-V!`X^B5z>5V$ia7U^rcv_mlA1sAMLAz}W;ZZBJAA>`on=nH
z?CD%Hj=IJt9^++Ne_!yHec2q2^%_0>8fj!C%IZNXjS^lAGa*pcSG-CIzfR{Ss)K!;
zD&+m*nD={?*++44_cxYP*qcNXIHhI@`l>zZ!|3dhJ=+EOLp6Vu=M1wX(fWF_>}mee
zbDkaNDTe9IHE$^f*u{V_>!22ivt5ud$3%Q^%XE*u&NHo`INlSEb4Xig&ipepa+K83
zNzyhoLUa@blMF7CjHc$AovLMOc=j#wy*peLYtU0Wdxorb4n%uU2jgmf$W1@mB4{2<
zdy0rKTKTv^@lBX0$KbyZIBvoCF%L+hQli}2{7C-~t;!rBN`ak0vXQw#x}34sr}nH<
z&%?h-$&xQ%e#)5Xutj=&7-CnVf^@oLAbJi09_oYk3dyA_gyLTMLRGk}<cXf>4e57m
z76pHeBnKqW-pbj3dtH%b(?DbnVG>CruJ%@TZusFmhvbvm1K*P*BS;>k8y6c6!_bPU
z)~4fn(V@SlD4b$HTvsn|-!Ee#=rEYQbF4RY%xLsRP1bk($T%ZeiwHz`LeakFTw-!#
zm~}k63biR5p^~S0ADw)8m|qeZT0zcDjv-~7u9Xef_>I_5^tZQ;+C=b>Al=7IIdW7(
znuZHq(a-&EA2L=YZI8X;6>rB#5LT|WXS>#k2Z@D9Cqo$mQkVkV91t>z?=k}C$$Slj
zqZm-@kq#>(LvKy<LT-)DTMqJ7hSs<6P_B;rO?Tz~M#4S}F}aoHN!Q{1=L`D|v(AMo
zYU*aBaVjXxNx9}vhgOBP`M15WN^_65!_F(_cYtK7Ktr24f5#mQhtNDEyl8_a6!+(V
zD63!Ubru>9;eib}LgZ^utmllP#%_*`1UA(dTh_s_h+Mgt%yS|3wK5(;0sd8L+-bK0
z9$Au{W|4Hm7ets1zTf6pD@z_jcLdz*3@r!lsc7+M9KtU{e==1vUyN`xh+z*n1Ohl#
zz9uRQKo^f7C<6GE-WV4igl;VFXRP&uHrw38VVAmvl^6eBTL@j}hK>_xkxxagGYDyl
zaJlK}>}h%#HTnY8nGY6z-9~6Z<ikBrc{jX(;8J%1a4sPy=RcZW$c~JaNGK|9@LPxv
z1blmRtA>+Mh^;kGP7?{rx*b$7b(`^$#R@l5rX1S1SRbae46&plZ(N?raoJ~Fy?0sc
zL+)RMx)fT;nYe55^1q3Sp@SVFSlam4C`v24YwU#Mi|{z1#8=~tX`%!;f<DiUx6$2Z
ztq^i`aWIhq@C?ih96*R6hASYc5hoiEE(vZUClDV7!a5)xG1)GUeQ?cCW8R7Ggnz(o
z0-|*RX*0oA(_K92nPKk<oaC>r_0=xKnKDtbj2~;JvjQdVvN#ZhhyjT06DVpV1&d@9
zJqF$?)ay3|A#1OS75BTj4-EINk-yETQRVmu2`;3)qZWFKwcn8-A%BwZB^Kgly$)-F
z;qWab7T@GP5Mw{4LU=SyI@OfQj;jAR$|B==QO_}K!fEBdGv8Wi!}2pd$Qr^5ST5JD
zgAU*=6E(`)qi00;3tupN3>?)jb91?1PwN*DPaw7wUVI)4Owmy_6V<>#7<fRWuCtSb
z5NqISg5B9Vt23@Shk@=N+8Bhi1ug_}V1O+MY#snH5FQQ&S-9YJq_YN!s=l=~u+6R%
z?Z+Wdv9PePRl8HBVJ;Rt8s$B57oFMvPz=uT6Qd)@-~huq_5_a0`GKzA#Rd~u4WbU)
zGhS>k9u;Lf-4mT-oGyK~me{U9dz3g5en0{`L$CG4()|9J#qKE=;Ez!#$c~`5a_{=o
zHzgQx<+U{o2SWSxtg`=!#mz`xI-MRotNT_{oV(0V>GxseUbN-fF*v+_u>z^zo!~z4
z5k|S*ISk@ffXlsLXJ_ZOIyQUx_4VOLDMiM#k7}oDImo>Z{XAe=S>ip23*DruywFte
z-XlQhWbK5r`U2y3!SZydRYDPp8JgZWKJBRa%&GuylEk-sga2Jh0&fFo_j4rtEqt!-
zZpFB`IK=V#$NvOgddM#z0DJ<sGZKFY9S+8=l(aNeSP`&DBjOJXDk<EvwT0H|)0Z#X
z!B~V)3Vh05isOupA<2OyaO>Y@CTk#0G?@57v}Sn63dj%8n*9ZXVKF%(Cr`cupAnD@
zJwWt-g4pBSzV(<*)QBqDHFl*aEkOWNKI#w9oRs=UqN~wz1$FNX;xR$R2wZ8tysmX9
z|HH(KFJ!x^8)XBo1*DvlIJU4F!h2Cy1)c0gV*j9q^QUVaR0zI`;XC8AZXgIDwlW|R
zdl33p%fKKIA*g}#$?b6BHSt=su<0l`@a@|-aEU{oSpmWWl3AeqBhJO)@2^3WiB@nv
zjZE@^#04bE78J}eAoC7gYje5!*;cw0O9+Pnd8qd6JRi(E0IB=)YmCpMM=VGtgP;XK
z5-n-T4phvq?^nfcLplH!7cpOEFTai({PBCG?t}?rIDVLjXZ|6;79Dgv@9QcM5=K@*
zgKgoY*dq?G8`|38nUA7vwz=eI5hS_eXzCHNhZq{v+7L}f3(G?oegPvMgvo%%Ic5K>
zQN%3=>V}k*6k^4*E1KE{jF{4|M;vzsqDKHwloQ<cK?k_uSMm<IAKU&YN`RSUZvX$a
zYAvrEP@$4_v+bt?1IEkl_ioW3RqZ<^j7=DHy6J1LGe0n>JKM{w?4bAk%#J`dKlm$=
zZ-$!)6BI}H{@o5l>`euyv5csyRIm>M!^6}QA;(wZxyV;Pv-}>k?Z_m~Y?2OM=*5y|
z6KKv9Vu(XuW={%x`qpKc$GtQRQz;`}I~eqN|1t1OUI02kj<0bd18*`96dT-Ufb0~Q
z>wtMT{!n3SHo0~8C(zIz8s*u(6&M4Syyg8`2?^Cs_4y0vhTk>{Vw;)$0g3juhM*0(
z-P5#0<#^-V@89vID%*?Nrld|89iVp-#r1Fe{0B#`Ad2S`+SNt2VYwpuvLs=SL<_Ch
zQuGuk3Lr?soi12sk|tiA8=Q7fe_Hd$y3x~|T`<2r*HaKew6PUNugU~Eqz<H5QG@Ua
zF7KjS74nlEPaPC)8mCCQGSc_W%L*=Yr~uGc!{ReWUVRB2&-w2h6*UIGWD|$-2*m6;
z+lm7!1Zu=>-S``q21cz01_}uAtzX*Al}|tKyIa_wLxXlK)fv&W%lrN39ZAD3FE*Vd
zeP9Am<e%++hPb~JHG}mMURWKMZQRWcV*LG+jQ$wDwyKJ-D4062OiNg|QDqbhcSZ@M
zB_lJ8Bz(e%(b1;ZpY<ChVMRVUXKwjny1)fLQYD?@P&B>O{UfcJIUYu%g%tJn5}|u|
zl}01j>u5$=nIxe*c2e!j#;Gtfdm@vvbVt*KV`K8S_<Zx=QQfyEH!f3nofJ2}9U1>E
zo6GE5z*-Q|&r%CA+!PNahwC24=8lKEdchP3ftown#`dqvujX8{5M$xQ1?a3~zyeHh
zoB7xJKMH>e_!I5%l%D}HFoEE3Io)=^2^Z?%m~7=aJua6IxVMZazf)#xc-p)p6K?o6
z>;a}ngW&VcX0;+rVPg8>xh9y;N_|i?$6A;)a-$?8P2wA~CArN8oogHTk#jI6L6fY>
zD5hYzb(W*~rt<cn>k*R(njoI~$EMHE=!;qSn7E=pF`D85C?(W!e2h^AULb|BWR187
z)BTl13J`NfV5>*;(_>kjOmHeALKASuB49>6a|37cw5mRvU{7=`AChaqCkkLD_;S-z
zYlbC|#r-mPM4@2Q&PaVns+@5-<87%mhalO4W=914`>X<`xeHMg0dn2Gc@WX;fd%&f
z@=#T9&$ZKIz!)z~IF|;^%{c)kQQ#L$j>s9zKU;S!Tt!Yh+n8t{6vwKzfoQ=*=(?m6
z@4k71*Z2y7uyKFTeHY9LLq`;bOV6B~_-dA3IDtW|7h<I=XAm9Y_WIhYoXamkfIWU-
zl>L+`8n58YUb@^dS=ZI2oMa1h9_S2Hz&f!jI8T&ycMFPI_cpEeM`&ws4F*V0dq!w~
zl{PazjX2p)+P_MPISvmIFhZUSz-Gt=X;Bcl<9y7xCntM(cWn}8MHK4{nuIITQ!nWH
z(jbFF@&VicK7|#StVN+#`jpp%kO|%pI}cXGY7hKwI37VLD<F$Xf(Z$xPzW>MWc$Lf
z{2+H-Kdm{z4R${CG3Z1eq}dbO;x(~c9o_LYKQMDj$pr_%R|bRT?G@>IWHHCV8=IYg
zJ~p0ePaGevBiLWi95@cQ=Pp=97RD@<cLEg*$qLDb(K5EN_J{3FTn7#y`cC3PnJ_XO
zQnb(;giHbZACkO#T=sibFMcwJlUgaw<s+1v1c{<^P<>pzI)dXUgwRKr%psv&7Yk&$
zHoiDqnIZM<#6~N=A4c{_Y8o25Z@kfe1f2z_Rjgz(d7sl=rb;Nx2f<0$G`~Yo7h=ek
z;`uhT%cAhRz2TJLJ`S1158=7=JtSihx08$#JGZdmJA+?rb%ZVRi*15(fm8|->MW2~
zPOGuqOi;f_?P}5*UhCj5f^1-q@+&>F0|oGY0T|~1Q1(F?X)^UjZ?uqHAQ1zDJv2OA
zsec#+H4vfZ_h~A!fR_NU0!$ca=qGrXlC;Troiw+G^ZJ(<qy@e-+@9&t7Y5sad~5Jv
zexw>iy6gd>NuAVwBjH#DQRxq!Bk0%;EYF!&XP)Vlh2qw5c^zC$=kVK6N{JjGQv*wk
zOsAw5jGRO~C*Hr<y#Lj*wgd`!0W2!+9x$m=21aWr?GHdmJmD#iw`zaY%qN@Rk@>>m
zHs4hLsmb|i<e>!}oNaO%o8MVJoM)R@Jw0sHNlG=Y0H<!dL+x2q&HDOz06)kOGSnn6
zK_E&8Y&9RKRXI5_h?xZ7#_?09$`PR*UXhZK>0MtfUH3cdK8LtGWZNI8E?uD%sn9eT
z<IA)IQOYNpY+vY`?gA^>*q3AER01)vCKc13yiXRf9yZ5}5zcRTy{0FJtopq|(Z<j)
z6G`_fH$BHzR%a&SaXT9{s_**AW;e-)&+hEWOZ|5D5V2kUPc=QdR||7)PGAc(vNmAK
zR8@=`w%V-7xB1))QYYgyEP)uL|Nn^c8W{2*d`wPZ-{NYa&gOeoGo4dl)T;f?8C$Ve
zta2R0avtby`<<M~d5H#*5p>N_c8oE2+u-pMhIHKjK|K2C7|b_L2*G0rDxjV`H$4>L
zY=BNq({<F*DQSn{*I#$|TA=uPOc1k^UBTI^!z|0mq!eZtoQBKq_9tMJ)BbqfMx(c}
zoP_?|2CeJ9+$f?NY4O@yXC{7Rpgtw_?a2byOrZ=)+_-qd08^`BBtaRYJ=#ogSBdh>
zKZP7g4$YOk{NJu-gu7ZW`csxJA~Qkq_O@>4jyqp(4^{)Pvm-!AC*LGj1&?Na(KiyV
zr;h>y#I(RVKTZlS>^oKv4i=B{iDriHu#re27M^;6+)5~Mid~gjv)_;;Jxy$xs`ABS
zzMJ_O>WbAiIo9p$N#W;;6S9+p)$RYn=6hoLa^i*?v=Po~^PC=#T&!t?_du4nV-B&Z
zxbHvd)p{7$)FJzg%a-}Jh`)d*pY`=p|HbUHkr9i2hjt94j1X&mm_$qs3`4M=rVc>1
z+C}ofWg0UV^<X*`sdzj3n&-!5FpM8S)<y`aHOTaZR;4%@xE4&5Fg;q%gxt}PE^yTO
zC(d=zsXdE%6PaM9bMQ|Iz68hYgZ`OU9VT8jR(}pP`Xza!WMUPjJj2a_0E7{$g0TKO
zFV8sKta&{m?i)0+Z|_vuTZMo7n_}R~9;gG7-?Wk&abqV^;zl%lv;YARj;&}ND*RG0
zw%i-aO~=LmylX)OKXu<w<INl$wg*XkOc|QhaR1Mt-rpwzi$n`?&f>scUBW8OkIZ>@
zEN+@D_SbMKZ`aAz%9fnH2$XlSz?&7ynIk8aWlkC4#WJGr`-)cEXNyvOw2Umt7H-d`
z2b$Z`pv3}vGEVq*$LR4~s4mfH_pYeg*Y<C1nr;8Y0-)2eFU$cbG5sUQ*CmRJKUalx
zTxe+2aL+AiE7)nP-pJWD!Y7N=taOdj%P<QG+d$Zjek^WA@(<J8H+9FW`&3TUXg@3m
z#X-k$t|Vnegklyp!blItzA`gx`4Mv0F+r|2B)rx_qoV$s<u~8AVb&VbPCCNy5Eghi
zf>IB21BdlGk1--6TI%&?-Qfu=SA@;a9q*$FxZf^_pj($62<PCb*J|*eX_uqT{);B8
z!fwFvzp2y=q2Yq_GKO)z1wLWGV<}88UVn37R9AX)i@hTaRfd+|p9Z!a8q21dCoD<D
z=Ugpy8{{r3ZnsYj8_Xxz8;5#e@_%IBotDPck2lfoPfMJK2L;HPkr&hsH&zdx*{p&t
z*fH<4rM{foG(<pbp3#xsx9!Q?E&#9R36`>}{?aX-Tmpq}!(?wX+^{%U6*fw&6(FZN
zmO1s7h&tyDgcnS3zd#(aQ;mJD^StN+gXN9=I<&u&J{dG_feki7Od5OxriUCAzWo+z
z%*z+!KT3;;m`syt?7Y>HsdE>Q=S(U*c0^%LQE&#uX(}cQCR;e*?sK_(^u`h~<>ZZh
z>q~g(%oaR-?z&7ltZN>jU&g-cb6RXlP+I{w>P4*W$9(GU-#jUqNNO|sG8l{dd7d>z
zp?g}2>VsHH<)-DC!+au*(KW@JQC><~EqUQUgf3k|K3V4BZ#&_B&eUeDFs@@w0U|w4
zQX;trtS?;E6<Wq%O$731B7g{_x{)lfv++!5D=s>}3&<d+cYZs6)eonHZtyThnlpI3
z1eaY%TwRio+U(&cd>PyQ(L*-W;h#Y>{kW3$8@Zwpl+jDWKS!;m$D<R(8fMfir%5N0
zF&!+gAT)7@(Z(TiWOzOebb8t=()bBxQn*Ijw>Vkw?C_!oO38Jn6r(WJRYi}t-%;j?
zBpdbpyj)U8isP#1mtw~7Ff_<krV+ctfj>y%bA52HR*&qiVf!E0Ha0Xaje(gz%ksbj
z&?u`3pB2<`RO|OwDAE_}(sOjvu_aF^$QKxiO5@s2J8vCU?+l{`kwygfM!}|$P%z_N
z<eT{U-z;}2#hv4YD%Q!weOwy#0j5(Qfha-=U!$C%k^Gn{<pOQj#>bL(f4B7yH@}iT
zK0S~}(9K{axAR3<=0>1f_6xL;XaL+*F!pcn*WJt9JjWhBszLR4)2t*_EZ%{Ec1A_J
z_+A@y(U5!}kRE=-sj6caH+jXVwQcmMQj#xm%pX8ROEWPuwCcSOfAI7fby!Ilb5~2S
zRCxJM(`Mv-Qs|ZHa5b?Jn!7q&N2h}Ks`N3;if4GQTBAP1*_Fum>`0=K|IGV%I6r2r
zC~MoO>k0Sf2;;cgQrVBz$G>~I18b686WNy1?jdjQ-k`WB|3Xrp4TY$R+qYgbG~8)S
zTz)^SkHi3a<Jkn&I^@Y=qY~Vauydd}!4MYw2~KE$EMTw^BrT31Q$p^(*QAd`usJ)8
zVHyHQMG3Jk)=N6&m7HuQ)922cBq+WRc`js^XqAxu6o+R=fhFb^*lFtT5kCownDw)~
z#>YZ&3H&G#li#>W|E*xm60fK00^DIknbEnyo`zspfGHoq?VbxX>vq4-1`ILHf7v7o
z{Cx!I<aQJ3-UzCELkgd(D{UYxxzgz{y0Je48Jhwg<m}nAz&bXKHT<X85dMJ&Qh~Pv
z%n`^eD0Bos2q8udaQuN&1l*^0eus{`z!=?|<mBXF7XBBd9;qW9X%kegBceZk1Vq7e
z1qj9+nCYAY-+>f2cVi#Qa~|XA@cP2jXk;Z#3oqt2M*ry!gqq?!jDbiR1=_1fLGY_|
zugXp|)saw`zG&b66eQWjTVEP=$nCJ+pb;LkKil|+lZZE}nSx$^W9X(-^`30xWHqzj
zP&Z_uc}=1r`bJ}aicv25Xv=B1wQ-6epoBPu;7xVLo02ysLq-4xc&Mk0=vM!SQ_BqV
z6Hh2i!w3$!5;N?rE_SezP94B#=3bxkYzS>%)XLVqC>1{v_))9)9&PX$3?&qWV#Wsx
zK=axEUdVl#eyhoUP?ru!3R2FAH|AY|uxHIeVCga)zc1r8HA8jb892AZqw6mP0|&^a
zmo0lS_iO4sssWZdp7$@QO+Dh`rkn^HOCD%bWNK=iO<ys1byrBXDm;`8b@?LhLb}SW
G$NvvxK>^SJ

diff --git a/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_security.html b/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_security.html
index 4c38b670a..6635612bd 100644
--- a/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_security.html
+++ b/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_security.html
@@ -74,7 +74,7 @@
 
       <div class="content">
 
-        <a href="manager-rule.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="900" height="177" class="img_detail" alt="manager-rule.png" title="manager-rule.png" src="manager-rule.defe1afc3662d4c558531ada63b4ce37.png"/></a>
+        <a href="manager-rule.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="900" height="263" class="img_detail" alt="manager-rule.png" title="manager-rule.png" src="manager-rule.0a159189410beefd4339a7cac832a503.png"/></a>
         <div class="img_detail">
 
           <div class="panel panel-default">
@@ -82,7 +82,7 @@
               <h2 class="panel-title"><i class="glyphicon glyphicon-info-sign text-info"></i> manager-rule.png</h2>
             </div>
             <div class="panel-body">
-              <dl><dt>Date:</dt><dd>2016/07/19 12:15</dd><dt>Filename:</dt><dd>manager-rule.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>10KB</dd><dt>Width:</dt><dd>1250</dd><dt>Height:</dt><dd>247</dd></dl>                          </div>
+              <dl><dt>Date:</dt><dd>2019/11/06 21:12</dd><dt>Filename:</dt><dd>manager-rule.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>16KB</dd><dt>Width:</dt><dd>1096</dd><dt>Height:</dt><dd>321</dd></dl>                          </div>
           </div>
 
         </div>
diff --git a/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_writingrulesand_headers.html b/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_writingrulesand_headers.html
index ec792c02b..52166f1de 100644
--- a/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_writingrulesand_headers.html
+++ b/doc/pages/documentation/current/documentation/manager-rule.png_documentation_2.0_writingrulesand_headers.html
@@ -74,7 +74,7 @@
 
       <div class="content">
 
-        <a href="manager-rule.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="900" height="177" class="img_detail" alt="manager-rule.png" title="manager-rule.png" src="manager-rule.defe1afc3662d4c558531ada63b4ce37.png"/></a>
+        <a href="manager-rule.0fea6a13c52b4d4725368f24b045ca84.png" title="View original file"><img width="900" height="263" class="img_detail" alt="manager-rule.png" title="manager-rule.png" src="manager-rule.0a159189410beefd4339a7cac832a503.png"/></a>
         <div class="img_detail">
 
           <div class="panel panel-default">
@@ -82,7 +82,7 @@
               <h2 class="panel-title"><i class="glyphicon glyphicon-info-sign text-info"></i> manager-rule.png</h2>
             </div>
             <div class="panel-body">
-              <dl><dt>Date:</dt><dd>2016/07/19 12:15</dd><dt>Filename:</dt><dd>manager-rule.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>10KB</dd><dt>Width:</dt><dd>1250</dd><dt>Height:</dt><dd>247</dd></dl>                          </div>
+              <dl><dt>Date:</dt><dd>2019/11/06 21:12</dd><dt>Filename:</dt><dd>manager-rule.png</dd><dt>Format:</dt><dd>PNG</dd><dt>Size:</dt><dd>16KB</dd><dt>Width:</dt><dd>1096</dd><dt>Height:</dt><dd>321</dd></dl>                          </div>
           </div>
 
         </div>
diff --git a/doc/pages/documentation/current/dos b/doc/pages/documentation/current/dos
index 001100876..53a0b147e 100644
--- a/doc/pages/documentation/current/dos
+++ b/doc/pages/documentation/current/dos
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/dos?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/dos?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Ados&amp;1569271210" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Ados&amp;1576942869" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/exploit b/doc/pages/documentation/current/exploit
index 5bb316533..15c12c4cb 100644
--- a/doc/pages/documentation/current/exploit
+++ b/doc/pages/documentation/current/exploit
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/exploit?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/exploit?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aexploit&amp;1569271210" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Aexploit&amp;1576942869" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/extendedfunctions.html b/doc/pages/documentation/current/extendedfunctions.html
index 6562a18f7..ca413488c 100644
--- a/doc/pages/documentation/current/extendedfunctions.html
+++ b/doc/pages/documentation/current/extendedfunctions.html
@@ -59,9 +59,11 @@
 <li class="level2"><div class="li"><a href="#unicode2iso">unicode2iso</a></div></li>
 <li class="level2"><div class="li"><a href="#iso2unicode">iso2unicode</a></div></li>
 <li class="level2"><div class="li"><a href="#groupmatch">groupMatch</a></div></li>
+<li class="level2"><div class="li"><a href="#listmatch">listMatch</a></div></li>
 <li class="level2"><div class="li"><a href="#encrypt">encrypt</a></div></li>
 <li class="level2"><div class="li"><a href="#token">token</a></div></li>
 <li class="level2"><div class="li"><a href="#isinnet6">isInNet6</a></div></li>
+<li class="level2"><div class="li"><a href="#varisinuri">varIsInUri</a></div></li>
 </ul></li>
 </ul>
 </div>
@@ -126,24 +128,28 @@ Inside this jail, you can access to:
 </li>
 <li class="level2"><div class="li"> <a href="#groupmatch" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">groupMatch</a></div>
 </li>
+<li class="level2"><div class="li"> <a href="#listmatch" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">listMatch</a> (<a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> <em> since 2.0.7)</em></div>
+</li>
 <li class="level2"><div class="li"> <a href="#encrypt" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">encrypt</a></div>
 </li>
 <li class="level2"><div class="li"> <a href="#token" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">token</a></div>
 </li>
 <li class="level2"><div class="li"> <a href="#isinnet6" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">isInNet6</a></div>
 </li>
+<li class="level2"><div class="li"> <a href="#varisinuri" title="documentation:2.0:extendedfunctions ↵" class="wikilink1">varIsInUri</a></div>
+</li>
 </ul>
 </li>
 </ul>
 <div class="notetip">To know more about the jail, check <a href="http://perldoc.perl.org/Safe.html" class="urlextern" title="http://perldoc.perl.org/Safe.html"  rel="nofollow">Safe module documentation</a>.
 </div>
 </div>
-<!-- EDIT2 SECTION "Presentation" [35-1215] -->
+<!-- EDIT2 SECTION "Presentation" [35-1324] -->
 <h2 class="sectionedit3" id="extended_functions_list">Extended Functions List</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT3 SECTION "Extended Functions List" [1216-1252] -->
+<!-- EDIT3 SECTION "Extended Functions List" [1325-1361] -->
 <h3 class="sectionedit4" id="date">date</h3>
 <div class="level3">
 
@@ -153,7 +159,7 @@ Returns the date, in format YYYYMMDDHHMMSS, local time by default, GMT by callin
 <pre class="code">date(1)</pre>
 
 </div>
-<!-- EDIT4 SECTION "date" [1253-1372] -->
+<!-- EDIT4 SECTION "date" [1362-1481] -->
 <h3 class="sectionedit5" id="checklogonhours">checkLogonHours</h3>
 <div class="level3">
 
@@ -210,7 +216,7 @@ You can modify the default behavior for people without value in ssoLogonHours. I
 <pre class="code">checkLogonHours($ssoLogonHours, &#039;&#039;, &#039;&#039;, &#039;1&#039;)</pre>
 
 </div>
-<!-- EDIT5 SECTION "checkLogonHours" [1373-3310] -->
+<!-- EDIT5 SECTION "checkLogonHours" [1482-3419] -->
 <h3 class="sectionedit6" id="checkdate">checkDate</h3>
 <div class="level3">
 
@@ -242,7 +248,7 @@ Simple usage example:
 <pre class="code">checkDate($ssoStartDate, $ssoEndDate)</pre>
 
 </div>
-<!-- EDIT6 SECTION "checkDate" [3311-3938] -->
+<!-- EDIT6 SECTION "checkDate" [3420-4047] -->
 <h3 class="sectionedit7" id="basic">basic</h3>
 <div class="level3">
 <div class="noteimportant">This function is not compliant with <a href="safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a>, you will need to disable the jail to use it.
@@ -267,7 +273,7 @@ Simple usage example:
 <pre class="code">basic($uid,$_password)</pre>
 
 </div>
-<!-- EDIT7 SECTION "basic" [3939-4401] -->
+<!-- EDIT7 SECTION "basic" [4048-4510] -->
 <h3 class="sectionedit8" id="unicode2iso">unicode2iso</h3>
 <div class="level3">
 <div class="noteimportant">This function is not compliant with <a href="safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a>, you will need to disable the jail to use it.
@@ -290,7 +296,7 @@ Simple usage example:
 <pre class="code">unicode2iso($name)</pre>
 
 </div>
-<!-- EDIT8 SECTION "unicode2iso" [4402-4706] -->
+<!-- EDIT8 SECTION "unicode2iso" [4511-4815] -->
 <h3 class="sectionedit9" id="iso2unicode">iso2unicode</h3>
 <div class="level3">
 <div class="noteimportant">This function is not compliant with <a href="safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a>, you will need to disable the jail to use it.
@@ -313,7 +319,7 @@ Simple usage example:
 <pre class="code">iso2unicode($name)</pre>
 
 </div>
-<!-- EDIT9 SECTION "iso2unicode" [4707-5011] -->
+<!-- EDIT9 SECTION "iso2unicode" [4816-5120] -->
 <h3 class="sectionedit10" id="groupmatch">groupMatch</h3>
 <div class="level3">
 
@@ -339,29 +345,67 @@ Simple usage example:
 <pre class="code">groupMatch($hGroups, &#039;description&#039;, &#039;Service 1&#039;)</pre>
 
 </div>
-<!-- EDIT10 SECTION "groupMatch" [5012-5370] -->
-<h3 class="sectionedit11" id="encrypt">encrypt</h3>
+<!-- EDIT10 SECTION "groupMatch" [5121-5479] -->
+<h3 class="sectionedit11" id="listmatch">listMatch</h3>
+<div class="level3">
+
+<p>
+(<a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> <em> since 2.0.7)</em>
+</p>
+
+<p>
+This function lets you test if a particular value can be found with a multi-valued session attribute.
+</p>
+
+<p>
+Function parameter:
+</p>
+<ul>
+<li class="level1"><div class="li"> <strong>list</strong>: Variable containing several values (plain string with separator, array or hash) </div>
+</li>
+<li class="level1"><div class="li"> <strong>value</strong>: Value to search in the list</div>
+</li>
+<li class="level1"><div class="li"> <strong>ignorecase</strong>: Ignore case, by default the search is case-sensitive</div>
+</li>
+</ul>
+
+<p>
+Simple usage example:
+</p>
+<pre class="code"># Case sensitive match
+listMatch($roles, &#039;role-app1&#039;)
+
+# Case insensitive match
+listMatch($roles, &#039;RoLe-aPp1&#039;, 1)</pre>
+
+<p>
+The function returns 1 if the value was found, and 0 if it was not found.
+</p>
+
+</div>
+<!-- EDIT11 SECTION "listMatch" [5480-6107] -->
+<h3 class="sectionedit12" id="encrypt">encrypt</h3>
 <div class="level3">
 <div class="notetip">Since version 2.0, this function is now compliant with <a href="safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a>.
 </div>
 <p>
-This function uses the secret key of LLNG configuration to crypt a data. This can be used to anonymize identifier given to the protected application.
+This function uses the secret key of LLNG configuration to crypt a data. This can be used for anonymizing identifier given to the protected application.
 </p>
 <pre class="code">encrypt($_whatToTrace)</pre>
 
 </div>
-<!-- EDIT11 SECTION "encrypt" [5371-5676] -->
-<h3 class="sectionedit12" id="token">token</h3>
+<!-- EDIT12 SECTION "encrypt" [6108-6416] -->
+<h3 class="sectionedit13" id="token">token</h3>
 <div class="level3">
 
 <p>
-This function generates token used to <a href="servertoserver.html" class="wikilink1" title="documentation:2.0:servertoserver">handle server webservice calls</a>.
+This function generates token used for <a href="servertoserver.html" class="wikilink1" title="documentation:2.0:servertoserver">handling server webservice calls</a>.
 </p>
 <pre class="code">token($_session_id,&#039;webapp1.example.com&#039;,&#039;webapp2.example.com&#039;)</pre>
 
 </div>
-<!-- EDIT12 SECTION "token" [5677-5881] -->
-<h3 class="sectionedit13" id="isinnet6">isInNet6</h3>
+<!-- EDIT13 SECTION "token" [6417-6624] -->
+<h3 class="sectionedit14" id="isinnet6">isInNet6</h3>
 <div class="level3">
 
 <p>
@@ -370,6 +414,33 @@ Function to check if an IPv6 address is in a subnet. Example <em>check if <abbr
 <pre class="code perl">isInNet6<span class="br0">&#40;</span><span class="re0">$ipAddr</span><span class="sy0">,</span> <span class="st_h">'fe80::/10'</span><span class="br0">&#41;</span></pre>
 
 </div>
-<!-- EDIT13 SECTION "isInNet6" [5882-] --></div>
+<!-- EDIT14 SECTION "isInNet6" [6625-6792] -->
+<h3 class="sectionedit15" id="varisinuri">varIsInUri</h3>
+<div class="level3">
+
+<p>
+Function to check if a variable is in requested <abbr title="Uniform Resource Identifier">URI</abbr> (Require <abbr title="LemonLDAP::NG">LL::NG</abbr> &gt;= 2.0.7).
+</p>
+
+<p>
+Example <em>check if $uid is in /check-auth/ <abbr title="Uniform Resource Identifier">URI</abbr></em>:
+</p>
+<pre class="code perl">varIsInUri<span class="br0">&#40;</span><span class="re0">$ENV</span><span class="br0">&#123;</span>REQUEST_URI<span class="br0">&#125;</span><span class="sy0">,</span> <span class="st_h">'/check-auth/'</span><span class="sy0">,</span> <span class="re0">$uid</span><span class="br0">&#41;</span>
+&nbsp;
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>dwho     <span class="sy0">-&gt;</span> <span class="me1">true</span>
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>dwho<span class="sy0">/</span>api <span class="sy0">-&gt;</span> <span class="me1">true</span>
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>dwh      <span class="sy0">-&gt;</span> <span class="me1">false</span></pre>
+
+<p>
+* You can set &quot;restricted&quot; flag to match exact <abbr title="Uniform Resource Identifier">URI</abbr>:
+</p>
+<pre class="code perl">varIsInUri<span class="br0">&#40;</span><span class="re0">$ENV</span><span class="br0">&#123;</span>REQUEST_URI<span class="br0">&#125;</span><span class="sy0">,</span> <span class="st_h">'/check-auth/'</span><span class="sy0">,</span> <span class="st0">&quot;$uid/&quot;</span><span class="sy0">,</span> <span class="nu0">1</span><span class="br0">&#41;</span>
+&nbsp;
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>rtyler<span class="sy0">/</span>     <span class="sy0">-&gt;</span> <span class="me1">true</span>
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>rtyler<span class="sy0">/</span>api  <span class="sy0">-&gt;</span> <span class="me1">false</span>
+https<span class="sy0">://</span>test1<span class="sy0">.</span>example<span class="sy0">.</span>com<span class="sy0">/</span>check<span class="sy0">-</span>auth<span class="sy0">/</span>rtyler      <span class="sy0">-&gt;</span> <span class="me1">false</span></pre>
+
+</div>
+<!-- EDIT15 SECTION "varIsInUri" [6793-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/globallogout.html b/doc/pages/documentation/current/globallogout.html
new file mode 100644
index 000000000..6c0248741
--- /dev/null
+++ b/doc/pages/documentation/current/globallogout.html
@@ -0,0 +1,80 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:globallogout</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,globallogout"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="globallogout.html"/>
+<link rel="contents" href="globallogout.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:globallogout","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+
+<p>
+<a href="documentation/latest/beta.png_documentation_2.0_globallogout.html" class="media" title="documentation:latest:beta.png"><img src="documentation/latest/beta.ea231b49369c9f6406cbdf58d06a616c.png" class="media" alt="" width="100" /></a>
+</p>
+
+<h1 class="sectionedit1" id="global_logout_plugin">Global logout plugin</h1>
+<div class="level1">
+
+<p>
+This plugin allows a user to close all his opened sessions at logout process.
+</p>
+
+</div>
+<!-- EDIT1 SECTION "Global logout plugin" [40-154] -->
+<h2 class="sectionedit2" id="configuration">Configuration</h2>
+<div class="level2">
+
+<p>
+Just enable it in the Manager (section “plugins”).
+</p>
+<ul>
+<li class="level1"><div class="li"> <strong>Parameters</strong>:</div>
+<ul>
+<li class="level2"><div class="li"> <strong>Activation</strong>: Enable/Disable or set a rule to select which users are allowed to close there sessions.</div>
+</li>
+<li class="level2"><div class="li"> <strong>Auto accept time</strong>: Enable/Disable timer. If timer is disabled, all opened sessions are always closed.</div>
+</li>
+</ul>
+</li>
+</ul>
+
+</div>
+<!-- EDIT2 SECTION "Configuration" [155-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/handlerauthbasic.html b/doc/pages/documentation/current/handlerauthbasic.html
index 60553f833..d66a3fa82 100644
--- a/doc/pages/documentation/current/handlerauthbasic.html
+++ b/doc/pages/documentation/current/handlerauthbasic.html
@@ -149,7 +149,7 @@ Go to:
 </p>
 
 <p>
-<code>General Parameters &gt; Advanced Parameters &gt; Security &gt; Choice parameters &gt; SSL options for server requests</code>
+<code>General Parameters &gt; Advanced Parameters &gt; Security &gt; SSL options for server requests</code>
 </p>
 
 </div>
diff --git a/doc/pages/documentation/current/idpcas.html b/doc/pages/documentation/current/idpcas.html
index 85de6cb35..c8d2c828b 100644
--- a/doc/pages/documentation/current/idpcas.html
+++ b/doc/pages/documentation/current/idpcas.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:idpcas</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,idpcas"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="idpcas.html"/>
@@ -56,8 +56,9 @@
 <li class="level2"><div class="li"><a href="#configuring_the_cas_service">Configuring the CAS Service</a></div></li>
 <li class="level2"><div class="li"><a href="#configuring_cas_applications">Configuring CAS Applications</a></div>
 <ul class="toc">
-<li class="level3"><div class="li"><a href="#options">Options</a></div></li>
 <li class="level3"><div class="li"><a href="#exported_attributes">Exported Attributes</a></div></li>
+<li class="level3"><div class="li"><a href="#options">Options</a></div></li>
+<li class="level3"><div class="li"><a href="#macros">Macros</a></div></li>
 </ul></li>
 </ul></li>
 </ul>
@@ -159,6 +160,19 @@ You can then access the configuration of this application.
 
 </div>
 
+<h4 id="exported_attributes">Exported Attributes</h4>
+<div class="level4">
+
+<p>
+You may add a list of attributes that will be transmitted in the validate response. Keys are the name of attribute in the <abbr title="Central Authentication Service">CAS</abbr> response, values are the name of session key.
+</p>
+
+<p>
+The attributes defined here will completely replace any attributes you may have declared in the global <code><abbr title="Central Authentication Service">CAS</abbr> Service</code> configuration. In order to re-use the global configuration, simply set this section to an empty list.
+</p>
+
+</div>
+
 <h4 id="options">Options</h4>
 <div class="level4">
 <ul>
@@ -173,15 +187,11 @@ You can then access the configuration of this application.
 </div>
 </div>
 
-<h4 id="exported_attributes">Exported Attributes</h4>
+<h4 id="macros">Macros</h4>
 <div class="level4">
 
 <p>
-You may add a list of attributes that will be transmitted in the validate response. Keys are the name of attribute in the <abbr title="Central Authentication Service">CAS</abbr> response, values are the name of session key.
-</p>
-
-<p>
-The attributes defined here will completely replace any attributes you may have declared in the global <code><abbr title="Central Authentication Service">CAS</abbr> Service</code> configuration. In order to re-use the global configuration, simply set this section to an empty list.
+You can define here macros that will be only evaluated for this service, and not registered in the session of the user.
 </p>
 
 </div>
diff --git a/doc/pages/documentation/current/idpopenidconnect.html b/doc/pages/documentation/current/idpopenidconnect.html
index 3bbb51295..148e94691 100644
--- a/doc/pages/documentation/current/idpopenidconnect.html
+++ b/doc/pages/documentation/current/idpopenidconnect.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:idpopenidconnect</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,idpopenidconnect"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="idpopenidconnect.html"/>
@@ -60,6 +60,8 @@
 <li class="level3"><div class="li"><a href="#exported_attributes">Exported attributes</a></div></li>
 <li class="level3"><div class="li"><a href="#options">Options</a></div></li>
 <li class="level3"><div class="li"><a href="#extra_claims">Extra claims</a></div></li>
+<li class="level3"><div class="li"><a href="#macros">Macros</a></div></li>
+<li class="level3"><div class="li"><a href="#display">Display</a></div></li>
 </ul></li>
 </ul></li>
 </ul>
@@ -102,7 +104,7 @@ As an OP, <abbr title="LemonLDAP::NG">LL::NG</abbr> supports a lot of OpenID Con
 </li>
 <li class="level1"><div class="li"> ID Token signature (HS256/HS384/HS512/RS256/RS384/RS512)</div>
 </li>
-<li class="level1"><div class="li"> UserInfo end point, as JSON or as JWT</div>
+<li class="level1"><div class="li"> UserInfo endpoint, as JSON or as JWT</div>
 </li>
 <li class="level1"><div class="li"> Request and Request <abbr title="Uniform Resource Identifier">URI</abbr></div>
 </li>
@@ -112,17 +114,23 @@ As an OP, <abbr title="LemonLDAP::NG">LL::NG</abbr> supports a lot of OpenID Con
 </li>
 <li class="level1"><div class="li"> BackChannel Logout</div>
 </li>
-<li class="level1"><div class="li"> PKCE (Since <code>2.0.4</code>)</div>
+<li class="level1"><div class="li"> PKCE (Since <code>2.0.4</code>) - See <a href="https://tools.ietf.org/html/rfc7636" class="urlextern" title="https://tools.ietf.org/html/rfc7636"  rel="nofollow">RFC 7636</a></div>
+</li>
+<li class="level1"><div class="li"> Introspection endpoint (Since <code>2.0.6</code>) - See <a href="https://tools.ietf.org/html/rfc7662" class="urlextern" title="https://tools.ietf.org/html/rfc7662"  rel="nofollow">RFC 7662</a></div>
+</li>
+<li class="level1"><div class="li"> Offline access (Since <code>2.0.7</code>)</div>
+</li>
+<li class="level1"><div class="li"> Refresh Tokens (Since <code>2.0.7</code>)</div>
 </li>
 </ul>
 
 </div>
-<!-- EDIT2 SECTION "Presentation" [40-996] -->
+<!-- EDIT2 SECTION "Presentation" [40-1223] -->
 <h2 class="sectionedit3" id="configuration">Configuration</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT3 SECTION "Configuration" [997-1023] -->
+<!-- EDIT3 SECTION "Configuration" [1224-1250] -->
 <h3 class="sectionedit4" id="openid_connect_service">OpenID Connect Service</h3>
 <div class="level3">
 
@@ -131,7 +139,7 @@ See <a href="openidconnectservice.html" class="wikilink1" title="documentation:2
 </p>
 
 </div>
-<!-- EDIT4 SECTION "OpenID Connect Service" [1024-1133] -->
+<!-- EDIT4 SECTION "OpenID Connect Service" [1251-1360] -->
 <h3 class="sectionedit5" id="issuerdb">IssuerDB</h3>
 <div class="level3">
 
@@ -151,7 +159,7 @@ Go in <code>General Parameters</code> » <code>Issuer modules</code> » <code>Op
 
 </div>
 </div>
-<!-- EDIT5 SECTION "IssuerDB" [1134-1564] -->
+<!-- EDIT5 SECTION "IssuerDB" [1361-1791] -->
 <h3 class="sectionedit6" id="configuration_of_llng_in_relying_party">Configuration of LL::NG in Relying Party</h3>
 <div class="level3">
 
@@ -233,7 +241,7 @@ An example of its content:
 <span class="br0">&#125;</span></pre>
 
 </div>
-<!-- EDIT6 SECTION "Configuration of LL::NG in Relying Party" [1565-3543] -->
+<!-- EDIT6 SECTION "Configuration of LL::NG in Relying Party" [1792-3770] -->
 <h3 class="sectionedit7" id="configuration_of_relying_party_in_llng">Configuration of Relying Party in LL::NG</h3>
 <div class="level3">
 
@@ -384,21 +392,23 @@ You can also define extra claims and link them to attributes (see below). Then y
 </li>
 </ul>
 </li>
-<li class="level1"><div class="li"> <strong>Display</strong>:</div>
-<ul>
-<li class="level2"><div class="li"> <strong>Display name</strong>: Name of the RP application</div>
-</li>
-<li class="level2"><div class="li"> <strong>Logo</strong>: Logo of the RP application</div>
-</li>
-</ul>
-</li>
 <li class="level1"><div class="li"> <strong>User attribute</strong>: session field that will be used as main identifier (<code>sub</code>)</div>
 </li>
 <li class="level1"><div class="li"> <strong>ID Token signature algorithm</strong>: Select one of <code>none</code>, <code>HS256</code>, <code>HS384</code>, <code>HS512</code>, <code>RS256</code>, <code>RS384</code>, <code>RS512</code></div>
 </li>
-<li class="level1"><div class="li"> <strong>ID Token expiration</strong>: Expiration time of ID Tokens</div>
+<li class="level1"><div class="li"> <strong>ID Token expiration</strong>: Expiration time of ID Tokens. The default value is one hour.</div>
 </li>
-<li class="level1"><div class="li"> <strong>Access token expiration</strong>: Expiration time of Access Tokens</div>
+<li class="level1"><div class="li"> <strong>Force claims to be returned in ID Token</strong>: This options will make user attributes from the requested scope appear as ID Token claims.</div>
+</li>
+<li class="level1"><div class="li"> <strong>Access token expiration</strong>: Expiration time of Access Tokens. The default value is one hour.</div>
+</li>
+<li class="level1"><div class="li"> <strong>Authorization Code expiration</strong>: Expiration time of authorization code, when using the Authorization Code flow. The default value is one minute.</div>
+</li>
+<li class="level1"><div class="li"> <strong>Use refresh tokens</strong>: If this option is set, LemonLDAP::NG will issue a Refresh Token that can be used to obtain new access tokens as long as the user session is still valid.</div>
+</li>
+<li class="level1"><div class="li"> <strong>Allow offline access</strong>: After enabling this feature, an application may request the  <strong>offline_access</strong> scope, and will obtain a Refresh Token that persists even after the user has logged off. See <a href="https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess" class="urlextern" title="https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess"  rel="nofollow">https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess</a> for details. These offline sessions can be administered through the Session Browser.</div>
+</li>
+<li class="level1"><div class="li"> <strong>Offline session expiration</strong>: This sets the lifetime of the refresh token obtained with the <strong>offline_access</strong> scope. The default value is one month. This parameter only applies if offline sessions are enabled.</div>
 </li>
 <li class="level1"><div class="li"> <strong>Redirection addresses</strong>: Space separated list of redirect addresses allowed for this RP</div>
 </li>
@@ -416,6 +426,26 @@ Associate attributes to extra claims if the RP request them, for example <code>b
 </p>
 
 </div>
-<!-- EDIT7 SECTION "Configuration of Relying Party in LL::NG" [3544-] --></div>
+
+<h4 id="macros">Macros</h4>
+<div class="level4">
+
+<p>
+You can define here macros that will be only evaluated for this service, and not registered in the session of the user.
+</p>
+
+</div>
+
+<h4 id="display">Display</h4>
+<div class="level4">
+<ul>
+<li class="level1"><div class="li"> <strong>Display name</strong>: Name of the RP application</div>
+</li>
+<li class="level1"><div class="li"> <strong>Logo</strong>: Logo of the RP application</div>
+</li>
+</ul>
+
+</div>
+<!-- EDIT7 SECTION "Configuration of Relying Party in LL::NG" [3771-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/idpsaml.html b/doc/pages/documentation/current/idpsaml.html
index cc7b0263f..7616f1a4b 100644
--- a/doc/pages/documentation/current/idpsaml.html
+++ b/doc/pages/documentation/current/idpsaml.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:idpsaml</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,idpsaml"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="idpsaml.html"/>
@@ -60,6 +60,7 @@
 <li class="level3"><div class="li"><a href="#metadata">Metadata</a></div></li>
 <li class="level3"><div class="li"><a href="#exported_attributes">Exported attributes</a></div></li>
 <li class="level3"><div class="li"><a href="#options">Options</a></div></li>
+<li class="level3"><div class="li"><a href="#macros">Macros</a></div></li>
 </ul>
 </li>
 </ul>
@@ -284,7 +285,16 @@ For example: <a href="http://auth.example.com/saml/singleSignOn?IDPInitiated=1&a
 
 </div>
 </div>
-<!-- EDIT7 SECTION "Register partner Service Provider on LemonLDAP::NG" [1287-5022] -->
+
+<h4 id="macros">Macros</h4>
+<div class="level4">
+
+<p>
+You can define here macros that will be only evaluated for this service, and not registered in the session of the user.
+</p>
+
+</div>
+<!-- EDIT7 SECTION "Register partner Service Provider on LemonLDAP::NG" [1287-5158] -->
 <h2 class="sectionedit8" id="known_issues">Known issues</h2>
 <div class="level2">
 
@@ -293,6 +303,6 @@ Using both Issuer::<abbr title="Security Assertion Markup Language">SAML</abbr>
 </p>
 
 </div>
-<!-- EDIT8 SECTION "Known issues" [5023-] --></div>
+<!-- EDIT8 SECTION "Known issues" [5159-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/impersonation.html b/doc/pages/documentation/current/impersonation.html
index eb574fafc..3133b2f42 100644
--- a/doc/pages/documentation/current/impersonation.html
+++ b/doc/pages/documentation/current/impersonation.html
@@ -63,8 +63,12 @@ Just enable it in the Manager (section “plugins”) by setting a rule. Imperso
 <ul>
 <li class="level1"><div class="li"> <strong>Parameters</strong>:</div>
 <ul>
-<li class="level2"><div class="li"> <strong>Use rule</strong>: Select which users may use this plugin</div>
+<li class="level2"><div class="li"> <strong>Use rule</strong>: </div>
 </li>
+</ul>
+</li>
+<li class="level1"><div class="li"> Select which users may use this plugin</div>
+<ul>
 <li class="level2"><div class="li"> <strong>Identities use rule</strong>: Rule to define which identities can be assumed. Useful to prevent impersonation of certain sensitive identities like CEO, administrators or anonymous/protected users.</div>
 </li>
 <li class="level2"><div class="li"> <strong>Hidden attributes</strong>: Attributes not displayed</div>
diff --git a/doc/pages/documentation/current/installdeb.html b/doc/pages/documentation/current/installdeb.html
index 2846fe185..f8d439a18 100644
--- a/doc/pages/documentation/current/installdeb.html
+++ b/doc/pages/documentation/current/installdeb.html
@@ -179,17 +179,17 @@ Packages are available on the <a href="download.html" class="wikilink1" title="d
 <h2 class="sectionedit7" id="install_packages">Install packages</h2>
 <div class="level2">
 <div class="noteimportant">By default packages will require Nginx. If you want to use Apache2, install it first with mod_perl:
-<pre class="code">apt install apache2 libapache2-mod-perl</pre>
+<pre class="code">apt install apache2 libapache2-mod-perl2 libapache2-mod-fcgid</pre>
 
 </div>
 </div>
-<!-- EDIT7 SECTION "Install packages" [2657-2865] -->
+<!-- EDIT7 SECTION "Install packages" [2657-2887] -->
 <h3 class="sectionedit8" id="with_apt">With apt</h3>
 <div class="level3">
 <pre class="code">apt install lemonldap-ng</pre>
 
 </div>
-<!-- EDIT8 SECTION "With apt" [2866-2926] -->
+<!-- EDIT8 SECTION "With apt" [2888-2948] -->
 <h3 class="sectionedit9" id="with_dpkg">With dpkg</h3>
 <div class="level3">
 
@@ -203,12 +203,12 @@ Then:
 <pre class="code">dpkg -i liblemonldap-ng-* lemonldap-ng*</pre>
 
 </div>
-<!-- EDIT9 SECTION "With dpkg" [2927-3075] -->
+<!-- EDIT9 SECTION "With dpkg" [2949-3097] -->
 <h2 class="sectionedit10" id="first_configuration_steps">First configuration steps</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT10 SECTION "First configuration steps" [3076-3114] -->
+<!-- EDIT10 SECTION "First configuration steps" [3098-3136] -->
 <h3 class="sectionedit11" id="change_default_dns_domain">Change default DNS domain</h3>
 <div class="level3">
 
@@ -218,7 +218,7 @@ By default, <abbr title="Domain Name System">DNS</abbr> domain is <code>example.
 <pre class="code shell">sed -i 's/example\.com/ow2.org/g' /etc/lemonldap-ng/* /var/lib/lemonldap-ng/conf/lmConf-1.json</pre>
 
 </div>
-<!-- EDIT11 SECTION "Change default DNS domain" [3115-3398] -->
+<!-- EDIT11 SECTION "Change default DNS domain" [3137-3420] -->
 <h3 class="sectionedit12" id="upgrade">Upgrade</h3>
 <div class="level3">
 
@@ -227,7 +227,7 @@ If you upgraded <abbr title="LemonLDAP::NG">LL::NG</abbr>, check all <a href="up
 </p>
 
 </div>
-<!-- EDIT12 SECTION "Upgrade" [3399-3479] -->
+<!-- EDIT12 SECTION "Upgrade" [3421-3501] -->
 <h3 class="sectionedit13" id="dns">DNS</h3>
 <div class="level3">
 
@@ -248,7 +248,7 @@ Follow the <a href="start.html#configuration" class="wikilink1" title="documenta
 </p>
 
 </div>
-<!-- EDIT13 SECTION "DNS" [3480-3784] -->
+<!-- EDIT13 SECTION "DNS" [3502-3806] -->
 <h2 class="sectionedit14" id="file_location">File location</h2>
 <div class="level2">
 <ul>
@@ -269,7 +269,7 @@ Follow the <a href="start.html#configuration" class="wikilink1" title="documenta
 </ul>
 
 </div>
-<!-- EDIT14 SECTION "File location" [3785-4352] -->
+<!-- EDIT14 SECTION "File location" [3807-4374] -->
 <h2 class="sectionedit15" id="build_your_packages">Build your packages</h2>
 <div class="level2">
 
@@ -281,6 +281,6 @@ cd lemonldap-ng-*
 make debian-packages</pre>
 
 </div>
-<!-- EDIT15 SECTION "Build your packages" [4353-] --></div>
+<!-- EDIT15 SECTION "Build your packages" [4375-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/logs.html b/doc/pages/documentation/current/logs.html
index 4640483f8..b868f6453 100644
--- a/doc/pages/documentation/current/logs.html
+++ b/doc/pages/documentation/current/logs.html
@@ -49,6 +49,8 @@
 <div>
 
 <ul class="toc">
+<li class="level1"><div class="li"><a href="#presentation">Presentation</a></div></li>
+<li class="level1"><div class="li"><a href="#user_log_samples">User log samples</a></div></li>
 <li class="level1"><div class="li"><a href="#default_loggers">Default loggers</a></div></li>
 <li class="level1"><div class="li"><a href="#log_levels">Log levels</a></div>
 <ul class="toc">
@@ -73,17 +75,22 @@
 <h1 class="sectionedit1" id="logs">Logs</h1>
 <div class="level1">
 
-<p>
-<strong>REMOTE_USER</strong> : session attribute used for logging user access.
-</p>
+</div>
+<!-- EDIT1 SECTION "Logs" [1-20] -->
+<h2 class="sectionedit2" id="presentation">Presentation</h2>
+<div class="level2">
 
 <p>
-<strong>REMOTE_CUSTOM</strong> : can be used for logging a second user attribute (optionnal)
-</p>
-
-<p>
-<strong>Hidden attributes</strong> : session attributes never displayed or sent
+Main settings:
 </p>
+<ul>
+<li class="level1"><div class="li"> <strong>REMOTE_USER</strong> : session attribute used for logging user access.</div>
+</li>
+<li class="level1"><div class="li"> <strong>REMOTE_CUSTOM</strong> : can be used for logging a second user attribute (optional)</div>
+</li>
+<li class="level1"><div class="li"> <strong>Hidden attributes</strong> : session attributes never displayed or sent</div>
+</li>
+</ul>
 
 <p>
 LemonLDAP::NG provides 5 levels of error and has two kind of logs:
@@ -132,8 +139,36 @@ Therefore, LLNG provides a username that can be used by webservers in their acce
 </p>
 
 </div>
-<!-- EDIT1 SECTION "Logs" [1-1787] -->
-<h2 class="sectionedit2" id="default_loggers">Default loggers</h2>
+<!-- EDIT2 SECTION "Presentation" [21-1837] -->
+<h2 class="sectionedit3" id="user_log_samples">User log samples</h2>
+<div class="level2">
+
+<p>
+Authentication:
+</p>
+<pre class="file">[notice] Session granted for clement.oudot by LDAP (81.20.13.21)
+[notice] User clement.oudot.com successfully authenticated at level 2
+[notice] clement.oudot connected</pre>
+
+<p>
+Logout:
+</p>
+<pre class="file">[notice] User clement.oudot has been disconnected from LDAP (81.20.13.21)</pre>
+
+<p>
+Access to an <abbr title="Security Assertion Markup Language">SAML</abbr> SP:
+</p>
+<pre class="file">[notice] User clement.oudot is authorized to access to sp-example-entityid
+[notice] SAML authentication response sent to SAML SP sp-example for clement.oudot</pre>
+
+<p>
+Access to an OIDC RP:
+</p>
+<pre class="file">[notice] User clement.oudot is authorized to access to rp-example</pre>
+
+</div>
+<!-- EDIT3 SECTION "User log samples" [1838-2465] -->
+<h2 class="sectionedit4" id="default_loggers">Default loggers</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> Apache handlers use by default Apache2 logger. This logger can&#039;t be used for other LLNG components</div>
@@ -145,13 +180,13 @@ Therefore, LLNG provides a username that can be used by webservers in their acce
 </ul>
 
 </div>
-<!-- EDIT2 SECTION "Default loggers" [1788-2107] -->
-<h2 class="sectionedit3" id="log_levels">Log levels</h2>
+<!-- EDIT4 SECTION "Default loggers" [2466-2785] -->
+<h2 class="sectionedit5" id="log_levels">Log levels</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT3 SECTION "Log levels" [2108-2131] -->
-<h3 class="sectionedit4" id="technical_log_levels">Technical log levels</h3>
+<!-- EDIT5 SECTION "Log levels" [2786-2809] -->
+<h3 class="sectionedit6" id="technical_log_levels">Technical log levels</h3>
 <div class="level3">
 <ul>
 <li class="level1"><div class="li"> <strong>error</strong> is used for problems that must be reported to administrator and needs an action. In this case, some feature may not work</div>
@@ -167,8 +202,8 @@ Therefore, LLNG provides a username that can be used by webservers in their acce
 </ul>
 
 </div>
-<!-- EDIT4 SECTION "Technical log levels" [2132-2541] -->
-<h3 class="sectionedit5" id="log_levels_for_user_actions">Log levels for user actions</h3>
+<!-- EDIT6 SECTION "Technical log levels" [2810-3219] -->
+<h3 class="sectionedit7" id="log_levels_for_user_actions">Log levels for user actions</h3>
 <div class="level3">
 <ul>
 <li class="level1"><div class="li"> <strong>error</strong> is used to log bad user actions that looks malicious</div>
@@ -184,13 +219,13 @@ Therefore, LLNG provides a username that can be used by webservers in their acce
 </ul>
 
 </div>
-<!-- EDIT5 SECTION "Log levels for user actions" [2542-2935] -->
-<h2 class="sectionedit6" id="logger_configuration">Logger configuration</h2>
+<!-- EDIT7 SECTION "Log levels for user actions" [3220-3613] -->
+<h2 class="sectionedit8" id="logger_configuration">Logger configuration</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT6 SECTION "Logger configuration" [2936-2969] -->
-<h3 class="sectionedit7" id="std_logger">Std logger</h3>
+<!-- EDIT8 SECTION "Logger configuration" [3614-3647] -->
+<h3 class="sectionedit9" id="std_logger">Std logger</h3>
 <div class="level3">
 
 <p>
@@ -198,8 +233,8 @@ Nothing to configure except logLevel.
 </p>
 
 </div>
-<!-- EDIT7 SECTION "Std logger" [2970-3030] -->
-<h3 class="sectionedit8" id="apache2_logger">Apache2 logger</h3>
+<!-- EDIT9 SECTION "Std logger" [3648-3708] -->
+<h3 class="sectionedit10" id="apache2_logger">Apache2 logger</h3>
 <div class="level3">
 
 <p>
@@ -211,8 +246,8 @@ See <a href="http://httpd.apache.org/docs/current/mod/core.html#loglevel" class=
 </p>
 
 </div>
-<!-- EDIT8 SECTION "Apache2 logger" [3031-3266] -->
-<h3 class="sectionedit9" id="syslog">Syslog</h3>
+<!-- EDIT10 SECTION "Apache2 logger" [3709-3944] -->
+<h3 class="sectionedit11" id="syslog">Syslog</h3>
 <div class="level3">
 
 <p>
@@ -222,8 +257,8 @@ You can choose facility in lemonldap-ng.ini file. Default values:
 <span class="re1">userSyslogFacility</span> <span class="sy0">=</span><span class="re2"> auth</span></pre>
 
 </div>
-<!-- EDIT9 SECTION "Syslog" [3267-3425] -->
-<h3 class="sectionedit10" id="log4perl">Log4perl</h3>
+<!-- EDIT11 SECTION "Syslog" [3945-4103] -->
+<h3 class="sectionedit12" id="log4perl">Log4perl</h3>
 <div class="level3">
 
 <p>
@@ -234,8 +269,8 @@ You can indicate the Log4perl configuration file and the classes to use. Default
 <span class="re1">log4perlUserLogger</span> <span class="sy0">=</span><span class="re2"> LLNG.user</span></pre>
 
 </div>
-<!-- EDIT10 SECTION "Log4perl" [3426-3652] -->
-<h3 class="sectionedit11" id="sentry">Sentry</h3>
+<!-- EDIT12 SECTION "Log4perl" [4104-4330] -->
+<h3 class="sectionedit13" id="sentry">Sentry</h3>
 <div class="level3">
 
 <p>
@@ -245,8 +280,8 @@ You just have to give your DSN:
 <div class="noteimportant">This experimental logger requires <a href="https://metacpan.org/pod/Sentry::Raven" class="urlextern" title="https://metacpan.org/pod/Sentry::Raven"  rel="nofollow">Sentry::Raven</a> Perl module.
 </div>
 </div>
-<!-- EDIT11 SECTION "Sentry" [3653-3874] -->
-<h3 class="sectionedit12" id="dispatch">Dispatch</h3>
+<!-- EDIT13 SECTION "Sentry" [4331-4552] -->
+<h3 class="sectionedit14" id="dispatch">Dispatch</h3>
 <div class="level3">
 
 <p>
@@ -263,6 +298,6 @@ Use it to use more than one logger. Example:
 <div class="noteimportant">At least <code>logDispatchError</code> <em>(or <code>userLogDispatchError</code> for user logs)</em> must be defined. All sub level will be dispatched on it, until another lever is declared. In the above example, Sentry collects <code>error</code> and <code>warn</code> levels and all user actions, while syslog stores technical <code>notice</code>, <code>info</code> and <code>debug</code> logs.
 </div>
 </div>
-<!-- EDIT12 SECTION "Dispatch" [3875-] --></div>
+<!-- EDIT14 SECTION "Dispatch" [4553-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/mitm b/doc/pages/documentation/current/mitm
index 7a7f7286d..696d7d819 100644
--- a/doc/pages/documentation/current/mitm
+++ b/doc/pages/documentation/current/mitm
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/mitm?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/mitm?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Amitm&amp;1569271210" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Amitm&amp;1576942869" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/mongodbconfbackend.html b/doc/pages/documentation/current/mongodbconfbackend.html
index 85da3f156..8405af80f 100644
--- a/doc/pages/documentation/current/mongodbconfbackend.html
+++ b/doc/pages/documentation/current/mongodbconfbackend.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:mongodbconfbackend</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="noindex,nofollow"/>
+<meta name="robots" content="index,follow"/>
 <meta name="keywords" content="documentation,2.0,mongodbconfbackend"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="mongodbconfbackend.html"/>
diff --git a/doc/pages/documentation/current/mongodbsessionbackend.html b/doc/pages/documentation/current/mongodbsessionbackend.html
index 4331ae405..8e3d60c9c 100644
--- a/doc/pages/documentation/current/mongodbsessionbackend.html
+++ b/doc/pages/documentation/current/mongodbsessionbackend.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:mongodbsessionbackend</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="noindex,nofollow"/>
+<meta name="robots" content="index,follow"/>
 <meta name="keywords" content="documentation,2.0,mongodbsessionbackend"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="mongodbsessionbackend.html"/>
diff --git a/doc/pages/documentation/current/nosqlsessionbackend.html b/doc/pages/documentation/current/nosqlsessionbackend.html
index 1a9322723..b675f479e 100644
--- a/doc/pages/documentation/current/nosqlsessionbackend.html
+++ b/doc/pages/documentation/current/nosqlsessionbackend.html
@@ -64,22 +64,30 @@ Install and launch a <a href="http://code.google.com/p/redis/" class="urlextern"
 <p>
 In the manager: set <a href="https://metacpan.org/pod/Apache::Session::Browseable::Redis" class="urlextern" title="https://metacpan.org/pod/Apache::Session::Browseable::Redis"  rel="nofollow">Apache::Session::Browseable::Redis</a> in <code>General parameters</code> » <code>Sessions</code> » <code>Session storage</code> » <code>Apache::Session module</code> and add the following parameters (case sensitive):
 </p>
+
+<p>
+Parameters:
+</p>
 <div class="table sectionedit3"><table class="inline table table-bordered table-striped">
 	<thead>
 	<tr class="row0 roweven">
-		<th class="col0 centeralign" colspan="3">  Required parameters  </th>
-	</tr>
-	<tr class="row1 rowodd">
 		<th class="col0 centeralign">  Name  </th><th class="col1 centeralign">  Comment  </th><th class="col2 centeralign">  Example  </th>
 	</tr>
 	</thead>
-	<tr class="row2 roweven">
+	<tr class="row1 rowodd">
 		<td class="col0 centeralign">  <strong>server</strong>  </td><td class="col1"> Redis server </td><td class="col2"> 127.0.0.1:6379 </td>
 	</tr>
+	<tr class="row2 roweven">
+		<td class="col0 centeralign">  <strong>sentinels</strong>  </td><td class="col1"> Redis sentinels list </td><td class="col2"> 127.0.0.1:26379,127.0.0.2:26379,127.0.0.3:26379 </td>
+	</tr>
 </table></div>
-<!-- EDIT3 TABLE [643-754] -->
+<!-- EDIT3 TABLE [656-832] -->
+<p>
+You can specify either a single Redis server or a list of Sentinel hosts using the *sentinels* module parameter
+</p>
+
 </div>
-<!-- EDIT2 SECTION "Setup" [177-755] -->
+<!-- EDIT2 SECTION "Setup" [177-945] -->
 <h2 class="sectionedit4" id="security">Security</h2>
 <div class="level2">
 
@@ -88,6 +96,6 @@ Restrict network access to the redis server. For remote servers, you can use <a
 </p>
 
 </div>
-<!-- EDIT4 SECTION "Security" [756-] --></div>
+<!-- EDIT4 SECTION "Security" [946-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/notifications.html b/doc/pages/documentation/current/notifications.html
index ce58c45a2..9592e7138 100644
--- a/doc/pages/documentation/current/notifications.html
+++ b/doc/pages/documentation/current/notifications.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:notifications</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,notifications"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="notifications.html"/>
@@ -72,8 +72,8 @@
 <li class="level2"><div class="li"><a href="#create_new_notifications_with_notifications_explorer">Create new notifications with notifications explorer</a></div></li>
 <li class="level2"><div class="li"><a href="#notification_server">Notification server</a></div>
 <ul class="toc">
-<li class="level3"><div class="li"><a href="#xml_notifications_trough_soap">XML notifications trough SOAP</a></div></li>
-<li class="level3"><div class="li"><a href="#json_notifications_trough_rest">JSON notifications trough REST</a></div></li>
+<li class="level3"><div class="li"><a href="#xml_notifications_through_soap">XML notifications through SOAP</a></div></li>
+<li class="level3"><div class="li"><a href="#json_notifications_through_rest">JSON notifications through REST</a></div></li>
 </ul>
 </li>
 <li class="level2"><div class="li"><a href="#test_notification">Test notification</a></div></li>
@@ -87,20 +87,20 @@
 <div class="level1">
 
 <p>
-Since version 0.9.4, LemonLDAP::NG can be used to notify some messages to users: if a user has got messages, they will be displayed when he access to the portal. If a message contains some check boxes, the user has to check all of them else he can not access to the portal and retrieves his session cookie.
+LemonLDAP::NG can be used to notify some messages to users. If a user has got some messages, they will be displayed when he access to the portal. If a message contains some check boxes, the user has to check all of them else he can not access to the portal and retrieves his session cookie.
 </p>
 
 <p>
-Since 1.1.0, a notification explorer is available in Manager, and notifications can be set for all users, with possibility to use display conditions. When the user accept the notification, notification reference is stored in his persistent session.
+A notification explorer is available in Manager, and notifications can be set for all users, with possibility to use display conditions. When the user accept the notification, notification reference is stored in his persistent session.
 </p>
 
 </div>
-<!-- EDIT1 SECTION "Notifications system" [1-594] -->
+<!-- EDIT1 SECTION "Notifications system" [1-565] -->
 <h2 class="sectionedit2" id="installation">Installation</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT2 SECTION "Installation" [595-620] -->
+<!-- EDIT2 SECTION "Installation" [566-591] -->
 <h3 class="sectionedit3" id="activation">Activation</h3>
 <div class="level3">
 
@@ -111,7 +111,7 @@ You just have to activate Notifications in the Manager (General Parameters &gt;
 <span class="re1">notification</span> <span class="sy0">=</span><span class="re2"> 1</span></pre>
 
 </div>
-<!-- EDIT3 SECTION "Activation" [621-860] -->
+<!-- EDIT3 SECTION "Activation" [592-831] -->
 <h3 class="sectionedit4" id="storage">Storage</h3>
 <div class="level3">
 
@@ -121,9 +121,9 @@ By default, notifications will be stored in the same database as configuration:
 <ul>
 <li class="level1"><div class="li"> if you use &quot;File&quot; system and your &quot;dirName&quot; is set to /usr/local/lemonldap-ng/conf/, the notifications will be stored in /usr/local/lemonldap-ng/notifications/</div>
 </li>
-<li class="level1"><div class="li"> if you use &quot;CDBI&quot; or &quot;RDBI&quot; system, the notifications will be stored in the same database as configuration and in a table called &quot;notifications&quot;.</div>
+<li class="level1"><div class="li"> if you use &quot;CDBI&quot; or &quot;RDBI&quot; system, the notifications will be stored in the same database as configuration and in a table named &quot;notifications&quot;.</div>
 </li>
-<li class="level1"><div class="li">  if you use &quot;LDAP&quot; system, the notifications will be stored in the same directory as configuration and in a branch called &quot;notifications&quot;.</div>
+<li class="level1"><div class="li"> if you use &quot;LDAP&quot; system, the notifications will be stored in the same directory as configuration and in a branch named &quot;notifications&quot;.</div>
 </li>
 </ul>
 
@@ -214,7 +214,7 @@ To summary available options:
 </ul>
 
 </div>
-<!-- EDIT4 SECTION "Storage" [861-3358] -->
+<!-- EDIT4 SECTION "Storage" [832-3326] -->
 <h3 class="sectionedit5" id="wildcard">Wildcard</h3>
 <div class="level3">
 
@@ -231,13 +231,13 @@ Then creating a notification for <code>alluserscustom</code> will display the no
 </p>
 
 </div>
-<!-- EDIT5 SECTION "Wildcard" [3359-3829] -->
+<!-- EDIT5 SECTION "Wildcard" [3327-3797] -->
 <h2 class="sectionedit6" id="using_notification_system">Using notification system</h2>
 <div class="level2">
 <div class="noteimportant">Since version 2.0, notifications are now stored in JSON format. If you want to keep old format, select &quot;use old format&quot; in the Manager. Note that notification server depends on chosen format: REST for JSON and SOAP for XML.
 </div>
 </div>
-<!-- EDIT6 SECTION "Using notification system" [3830-4116] -->
+<!-- EDIT6 SECTION "Using notification system" [3798-4084] -->
 <h3 class="sectionedit7" id="notification_format">Notification format</h3>
 <div class="level3">
 
@@ -249,7 +249,7 @@ Notifications are JSON (default) or XML files containing:
 <ul>
 <li class="level2"><div class="li"> Required attributes:</div>
 <ul>
-<li class="level3"><div class="li"> date: creation date (format YYYY-MM-DD)</div>
+<li class="level3"><div class="li"> date: creation date (format YYYY-MM-DD WITHOUT time!)</div>
 </li>
 <li class="level3"><div class="li"> ref: a reference that can be used later to know what has been notified and when</div>
 </li>
@@ -280,6 +280,10 @@ Notifications are JSON (default) or XML files containing:
 </ul>
 <div class="noteimportant">All other elements will be removed including <abbr title="HyperText Markup Language">HTML</abbr> elements like &lt;b&gt;.
 </div><div class="notetip">One notification XML document can contain several notifications messages.
+<p>
+Several notifications can be inserted with a single request by using an array of JSON (Tested with an array of 10,000 elements)
+</p>
+
 </div>
 </div>
 
@@ -290,19 +294,30 @@ Notifications are JSON (default) or XML files containing:
 
 <h5 id="json">JSON</h5>
 <div class="level5">
-<pre class="code file javascript"><span class="br0">&#123;</span>
-<span class="st0">&quot;uid&quot;</span><span class="sy0">:</span> <span class="st0">&quot;foo.bar&quot;</span><span class="sy0">,</span>
+<pre class="code file javascript"><span class="br0">&#91;</span><span class="br0">&#123;</span>
+<span class="st0">&quot;uid&quot;</span><span class="sy0">:</span> <span class="st0">&quot;foo&quot;</span><span class="sy0">,</span>
 <span class="st0">&quot;date&quot;</span><span class="sy0">:</span> <span class="st0">&quot;2009-01-27&quot;</span><span class="sy0">,</span>
 <span class="st0">&quot;reference&quot;</span><span class="sy0">:</span> <span class="st0">&quot;ABC&quot;</span><span class="sy0">,</span>
 <span class="st0">&quot;title&quot;</span><span class="sy0">:</span> <span class="st0">&quot;You have new authorizations&quot;</span><span class="sy0">,</span>
 <span class="st0">&quot;subtitle&quot;</span><span class="sy0">:</span> <span class="st0">&quot;Application 1&quot;</span><span class="sy0">,</span>
 <span class="st0">&quot;text&quot;</span><span class="sy0">:</span> <span class="st0">&quot;You have been granted to access to appli-1&quot;</span><span class="sy0">,</span>
+# An array is required to <span class="kw1">set</span> multi checkboxes
 <span class="st0">&quot;check&quot;</span><span class="sy0">:</span> <span class="br0">&#91;</span>
   <span class="st0">&quot;I agree&quot;</span><span class="sy0">,</span>
   <span class="st0">&quot;Yes, I'm sure&quot;</span>
 <span class="br0">&#93;</span>
-<span class="br0">&#125;</span></pre>
-
+<span class="br0">&#125;</span><span class="sy0">,</span>
+<span class="br0">&#123;</span>
+<span class="st0">&quot;uid&quot;</span><span class="sy0">:</span> <span class="st0">&quot;bar&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;date&quot;</span><span class="sy0">:</span> <span class="st0">&quot;2009-01-27&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;reference&quot;</span><span class="sy0">:</span> <span class="st0">&quot;ABC&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;title&quot;</span><span class="sy0">:</span> <span class="st0">&quot;You have new authorizations&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;subtitle&quot;</span><span class="sy0">:</span> <span class="st0">&quot;Application 1&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;text&quot;</span><span class="sy0">:</span> <span class="st0">&quot;You have been granted to access to appli-1&quot;</span><span class="sy0">,</span>
+<span class="st0">&quot;check&quot;</span><span class="sy0">:</span> <span class="st0">&quot;I agree&quot;</span>
+<span class="br0">&#125;</span><span class="br0">&#93;</span> # No comma at the end</pre>
+<div class="notetip">JSON format notifications are displayed sorted by date and reference
+</div>
 </div>
 
 <h5 id="xml">XML</h5>
@@ -325,10 +340,9 @@ Notifications are JSON (default) or XML files containing:
 <span class="sc3"><span class="re1">&lt;check<span class="re2">&gt;</span></span></span>Of course I am not evil!<span class="sc3"><span class="re1">&lt;/check<span class="re2">&gt;</span></span></span>
 <span class="sc3"><span class="re1">&lt;/notification<span class="re2">&gt;</span></span></span>
 <span class="sc3"><span class="re1">&lt;/root<span class="re2">&gt;</span></span></span></pre>
-<div class="notetip">JSON format notifications are displayed sorted by date and reference
+
 </div>
-</div>
-<!-- EDIT7 SECTION "Notification format" [4117-6608] -->
+<!-- EDIT7 SECTION "Notification format" [4085-6991] -->
 <h3 class="sectionedit8" id="create_new_notifications_with_notifications_explorer">Create new notifications with notifications explorer</h3>
 <div class="level3">
 
@@ -349,7 +363,7 @@ When all is ok, click on <code>Save</code>.
 </p>
 
 </div>
-<!-- EDIT8 SECTION "Create new notifications with notifications explorer" [6609-6927] -->
+<!-- EDIT8 SECTION "Create new notifications with notifications explorer" [6992-7310] -->
 <h3 class="sectionedit9" id="notification_server">Notification server</h3>
 <div class="level3">
 
@@ -360,7 +374,25 @@ LemonLDAP::NG provides two notification servers : SOAP and REST depending on for
 <p>
 If enabled, the server <abbr title="Uniform Resource Locator">URL</abbr> is <a href="https://auth.your.domain/notifications" class="urlextern" title="https://auth.your.domain/notifications"  rel="nofollow">https://auth.your.domain/notifications</a>.
 </p>
-<div class="noteimportant">If notification server is enabled, you have to protect this <abbr title="Uniform Resource Locator">URL</abbr> using the webserver because there is no authentication required to use it.
+
+<p>
+Notification server provides three <abbr title="Application Programming Interface">API</abbr> to insert (POST), delete (DELETE) or list (GET) notification(s).
+</p>
+
+<p>
+Available options:
+</p>
+<ul>
+<li class="level1"><div class="li"> <strong>Server</strong>: Enable/Disable notification server</div>
+</li>
+<li class="level1"><div class="li"> <strong>Default condition</strong>: Condition appended to ALL notifications inserted by notification server (JSON format only)</div>
+</li>
+<li class="level1"><div class="li"> <strong>Notification parameters to send</strong>: Notifications parameters returned by <code>GET</code> method</div>
+</li>
+<li class="level1"><div class="li"> <strong>HTTP methods</strong>: Enable/Disable HTTP methods</div>
+</li>
+</ul>
+<div class="noteimportant">If notification server is enabled, you have to protect this <abbr title="Uniform Resource Locator">URL</abbr> by using the web server because there is no authentication required to use it.
 </div>
 <p>
 Example:
@@ -379,7 +411,7 @@ Example:
 
 </div>
 
-<h4 id="xml_notifications_trough_soap">XML notifications trough SOAP</h4>
+<h4 id="xml_notifications_through_soap">XML notifications through SOAP</h4>
 <div class="level4">
 
 <p>
@@ -446,18 +478,9 @@ If you use old XML format, new notifications can be inserted or deleted by using
 
 </div>
 
-<h4 id="json_notifications_trough_rest">JSON notifications trough REST</h4>
+<h4 id="json_notifications_through_rest">JSON notifications through REST</h4>
 <div class="level4">
 
-<p>
-REST server provides three <abbr title="Application Programming Interface">API</abbr> to insert (POST), delete (DELETE) or list (GET) notification(s).
-HTTP methods can enabled/disabled in Manager, <code>General Parameters</code> » <code>Plugins</code> » <code>Notifications</code> » <code>Server</code> » <code>HTTP methods</code>.
-</p>
-
-<p>
-Notifications parameters returned by <code>GET</code> method can be specfied in Manager, <code>General Parameters</code> » <code>Plugins</code> » <code>Notifications</code> » <code>Server</code> » <code>Notifications parameters to send</code>. By default: &#039;uid reference date title subtitle text check&#039;
-</p>
-
 </div>
 
 <h5 id="insertion_example_with_rest_api">* Insertion example with REST API</h5>
@@ -498,14 +521,23 @@ GET <abbr title="Application Programming Interface">API</abbr> is available with
 <p>
 For example with curl:
 </p>
-<pre class="code">curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications
+<pre class="code"># Retrieve &#039;wildcard&#039; notifications
+curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications
 
+# Retrieve all pending notifications
+curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications/_allPending_
+
+# Retrieve all existing notifications
+curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications/_allExisting_
+
+# Retrieve all &lt;uid&gt;&#039;s notifications 
 curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications/&lt;uid&gt;
 
+# Retrieve &lt;uid&gt;/&lt;reference&gt; notification parameters
 curl -X GET -H &quot;Content-Type: application/json&quot; -H &quot;Accept: application/json&quot; http://auth.example.com/notifications/&lt;uid&gt;/&lt;reference&gt;</pre>
 
 </div>
-<!-- EDIT9 SECTION "Notification server" [6928-10646] -->
+<!-- EDIT9 SECTION "Notification server" [7311-11444] -->
 <h3 class="sectionedit10" id="test_notification">Test notification</h3>
 <div class="level3">
 
@@ -522,6 +554,6 @@ Try also to create a global notification (to the uid &quot;allusers&quot;), and
 </p>
 
 </div>
-<!-- EDIT10 SECTION "Test notification" [10647-] --></div>
+<!-- EDIT10 SECTION "Test notification" [11445-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/openidconnectservice.html b/doc/pages/documentation/current/openidconnectservice.html
index f543e5db4..fe09e3831 100644
--- a/doc/pages/documentation/current/openidconnectservice.html
+++ b/doc/pages/documentation/current/openidconnectservice.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:openidconnectservice</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,openidconnectservice"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="openidconnectservice.html"/>
@@ -56,6 +56,7 @@
 <li class="level2"><div class="li"><a href="#authentication_context">Authentication context</a></div></li>
 <li class="level2"><div class="li"><a href="#security">Security</a></div></li>
 <li class="level2"><div class="li"><a href="#sessions">Sessions</a></div></li>
+<li class="level2"><div class="li"><a href="#dynamic_registration">Dynamic Registration</a></div></li>
 </ul>
 </li>
 <li class="level1"><div class="li"><a href="#key_rotation_script">Key rotation script</a></div></li>
@@ -155,7 +156,22 @@ It is recommended to use a separate sessions storage for OpenID Connect sessions
 
 </div>
 <!-- EDIT7 SECTION "Sessions" [1389-1543] -->
-<h2 class="sectionedit8" id="key_rotation_script">Key rotation script</h2>
+<h3 class="sectionedit8" id="dynamic_registration">Dynamic Registration</h3>
+<div class="level3">
+
+<p>
+If dynamic registration is enabled, you can configure the following options to define attributes and extra claims when a new relying party is registered trough the <code>/oauth2/register</code> endpoint:
+</p>
+<ul>
+<li class="level1"><div class="li"> Exported vars for dynamic registration</div>
+</li>
+<li class="level1"><div class="li"> Extra claims for dynamic registration</div>
+</li>
+</ul>
+
+</div>
+<!-- EDIT8 SECTION "Dynamic Registration" [1544-1855] -->
+<h2 class="sectionedit9" id="key_rotation_script">Key rotation script</h2>
 <div class="level2">
 
 <p>
@@ -169,8 +185,8 @@ The script is <code>/usr/share/lemonldap-ng/bin/rotateOidcKeys</code>. It can be
 <div class="notetip">Set the correct Apache user, else generated configuration will not be readable by <abbr title="LemonLDAP::NG">LL::NG</abbr>.
 </div>
 </div>
-<!-- EDIT8 SECTION "Key rotation script" [1544-2017] -->
-<h2 class="sectionedit9" id="session_management">Session management</h2>
+<!-- EDIT9 SECTION "Key rotation script" [1856-2329] -->
+<h2 class="sectionedit10" id="session_management">Session management</h2>
 <div class="level2">
 
 <p>
@@ -183,6 +199,6 @@ A <code>changed</code> state will be sent if the user is disconnected from <abbr
 <div class="notetip">To work, the <abbr title="LemonLDAP::NG">LL::NG</abbr> cookie must not be protected against javascript (<code>httpOnly</code> option should be set to <code>0</code>).
 </div>
 </div>
-<!-- EDIT9 SECTION "Session management" [2018-] --></div>
+<!-- EDIT10 SECTION "Session management" [2330-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/parameterlist.html b/doc/pages/documentation/current/parameterlist.html
index 27d7e49a7..b8b125dbd 100644
--- a/doc/pages/documentation/current/parameterlist.html
+++ b/doc/pages/documentation/current/parameterlist.html
@@ -184,1522 +184,1597 @@ The attribute key name can be used directly in <code>lemonldap-ng.ini</code> or
 		<td class="col0"> cda </td><td class="col1"> Enable Cross Domain Authentication </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row42 roweven">
-		<td class="col0"> cfgAuthor </td><td class="col1"> Name of the author of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailCeaAttribute </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row43 rowodd">
-		<td class="col0"> cfgAuthorIP </td><td class="col1"> Uploader <abbr title="Internet Protocol">IP</abbr> address of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailCertificateAttribute </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row44 roweven">
-		<td class="col0"> cfgDate </td><td class="col1"> Timestamp of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailReplyTo </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of certificate reset page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row45 rowodd">
-		<td class="col0"> cfgLog </td><td class="col1"> Configuration update log </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailSender </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of certificate reset page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row46 roweven">
-		<td class="col0"> cfgNum </td><td class="col1"> Enable Cross Domain Authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailStep1Body </td><td class="col1"> Custom Certificate reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row47 rowodd">
-		<td class="col0"> cfgVersion </td><td class="col1"> Version of LLNG which build configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailStep1Subject </td><td class="col1"> Mail subject for certificate reset email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row48 roweven">
-		<td class="col0"> checkState </td><td class="col1"> Enable CheckState plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> certificateResetByMailStep2Body </td><td class="col1"> Custom confirm Certificate reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row49 rowodd">
-		<td class="col0"> checkStateSecret </td><td class="col1"> Secret token for CheckState plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> certificateResetByMailStep2Subject </td><td class="col1"> Mail subject for reset confirmation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row50 roweven">
-		<td class="col0"> checkTime </td><td class="col1"> Timeout to check new configuration in local cache </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> certificateResetByMailURL </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of certificate reset page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row51 rowodd">
-		<td class="col0"> checkUser </td><td class="col1"> Enable check user </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> certificateResetByMailValidityDelay </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row52 roweven">
-		<td class="col0"> checkUserDisplayEmptyValues </td><td class="col1"> Display session empty values </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgAuthor </td><td class="col1"> Name of the author of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row53 rowodd">
-		<td class="col0"> checkUserDisplayPersistentInfo </td><td class="col1"> Display persistent session info </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgAuthorIP </td><td class="col1"> Uploader <abbr title="Internet Protocol">IP</abbr> address of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row54 roweven">
-		<td class="col0"> checkUserHiddenAttributes </td><td class="col1"> Attributes to hide in CheckUser plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgDate </td><td class="col1"> Timestamp of the current configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row55 rowodd">
-		<td class="col0"> checkUserIdRule </td><td class="col1"> checkUser identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgLog </td><td class="col1"> Configuration update log </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row56 roweven">
-		<td class="col0"> checkUserSearchAttributes </td><td class="col1"> Attributes used for retrieving sessions in user DataBase </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgNum </td><td class="col1"> Enable Cross Domain Authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row57 rowodd">
-		<td class="col0"> checkXSS </td><td class="col1"> Check <abbr title="Cross Site Scripting">XSS</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cfgVersion </td><td class="col1"> Version of LLNG which build configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row58 roweven">
-		<td class="col0"> combModules </td><td class="col1"> Combination module description </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkState </td><td class="col1"> Enable CheckState plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row59 rowodd">
-		<td class="col0"> combination </td><td class="col1"> Combination rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkStateSecret </td><td class="col1"> Secret token for CheckState plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row60 roweven">
-		<td class="col0"> configStorage </td><td class="col1"> Configuration storage </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> checkTime </td><td class="col1"> Timeout to check new configuration in local cache </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row61 rowodd">
-		<td class="col0"> confirmFormMethod </td><td class="col1"> HTTP method for confirm page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUser </td><td class="col1"> Enable check user </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row62 roweven">
-		<td class="col0"> contextSwitchingIdRule </td><td class="col1"> Context switching identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUserDisplayEmptyValues </td><td class="col1"> Display session empty values </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row63 rowodd">
-		<td class="col0"> contextSwitchingRule </td><td class="col1"> Context switching activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUserDisplayPersistentInfo </td><td class="col1"> Display persistent session info </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row64 roweven">
-		<td class="col0"> contextSwitchingStopWithLogout </td><td class="col1"> Stop context switching by logout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUserHiddenAttributes </td><td class="col1"> Attributes to hide in CheckUser plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row65 rowodd">
-		<td class="col0"> cookieExpiration </td><td class="col1"> Cookie expiration </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUserIdRule </td><td class="col1"> checkUser identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row66 roweven">
-		<td class="col0"> cookieName </td><td class="col1"> Name of the main cookie </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkUserSearchAttributes </td><td class="col1"> Attributes used for retrieving sessions in user DataBase </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row67 rowodd">
-		<td class="col0"> corsAllow_Credentials </td><td class="col1"> Allow credentials for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> checkXSS </td><td class="col1"> Check <abbr title="Cross Site Scripting">XSS</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row68 roweven">
-		<td class="col0"> corsAllow_Headers </td><td class="col1"> Allowed headers for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> combModules </td><td class="col1"> Combination module description </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row69 rowodd">
-		<td class="col0"> corsAllow_Methods </td><td class="col1"> Allowed methods for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> combination </td><td class="col1"> Combination rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row70 roweven">
-		<td class="col0"> corsAllow_Origin </td><td class="col1"> Allowed origine for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> configStorage </td><td class="col1"> Configuration storage </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row71 rowodd">
-		<td class="col0"> corsEnabled </td><td class="col1"> Enable Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> confirmFormMethod </td><td class="col1"> HTTP method for confirm page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row72 roweven">
-		<td class="col0"> corsExpose_Headers </td><td class="col1"> Exposed headers for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> contextSwitchingIdRule </td><td class="col1"> Context switching identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row73 rowodd">
-		<td class="col0"> corsMax_Age </td><td class="col1"> MAx-age for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> contextSwitchingRule </td><td class="col1"> Context switching activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row74 roweven">
-		<td class="col0"> cspConnect </td><td class="col1"> Authorized Ajax destination for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> contextSwitchingStopWithLogout </td><td class="col1"> Stop context switching by logout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row75 rowodd">
-		<td class="col0"> cspDefault </td><td class="col1"> Default value for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cookieExpiration </td><td class="col1"> Cookie expiration </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row76 roweven">
-		<td class="col0"> cspFont </td><td class="col1"> Font source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cookieName </td><td class="col1"> Name of the main cookie </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row77 rowodd">
-		<td class="col0"> cspFormAction </td><td class="col1"> Form action destination for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsAllow_Credentials </td><td class="col1"> Allow credentials for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row78 roweven">
-		<td class="col0"> cspImg </td><td class="col1"> Image source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsAllow_Headers </td><td class="col1"> Allowed headers for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row79 rowodd">
-		<td class="col0"> cspScript </td><td class="col1"> Javascript source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsAllow_Methods </td><td class="col1"> Allowed methods for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row80 roweven">
-		<td class="col0"> cspStyle </td><td class="col1"> Style source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsAllow_Origin </td><td class="col1"> Allowed origine for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row81 rowodd">
-		<td class="col0"> customAddParams </td><td class="col1"> Custom additional parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsEnabled </td><td class="col1"> Enable Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row82 roweven">
-		<td class="col0"> customAuth </td><td class="col1"> Custom auth module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsExpose_Headers </td><td class="col1"> Exposed headers for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row83 rowodd">
-		<td class="col0"> customFunctions </td><td class="col1"> List of custom functions </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
+		<td class="col0"> corsMax_Age </td><td class="col1"> MAx-age for Cross-Origin Resource Sharing </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row84 roweven">
-		<td class="col0"> customPassword </td><td class="col1"> Custom password module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspConnect </td><td class="col1"> Authorized Ajax destination for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row85 rowodd">
-		<td class="col0"> customRegister </td><td class="col1"> Custom register module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspDefault </td><td class="col1"> Default value for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row86 roweven">
-		<td class="col0"> customToTrace </td><td class="col1"> Session parameter used to fill REMOTE_CUSTOM </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspFont </td><td class="col1"> Font source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row87 rowodd">
-		<td class="col0"> customUserDB </td><td class="col1"> Custom user DB module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspFormAction </td><td class="col1"> Form action destination for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row88 roweven">
-		<td class="col0"> dbiAuthChain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspImg </td><td class="col1"> Image source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row89 rowodd">
-		<td class="col0"> dbiAuthLoginCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspScript </td><td class="col1"> Javascript source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row90 roweven">
-		<td class="col0"> dbiAuthPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> cspStyle </td><td class="col1"> Style source for Content-Security-Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row91 rowodd">
-		<td class="col0"> dbiAuthPasswordCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customAddParams </td><td class="col1"> Custom additional parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row92 roweven">
-		<td class="col0"> dbiAuthPasswordHash </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customAuth </td><td class="col1"> Custom auth module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row93 rowodd">
-		<td class="col0"> dbiAuthTable </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customFunctions </td><td class="col1"> List of custom functions </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row94 roweven">
-		<td class="col0"> dbiAuthUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customPassword </td><td class="col1"> Custom password module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row95 rowodd">
-		<td class="col0"> dbiAuthnLevel </td><td class="col1"> <abbr title="Database Interface">DBI</abbr> authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customPlugins </td><td class="col1"> Custom plugins </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row96 roweven">
-		<td class="col0"> dbiDynamicHashEnabled </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customPluginsParams </td><td class="col1"> Custom plugins parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row97 rowodd">
-		<td class="col0"> dbiDynamicHashNewPasswordScheme </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customRegister </td><td class="col1"> Custom register module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row98 roweven">
-		<td class="col0"> dbiDynamicHashValidSaltedSchemes </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customToTrace </td><td class="col1"> Session parameter used to fill REMOTE_CUSTOM </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row99 rowodd">
-		<td class="col0"> dbiDynamicHashValidSchemes </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> customUserDB </td><td class="col1"> Custom user DB module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row100 roweven">
-		<td class="col0"> dbiExportedVars </td><td class="col1"> <abbr title="Database Interface">DBI</abbr> exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthChain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row101 rowodd">
-		<td class="col0"> dbiPasswordMailCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthLoginCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row102 roweven">
-		<td class="col0"> dbiUserChain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row103 rowodd">
-		<td class="col0"> dbiUserPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthPasswordCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row104 roweven">
-		<td class="col0"> dbiUserTable </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthPasswordHash </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row105 rowodd">
-		<td class="col0"> dbiUserUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthTable </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row106 roweven">
-		<td class="col0"> demoExportedVars </td><td class="col1"> Demo exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row107 rowodd">
-		<td class="col0"> disablePersistentStorage </td><td class="col1"> Enabled persistent storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiAuthnLevel </td><td class="col1"> <abbr title="Database Interface">DBI</abbr> authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row108 roweven">
-		<td class="col0"> domain </td><td class="col1"> <abbr title="Domain Name System">DNS</abbr> domain </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiDynamicHashEnabled </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row109 rowodd">
-		<td class="col0"> dontCompactConf </td><td class="col1"> Don t compact configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiDynamicHashNewPasswordScheme </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row110 roweven">
-		<td class="col0"> exportedAttr </td><td class="col1"> List of attributes to export by SOAP or REST servers </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiDynamicHashValidSaltedSchemes </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row111 rowodd">
-		<td class="col0"> exportedVars </td><td class="col1"> Main exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiDynamicHashValidSchemes </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row112 roweven">
-		<td class="col0"> ext2FSendCommand </td><td class="col1"> Send command of External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiExportedVars </td><td class="col1"> <abbr title="Database Interface">DBI</abbr> exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row113 rowodd">
-		<td class="col0"> ext2FValidateCommand </td><td class="col1"> Validation command of External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiPasswordMailCol </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row114 roweven">
-		<td class="col0"> ext2fActivation </td><td class="col1"> External second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiUserChain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row115 rowodd">
-		<td class="col0"> ext2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiUserPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row116 roweven">
-		<td class="col0"> ext2fCodeActivation </td><td class="col1"> OTP generated by Portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiUserTable </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row117 rowodd">
-		<td class="col0"> ext2fLabel </td><td class="col1"> Portal label for External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dbiUserUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row118 roweven">
-		<td class="col0"> ext2fLogo </td><td class="col1"> Custom logo for External 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> decryptValueFunctions </td><td class="col1"> Custom function used for decrypting values </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row119 rowodd">
-		<td class="col0"> facebookAppId </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> decryptValueRule </td><td class="col1"> Decrypt value activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row120 roweven">
-		<td class="col0"> facebookAppSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> demoExportedVars </td><td class="col1"> Demo exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row121 rowodd">
-		<td class="col0"> facebookAuthnLevel </td><td class="col1"> Facebook authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> disablePersistentStorage </td><td class="col1"> Enabled persistent storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row122 roweven">
-		<td class="col0"> facebookExportedVars </td><td class="col1"> Facebook exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> domain </td><td class="col1"> <abbr title="Domain Name System">DNS</abbr> domain </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row123 rowodd">
-		<td class="col0"> facebookUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> dontCompactConf </td><td class="col1"> Don t compact configuration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row124 roweven">
-		<td class="col0"> failedLoginNumber </td><td class="col1"> Number of failures stored in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> exportedAttr </td><td class="col1"> List of attributes to export by SOAP or REST servers </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row125 rowodd">
-		<td class="col0"> forceGlobalStorageUpgradeOTT </td><td class="col1"> Force upgrade tokens be stored into Global Storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> exportedVars </td><td class="col1"> Main exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row126 roweven">
-		<td class="col0"> formTimeout </td><td class="col1"> Token timeout for forms </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2FSendCommand </td><td class="col1"> Send command of External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row127 rowodd">
-		<td class="col0"> globalStorage </td><td class="col1"> Session backend module </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2FValidateCommand </td><td class="col1"> Validation command of External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row128 roweven">
-		<td class="col0"> globalStorageOptions </td><td class="col1"> Session backend module options </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2fActivation </td><td class="col1"> External second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row129 rowodd">
-		<td class="col0"> gpgAuthnLevel </td><td class="col1"> GPG authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row130 roweven">
-		<td class="col0"> gpgDb </td><td class="col1"> GPG keys database </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2fCodeActivation </td><td class="col1"> OTP generated by Portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row131 rowodd">
-		<td class="col0"> grantSessionRules </td><td class="col1"> Rules to grant sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2fLabel </td><td class="col1"> Portal label for External second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row132 roweven">
-		<td class="col0"> groups </td><td class="col1"> Groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ext2fLogo </td><td class="col1"> Custom logo for External 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row133 rowodd">
-		<td class="col0"> handlerInternalCache </td><td class="col1"> Handler internal cache timeout </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> facebookAppId </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row134 roweven">
-		<td class="col0"> handlerServiceTokenTTL </td><td class="col1"> Handler ServiceToken timeout </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> facebookAppSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row135 rowodd">
-		<td class="col0"> hiddenAttributes </td><td class="col1"> Name of attributes to hide in logs </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> facebookAuthnLevel </td><td class="col1"> Facebook authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row136 roweven">
-		<td class="col0"> hideOldPassword </td><td class="col1"> Hide old password in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> facebookExportedVars </td><td class="col1"> Facebook exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row137 rowodd">
-		<td class="col0"> httpOnly </td><td class="col1"> Enable httpOnly flag in cookie </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> facebookUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row138 roweven">
-		<td class="col0"> https </td><td class="col1"> Use HTTPS for redirection from portal </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> failedLoginNumber </td><td class="col1"> Number of failures stored in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row139 rowodd">
-		<td class="col0"> impersonationHiddenAttributes </td><td class="col1"> Attributes to skip </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> forceGlobalStorageIssuerOTT </td><td class="col1"> Force Issuer tokens to be stored into Global Storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row140 roweven">
-		<td class="col0"> impersonationIdRule </td><td class="col1"> Impersonation identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> forceGlobalStorageUpgradeOTT </td><td class="col1"> Force Upgrade tokens be stored into Global Storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row141 rowodd">
-		<td class="col0"> impersonationMergeSSOgroups </td><td class="col1"> Merge spoofed and real <abbr title="Single Sign On">SSO</abbr> groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> formTimeout </td><td class="col1"> Token timeout for forms </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row142 roweven">
-		<td class="col0"> impersonationPrefix </td><td class="col1"> Prefix to rename real session attributes </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> globalLogoutRule </td><td class="col1"> Global logout activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row143 rowodd">
-		<td class="col0"> impersonationRule </td><td class="col1"> Impersonation activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> globalLogoutTimer </td><td class="col1"> Global logout auto accept time </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row144 roweven">
-		<td class="col0"> impersonationSkipEmptyValues </td><td class="col1"> Skip session empty values </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> globalStorage </td><td class="col1"> Session backend module </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row145 rowodd">
-		<td class="col0"> infoFormMethod </td><td class="col1"> HTTP method for info page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> globalStorageOptions </td><td class="col1"> Session backend module options </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row146 roweven">
-		<td class="col0"> issuerDBCASActivation </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> gpgAuthnLevel </td><td class="col1"> GPG authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row147 rowodd">
-		<td class="col0"> issuerDBCASPath </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> gpgDb </td><td class="col1"> GPG keys database </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row148 roweven">
-		<td class="col0"> issuerDBCASRule </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> grantSessionRules </td><td class="col1"> Rules to grant sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row149 rowodd">
-		<td class="col0"> issuerDBGetActivation </td><td class="col1"> Get issuer activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> groups </td><td class="col1"> Groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row150 roweven">
-		<td class="col0"> issuerDBGetParameters </td><td class="col1"> List of virtualHosts with their get parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> handlerInternalCache </td><td class="col1"> Handler internal cache timeout </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row151 rowodd">
-		<td class="col0"> issuerDBGetPath </td><td class="col1"> Get issuer request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> handlerServiceTokenTTL </td><td class="col1"> Handler ServiceToken timeout </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row152 roweven">
-		<td class="col0"> issuerDBGetRule </td><td class="col1"> Get issuer rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> hiddenAttributes </td><td class="col1"> Name of attributes to hide in logs </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row153 rowodd">
-		<td class="col0"> issuerDBOpenIDActivation </td><td class="col1"> OpenID server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> hideOldPassword </td><td class="col1"> Hide old password in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row154 roweven">
-		<td class="col0"> issuerDBOpenIDConnectActivation </td><td class="col1"> OpenID Connect server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> httpOnly </td><td class="col1"> Enable httpOnly flag in cookie </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row155 rowodd">
-		<td class="col0"> issuerDBOpenIDConnectPath </td><td class="col1"> OpenID Connect server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> https </td><td class="col1"> Use HTTPS for redirection from portal </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row156 roweven">
-		<td class="col0"> issuerDBOpenIDConnectRule </td><td class="col1"> OpenID Connect server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationHiddenAttributes </td><td class="col1"> Attributes to skip </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row157 rowodd">
-		<td class="col0"> issuerDBOpenIDPath </td><td class="col1"> OpenID server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationIdRule </td><td class="col1"> Impersonation identities rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row158 roweven">
-		<td class="col0"> issuerDBOpenIDRule </td><td class="col1"> OpenID server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationMergeSSOgroups </td><td class="col1"> Merge spoofed and real <abbr title="Single Sign On">SSO</abbr> groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row159 rowodd">
-		<td class="col0"> issuerDBSAMLActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationPrefix </td><td class="col1"> Prefix to rename real session attributes </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row160 roweven">
-		<td class="col0"> issuerDBSAMLPath </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationRule </td><td class="col1"> Impersonation activation rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row161 rowodd">
-		<td class="col0"> issuerDBSAMLRule </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> impersonationSkipEmptyValues </td><td class="col1"> Skip session empty values </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row162 roweven">
-		<td class="col0"> issuersTimeout </td><td class="col1"> Token timeout for issuers </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> infoFormMethod </td><td class="col1"> HTTP method for info page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row163 rowodd">
-		<td class="col0"> jsRedirect </td><td class="col1"> Use javascript for redirections </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBCASActivation </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row164 roweven">
-		<td class="col0"> key </td><td class="col1"> Secret key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBCASPath </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row165 rowodd">
-		<td class="col0"> krbAuthnLevel </td><td class="col1"> Null authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBCASRule </td><td class="col1"> <abbr title="Central Authentication Service">CAS</abbr> server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row166 roweven">
-		<td class="col0"> krbByJs </td><td class="col1"> Launch Kerberos authentication by Ajax </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBGetActivation </td><td class="col1"> Get issuer activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row167 rowodd">
-		<td class="col0"> krbKeytab </td><td class="col1"> Kerberos keytab </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBGetParameters </td><td class="col1"> List of virtualHosts with their get parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row168 roweven">
-		<td class="col0"> krbRemoveDomain </td><td class="col1"> Remove domain in Kerberos username </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBGetPath </td><td class="col1"> Get issuer request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row169 rowodd">
-		<td class="col0"> ldapAllowResetExpiredPassword </td><td class="col1"> Allow a user to reset his expired password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBGetRule </td><td class="col1"> Get issuer rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row170 roweven">
-		<td class="col0"> ldapAuthnLevel </td><td class="col1"> LDAP authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDActivation </td><td class="col1"> OpenID server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row171 rowodd">
-		<td class="col0"> ldapBase </td><td class="col1"> LDAP search base </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDConnectActivation </td><td class="col1"> OpenID Connect server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row172 roweven">
-		<td class="col0"> ldapChangePasswordAsUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDConnectPath </td><td class="col1"> OpenID Connect server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row173 rowodd">
-		<td class="col0"> ldapExportedVars </td><td class="col1"> LDAP exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDConnectRule </td><td class="col1"> OpenID Connect server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row174 roweven">
-		<td class="col0"> ldapGroupAttributeName </td><td class="col1"> LDAP attribute name for member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDPath </td><td class="col1"> OpenID server request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row175 rowodd">
-		<td class="col0"> ldapGroupAttributeNameGroup </td><td class="col1"> LDAP attribute name in group entry referenced as member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBOpenIDRule </td><td class="col1"> OpenID server rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row176 roweven">
-		<td class="col0"> ldapGroupAttributeNameSearch </td><td class="col1"> LDAP attributes to search in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBSAMLActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row177 rowodd">
-		<td class="col0"> ldapGroupAttributeNameUser </td><td class="col1"> LDAP attribute name in user entry referenced as member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBSAMLPath </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP request path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row178 roweven">
-		<td class="col0"> ldapGroupBase </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuerDBSAMLRule </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP rule </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row179 rowodd">
-		<td class="col0"> ldapGroupDecodeSearchedValue </td><td class="col1"> Decode value before searching it in LDAP groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> issuersTimeout </td><td class="col1"> Token timeout for issuers </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row180 roweven">
-		<td class="col0"> ldapGroupObjectClass </td><td class="col1"> LDAP object class of groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> jsRedirect </td><td class="col1"> Use javascript for redirections </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row181 rowodd">
-		<td class="col0"> ldapGroupRecursive </td><td class="col1"> LDAP recursive search in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> key </td><td class="col1"> Secret key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row182 roweven">
-		<td class="col0"> ldapITDS </td><td class="col1"> Support for IBM Tivoli Directory Server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> krbAuthnLevel </td><td class="col1"> Null authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row183 rowodd">
-		<td class="col0"> ldapPasswordResetAttribute </td><td class="col1"> LDAP password reset attribute </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> krbByJs </td><td class="col1"> Launch Kerberos authentication by Ajax </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row184 roweven">
-		<td class="col0"> ldapPasswordResetAttributeValue </td><td class="col1"> LDAP password reset value </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> krbKeytab </td><td class="col1"> Kerberos keytab </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row185 rowodd">
-		<td class="col0"> ldapPort </td><td class="col1"> LDAP port </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> krbRemoveDomain </td><td class="col1"> Remove domain in Kerberos username </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row186 roweven">
-		<td class="col0"> ldapPpolicyControl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapAllowResetExpiredPassword </td><td class="col1"> Allow a user to reset his expired password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row187 rowodd">
-		<td class="col0"> ldapPwdEnc </td><td class="col1"> LDAP password encoding </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapAuthnLevel </td><td class="col1"> LDAP authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row188 roweven">
-		<td class="col0"> ldapRaw </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapBase </td><td class="col1"> LDAP search base </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row189 rowodd">
-		<td class="col0"> ldapSearchDeref </td><td class="col1"> &quot;deref&quot; param of Net::LDAP::search() </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapChangePasswordAsUser </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row190 roweven">
-		<td class="col0"> ldapServer </td><td class="col1"> LDAP server (host or <abbr title="Uniform Resource Identifier">URI</abbr>) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapExportedVars </td><td class="col1"> LDAP exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row191 rowodd">
-		<td class="col0"> ldapSetPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupAttributeName </td><td class="col1"> LDAP attribute name for member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row192 roweven">
-		<td class="col0"> ldapTimeout </td><td class="col1"> LDAP connection timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupAttributeNameGroup </td><td class="col1"> LDAP attribute name in group entry referenced as member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row193 rowodd">
-		<td class="col0"> ldapUsePasswordResetAttribute </td><td class="col1"> LDAP store reset flag in an attribute </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupAttributeNameSearch </td><td class="col1"> LDAP attributes to search in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row194 roweven">
-		<td class="col0"> ldapVersion </td><td class="col1"> LDAP protocol version </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupAttributeNameUser </td><td class="col1"> LDAP attribute name in user entry referenced as member in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row195 rowodd">
-		<td class="col0"> linkedInAuthnLevel </td><td class="col1"> LinkedIn authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupBase </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row196 roweven">
-		<td class="col0"> linkedInClientID </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupDecodeSearchedValue </td><td class="col1"> Decode value before searching it in LDAP groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row197 rowodd">
-		<td class="col0"> linkedInClientSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupObjectClass </td><td class="col1"> LDAP object class of groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row198 roweven">
-		<td class="col0"> linkedInFields </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapGroupRecursive </td><td class="col1"> LDAP recursive search in groups </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row199 rowodd">
-		<td class="col0"> linkedInScope </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapITDS </td><td class="col1"> Support for IBM Tivoli Directory Server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row200 roweven">
-		<td class="col0"> linkedInUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapPasswordResetAttribute </td><td class="col1"> LDAP password reset attribute </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row201 rowodd">
-		<td class="col0"> localSessionStorage </td><td class="col1"> Local sessions cache module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapPasswordResetAttributeValue </td><td class="col1"> LDAP password reset value </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row202 roweven">
-		<td class="col0"> localSessionStorageOptions </td><td class="col1"> Sessions cache module options </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapPort </td><td class="col1"> LDAP port </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row203 rowodd">
-		<td class="col0"> localStorage </td><td class="col1"> Local cache </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> ldapPpolicyControl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row204 roweven">
-		<td class="col0"> localStorageOptions </td><td class="col1"> Local cache parameters </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> ldapPwdEnc </td><td class="col1"> LDAP password encoding </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row205 rowodd">
-		<td class="col0"> log4perlConfFile </td><td class="col1"> Log4Perl logger configuration file </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> ldapRaw </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row206 roweven">
-		<td class="col0"> logLevel </td><td class="col1"> Log level, must be set in .ini </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> ldapSearchDeref </td><td class="col1"> &quot;deref&quot; param of Net::LDAP::search() </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row207 rowodd">
-		<td class="col0"> logger </td><td class="col1"> technical logger </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> ldapServer </td><td class="col1"> LDAP server (host or <abbr title="Uniform Resource Identifier">URI</abbr>) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row208 roweven">
-		<td class="col0"> loginHistoryEnabled </td><td class="col1"> Enable login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapSetPassword </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row209 rowodd">
-		<td class="col0"> logoutServices </td><td class="col1"> Send logout trough GET request to these services </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapTimeout </td><td class="col1"> LDAP connection timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row210 roweven">
-		<td class="col0"> lwpOpts </td><td class="col1"> Options given to LWP::UserAgent </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapUsePasswordResetAttribute </td><td class="col1"> LDAP store reset flag in an attribute </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row211 rowodd">
-		<td class="col0"> lwpSslOpts </td><td class="col1"> SSL options given to LWP::UserAgent </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> ldapVersion </td><td class="col1"> LDAP protocol version </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row212 roweven">
-		<td class="col0"> macros </td><td class="col1"> Macros </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInAuthnLevel </td><td class="col1"> LinkedIn authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row213 rowodd">
-		<td class="col0"> mail2fActivation </td><td class="col1"> Mail second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInClientID </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row214 roweven">
-		<td class="col0"> mail2fAuthnLevel </td><td class="col1"> Authentication level for users authenticated by Mail second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInClientSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row215 rowodd">
-		<td class="col0"> mail2fBody </td><td class="col1"> Mail body for second factor authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInFields </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row216 roweven">
-		<td class="col0"> mail2fCodeRegex </td><td class="col1"> Regular expression to create a mail OTP code </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInScope </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row217 rowodd">
-		<td class="col0"> mail2fLabel </td><td class="col1"> Portal label for Mail second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> linkedInUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row218 roweven">
-		<td class="col0"> mail2fLogo </td><td class="col1"> Custom logo for Mail 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> localSessionStorage </td><td class="col1"> Local sessions cache module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row219 rowodd">
-		<td class="col0"> mail2fSubject </td><td class="col1"> Mail subject for second factor authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> localSessionStorageOptions </td><td class="col1"> Sessions cache module options </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row220 roweven">
-		<td class="col0"> mail2fTimeout </td><td class="col1"> Second factor code timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> localStorage </td><td class="col1"> Local cache </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row221 rowodd">
-		<td class="col0"> mailBody </td><td class="col1"> Custom password reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> localStorageOptions </td><td class="col1"> Local cache parameters </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row222 roweven">
-		<td class="col0"> mailCharset </td><td class="col1"> Mail charset </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> log4perlConfFile </td><td class="col1"> Log4Perl logger configuration file </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row223 rowodd">
-		<td class="col0"> mailConfirmBody </td><td class="col1"> Custom confirm password reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> logLevel </td><td class="col1"> Log level, must be set in .ini </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row224 roweven">
-		<td class="col0"> mailConfirmSubject </td><td class="col1"> Mail subject for reset confirmation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> logger </td><td class="col1"> technical logger </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row225 rowodd">
-		<td class="col0"> mailFrom </td><td class="col1"> Sender email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> loginHistoryEnabled </td><td class="col1"> Enable login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row226 roweven">
-		<td class="col0"> mailLDAPFilter </td><td class="col1"> LDAP filter for mail search </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> logoutServices </td><td class="col1"> Send logout trough GET request to these services </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row227 rowodd">
-		<td class="col0"> mailOnPasswordChange </td><td class="col1"> Send a mail when password is changed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> lwpOpts </td><td class="col1"> Options given to LWP::UserAgent </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row228 roweven">
-		<td class="col0"> mailReplyTo </td><td class="col1"> Reply-To address </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> lwpSslOpts </td><td class="col1"> SSL options given to LWP::UserAgent </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row229 rowodd">
-		<td class="col0"> mailSessionKey </td><td class="col1"> Session parameter where mail is stored </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> macros </td><td class="col1"> Macros </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row230 roweven">
-		<td class="col0"> mailSubject </td><td class="col1"> Mail subject for new password email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fActivation </td><td class="col1"> Mail second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row231 rowodd">
-		<td class="col0"> mailTimeout </td><td class="col1"> Mail password reset session timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fAuthnLevel </td><td class="col1"> Authentication level for users authenticated by Mail second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row232 roweven">
-		<td class="col0"> mailUrl </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of password reset page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fBody </td><td class="col1"> Mail body for second factor authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row233 rowodd">
-		<td class="col0"> maintenance </td><td class="col1"> Maintenance mode for all virtual hosts </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fCodeRegex </td><td class="col1"> Regular expression to create a mail OTP code </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row234 roweven">
-		<td class="col0"> managerDn </td><td class="col1"> LDAP manager <abbr title="Distinguished Name">DN</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fLabel </td><td class="col1"> Portal label for Mail second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row235 rowodd">
-		<td class="col0"> managerPassword </td><td class="col1"> LDAP manager Password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mail2fLogo </td><td class="col1"> Custom logo for Mail 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row236 roweven">
-		<td class="col0"> max2FDevices </td><td class="col1"> Maximum registered 2F devices </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> mail2fSubject </td><td class="col1"> Mail subject for second factor authentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row237 rowodd">
-		<td class="col0"> max2FDevicesNameLength </td><td class="col1"> Maximum 2F devices name length </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> mail2fTimeout </td><td class="col1"> Second factor code timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row238 roweven">
-		<td class="col0"> multiValuesSeparator </td><td class="col1"> Separator for multiple values </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailBody </td><td class="col1"> Custom password reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row239 rowodd">
-		<td class="col0"> mySessionAuthorizedRWKeys </td><td class="col1"> Alterable session keys by user itself </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> mailCharset </td><td class="col1"> Mail charset </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row240 roweven">
-		<td class="col0"> nginxCustomHandlers </td><td class="col1"> Custom Nginx handler (deprecated) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailConfirmBody </td><td class="col1"> Custom confirm password reset mail body </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row241 rowodd">
-		<td class="col0"> noAjaxHook </td><td class="col1"> Avoid replacing 302 by 401 for Ajax responses </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailConfirmSubject </td><td class="col1"> Mail subject for reset confirmation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row242 roweven">
-		<td class="col0"> notification </td><td class="col1"> Notification activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailFrom </td><td class="col1"> Sender email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row243 rowodd">
-		<td class="col0"> notificationServer </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailLDAPFilter </td><td class="col1"> LDAP filter for mail search </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row244 roweven">
-		<td class="col0"> notificationServerDELETE </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailOnPasswordChange </td><td class="col1"> Send a mail when password is changed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row245 rowodd">
-		<td class="col0"> notificationServerGET </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailReplyTo </td><td class="col1"> Reply-To address </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row246 roweven">
-		<td class="col0"> notificationServerPOST </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailSessionKey </td><td class="col1"> Session parameter where mail is stored </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row247 rowodd">
-		<td class="col0"> notificationServerSentAttributes </td><td class="col1"> Prameters to send with notification server GET method </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailSubject </td><td class="col1"> Mail subject for new password email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row248 roweven">
-		<td class="col0"> notificationStorage </td><td class="col1"> Notification backend </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailTimeout </td><td class="col1"> Mail password reset session timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row249 rowodd">
-		<td class="col0"> notificationStorageOptions </td><td class="col1"> Notification backend options </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> mailUrl </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of password reset page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row250 roweven">
-		<td class="col0"> notificationWildcard </td><td class="col1"> Notification string to match all users </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> maintenance </td><td class="col1"> Maintenance mode for all virtual hosts </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row251 rowodd">
-		<td class="col0"> notificationXSLTfile </td><td class="col1"> Custom XSLT document for notifications </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> managerDn </td><td class="col1"> LDAP manager <abbr title="Distinguished Name">DN</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row252 roweven">
-		<td class="col0"> notifyDeleted </td><td class="col1"> Show deleted sessions in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> managerPassword </td><td class="col1"> LDAP manager Password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row253 rowodd">
-		<td class="col0"> notifyOther </td><td class="col1"> Show other sessions in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> max2FDevices </td><td class="col1"> Maximum registered 2F devices </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row254 roweven">
-		<td class="col0"> nullAuthnLevel </td><td class="col1"> Null authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> max2FDevicesNameLength </td><td class="col1"> Maximum 2F devices name length </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row255 rowodd">
-		<td class="col0"> oidcAuthnLevel </td><td class="col1"> OpenID Connect authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> multiValuesSeparator </td><td class="col1"> Separator for multiple values </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row256 roweven">
-		<td class="col0"> oidcOPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+		<td class="col0"> mySessionAuthorizedRWKeys </td><td class="col1"> Alterable session keys by user itself </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row257 rowodd">
-		<td class="col0"> oidcRPCallbackGetParam </td><td class="col1"> OpenID Connect Callback GET URLparameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> nginxCustomHandlers </td><td class="col1"> Custom Nginx handler (deprecated) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row258 roweven">
-		<td class="col0"> oidcRPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+		<td class="col0"> noAjaxHook </td><td class="col1"> Avoid replacing 302 by 401 for Ajax responses </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row259 rowodd">
-		<td class="col0"> oidcRPStateTimeout </td><td class="col1"> OpenID Connect Timeout of state sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notification </td><td class="col1"> Notification activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row260 roweven">
-		<td class="col0"> oidcServiceAllowAuthorizationCodeFlow </td><td class="col1"> OpenID Connect allow authorization code flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationDefaultCond </td><td class="col1"> Notification default condition </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row261 rowodd">
-		<td class="col0"> oidcServiceAllowDynamicRegistration </td><td class="col1"> OpenID Connect allow dynamic client registration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationServer </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row262 roweven">
-		<td class="col0"> oidcServiceAllowHybridFlow </td><td class="col1"> OpenID Connect allow hybrid flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationServerDELETE </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row263 rowodd">
-		<td class="col0"> oidcServiceAllowImplicitFlow </td><td class="col1"> OpenID Connect allow implicit flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationServerGET </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row264 roweven">
-		<td class="col0"> oidcServiceKeyIdSig </td><td class="col1"> OpenID Connect Signature Key ID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationServerPOST </td><td class="col1"> Notification server activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row265 rowodd">
-		<td class="col0"> oidcServiceMetaDataAuthnContext </td><td class="col1"> OpenID Connect Authentication Context Class Ref </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationServerSentAttributes </td><td class="col1"> Prameters to send with notification server GET method </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row266 roweven">
-		<td class="col0"> oidcServiceMetaDataAuthorizeURI </td><td class="col1"> OpenID Connect authorizaton endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationStorage </td><td class="col1"> Notification backend </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row267 rowodd">
-		<td class="col0"> oidcServiceMetaDataBackChannelURI </td><td class="col1"> OpenID Connect Front-Channel logout endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationStorageOptions </td><td class="col1"> Notification backend options </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row268 roweven">
-		<td class="col0"> oidcServiceMetaDataCheckSessionURI </td><td class="col1"> OpenID Connect check session iframe </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationWildcard </td><td class="col1"> Notification string to match all users </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row269 rowodd">
-		<td class="col0"> oidcServiceMetaDataEndSessionURI </td><td class="col1"> OpenID Connect end session endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notificationXSLTfile </td><td class="col1"> Custom XSLT document for notifications </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row270 roweven">
-		<td class="col0"> oidcServiceMetaDataFrontChannelURI </td><td class="col1"> OpenID Connect Front-Channel logout endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notifyDeleted </td><td class="col1"> Show deleted sessions in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row271 rowodd">
-		<td class="col0"> oidcServiceMetaDataIntrospectionURI </td><td class="col1"> OpenID Connect introspection endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> notifyOther </td><td class="col1"> Show other sessions in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row272 roweven">
-		<td class="col0"> oidcServiceMetaDataIssuer </td><td class="col1"> OpenID Connect issuer </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> nullAuthnLevel </td><td class="col1"> Null authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row273 rowodd">
-		<td class="col0"> oidcServiceMetaDataJWKSURI </td><td class="col1"> OpenID Connect JWKS endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcAuthnLevel </td><td class="col1"> OpenID Connect authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row274 roweven">
-		<td class="col0"> oidcServiceMetaDataRegistrationURI </td><td class="col1"> OpenID Connect registration endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcOPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
 	</tr>
 	<tr class="row275 rowodd">
-		<td class="col0"> oidcServiceMetaDataTokenURI </td><td class="col1"> OpenID Connect token endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcRPCallbackGetParam </td><td class="col1"> OpenID Connect Callback GET URLparameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row276 roweven">
-		<td class="col0"> oidcServiceMetaDataUserInfoURI </td><td class="col1"> OpenID Connect user info endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcRPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
 	</tr>
 	<tr class="row277 rowodd">
-		<td class="col0"> oidcServicePrivateKeySig </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcRPStateTimeout </td><td class="col1"> OpenID Connect Timeout of state sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row278 roweven">
-		<td class="col0"> oidcServicePublicKeySig </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAccessTokenExpiration </td><td class="col1"> OpenID Connect global access token TTL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row279 rowodd">
-		<td class="col0"> oidcStorage </td><td class="col1"> Apache::Session module to store OIDC user data </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAllowAuthorizationCodeFlow </td><td class="col1"> OpenID Connect allow authorization code flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row280 roweven">
-		<td class="col0"> oidcStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAllowDynamicRegistration </td><td class="col1"> OpenID Connect allow dynamic client registration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row281 rowodd">
-		<td class="col0"> oldNotifFormat </td><td class="col1"> Use old XML format for notifications </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAllowHybridFlow </td><td class="col1"> OpenID Connect allow hybrid flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row282 roweven">
-		<td class="col0"> openIdAttr </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAllowImplicitFlow </td><td class="col1"> OpenID Connect allow implicit flow </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row283 rowodd">
-		<td class="col0"> openIdAuthnLevel </td><td class="col1"> OpenID authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceAuthorizationCodeExpiration </td><td class="col1"> OpenID Connect global code TTL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row284 roweven">
-		<td class="col0"> openIdExportedVars </td><td class="col1"> OpenID exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceDynamicRegistrationExportedVars </td><td class="col1"> OpenID Connect exported variables for dynamic registration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row285 rowodd">
-		<td class="col0"> openIdIDPList </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceDynamicRegistrationExtraClaims </td><td class="col1"> OpenID Connect extra claims for dynamic registration </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row286 roweven">
-		<td class="col0"> openIdIssuerSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceIDTokenExpiration </td><td class="col1"> OpenID Connect global ID token TTL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row287 rowodd">
-		<td class="col0"> openIdSPList </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceKeyIdSig </td><td class="col1"> OpenID Connect Signature Key ID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row288 roweven">
-		<td class="col0"> openIdSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataAuthnContext </td><td class="col1"> OpenID Connect Authentication Context Class Ref </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row289 rowodd">
-		<td class="col0"> openIdSreg_country </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataAuthorizeURI </td><td class="col1"> OpenID Connect authorizaton endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row290 roweven">
-		<td class="col0"> openIdSreg_dob </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataBackChannelURI </td><td class="col1"> OpenID Connect Front-Channel logout endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row291 rowodd">
-		<td class="col0"> openIdSreg_email </td><td class="col1"> OpenID SREG email session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataCheckSessionURI </td><td class="col1"> OpenID Connect check session iframe </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row292 roweven">
-		<td class="col0"> openIdSreg_fullname </td><td class="col1"> OpenID SREG fullname session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataEndSessionURI </td><td class="col1"> OpenID Connect end session endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row293 rowodd">
-		<td class="col0"> openIdSreg_gender </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataFrontChannelURI </td><td class="col1"> OpenID Connect Front-Channel logout endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row294 roweven">
-		<td class="col0"> openIdSreg_language </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataIntrospectionURI </td><td class="col1"> OpenID Connect introspection endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row295 rowodd">
-		<td class="col0"> openIdSreg_nickname </td><td class="col1"> OpenID SREG nickname session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataIssuer </td><td class="col1"> OpenID Connect issuer </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row296 roweven">
-		<td class="col0"> openIdSreg_postcode </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataJWKSURI </td><td class="col1"> OpenID Connect JWKS endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row297 rowodd">
-		<td class="col0"> openIdSreg_timezone </td><td class="col1"> OpenID SREG timezone session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataRegistrationURI </td><td class="col1"> OpenID Connect registration endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row298 roweven">
-		<td class="col0"> pamAuthnLevel </td><td class="col1"> PAM authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataTokenURI </td><td class="col1"> OpenID Connect token endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row299 rowodd">
-		<td class="col0"> pamService </td><td class="col1"> PAM service </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceMetaDataUserInfoURI </td><td class="col1"> OpenID Connect user info endpoint </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row300 roweven">
-		<td class="col0"> passwordDB </td><td class="col1"> Password module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServiceOfflineSessionExpiration </td><td class="col1"> OpenID Connect global offline session TTL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row301 rowodd">
-		<td class="col0"> passwordPolicyMinDigit </td><td class="col1"> Password policy: minimal digit characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServicePrivateKeySig </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row302 roweven">
-		<td class="col0"> passwordPolicyMinLower </td><td class="col1"> Password policy: minimal lower characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcServicePublicKeySig </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row303 rowodd">
-		<td class="col0"> passwordPolicyMinSize </td><td class="col1"> Password policy: minimal size </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcStorage </td><td class="col1"> Apache::Session module to store OIDC user data </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row304 roweven">
-		<td class="col0"> passwordPolicyMinUpper </td><td class="col1"> Password policy: minimal upper characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oidcStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row305 rowodd">
-		<td class="col0"> passwordResetAllowedRetries </td><td class="col1"> Maximum number of retries to reset password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> oldNotifFormat </td><td class="col1"> Use old XML format for notifications </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row306 roweven">
-		<td class="col0"> pdataDomain </td><td class="col1"> pdata cookie <abbr title="Domain Name System">DNS</abbr> domain </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> openIdAttr </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row307 rowodd">
-		<td class="col0"> persistentStorage </td><td class="col1"> Storage module for persistent sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdAuthnLevel </td><td class="col1"> OpenID authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row308 roweven">
-		<td class="col0"> persistentStorageOptions </td><td class="col1"> Options for persistent sessions storage module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdExportedVars </td><td class="col1"> OpenID exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row309 rowodd">
-		<td class="col0"> port </td><td class="col1"> Force port in redirection </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdIDPList </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row310 roweven">
-		<td class="col0"> portal </td><td class="col1"> Portal <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdIssuerSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row311 rowodd">
-		<td class="col0"> portalAntiFrame </td><td class="col1"> Avoid portal to be displayed inside frames </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSPList </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row312 roweven">
-		<td class="col0"> portalCheckLogins </td><td class="col1"> Display login history checkbox in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row313 rowodd">
-		<td class="col0"> portalDisplayAppslist </td><td class="col1"> Display applications tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_country </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row314 roweven">
-		<td class="col0"> portalDisplayChangePassword </td><td class="col1"> Display password tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_dob </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row315 rowodd">
-		<td class="col0"> portalDisplayGeneratePassword </td><td class="col1"> Display password generate box in reset password form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_email </td><td class="col1"> OpenID SREG email session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row316 roweven">
-		<td class="col0"> portalDisplayLoginHistory </td><td class="col1"> Display login history tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_fullname </td><td class="col1"> OpenID SREG fullname session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row317 rowodd">
-		<td class="col0"> portalDisplayLogout </td><td class="col1"> Display logout tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_gender </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row318 roweven">
-		<td class="col0"> portalDisplayOidcConsents </td><td class="col1"> Display OIDC consent tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_language </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row319 rowodd">
-		<td class="col0"> portalDisplayPasswordPolicy </td><td class="col1"> Display policy in password form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_nickname </td><td class="col1"> OpenID SREG nickname session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row320 roweven">
-		<td class="col0"> portalDisplayRegister </td><td class="col1"> Display register button in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_postcode </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row321 rowodd">
-		<td class="col0"> portalDisplayResetPassword </td><td class="col1"> Display reset password button in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> openIdSreg_timezone </td><td class="col1"> OpenID SREG timezone session parameter </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row322 roweven">
-		<td class="col0"> portalErrorOnExpiredSession </td><td class="col1"> Show error if session is expired </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> pamAuthnLevel </td><td class="col1"> PAM authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row323 rowodd">
-		<td class="col0"> portalErrorOnMailNotFound </td><td class="col1"> Show error if mail is not found in password reset process </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> pamService </td><td class="col1"> PAM service </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row324 roweven">
-		<td class="col0"> portalForceAuthn </td><td class="col1"> Enable force to authenticate when displaying portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordDB </td><td class="col1"> Password module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row325 rowodd">
-		<td class="col0"> portalForceAuthnInterval </td><td class="col1"> Maximum interval in seconds since last authentication to force reauthentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordPolicyMinDigit </td><td class="col1"> Password policy: minimal digit characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row326 roweven">
-		<td class="col0"> portalMainLogo </td><td class="col1"> Portal main logo path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordPolicyMinLower </td><td class="col1"> Password policy: minimal lower characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row327 rowodd">
-		<td class="col0"> portalOpenLinkInNewWindow </td><td class="col1"> Open applications in new windows </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordPolicyMinSize </td><td class="col1"> Password policy: minimal size </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row328 roweven">
-		<td class="col0"> portalPingInterval </td><td class="col1 leftalign"> Interval in ms between portal Ajax pings  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordPolicyMinUpper </td><td class="col1"> Password policy: minimal upper characters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row329 rowodd">
-		<td class="col0"> portalRequireOldPassword </td><td class="col1"> Old password is required to change the password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> passwordResetAllowedRetries </td><td class="col1"> Maximum number of retries to reset password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row330 roweven">
-		<td class="col0"> portalSkin </td><td class="col1"> Name of portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> pdataDomain </td><td class="col1"> pdata cookie <abbr title="Domain Name System">DNS</abbr> domain </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row331 rowodd">
-		<td class="col0"> portalSkinBackground </td><td class="col1"> Background image of portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> persistentStorage </td><td class="col1"> Storage module for persistent sessions </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row332 roweven">
-		<td class="col0"> portalSkinRules </td><td class="col1"> Rules to choose portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> persistentStorageOptions </td><td class="col1"> Options for persistent sessions storage module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row333 rowodd">
-		<td class="col0"> portalStatus </td><td class="col1"> Enable portal status </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> port </td><td class="col1"> Force port in redirection </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row334 roweven">
-		<td class="col0"> portalUserAttr </td><td class="col1"> Session parameter to display connected user in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portal </td><td class="col1"> Portal <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row335 rowodd">
-		<td class="col0"> protection </td><td class="col1"> Manager protection method </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> portalAntiFrame </td><td class="col1"> Avoid portal to be displayed inside frames </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row336 roweven">
-		<td class="col0"> proxyAuthService </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalCheckLogins </td><td class="col1"> Display login history checkbox in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row337 rowodd">
-		<td class="col0"> proxyAuthnLevel </td><td class="col1"> Proxy authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayAppslist </td><td class="col1"> Display applications tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row338 roweven">
-		<td class="col0"> proxySessionService </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayCertificateResetByMail </td><td class="col1"> Display Certificate Reset by mail tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row339 rowodd">
-		<td class="col0"> proxyUseSoap </td><td class="col1"> Use SOAP instead of REST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayChangePassword </td><td class="col1"> Display password tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row340 roweven">
-		<td class="col0"> radius2fActivation </td><td class="col1"> Radius second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayGeneratePassword </td><td class="col1"> Display password generate box in reset password form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row341 rowodd">
-		<td class="col0"> radius2fAuthnLevel </td><td class="col1"> Authentication level for users authenticated by Radius second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayLoginHistory </td><td class="col1"> Display login history tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row342 roweven">
-		<td class="col0"> radius2fLabel </td><td class="col1"> Portal label for Radius 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayLogout </td><td class="col1"> Display logout tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row343 rowodd">
-		<td class="col0"> radius2fLogo </td><td class="col1"> Custom logo for Radius 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayOidcConsents </td><td class="col1"> Display OIDC consent tab in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row344 roweven">
-		<td class="col0"> radius2fSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayPasswordPolicy </td><td class="col1"> Display policy in password form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row345 rowodd">
-		<td class="col0"> radius2fServer </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayRegister </td><td class="col1"> Display register button in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row346 roweven">
-		<td class="col0"> radius2fTimeout </td><td class="col1"> Radius 2f verification timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalDisplayResetPassword </td><td class="col1"> Display reset password button in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row347 rowodd">
-		<td class="col0"> radius2fUsernameSessionKey </td><td class="col1"> Session key used as Radius login </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalErrorOnExpiredSession </td><td class="col1"> Show error if session is expired </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row348 roweven">
-		<td class="col0"> radiusAuthnLevel </td><td class="col1"> Radius authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalErrorOnMailNotFound </td><td class="col1"> Show error if mail is not found in password reset process </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row349 rowodd">
-		<td class="col0"> radiusSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalForceAuthn </td><td class="col1"> Enable force to authenticate when displaying portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row350 roweven">
-		<td class="col0"> radiusServer </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalForceAuthnInterval </td><td class="col1"> Maximum interval in seconds since last authentication to force reauthentication </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row351 rowodd">
-		<td class="col0"> randomPasswordRegexp </td><td class="col1"> Regular expression to create a random password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalMainLogo </td><td class="col1"> Portal main logo path </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row352 roweven">
-		<td class="col0"> redirectFormMethod </td><td class="col1"> HTTP method for redirect page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalOpenLinkInNewWindow </td><td class="col1"> Open applications in new windows </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row353 rowodd">
-		<td class="col0"> registerConfirmSubject </td><td class="col1"> Mail subject for register confirmation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalPingInterval </td><td class="col1 leftalign"> Interval in ms between portal Ajax pings  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row354 roweven">
-		<td class="col0"> registerDB </td><td class="col1"> Register module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalRequireOldPassword </td><td class="col1"> Old password is required to change the password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row355 rowodd">
-		<td class="col0"> registerDoneSubject </td><td class="col1"> Mail subject when register is done </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalSkin </td><td class="col1"> Name of portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row356 roweven">
-		<td class="col0"> registerTimeout </td><td class="col1"> Register session timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalSkinBackground </td><td class="col1"> Background image of portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row357 rowodd">
-		<td class="col0"> registerUrl </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of register page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalSkinRules </td><td class="col1"> Rules to choose portal skin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row358 roweven">
-		<td class="col0"> reloadTimeout </td><td class="col1"> Configuration reload timeout </td><td class="col2 leftalign">  </td><td class="col3 leftalign">  </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalStatus </td><td class="col1"> Enable portal status </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row359 rowodd">
-		<td class="col0"> reloadUrls </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> to call on reload </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> portalUserAttr </td><td class="col1"> Session parameter to display connected user in portal </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row360 roweven">
-		<td class="col0"> remoteCookieName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> protection </td><td class="col1"> Manager protection method </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row361 rowodd">
-		<td class="col0"> remoteGlobalStorage </td><td class="col1"> Remote session backend </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> proxyAuthService </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row362 roweven">
-		<td class="col0"> remoteGlobalStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> proxyAuthnLevel </td><td class="col1"> Proxy authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row363 rowodd">
-		<td class="col0"> remotePortal </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> proxySessionService </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row364 roweven">
-		<td class="col0"> requireToken </td><td class="col1"> Enable token for forms </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> proxyUseSoap </td><td class="col1"> Use SOAP instead of REST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row365 rowodd">
-		<td class="col0"> rest2fActivation </td><td class="col1"> REST second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fActivation </td><td class="col1"> Radius second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row366 roweven">
-		<td class="col0"> rest2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by REST second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fAuthnLevel </td><td class="col1"> Authentication level for users authenticated by Radius second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row367 rowodd">
-		<td class="col0"> rest2fInitArgs </td><td class="col1"> Args for REST 2F init </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fLabel </td><td class="col1"> Portal label for Radius 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row368 roweven">
-		<td class="col0"> rest2fInitUrl </td><td class="col1"> REST 2F init <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fLogo </td><td class="col1"> Custom logo for Radius 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row369 rowodd">
-		<td class="col0"> rest2fLabel </td><td class="col1"> Portal label for REST second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row370 roweven">
-		<td class="col0"> rest2fLogo </td><td class="col1"> Custom logo for REST 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fServer </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row371 rowodd">
-		<td class="col0"> rest2fVerifyArgs </td><td class="col1"> Args for REST 2F init </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fTimeout </td><td class="col1"> Radius 2f verification timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row372 roweven">
-		<td class="col0"> rest2fVerifyUrl </td><td class="col1"> REST 2F init <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radius2fUsernameSessionKey </td><td class="col1"> Session key used as Radius login </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row373 rowodd">
-		<td class="col0"> restAuthUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radiusAuthnLevel </td><td class="col1"> Radius authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row374 roweven">
-		<td class="col0"> restAuthnLevel </td><td class="col1"> REST authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radiusSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row375 rowodd">
-		<td class="col0"> restClockTolerance </td><td class="col1"> How tolerant the REST session server will be to clock dift </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> radiusServer </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row376 roweven">
-		<td class="col0"> restConfigServer </td><td class="col1"> Enable REST config server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> randomPasswordRegexp </td><td class="col1"> Regular expression to create a random password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row377 rowodd">
-		<td class="col0"> restExportSecretKeys </td><td class="col1"> Allow to export secret keys in REST session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> redirectFormMethod </td><td class="col1"> HTTP method for redirect page form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row378 roweven">
-		<td class="col0"> restPwdConfirmUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> refreshSessions </td><td class="col1"> Refresh sessions plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row379 rowodd">
-		<td class="col0"> restPwdModifyUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> registerConfirmSubject </td><td class="col1"> Mail subject for register confirmation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row380 roweven">
-		<td class="col0"> restSessionServer </td><td class="col1"> Enable REST session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> registerDB </td><td class="col1"> Register module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row381 rowodd">
-		<td class="col0"> restUserDBUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> registerDoneSubject </td><td class="col1"> Mail subject when register is done </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row382 roweven">
-		<td class="col0"> samlAttributeAuthorityDescriptorAttributeServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Attribute Authority SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> registerTimeout </td><td class="col1"> Register session timeout </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row383 rowodd">
-		<td class="col0"> samlAuthnContextMapKerberos </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context kerberos level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> registerUrl </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> of register page </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row384 roweven">
-		<td class="col0"> samlAuthnContextMapPassword </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context password level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> reloadTimeout </td><td class="col1"> Configuration reload timeout </td><td class="col2 leftalign">  </td><td class="col3 leftalign">  </td><td class="col4"> ✔ </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row385 rowodd">
-		<td class="col0"> samlAuthnContextMapPasswordProtectedTransport </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context password protected transport level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> reloadUrls </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> to call on reload </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row386 roweven">
-		<td class="col0"> samlAuthnContextMapTLSClient </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context TLS client level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> remoteCookieName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row387 rowodd">
-		<td class="col0"> samlCommonDomainCookieActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> CDC activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> remoteGlobalStorage </td><td class="col1"> Remote session backend </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row388 roweven">
-		<td class="col0"> samlCommonDomainCookieDomain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> remoteGlobalStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row389 rowodd">
-		<td class="col0"> samlCommonDomainCookieReader </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> remotePortal </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row390 roweven">
-		<td class="col0"> samlCommonDomainCookieWriter </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> requireToken </td><td class="col1"> Enable token for forms </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row391 rowodd">
-		<td class="col0"> samlDiscoveryProtocolActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fActivation </td><td class="col1"> REST second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row392 roweven">
-		<td class="col0"> samlDiscoveryProtocolIsPassive </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol Is Passive </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by REST second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row393 rowodd">
-		<td class="col0"> samlDiscoveryProtocolPolicy </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fInitArgs </td><td class="col1"> Args for REST 2F init </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row394 roweven">
-		<td class="col0"> samlDiscoveryProtocolURL </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol EndPoint <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fInitUrl </td><td class="col1"> REST 2F init <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row395 rowodd">
-		<td class="col0"> samlEntityID </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service entityID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fLabel </td><td class="col1"> Portal label for REST second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row396 roweven">
-		<td class="col0"> samlIDPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+		<td class="col0"> rest2fLogo </td><td class="col1"> Custom logo for REST 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row397 rowodd">
-		<td class="col0"> samlIDPSSODescriptorArtifactResolutionServiceArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP artifact resolution service </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fVerifyArgs </td><td class="col1"> Args for REST 2F init </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row398 roweven">
-		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> rest2fVerifyUrl </td><td class="col1"> REST 2F init <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row399 rowodd">
-		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restAuthUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row400 roweven">
-		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restAuthnLevel </td><td class="col1"> REST authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row401 rowodd">
-		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP Artifact </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restClockTolerance </td><td class="col1"> How tolerant the REST session server will be to clock dift </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row402 roweven">
-		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restConfigServer </td><td class="col1"> Enable REST config server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row403 rowodd">
-		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restExportSecretKeys </td><td class="col1"> Allow to export secret keys in REST session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row404 roweven">
-		<td class="col0"> samlIDPSSODescriptorWantAuthnRequestsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP want authn request signed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restPwdConfirmUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row405 rowodd">
-		<td class="col0"> samlIdPResolveCookie </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP resolution cookie </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restPwdModifyUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row406 roweven">
-		<td class="col0"> samlMetadataForceUTF8 </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> force metadata UTF8 conversion </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restSessionServer </td><td class="col1"> Enable REST session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row407 rowodd">
-		<td class="col0"> samlNameIDFormatMapEmail </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> restUserDBUrl </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row408 roweven">
-		<td class="col0"> samlNameIDFormatMapKerberos </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID kerberos </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlAttributeAuthorityDescriptorAttributeServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Attribute Authority SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row409 rowodd">
-		<td class="col0"> samlNameIDFormatMapWindows </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID windows </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlAuthnContextMapKerberos </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context kerberos level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row410 roweven">
-		<td class="col0"> samlNameIDFormatMapX509 </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID x509 </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlAuthnContextMapPassword </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context password level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row411 rowodd">
-		<td class="col0"> samlOrganizationDisplayName </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization display name </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlAuthnContextMapPasswordProtectedTransport </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context password protected transport level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row412 roweven">
-		<td class="col0"> samlOrganizationName </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization name </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlAuthnContextMapTLSClient </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> authn context TLS client level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row413 rowodd">
-		<td class="col0"> samlOrganizationURL </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlCommonDomainCookieActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> CDC activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row414 roweven">
-		<td class="col0"> samlOverrideIDPEntityID </td><td class="col1"> Override <abbr title="Security Assertion Markup Language">SAML</abbr> EntityID when acting as an IDP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlCommonDomainCookieDomain </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row415 rowodd">
-		<td class="col0"> samlRelayStateTimeout </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> timeout of relay state </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlCommonDomainCookieReader </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row416 roweven">
-		<td class="col0"> samlSPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+		<td class="col0"> samlCommonDomainCookieWriter </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row417 rowodd">
-		<td class="col0"> samlSPSSODescriptorArtifactResolutionServiceArtifact </td><td class="col1 leftalign"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP artifact resolution service  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlDiscoveryProtocolActivation </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row418 roweven">
-		<td class="col0"> samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP ACS HTTP artifact </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlDiscoveryProtocolIsPassive </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol Is Passive </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row419 rowodd">
-		<td class="col0"> samlSPSSODescriptorAssertionConsumerServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP ACS HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlDiscoveryProtocolPolicy </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol Policy </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row420 roweven">
-		<td class="col0"> samlSPSSODescriptorAuthnRequestsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP AuthnRequestsSigned </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlDiscoveryProtocolURL </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> Discovery Protocol EndPoint <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row421 rowodd">
-		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlEntityID </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service entityID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row422 roweven">
-		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
 	</tr>
 	<tr class="row423 rowodd">
-		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorArtifactResolutionServiceArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP artifact resolution service </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row424 roweven">
-		<td class="col0"> samlSPSSODescriptorWantAssertionsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP WantAssertionsSigned </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row425 rowodd">
-		<td class="col0"> samlServicePrivateKeyEnc </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> encryption private key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row426 roweven">
-		<td class="col0"> samlServicePrivateKeyEncPwd </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleLogoutServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP SLO SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row427 rowodd">
-		<td class="col0"> samlServicePrivateKeySig </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature private key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP Artifact </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row428 roweven">
-		<td class="col0"> samlServicePrivateKeySigPwd </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature private key password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row429 rowodd">
-		<td class="col0"> samlServicePublicKeyEnc </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> encryption public key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP <abbr title="Single Sign On">SSO</abbr> HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row430 roweven">
-		<td class="col0"> samlServicePublicKeySig </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature public key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlIDPSSODescriptorWantAuthnRequestsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> IDP want authn request signed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row431 rowodd">
-		<td class="col0"> samlServiceSignatureMethod </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlMetadataForceUTF8 </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> force metadata UTF8 conversion </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row432 roweven">
-		<td class="col0"> samlServiceUseCertificateInResponse </td><td class="col1"> Use certificate instead of public key in <abbr title="Security Assertion Markup Language">SAML</abbr> responses </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlNameIDFormatMapEmail </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID email </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row433 rowodd">
-		<td class="col0"> samlStorage </td><td class="col1"> Apache::Session module to store <abbr title="Security Assertion Markup Language">SAML</abbr> user data </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlNameIDFormatMapKerberos </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID kerberos </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row434 roweven">
-		<td class="col0"> samlStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlNameIDFormatMapWindows </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID windows </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row435 rowodd">
-		<td class="col0"> samlUseQueryStringSpecific </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> use specific method for query_string </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlNameIDFormatMapX509 </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> session parameter for NameID x509 </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row436 roweven">
-		<td class="col0"> secureTokenAllowOnError </td><td class="col1"> Secure Token allow requests in error </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlOrganizationDisplayName </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization display name </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row437 rowodd">
-		<td class="col0"> secureTokenAttribute </td><td class="col1"> Secure Token attribute </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlOrganizationName </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization name </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row438 roweven">
-		<td class="col0"> secureTokenExpiration </td><td class="col1"> Secure Token expiration </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlOrganizationURL </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> service organization <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row439 rowodd">
-		<td class="col0"> secureTokenHeader </td><td class="col1"> Secure Token header </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlOverrideIDPEntityID </td><td class="col1"> Override <abbr title="Security Assertion Markup Language">SAML</abbr> EntityID when acting as an IDP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row440 roweven">
-		<td class="col0"> secureTokenMemcachedServers </td><td class="col1"> Secure Token Memcached servers </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlRelayStateTimeout </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> timeout of relay state </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row441 rowodd">
-		<td class="col0"> secureTokenUrls </td><td class="col1 leftalign">  </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlSPMetaDataOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
 	</tr>
 	<tr class="row442 roweven">
-		<td class="col0"> securedCookie </td><td class="col1"> Cookie securisation method </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorArtifactResolutionServiceArtifact </td><td class="col1 leftalign"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP artifact resolution service  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row443 rowodd">
-		<td class="col0"> sentryDsn </td><td class="col1"> Sentry logger DSN </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP ACS HTTP artifact </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row444 roweven">
-		<td class="col0"> sessionDataToRemember </td><td class="col1"> Data to remember in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorAssertionConsumerServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP ACS HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row445 rowodd">
-		<td class="col0"> sfEngine </td><td class="col1"> Second factor engine </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> samlSPSSODescriptorAuthnRequestsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP AuthnRequestsSigned </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row446 roweven">
-		<td class="col0"> sfExtra </td><td class="col1"> Extra second factors </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceHTTPPost </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO HTTP POST </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row447 rowodd">
-		<td class="col0"> sfRemovedMsgRule </td><td class="col1"> Display a message if at leat one expired SF has been removed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceHTTPRedirect </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO HTTP Redirect </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row448 roweven">
-		<td class="col0"> sfRemovedNotifMsg </td><td class="col1"> Notification message </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorSingleLogoutServiceSOAP </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP SLO SOAP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row449 rowodd">
-		<td class="col0"> sfRemovedNotifRef </td><td class="col1"> Notification reference </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlSPSSODescriptorWantAssertionsSigned </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> SP WantAssertionsSigned </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row450 roweven">
-		<td class="col0"> sfRemovedNotifTitle </td><td class="col1"> Notification title </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePrivateKeyEnc </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> encryption private key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row451 rowodd">
-		<td class="col0"> sfRemovedUseNotif </td><td class="col1"> Use Notifications plugin to display message </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePrivateKeyEncPwd </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row452 roweven">
-		<td class="col0"> sfRequired </td><td class="col1"> Second factor required </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePrivateKeySig </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature private key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row453 rowodd">
-		<td class="col0"> showLanguages </td><td class="col1"> Display langs icons </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePrivateKeySigPwd </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature private key password </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row454 roweven">
-		<td class="col0"> singleIP </td><td class="col1"> Allow only one session per <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePublicKeyEnc </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> encryption public key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row455 rowodd">
-		<td class="col0"> singleSession </td><td class="col1"> Allow only one session per user </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServicePublicKeySig </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> signature public key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row456 roweven">
-		<td class="col0"> singleSessionUserByIP </td><td class="col1"> Allow only one session per user on an <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServiceSignatureMethod </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row457 rowodd">
-		<td class="col0"> singleUserByIP </td><td class="col1"> Allow only one user per <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlServiceUseCertificateInResponse </td><td class="col1"> Use certificate instead of public key in <abbr title="Security Assertion Markup Language">SAML</abbr> responses </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row458 roweven">
-		<td class="col0"> skipRenewConfirmation </td><td class="col1"> Avoid asking confirmation when an Issuer asks to renew auth </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlStorage </td><td class="col1"> Apache::Session module to store <abbr title="Security Assertion Markup Language">SAML</abbr> user data </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row459 rowodd">
-		<td class="col0"> slaveAuthnLevel </td><td class="col1"> Slave authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlStorageOptions </td><td class="col1"> Apache::Session module parameters </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row460 roweven">
-		<td class="col0"> slaveDisplayLogo </td><td class="col1"> Display Slave authentication logo </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> samlUseQueryStringSpecific </td><td class="col1"> <abbr title="Security Assertion Markup Language">SAML</abbr> use specific method for query_string </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row461 rowodd">
-		<td class="col0"> slaveExportedVars </td><td class="col1"> Slave exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenAllowOnError </td><td class="col1"> Secure Token allow requests in error </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row462 roweven">
-		<td class="col0"> slaveHeaderContent </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenAttribute </td><td class="col1"> Secure Token attribute </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row463 rowodd">
-		<td class="col0"> slaveHeaderName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenExpiration </td><td class="col1"> Secure Token expiration </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row464 roweven">
-		<td class="col0"> slaveMasterIP </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenHeader </td><td class="col1"> Secure Token header </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row465 rowodd">
-		<td class="col0"> slaveUserHeader </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenMemcachedServers </td><td class="col1"> Secure Token Memcached servers </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row466 roweven">
-		<td class="col0"> soapConfigServer </td><td class="col1"> Enable SOAP config server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> secureTokenUrls </td><td class="col1 leftalign">  </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row467 rowodd">
-		<td class="col0"> soapSessionServer </td><td class="col1"> Enable SOAP session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> securedCookie </td><td class="col1"> Cookie securisation method </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row468 roweven">
-		<td class="col0"> sslByAjax </td><td class="col1"> Use Ajax request for SSL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sentryDsn </td><td class="col1"> Sentry logger DSN </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row469 rowodd">
-		<td class="col0"> sslHost </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> for SSL Ajax request </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sessionDataToRemember </td><td class="col1"> Data to remember in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row470 roweven">
-		<td class="col0"> staticPrefix </td><td class="col1"> Prefix of static files for <abbr title="HyperText Markup Language">HTML</abbr> templates </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> sfEngine </td><td class="col1"> Second factor engine </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row471 rowodd">
-		<td class="col0"> status </td><td class="col1"> Status daemon activation </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> sfExtra </td><td class="col1"> Extra second factors </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row472 roweven">
-		<td class="col0"> stayConnected </td><td class="col1"> Enable StayConnected plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sfRemovedMsgRule </td><td class="col1"> Display a message if at leat one expired SF has been removed </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row473 rowodd">
-		<td class="col0"> storePassword </td><td class="col1"> Store password in session </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sfRemovedNotifMsg </td><td class="col1"> Notification message </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row474 roweven">
-		<td class="col0"> successLoginNumber </td><td class="col1"> Number of success stored in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sfRemovedNotifRef </td><td class="col1"> Notification reference </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row475 rowodd">
-		<td class="col0"> syslogFacility </td><td class="col1"> Syslog logger technical facility </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> sfRemovedNotifTitle </td><td class="col1"> Notification title </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row476 roweven">
-		<td class="col0"> timeout </td><td class="col1"> Session timeout on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sfRemovedUseNotif </td><td class="col1"> Use Notifications plugin to display message </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row477 rowodd">
-		<td class="col0"> timeoutActivity </td><td class="col1"> Session activity timeout on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sfRequired </td><td class="col1"> Second factor required </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row478 roweven">
-		<td class="col0"> timeoutActivityInterval </td><td class="col1"> Update session timeout interval on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> showLanguages </td><td class="col1"> Display langs icons </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row479 rowodd">
-		<td class="col0"> tokenUseGlobalStorage </td><td class="col1"> Enable global token storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> singleIP </td><td class="col1"> Allow only one session per <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row480 roweven">
-		<td class="col0"> totp2fActivation </td><td class="col1"> TOTP activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> singleSession </td><td class="col1"> Allow only one session per user </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row481 rowodd">
-		<td class="col0"> totp2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> singleSessionUserByIP </td><td class="col1"> Allow only one session per user on an <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row482 roweven">
-		<td class="col0"> totp2fDigits </td><td class="col1"> Number of digits for TOTP code </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> singleUserByIP </td><td class="col1"> Allow only one user per <abbr title="Internet Protocol">IP</abbr> </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row483 rowodd">
-		<td class="col0"> totp2fDisplayExistingSecret </td><td class="col1"> Display existing TOTP secret in registration form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> skipRenewConfirmation </td><td class="col1"> Avoid asking confirmation when an Issuer asks to renew auth </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row484 roweven">
-		<td class="col0"> totp2fInterval </td><td class="col1"> TOTP interval </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveAuthnLevel </td><td class="col1"> Slave authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row485 rowodd">
-		<td class="col0"> totp2fIssuer </td><td class="col1"> TOTP Issuer </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveDisplayLogo </td><td class="col1"> Display Slave authentication logo </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row486 roweven">
-		<td class="col0"> totp2fLabel </td><td class="col1"> Portal label for TOTP 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveExportedVars </td><td class="col1"> Slave exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row487 rowodd">
-		<td class="col0"> totp2fLogo </td><td class="col1"> Custom logo for TOTP 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveHeaderContent </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row488 roweven">
-		<td class="col0"> totp2fRange </td><td class="col1"> TOTP range (number of interval to test) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveHeaderName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row489 rowodd">
-		<td class="col0"> totp2fSelfRegistration </td><td class="col1"> TOTP self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveMasterIP </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row490 roweven">
-		<td class="col0"> totp2fTTL </td><td class="col1 leftalign"> TOTP device time to live  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> slaveUserHeader </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row491 rowodd">
-		<td class="col0"> totp2fUserCanChangeKey </td><td class="col1"> Authorize users to change existing TOTP secret </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> soapConfigServer </td><td class="col1"> Enable SOAP config server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row492 roweven">
-		<td class="col0"> totp2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing TOTP secret </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> soapSessionServer </td><td class="col1"> Enable SOAP session server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row493 rowodd">
-		<td class="col0"> trustedDomains </td><td class="col1"> Trusted domains </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sslByAjax </td><td class="col1"> Use Ajax request for SSL </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row494 roweven">
-		<td class="col0"> twitterAppName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> sslHost </td><td class="col1"> <abbr title="Uniform Resource Locator">URL</abbr> for SSL Ajax request </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row495 rowodd">
-		<td class="col0"> twitterAuthnLevel </td><td class="col1"> Twitter authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> staticPrefix </td><td class="col1"> Prefix of static files for <abbr title="HyperText Markup Language">HTML</abbr> templates </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row496 roweven">
-		<td class="col0"> twitterKey </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> status </td><td class="col1"> Status daemon activation </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row497 rowodd">
-		<td class="col0"> twitterSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> stayConnected </td><td class="col1"> Enable StayConnected plugin </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row498 roweven">
-		<td class="col0"> twitterUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> storePassword </td><td class="col1"> Store password in session </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row499 rowodd">
-		<td class="col0"> u2fActivation </td><td class="col1"> U2F activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> successLoginNumber </td><td class="col1"> Number of success stored in login history </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row500 roweven">
-		<td class="col0"> u2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> syslogFacility </td><td class="col1"> Syslog logger technical facility </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row501 rowodd">
-		<td class="col0"> u2fLabel </td><td class="col1"> Portal label for U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> timeout </td><td class="col1"> Session timeout on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row502 roweven">
-		<td class="col0"> u2fLogo </td><td class="col1"> Custom logo for U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> timeoutActivity </td><td class="col1"> Session activity timeout on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row503 rowodd">
-		<td class="col0"> u2fSelfRegistration </td><td class="col1"> U2F self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> timeoutActivityInterval </td><td class="col1"> Update session timeout interval on server side </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row504 roweven">
-		<td class="col0"> u2fTTL </td><td class="col1"> U2F device time to live </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> tokenUseGlobalStorage </td><td class="col1"> Enable global token storage </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row505 rowodd">
-		<td class="col0"> u2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing U2F key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fActivation </td><td class="col1"> TOTP activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row506 roweven">
-		<td class="col0"> upgradeSession </td><td class="col1"> Upgrade session activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row507 rowodd">
-		<td class="col0"> useRedirectOnError </td><td class="col1"> Use 302 redirect code for error (500) </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fDigits </td><td class="col1"> Number of digits for TOTP code </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row508 roweven">
-		<td class="col0"> useRedirectOnForbidden </td><td class="col1"> Use 302 redirect code for forbidden (403) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fDisplayExistingSecret </td><td class="col1"> Display existing TOTP secret in registration form </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row509 rowodd">
-		<td class="col0"> useSafeJail </td><td class="col1"> Activate Safe jail </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fInterval </td><td class="col1"> TOTP interval </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row510 roweven">
-		<td class="col0"> userControl </td><td class="col1"> Regular expression to validate login </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fIssuer </td><td class="col1"> TOTP Issuer </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row511 rowodd">
-		<td class="col0"> userDB </td><td class="col1"> User module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fLabel </td><td class="col1"> Portal label for TOTP 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row512 roweven">
-		<td class="col0"> userLogger </td><td class="col1"> User actions logger </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> totp2fLogo </td><td class="col1"> Custom logo for TOTP 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row513 rowodd">
-		<td class="col0"> userPivot </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fRange </td><td class="col1"> TOTP range (number of interval to test) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row514 roweven">
-		<td class="col0"> userSyslogFacility </td><td class="col1"> Syslog logger user-actions facility </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> totp2fSelfRegistration </td><td class="col1"> TOTP self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row515 rowodd">
-		<td class="col0"> utotp2fActivation </td><td class="col1"> UTOTP activation (mixed U2F/TOTP module) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fTTL </td><td class="col1 leftalign"> TOTP device time to live  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row516 roweven">
-		<td class="col0"> utotp2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+(U2F or TOTP) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fUserCanChangeKey </td><td class="col1"> Authorize users to change existing TOTP secret </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row517 rowodd">
-		<td class="col0"> utotp2fLabel </td><td class="col1"> Portal label for U2F+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> totp2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing TOTP secret </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row518 roweven">
-		<td class="col0"> utotp2fLogo </td><td class="col1"> Custom logo for U2F+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> trustedDomains </td><td class="col1"> Trusted domains </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row519 rowodd">
-		<td class="col0"> vhostOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+		<td class="col0"> twitterAppName </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row520 roweven">
-		<td class="col0"> viewerAllowBrowser </td><td class="col1"> Allow configuration browser </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> twitterAuthnLevel </td><td class="col1"> Twitter authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row521 rowodd">
-		<td class="col0"> viewerAllowDiff </td><td class="col1"> Allow configuration diff </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> twitterKey </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row522 roweven">
-		<td class="col0"> viewerHiddenKeys </td><td class="col1"> Hidden Conf keys </td><td class="col2 leftalign">  </td><td class="col3 leftalign">  </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+		<td class="col0"> twitterSecret </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row523 rowodd">
-		<td class="col0"> webIDAuthnLevel </td><td class="col1"> WebID authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> twitterUserField </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row524 roweven">
-		<td class="col0"> webIDExportedVars </td><td class="col1"> WebID exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fActivation </td><td class="col1"> U2F activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row525 rowodd">
-		<td class="col0"> webIDWhitelist </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row526 roweven">
-		<td class="col0"> whatToTrace </td><td class="col1"> Session parameter used to fill REMOTE_USER </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fLabel </td><td class="col1"> Portal label for U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row527 rowodd">
-		<td class="col0"> wsdlServer </td><td class="col1"> Enable /portal.wsdl server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fLogo </td><td class="col1"> Custom logo for U2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row528 roweven">
-		<td class="col0"> yubikey2fActivation </td><td class="col1"> Yubikey second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fSelfRegistration </td><td class="col1"> U2F self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row529 rowodd">
-		<td class="col0"> yubikey2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by Yubikey second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fTTL </td><td class="col1"> U2F device time to live </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row530 roweven">
-		<td class="col0"> yubikey2fClientID </td><td class="col1"> Yubico client ID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> u2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing U2F key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row531 rowodd">
-		<td class="col0"> yubikey2fLabel </td><td class="col1"> Portal label for Yubikey second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> upgradeSession </td><td class="col1"> Upgrade session activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row532 roweven">
-		<td class="col0"> yubikey2fLogo </td><td class="col1"> Custom logo for Yubikey 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> useRedirectOnError </td><td class="col1"> Use 302 redirect code for error (500) </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row533 rowodd">
-		<td class="col0"> yubikey2fNonce </td><td class="col1"> Yubico nonce </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> useRedirectOnForbidden </td><td class="col1"> Use 302 redirect code for forbidden (403) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row534 roweven">
-		<td class="col0"> yubikey2fPublicIDSize </td><td class="col1"> Yubikey public ID size </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> useSafeJail </td><td class="col1"> Activate Safe jail </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row535 rowodd">
-		<td class="col0"> yubikey2fSecretKey </td><td class="col1"> Yubico secret key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> userControl </td><td class="col1"> Regular expression to validate login </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row536 roweven">
-		<td class="col0"> yubikey2fSelfRegistration </td><td class="col1"> Yubikey self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> userDB </td><td class="col1"> User module </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row537 rowodd">
-		<td class="col0"> yubikey2fTTL </td><td class="col1"> Yubikey device time to live </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> userLogger </td><td class="col1"> User actions logger </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row538 roweven">
-		<td class="col0"> yubikey2fUrl </td><td class="col1"> Yubico server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> userPivot </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row539 rowodd">
-		<td class="col0"> yubikey2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing Yubikey </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+		<td class="col0"> userSyslogFacility </td><td class="col1"> Syslog logger user-actions facility </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
 	</tr>
 	<tr class="row540 roweven">
-		<td class="col0"> zimbraAccountKey </td><td class="col1"> Zimbra account session key </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> utotp2fActivation </td><td class="col1"> UTOTP activation (mixed U2F/TOTP module) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row541 rowodd">
-		<td class="col0"> zimbraBy </td><td class="col1"> Zimbra account type </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> utotp2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by password+(U2F or TOTP) </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row542 roweven">
-		<td class="col0"> zimbraPreAuthKey </td><td class="col1"> Zimbra preauthentication key </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> utotp2fLabel </td><td class="col1"> Portal label for U2F+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row543 rowodd">
-		<td class="col0"> zimbraSsoUrl </td><td class="col1"> Zimbra local <abbr title="Single Sign On">SSO</abbr> <abbr title="Uniform Resource Locator">URL</abbr> pattern </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+		<td class="col0"> utotp2fLogo </td><td class="col1"> Custom logo for U2F+TOTP </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 	<tr class="row544 roweven">
+		<td class="col0"> vhostOptions </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> [1] </td>
+	</tr>
+	<tr class="row545 rowodd">
+		<td class="col0"> viewerAllowBrowser </td><td class="col1"> Allow configuration browser </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row546 roweven">
+		<td class="col0"> viewerAllowDiff </td><td class="col1"> Allow configuration diff </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row547 rowodd">
+		<td class="col0"> viewerHiddenKeys </td><td class="col1"> Hidden Conf keys </td><td class="col2 leftalign">  </td><td class="col3 leftalign">  </td><td class="col4"> ✔ </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row548 roweven">
+		<td class="col0"> webIDAuthnLevel </td><td class="col1"> WebID authentication level </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row549 rowodd">
+		<td class="col0"> webIDExportedVars </td><td class="col1"> WebID exported variables </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row550 roweven">
+		<td class="col0"> webIDWhitelist </td><td class="col1 leftalign">  </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row551 rowodd">
+		<td class="col0"> whatToTrace </td><td class="col1"> Session parameter used to fill REMOTE_USER </td><td class="col2"> ✔ </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row552 roweven">
+		<td class="col0"> wsdlServer </td><td class="col1"> Enable /portal.wsdl server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row553 rowodd">
+		<td class="col0"> yubikey2fActivation </td><td class="col1"> Yubikey second factor activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row554 roweven">
+		<td class="col0"> yubikey2fAuthnLevel </td><td class="col1"> Authentication level for users authentified by Yubikey second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row555 rowodd">
+		<td class="col0"> yubikey2fClientID </td><td class="col1"> Yubico client ID </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row556 roweven">
+		<td class="col0"> yubikey2fLabel </td><td class="col1"> Portal label for Yubikey second factor </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row557 rowodd">
+		<td class="col0"> yubikey2fLogo </td><td class="col1"> Custom logo for Yubikey 2F </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row558 roweven">
+		<td class="col0"> yubikey2fNonce </td><td class="col1"> Yubico nonce </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row559 rowodd">
+		<td class="col0"> yubikey2fPublicIDSize </td><td class="col1"> Yubikey public ID size </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row560 roweven">
+		<td class="col0"> yubikey2fSecretKey </td><td class="col1"> Yubico secret key </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row561 rowodd">
+		<td class="col0"> yubikey2fSelfRegistration </td><td class="col1"> Yubikey self registration activation </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row562 roweven">
+		<td class="col0"> yubikey2fTTL </td><td class="col1"> Yubikey device time to live </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row563 rowodd">
+		<td class="col0"> yubikey2fUrl </td><td class="col1"> Yubico server </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row564 roweven">
+		<td class="col0"> yubikey2fUserCanRemoveKey </td><td class="col1"> Authorize users to remove existing Yubikey </td><td class="col2"> ✔ </td><td class="col3 leftalign">  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
+	</tr>
+	<tr class="row565 rowodd">
+		<td class="col0"> zimbraAccountKey </td><td class="col1"> Zimbra account session key </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row566 roweven">
+		<td class="col0"> zimbraBy </td><td class="col1"> Zimbra account type </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row567 rowodd">
+		<td class="col0"> zimbraPreAuthKey </td><td class="col1"> Zimbra preauthentication key </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row568 roweven">
+		<td class="col0"> zimbraSsoUrl </td><td class="col1"> Zimbra local <abbr title="Single Sign On">SSO</abbr> <abbr title="Uniform Resource Locator">URL</abbr> pattern </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
+	</tr>
+	<tr class="row569 rowodd">
 		<td class="col0"> zimbraUrl </td><td class="col1"> Zimbra preauthentication <abbr title="Uniform Resource Locator">URL</abbr> </td><td class="col2 leftalign">  </td><td class="col3"> ✔ </td><td class="col4 leftalign">  </td><td class="col5"> ✔ </td>
 	</tr>
 </table></div>
-<!-- EDIT3 TABLE [306-37463] --></div>
+<!-- EDIT3 TABLE [306-39548] --></div>
 <p>
 <em>[1]: complex nodes</em>
 </p>
 
 </div>
-<!-- EDIT2 SECTION "Main parameters" [264-37500] -->
+<!-- EDIT2 SECTION "Main parameters" [264-39585] -->
 <h2 class="sectionedit4" id="configuration_backend_parameters">Configuration backend parameters</h2>
 <div class="level2">
 <div class="table sectionedit5"><table class="inline table table-bordered table-striped">
@@ -1790,8 +1865,8 @@ The attribute key name can be used directly in <code>lemonldap-ng.ini</code> or
 		<td class="col0"> SOAP password </td><td class="col1"> Password </td>
 	</tr>
 </table></div>
-<!-- EDIT5 TABLE [37547-38922] -->
+<!-- EDIT5 TABLE [39632-41007] -->
 </div>
-<!-- EDIT4 SECTION "Configuration backend parameters" [37501-] --></div>
+<!-- EDIT4 SECTION "Configuration backend parameters" [39586-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/performances.html b/doc/pages/documentation/current/performances.html
index 761ed318e..f3bd2823f 100644
--- a/doc/pages/documentation/current/performances.html
+++ b/doc/pages/documentation/current/performances.html
@@ -119,7 +119,7 @@ LLNG uses different cache systems to avoid querying to many the databases:
 	</tr>
 	</thead>
 	<tr class="row2 roweven">
-		<th class="col0 centeralign">  Configuration  </th><td class="col1 centeralign">     <code>checkTime</code>          </td><td class="col2 centeralign">  10 minutes  </td><td class="col3 leftalign">                     </td><td class="col4 centeralign">  Until &quot;reload&quot; order  </td><td class="col5 centeralign">  ✔   </td>
+		<th class="col0 centeralign">  Configuration  </th><td class="col1 centeralign">     <code>checkTime</code>          </td><td class="col2 centeralign">  1 second    </td><td class="col3 leftalign">                     </td><td class="col4 centeralign">  Until &quot;reload&quot; order  </td><td class="col5 centeralign">  ✔   </td>
 	</tr>
 	<tr class="row3 rowodd">
 		<th class="col0 centeralign">     Session     </th><td class="col1 centeralign">  <code>handlerInternalCache</code>  </td><td class="col2 centeralign">  15 seconds  </td><td class="col3 centeralign">  <code>default_expires_in</code>(*)  </td><td class="col4 centeralign">   10 minutes   </td><td class="col5 centeralign">  ✔   </td>
@@ -129,11 +129,11 @@ LLNG uses different cache systems to avoid querying to many the databases:
 <p>
 <em>(*): Manager &gt;&gt; General parameters &gt;&gt; Sessions &gt;&gt; Sessions storage &gt;&gt; Cache module options</em>
 </p>
-<div class="noteclassic">Configuration and sessions are first looked up in-memory, then in the cache file, and then in their backing store. This means that after a configuration reload <em>(using Manager)</em>, you have to wait for <code>checkTime</code> before you can see your changes.
+<div class="noteclassic">Configuration and sessions are first looked up in-memory, then in the cache file, and then in their backing store. This means that after a configuration reload <em>(using Manager)</em>, you have to wait for <code>checkTime</code> before you can see your changes, or wait for configuration cache expiration in <code>checkTime</code> is disabled.
 
 </div>
 </div>
-<!-- EDIT3 SECTION "Cache system" [304-1241] -->
+<!-- EDIT3 SECTION "Cache system" [304-1314] -->
 <h2 class="sectionedit5" id="global_performance">Global performance</h2>
 <div class="level2">
 
@@ -152,7 +152,7 @@ To bypass this, you can:
 </ul>
 
 </div>
-<!-- EDIT5 SECTION "Global performance" [1242-1645] -->
+<!-- EDIT5 SECTION "Global performance" [1315-1718] -->
 <h3 class="sectionedit6" id="cron_optimization_or_systemd_timers">Cron optimization (or systemd timers)</h3>
 <div class="level3">
 
@@ -167,7 +167,7 @@ LLNG installs its cron files without knowing how many servers are installed. You
 </ul>
 
 </div>
-<!-- EDIT6 SECTION "Cron optimization (or systemd timers)" [1646-1945] -->
+<!-- EDIT6 SECTION "Cron optimization (or systemd timers)" [1719-2018] -->
 <h2 class="sectionedit7" id="handler_performance">Handler performance</h2>
 <div class="level2">
 
@@ -184,7 +184,7 @@ Handlers check rights and calculate headers for each HTTP hit. So to improve per
 </p>
 
 </div>
-<!-- EDIT7 SECTION "Handler performance" [1946-2376] -->
+<!-- EDIT7 SECTION "Handler performance" [2019-2449] -->
 <h3 class="sectionedit8" id="macros_and_groups">Macros and groups</h3>
 <div class="level3">
 
@@ -245,7 +245,7 @@ admin <span class="sy0">-&gt;</span> <span class="re0">$uid</span> <span class="
 </div><div class="noteimportant">Macros and groups are computed in alphanumeric order, that is, in the order they are displayed in the manager. For example, macro &quot;macro1&quot; will be computed before macro &quot;macro2&quot;: so, expression of macro2 may involve value of macro1. As same for groups: a group rule may involve another, previously computed group.
 </div>
 </div>
-<!-- EDIT8 SECTION "Macros and groups" [2377-4471] -->
+<!-- EDIT8 SECTION "Macros and groups" [2450-4544] -->
 <h3 class="sectionedit9" id="local_macros">Local macros</h3>
 <div class="level3">
 
@@ -259,12 +259,12 @@ Display<span class="sy0">-</span>Name <span class="sy0">-&gt;</span> <span class
 <div class="notetip">Note that this feature is interesting only for the Lemonldap::NG systems protecting a high number of applications
 </div>
 </div>
-<!-- EDIT9 SECTION "Local macros" [4472-5133] -->
+<!-- EDIT9 SECTION "Local macros" [4545-5206] -->
 <h2 class="sectionedit10" id="portal_performances">Portal performances</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT10 SECTION "Portal performances" [5134-5166] -->
+<!-- EDIT10 SECTION "Portal performances" [5207-5239] -->
 <h3 class="sectionedit11" id="general_performances">General performances</h3>
 <div class="level3">
 
@@ -287,7 +287,7 @@ By default it uses local storage to store its tokens. If you have more than 1 po
 
 </div>
 </div>
-<!-- EDIT11 SECTION "General performances" [5167-6044] -->
+<!-- EDIT11 SECTION "General performances" [5240-6117] -->
 <h3 class="sectionedit12" id="apachesession_performances">Apache::Session performances</h3>
 <div class="level3">
 
@@ -399,7 +399,7 @@ This test isn&#039;t an &quot;only-backend&quot; test but embedded some LLNG met
 		<td class="col0 centeralign" colspan="8">  <em>The source of this test is available in sources: e2e-tests/sbperf.pl</em>  </td>
 	</tr>
 </table></div>
-<!-- EDIT13 TABLE [8945-10848] --><ul>
+<!-- EDIT13 TABLE [9018-10921] --><ul>
 <li class="level1"><div class="li"> <em><strong>(1) :</strong> &quot;purge&quot; test is done with Apache::Session::Browseable-1.2.5 and LLG-2.0. Earlier results are not so good.</em></div>
 </li>
 <li class="level1"><div class="li"> <em><strong>(2) :</strong> &quot;purge&quot; test is done with Apache::Session::Browseable-1.2.6 and LLG-2.0.</em></div>
@@ -423,7 +423,7 @@ Analysis:
 </ul>
 
 </div>
-<!-- EDIT12 SECTION "Apache::Session performances" [6045-11626] -->
+<!-- EDIT12 SECTION "Apache::Session performances" [6118-11699] -->
 <h3 class="sectionedit14" id="ldap_performances">LDAP performances</h3>
 <div class="level3">
 
@@ -460,7 +460,7 @@ Now ldapgroups contains &quot;admin su&quot;
 
 </div>
 </div>
-<!-- EDIT14 SECTION "LDAP performances" [11627-12761] -->
+<!-- EDIT14 SECTION "LDAP performances" [11700-12834] -->
 <h3 class="sectionedit15" id="nginx_performances">NGINX performances</h3>
 <div class="level3">
 
@@ -496,12 +496,12 @@ Restart NGINX and watch web-browser console.
 </p>
 
 </div>
-<!-- EDIT15 SECTION "NGINX performances" [12762-13684] -->
+<!-- EDIT15 SECTION "NGINX performances" [12835-13757] -->
 <h2 class="sectionedit16" id="manager_performances">Manager performances</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT16 SECTION "Manager performances" [13685-13718] -->
+<!-- EDIT16 SECTION "Manager performances" [13758-13791] -->
 <h3 class="sectionedit17" id="disable_unused_modules">Disable unused modules</h3>
 <div class="level3">
 
@@ -512,7 +512,7 @@ In lemonldap-ng.ini, set only modules that you will use. By default, configurati
 <span class="re1">enabledModules</span> <span class="sy0">=</span><span class="re2"> conf, sessions</span></pre>
 
 </div>
-<!-- EDIT17 SECTION "Disable unused modules" [13719-13980] -->
+<!-- EDIT17 SECTION "Disable unused modules" [13792-14053] -->
 <h3 class="sectionedit18" id="use_static_html_files">Use static HTML files</h3>
 <div class="level3">
 
@@ -539,6 +539,6 @@ So manager <abbr title="HyperText Markup Language">HTML</abbr> templates will be
 </p>
 
 </div>
-<!-- EDIT18 SECTION "Use static HTML files" [13981-] --></div>
+<!-- EDIT18 SECTION "Use static HTML files" [14054-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/plugincustom.html b/doc/pages/documentation/current/plugincustom.html
index 0419a56aa..ffce67bd2 100644
--- a/doc/pages/documentation/current/plugincustom.html
+++ b/doc/pages/documentation/current/plugincustom.html
@@ -185,6 +185,10 @@ Declare the plugin in lemonldap-ng.ini:
 customPlugins <span class="sy0">=</span> Lemonldap<span class="sy0">::</span><span class="me2">NG</span><span class="sy0">::</span><span class="me2">Portal</span><span class="sy0">::</span><span class="me2">MyPlugin</span>
 <span class="sy0">;</span>customPlugins <span class="sy0">=</span> Lemonldap<span class="sy0">::</span><span class="me2">NG</span><span class="sy0">::</span><span class="me2">Portal</span><span class="sy0">::</span><span class="me2">MyPlugin1</span><span class="sy0">,</span> Lemonldap<span class="sy0">::</span><span class="me2">NG</span><span class="sy0">::</span><span class="me2">Portal</span><span class="sy0">::</span><span class="me2">MyPlugin2</span><span class="sy0">,</span> <span class="sy0">...</span></pre>
 
+<p>
+Since 2.0.7, it can also be configured in Manager, in General Parameters &gt; Plugins &gt; Custom Plugins.
+</p>
+
 </div>
 <!-- EDIT5 SECTION "Configuration" [2746-] --></div>
 </body>
diff --git a/doc/pages/documentation/current/portalcustom.html b/doc/pages/documentation/current/portalcustom.html
index c751ecb39..cb7db3982 100644
--- a/doc/pages/documentation/current/portalcustom.html
+++ b/doc/pages/documentation/current/portalcustom.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:portalcustom</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,portalcustom"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="portalcustom.html"/>
@@ -253,13 +253,13 @@ To use custom files, copy them into your skin folder:
 <p>
 Then you can add your media to <code>myskin/images</code>, you will be able to use them in <abbr title="HyperText Markup Language">HTML</abbr> template with this code:
 </p>
-<pre class="code">&lt;img src=&quot;&lt;TMPL_VAR NAME=&quot;STATIC_PREFIX&quot;&gt;myskin/images/logo.png&quot; class=&quot;img-responsive center-block&quot; /&gt;</pre>
+<pre class="code">&lt;img src=&quot;&lt;TMPL_VAR NAME=&quot;STATIC_PREFIX&quot;&gt;myskin/images/logo.png&quot; class=&quot;mx-auto d-block&quot; /&gt;</pre>
 
 <p>
 To change <abbr title="Cascading Style Sheets">CSS</abbr>, two options:
 </p>
 <ul>
-<li class="level1"><div class="li"> Edit myksin/css/skin.css and myskin/css/skin.min.css</div>
+<li class="level1"><div class="li"> Edit myksin/css/styles.css and myskin/css/styles.min.css</div>
 </li>
 <li class="level1"><div class="li"> Create a new <abbr title="Cascading Style Sheets">CSS</abbr> file, for example myskin/css/myskin.css and load it in customhead.tpl:</div>
 </li>
@@ -276,7 +276,7 @@ To configure your new skin in Manager, select the custom skin, and enter your sk
 <pre class="code">/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 set portalSkin &#039;myskin&#039; portalSkinBackground &#039;&#039;</pre>
 
 </div>
-<!-- EDIT9 SECTION "Skin customization" [2841-4818] -->
+<!-- EDIT9 SECTION "Skin customization" [2841-4810] -->
 <h3 class="sectionedit10" id="messages">Messages</h3>
 <div class="level3">
 
@@ -327,7 +327,7 @@ You can also create a file called <code>all.json</code> to override messages in
 </p>
 
 </div>
-<!-- EDIT10 SECTION "Messages" [4819-5955] -->
+<!-- EDIT10 SECTION "Messages" [4811-5947] -->
 <h3 class="sectionedit11" id="menu_tabs">Menu tabs</h3>
 <div class="level3">
 
@@ -343,7 +343,7 @@ This will allow one to display the tab directly with this <abbr title="Uniform R
 </p>
 
 </div>
-<!-- EDIT11 SECTION "Menu tabs" [5956-6262] -->
+<!-- EDIT11 SECTION "Menu tabs" [5948-6254] -->
 <h3 class="sectionedit12" id="template_parameters">Template parameters</h3>
 <div class="level3">
 
@@ -371,7 +371,7 @@ You can also display environment variables, with the prefix <code>env_</code>:
 <pre class="code file html4strict">Your IP is <span class="sc2">&lt;TMPL_VAR <span class="kw3">NAME</span><span class="sy0">=</span><span class="st0">&quot;env_REMOTE_ADDR&quot;</span>&gt;</span></pre>
 
 </div>
-<!-- EDIT12 SECTION "Template parameters" [6263-6910] -->
+<!-- EDIT12 SECTION "Template parameters" [6255-6902] -->
 <h2 class="sectionedit13" id="buttons">Buttons</h2>
 <div class="level2">
 
@@ -388,12 +388,12 @@ This node allows one to enable/disable buttons on the login page:
 </ul>
 
 </div>
-<!-- EDIT13 SECTION "Buttons" [6911-7427] -->
+<!-- EDIT13 SECTION "Buttons" [6903-7419] -->
 <h2 class="sectionedit14" id="password_management">Password management</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT14 SECTION "Password management" [7428-7460] -->
+<!-- EDIT14 SECTION "Password management" [7420-7452] -->
 <h3 class="sectionedit15" id="general">General</h3>
 <div class="level3">
 <ul>
@@ -406,7 +406,7 @@ This node allows one to enable/disable buttons on the login page:
 </ul>
 
 </div>
-<!-- EDIT15 SECTION "General" [7461-7896] -->
+<!-- EDIT15 SECTION "General" [7453-7888] -->
 <h3 class="sectionedit16" id="password_policy">Password Policy</h3>
 <div class="level3">
 <div class="notetip">Available since version 2.0.6
@@ -424,7 +424,7 @@ This node allows one to enable/disable buttons on the login page:
 </ul>
 
 </div>
-<!-- EDIT16 SECTION "Password Policy" [7897-8329] -->
+<!-- EDIT16 SECTION "Password Policy" [7889-8321] -->
 <h2 class="sectionedit17" id="other_parameters">Other parameters</h2>
 <div class="level2">
 <ul>
@@ -443,6 +443,6 @@ This node allows one to enable/disable buttons on the login page:
 </ul>
 
 </div>
-<!-- EDIT17 SECTION "Other parameters" [8330-] --></div>
+<!-- EDIT17 SECTION "Other parameters" [8322-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/refreshsessionapi.html b/doc/pages/documentation/current/refreshsessionapi.html
new file mode 100644
index 000000000..db39fb83e
--- /dev/null
+++ b/doc/pages/documentation/current/refreshsessionapi.html
@@ -0,0 +1,80 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:refreshsessionapi</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,refreshsessionapi"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="refreshsessionapi.html"/>
+<link rel="contents" href="refreshsessionapi.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:refreshsessionapi","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+
+<h1 class="sectionedit1" id="refresh_session_plugin_api">Refresh session plugin (API)</h1>
+<div class="level1">
+
+<p>
+This plugin adds an endpoint to refresh sessions by user. It adds a <code><a href="https://portal/refreshsession" class="urlextern" title="https://portal/refreshsession"  rel="nofollow">https://portal/refreshsession</a></code> endpoint. Protect it by webserver configuration.
+</p>
+
+<p>
+This plugin is available with LLNG ≥ 2.0.7.
+</p>
+
+</div>
+<!-- EDIT1 SECTION "Refresh session plugin (API)" [1-243] -->
+<h2 class="sectionedit2" id="usage">Usage</h2>
+<div class="level2">
+
+<p>
+This endpoint accepts only POST requests with a JSON content:
+</p>
+<div class="table sectionedit3"><table class="inline table table-bordered table-striped">
+	<thead>
+	<tr class="row0 roweven">
+		<th class="col0 centeralign">  Request  </th><th class="col1 centeralign">  Response  </th>
+	</tr>
+	</thead>
+	<tr class="row1 rowodd">
+		<td class="col0 centeralign">  <code>{&quot;uid&quot;:&quot;userid&quot;}</code>  </td><td class="col1 centeralign">  <code>{&quot;updated&quot;:1,&quot;errors&quot;:0}</code>  </td>
+	</tr>
+</table></div>
+<!-- EDIT3 TABLE [326-412] -->
+</div>
+<!-- EDIT2 SECTION "Usage" [244-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/renater.html b/doc/pages/documentation/current/renater.html
index f8c54ecec..0529a5553 100644
--- a/doc/pages/documentation/current/renater.html
+++ b/doc/pages/documentation/current/renater.html
@@ -116,16 +116,14 @@ Configure <a href="samlservice.html#discovery_protocol" class="wikilink1" title=
 <div class="level3">
 
 <p>
-You now need to import IDP metadata in <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration. Use the <code>importMetadata</code> script that should be installed in /usr/share/lemonldap-ng/bin. You need to select the correct metadata bundle proposed by Renater: <a href="https://services.renater.fr/federation/technique/metadata" class="urlextern" title="https://services.renater.fr/federation/technique/metadata"  rel="nofollow">https://services.renater.fr/federation/technique/metadata</a>, for example:
+You now need to import IDP metadata in <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration. Use the <code>importMetadata</code> script that should be installed in /usr/share/lemonldap-ng/bin. You need to select the correct metadata bundle proposed by Renater: <a href="https://services.renater.fr/federation/technique/metadata" class="urlextern" title="https://services.renater.fr/federation/technique/metadata"  rel="nofollow">https://services.renater.fr/federation/technique/metadata</a>.
 </p>
-<pre class="code">/usr/share/lemonldap-ng/bin/importMetadata -m https://metadata.federation.renater.fr/renater/main/main-idps-renater-metadata.xml -r -i &quot;idp-renater&quot; -s &quot;sp-renater&quot;</pre>
-<div class="noteimportant">You need to add this in cron to refresh metadata into <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration.
-</div>
+
 <p>
-If you need too customize some settings of the script, copy it and edit configuration:
+For Renater, you need to customize some settings of the script, copy it and edit configuration:
 </p>
-<pre class="code">cp /usr/share/lemonldap-ng/bin/importMetadata /usr/share/lemonldap-ng/bin/importMetadataCustom
-vi /usr/share/lemonldap-ng/bin/importMetadataCustom</pre>
+<pre class="code">cp /usr/share/lemonldap-ng/bin/importMetadata /usr/share/lemonldap-ng/bin/importMetadataRenater
+vi /usr/share/lemonldap-ng/bin/importMetadataRenater</pre>
 
 <p>
 Set attributes (use the <abbr title="Security Assertion Markup Language">SAML</abbr> Name, not FriendlyName) that are provided by IDPs, for example:
@@ -165,8 +163,14 @@ Adapt IDP options, for example:
     <span class="st_h">'samlIDPMetaDataOptionsUserAttribute'</span> <span class="sy0">=&gt;</span> <span class="st_h">'urn:oid:1.3.6.1.4.1.5923.1.1.1.6'</span><span class="sy0">,</span>
 <span class="br0">&#125;</span><span class="sy0">;</span></pre>
 
+<p>
+Then run the script:
+</p>
+<pre class="code">/usr/share/lemonldap-ng/bin/importMetadataRenater -m https://metadata.federation.renater.fr/renater/main/main-idps-renater-metadata.xml -r -i &quot;idp-renater-&quot; -s &quot;sp-renater-&quot;</pre>
+<div class="noteimportant">You need to add this in cron to refresh metadata into <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration.
 </div>
-<!-- EDIT5 SECTION "Metadata import" [779-3520] -->
+</div>
+<!-- EDIT5 SECTION "Metadata import" [779-3549] -->
 <h3 class="sectionedit6" id="add_your_sp_into_the_federation">Add your SP into the federation</h3>
 <div class="level3">
 
@@ -176,12 +180,12 @@ Go to <a href="https://federation.renater.fr/registry" class="urlextern" title="
 <div class="noteimportant">Be sure to check all attributes as mandatory to be able to get them in <abbr title="Security Assertion Markup Language">SAML</abbr> assertions.
 </div>
 </div>
-<!-- EDIT6 SECTION "Add your SP into the federation" [3521-3747] -->
+<!-- EDIT6 SECTION "Add your SP into the federation" [3550-3776] -->
 <h2 class="sectionedit7" id="register_as_identity_provider">Register as Identity Provider</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT7 SECTION "Register as Identity Provider" [3748-3790] -->
+<!-- EDIT7 SECTION "Register as Identity Provider" [3777-3819] -->
 <h3 class="sectionedit8" id="llng_configuration1">LL::NG configuration</h3>
 <div class="level3">
 
@@ -191,21 +195,19 @@ Configure <abbr title="LemonLDAP::NG">LL::NG</abbr> as <abbr title="Security Ass
 <div class="noteimportant">If your <abbr title="LemonLDAP::NG">LL::NG</abbr> server will act as SP and IDP inside Renater federation, you need to set the advanced parameter &quot;Override Entity ID for IDP&quot;. Indeed, Renater do not allow to register a SP and an IDP with the same entityID.
 </div>
 </div>
-<!-- EDIT8 SECTION "LL::NG configuration" [3791-4198] -->
+<!-- EDIT8 SECTION "LL::NG configuration" [3820-4227] -->
 <h3 class="sectionedit9" id="metadata_import1">Metadata import</h3>
 <div class="level3">
 
 <p>
-You now need to import SP metadata in <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration. Use the <code>importMetadata</code> script that should be installed in /usr/share/lemonldap-ng/bin. You need to select the correct metadata bundle proposed by Renater: <a href="https://services.renater.fr/federation/technique/metadata" class="urlextern" title="https://services.renater.fr/federation/technique/metadata"  rel="nofollow">https://services.renater.fr/federation/technique/metadata</a>, for example:
+You now need to import SP metadata in <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration. Use the <code>importMetadata</code> script that should be installed in /usr/share/lemonldap-ng/bin. You need to select the correct metadata bundle proposed by Renater: <a href="https://services.renater.fr/federation/technique/metadata" class="urlextern" title="https://services.renater.fr/federation/technique/metadata"  rel="nofollow">https://services.renater.fr/federation/technique/metadata</a>.
 </p>
-<pre class="code">/usr/share/lemonldap-ng/bin/importMetadata -m https://metadata.federation.renater.fr/renater/main/main-sps-renater-metadata.xml -r -i &quot;idp-renater&quot; -s &quot;sp-renater&quot;</pre>
-<div class="noteimportant">You need to add this in cron to refresh metadata into <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration.
-</div>
+
 <p>
-If you need too customize some settings of the script, copy it and edit configuration:
+For Renater, you may need to customize some settings of the script, copy it and edit configuration:
 </p>
-<pre class="code">cp /usr/share/lemonldap-ng/bin/importMetadata /usr/share/lemonldap-ng/bin/importMetadataCustom
-vi /usr/share/lemonldap-ng/bin/importMetadataCustom</pre>
+<pre class="code">cp /usr/share/lemonldap-ng/bin/importMetadata /usr/share/lemonldap-ng/bin/importMetadataRenater
+vi /usr/share/lemonldap-ng/bin/importMetadataRenater</pre>
 
 <p>
 Adapt IDP options, for example:
@@ -224,8 +226,14 @@ Adapt IDP options, for example:
     <span class="st_h">'samlSPMetaDataOptionsSignSSOMessage'</span>             <span class="sy0">=&gt;</span> <span class="nu0">1</span>
 <span class="br0">&#125;</span><span class="sy0">;</span></pre>
 
+<p>
+Then run the script:
+</p>
+<pre class="code">/usr/share/lemonldap-ng/bin/importMetadataRenater -m https://metadata.federation.renater.fr/renater/main/main-sps-renater-metadata.xml -r -i &quot;idp-renater&quot; -s &quot;sp-renater&quot;</pre>
+<div class="noteimportant">You need to add this in cron to refresh metadata into <abbr title="LemonLDAP::NG">LL::NG</abbr> configuration.
 </div>
-<!-- EDIT9 SECTION "Metadata import" [4199-5798] -->
+</div>
+<!-- EDIT9 SECTION "Metadata import" [4228-5857] -->
 <h3 class="sectionedit10" id="add_your_idp_into_the_federation">Add your IDP into the federation</h3>
 <div class="level3">
 
@@ -234,6 +242,6 @@ Go to <a href="https://federation.renater.fr/registry" class="urlextern" title="
 </p>
 
 </div>
-<!-- EDIT10 SECTION "Add your IDP into the federation" [5799-] --></div>
+<!-- EDIT10 SECTION "Add your IDP into the federation" [5858-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/restconfbackend.html b/doc/pages/documentation/current/restconfbackend.html
index 7129e437f..9198b7506 100644
--- a/doc/pages/documentation/current/restconfbackend.html
+++ b/doc/pages/documentation/current/restconfbackend.html
@@ -72,7 +72,7 @@ You can share your configuration over the network using REST proxy system:
 </li>
 <li class="level1"><div class="li"> GET /config/&lt;latest|cfgNum&gt;/&lt;key&gt;: get conf key value</div>
 </li>
-<li class="level1"><div class="li"> GET /config/&lt;latest|cfgNum&gt;?full: get the full configuration</div>
+<li class="level1"><div class="li"> GET /config/&lt;latest|cfgNum&gt;?full=1: get the full configuration</div>
 </li>
 </ul>
 
@@ -90,12 +90,12 @@ If no &lt;lang&gt; provided, &#039;en&#039; errors file is returned.
 <div class="notetip">Note that REST is not a real configuration backend, but just a proxy system to access to your configuration over the network
 </div>
 </div>
-<!-- EDIT1 SECTION "REST configuration backend" [1-694] -->
+<!-- EDIT1 SECTION "REST configuration backend" [1-696] -->
 <h2 class="sectionedit2" id="configuration">Configuration</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT2 SECTION "Configuration" [695-721] -->
+<!-- EDIT2 SECTION "Configuration" [697-723] -->
 <h3 class="sectionedit3" id="first_configure_your_real_backend">First, configure your real backend</h3>
 <div class="level3">
 <ul>
@@ -124,7 +124,7 @@ location /index.psgi/config {
 }</pre>
 
 </div>
-<!-- EDIT3 SECTION "First, configure your real backend" [722-1502] -->
+<!-- EDIT3 SECTION "First, configure your real backend" [724-1504] -->
 <h3 class="sectionedit4" id="next_configure_rest_for_your_remote_servers">Next, configure REST for your remote servers</h3>
 <div class="level3">
 
@@ -146,6 +146,6 @@ You can also add some other parameters
 <span class="re1">proxyOptions</span> <span class="sy0">=</span><span class="re2"> <span class="br0">&#123;</span> timeout <span class="sy0">=</span>&gt; 5 <span class="br0">&#125;</span></span></pre>
 
 </div>
-<!-- EDIT4 SECTION "Next, configure REST for your remote servers" [1503-] --></div>
+<!-- EDIT4 SECTION "Next, configure REST for your remote servers" [1505-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/servertoserver.html b/doc/pages/documentation/current/servertoserver.html
index 098542fee..fbc3128e1 100644
--- a/doc/pages/documentation/current/servertoserver.html
+++ b/doc/pages/documentation/current/servertoserver.html
@@ -87,14 +87,18 @@ WebApp1 can read this header and use it in its requests by setting the <code>X-L
 </p>
 
 <p>
-You can set ServiceToken default timeout (30 seconds) by editing <code>lemonldap-ng.ini</code> in section [handler]:
+You can set ServiceToken TTL in the virtualHost options in Manager for each required virtualHost.
+</p>
+
+<p>
+You can also set ServiceToken default timeout (30 seconds) by editing <code>lemonldap-ng.ini</code> in section [handler]:
 </p>
 <pre class="code file ini"><span class="re0"><span class="br0">&#91;</span>handler<span class="br0">&#93;</span></span>
 <span class="re1">handlerServiceTokenTTL</span> <span class="sy0">=</span><span class="re2"> 30</span></pre>
 <div class="noteclassic">Service token timeout can be set for each virtual hosts.
 </div>
 </div>
-<!-- EDIT2 SECTION "Webapp1 handler configuration" [894-1790] -->
+<!-- EDIT2 SECTION "Webapp1 handler configuration" [894-1894] -->
 <h2 class="sectionedit3" id="webapp2_handler_configuration">Webapp2 handler configuration</h2>
 <div class="level2">
 
@@ -103,6 +107,6 @@ Change handler type to <strong>ServiceToken</strong>. So it is able to manage bo
 </p>
 
 </div>
-<!-- EDIT3 SECTION "Webapp2 handler configuration" [1791-] --></div>
+<!-- EDIT3 SECTION "Webapp2 handler configuration" [1895-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/start.html b/doc/pages/documentation/current/start.html
index 7b6ca5a93..a984bcb4f 100644
--- a/doc/pages/documentation/current/start.html
+++ b/doc/pages/documentation/current/start.html
@@ -106,19 +106,17 @@
 </li>
 <li class="level1"><div class="li"> <a href="documentation/quickstart.html" class="wikilink1" title="documentation:quickstart">Quick start tutorial</a></div>
 </li>
-<li class="level1"><div class="li"> <a href="https://github.com/LemonLDAPNG/pts2019-llng-workshop" class="urlextern" title="https://github.com/LemonLDAPNG/pts2019-llng-workshop"  rel="nofollow">Workshop: connect LL::NG to OpenLDAP and use 2FA</a></div>
-</li>
 <li class="level1"><div class="li"> <a href="platformsoverview.html" class="wikilink1" title="documentation:2.0:platformsoverview">Choose a platform</a></div>
 </li>
 </ul>
 
 </div>
-<!-- EDIT2 SECTION "Presentation" [52-379] -->
+<!-- EDIT2 SECTION "Presentation" [52-269] -->
 <h2 class="sectionedit3" id="installation">Installation</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT3 SECTION "Installation" [380-405] -->
+<!-- EDIT3 SECTION "Installation" [270-295] -->
 <h3 class="sectionedit4" id="before_installation">Before installation</h3>
 <div class="level3">
 
@@ -139,7 +137,7 @@
 </p>
 
 </div>
-<!-- EDIT4 SECTION "Before installation" [406-670] -->
+<!-- EDIT4 SECTION "Before installation" [296-560] -->
 <h3 class="sectionedit5" id="installation1">Installation</h3>
 <div class="level3">
 
@@ -168,7 +166,7 @@
 </p>
 
 </div>
-<!-- EDIT5 SECTION "Installation" [671-1216] -->
+<!-- EDIT5 SECTION "Installation" [561-1106] -->
 <h3 class="sectionedit6" id="after_installation">After installation</h3>
 <div class="level3">
 
@@ -191,12 +189,12 @@
 </p>
 
 </div>
-<!-- EDIT6 SECTION "After installation" [1217-1653] -->
+<!-- EDIT6 SECTION "After installation" [1107-1543] -->
 <h2 class="sectionedit7" id="configuration">Configuration</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT7 SECTION "Configuration" [1654-1680] -->
+<!-- EDIT7 SECTION "Configuration" [1544-1570] -->
 <h3 class="sectionedit8" id="first_steps">First steps</h3>
 <div class="level3">
 
@@ -225,7 +223,7 @@
 </p>
 
 </div>
-<!-- EDIT8 SECTION "First steps" [1681-2140] -->
+<!-- EDIT8 SECTION "First steps" [1571-2030] -->
 <h3 class="sectionedit9" id="portal">Portal</h3>
 <div class="level3">
 
@@ -396,7 +394,7 @@
 		<td class="col0"> <a href="autosignin.html" class="wikilink1" title="documentation:2.0:autosignin">Auto Signin</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1 centeralign">  ✔  </td><td class="col2"></td><td class="col3"></td>
 	</tr>
 </table></div>
-<!-- EDIT10 TABLE [2677-5552] -->
+<!-- EDIT10 TABLE [2567-5442] -->
 <p>
 </div></div>
 </p>
@@ -440,11 +438,16 @@
 		<td class="col0"> <a href="issuerdbget.html" class="wikilink1" title="documentation:2.0:issuerdbget">Get parameters provider</a> <em>(for poor applications)</em> </td><td class="col1 leftalign">   </td><td class="col2 centeralign">  ✔  </td>
 	</tr>
 </table></div>
-<!-- EDIT11 TABLE [5898-6259] -->
+<!-- EDIT11 TABLE [5788-6149] -->
 <p>
 </div></div>
 </p>
-<div class="notetip">Issuers timeout : Delay for issuers to submit their authentication requests
+<div class="notetip">* Issuers timeout : Delay for issuers to submit their authentication requests
+<p>
+* To avoid a bad/expired token and lose redirection to the SP protected application after authentication if IdP URLs are served by different load balancers, you can force Issuer tokens to be stored into Global Storage by editing <code>lemonldap-ng.ini</code> in section [portal]:
+</p>
+<pre class="code file ini"><span class="re0"><span class="br0">&#91;</span>portal<span class="br0">&#93;</span></span>
+<span class="re1">forceGlobalStorageIssuerOTT</span> <span class="sy0">=</span><span class="re2"> 1</span></pre>
 
 </div>
 </div>
@@ -493,7 +496,7 @@
 		<td class="col0"> <a href="safejail.html" class="wikilink1" title="documentation:2.0:safejail">XSS</a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 leftalign">    </td>
 	</tr>
 </table></div>
-<!-- EDIT12 TABLE [6641-7155] -->
+<!-- EDIT12 TABLE [6866-7380] -->
 <p>
 </div></div>
 </p>
@@ -527,61 +530,70 @@
 		<td class="col0"> <a href="checkstate.html" class="wikilink1" title="documentation:2.0:checkstate">Check state</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Check state plugin (test page) </td>
 	</tr>
 	<tr class="row5 rowodd">
-		<td class="col0"> <a href="checkuser.html" class="wikilink1" title="documentation:2.0:checkuser">Check user </a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Check access rights, transmitted headers and session attibutes for a specific user and <abbr title="Uniform Resource Locator">URL</abbr> </td>
+		<td class="col0"> <a href="checkuser.html" class="wikilink1" title="documentation:2.0:checkuser">Check user </a> <sup><a href="#fn__4" id="fnt__4" class="fn_top">4)</a></sup> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Check access rights, transmitted headers and session attibutes for a specific user and <abbr title="Uniform Resource Locator">URL</abbr> </td>
 	</tr>
 	<tr class="row6 roweven">
 		<td class="col0"> <a href="viewer.html" class="wikilink1" title="documentation:2.0:viewer">Configuration viewer</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Edit WebSSO configuration in Read Only mode </td>
 	</tr>
 	<tr class="row7 rowodd">
-		<td class="col0"> <a href="contextswitching.html" class="wikilink1" title="documentation:2.0:contextswitching">Context switching</a> <sup><a href="#fn__4" id="fnt__4" class="fn_top">4)</a></sup><a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Switch context other users </td>
+		<td class="col0"> <a href="contextswitching.html" class="wikilink1" title="documentation:2.0:contextswitching">Context switching</a> <sup><a href="#fn__5" id="fnt__5" class="fn_top">5)</a></sup><a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Switch context other users </td>
 	</tr>
 	<tr class="row8 roweven">
 		<td class="col0"> <a href="plugincustom.html" class="wikilink1" title="documentation:2.0:plugincustom">Custom</a> </td><td class="col1"> Write a custom plugin </td>
 	</tr>
 	<tr class="row9 rowodd">
-		<td class="col0"> <a href="loginhistory.html" class="wikilink1" title="documentation:2.0:loginhistory">Display login history</a> </td><td class="col1"></td>
+		<td class="col0"> <a href="decryptvalue.html" class="wikilink1" title="documentation:2.0:decryptvalue">Decrypt value</a> <sup><a href="#fn__6" id="fnt__6" class="fn_top">6)</a></sup><a href="documentation/beta.png" class="media" title="documentation:beta.png"><img src="documentation/beta.2707b90c7f00808e80f984a3026445b0.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Decrypt ciphered values </td>
 	</tr>
 	<tr class="row10 roweven">
-		<td class="col0"> <a href="forcereauthn.html" class="wikilink1" title="documentation:2.0:forcereauthn">Force Authentication</a> </td><td class="col1"> Force authentication to access to Portal </td>
+		<td class="col0"> <a href="loginhistory.html" class="wikilink1" title="documentation:2.0:loginhistory">Display login history</a> </td><td class="col1"></td>
 	</tr>
 	<tr class="row11 rowodd">
-		<td class="col0"> <a href="grantsession.html" class="wikilink1" title="documentation:2.0:grantsession">Grant Sessions</a> </td><td class="col1"> Rules to apply before allowing a user to open a session </td>
+		<td class="col0"> <a href="forcereauthn.html" class="wikilink1" title="documentation:2.0:forcereauthn">Force Authentication</a> </td><td class="col1"> Force authentication to access to Portal </td>
 	</tr>
 	<tr class="row12 roweven">
-		<td class="col0"> <a href="impersonation.html" class="wikilink1" title="documentation:2.0:impersonation">Impersonation </a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Allow users to use another identity </td>
+		<td class="col0"> <a href="globallogout.html" class="wikilink1" title="documentation:2.0:globallogout">Global Logout</a> <sup><a href="#fn__7" id="fnt__7" class="fn_top">7)</a></sup><a href="documentation/beta.png" class="media" title="documentation:beta.png"><img src="documentation/beta.2707b90c7f00808e80f984a3026445b0.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Suggest to close all opened sessions at logout </td>
 	</tr>
 	<tr class="row13 rowodd">
-		<td class="col0"> <a href="notifications.html" class="wikilink1" title="documentation:2.0:notifications">Notifications system</a> </td><td class="col1"></td>
+		<td class="col0"> <a href="grantsession.html" class="wikilink1" title="documentation:2.0:grantsession">Grant Sessions</a> </td><td class="col1"> Rules to apply before allowing a user to open a session </td>
 	</tr>
 	<tr class="row14 roweven">
-		<td class="col0"> <a href="status.html" class="wikilink1" title="documentation:2.0:status">Portal Status</a> </td><td class="col1"> Experimental portal status page </td>
+		<td class="col0"> <a href="impersonation.html" class="wikilink1" title="documentation:2.0:impersonation">Impersonation </a> <sup><a href="#fn__8" id="fnt__8" class="fn_top">8)</a></sup><a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Allow users to use another identity </td>
 	</tr>
 	<tr class="row15 rowodd">
-		<td class="col0"> <a href="public_pages.html" class="wikilink1" title="documentation:2.0:public_pages">Public pages</a> </td><td class="col1"> Enable public pages system </td>
+		<td class="col0"> <a href="notifications.html" class="wikilink1" title="documentation:2.0:notifications">Notifications system</a> </td><td class="col1"></td>
 	</tr>
 	<tr class="row16 roweven">
-		<td class="col0"> <a href="resetpassword.html" class="wikilink1" title="documentation:2.0:resetpassword">Reset password by mail</a> </td><td class="col1"></td>
+		<td class="col0"> <a href="refreshsessionapi.html" class="wikilink1" title="documentation:2.0:refreshsessionapi">Refresh session API</a> <sup><a href="#fn__9" id="fnt__9" class="fn_top">9)</a></sup></td><td class="col1"> Plugin that provides an <abbr title="Application Programming Interface">API</abbr> to refresh a user session </td>
 	</tr>
 	<tr class="row17 rowodd">
-		<td class="col0"> <a href="restservices.html" class="wikilink1" title="documentation:2.0:restservices">REST services</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> REST server for <a href="authproxy.html" class="wikilink1" title="documentation:2.0:authproxy">Proxy</a> </td>
+		<td class="col0"> <a href="status.html" class="wikilink1" title="documentation:2.0:status">Portal Status</a> </td><td class="col1"> Experimental portal status page </td>
 	</tr>
 	<tr class="row18 roweven">
-		<td class="col0"> <a href="soapservices.html" class="wikilink1" title="documentation:2.0:soapservices">SOAP services</a> <em>(deprecated)</em> </td><td class="col1"> SOAP server for <a href="authproxy.html" class="wikilink1" title="documentation:2.0:authproxy">Proxy</a> </td>
+		<td class="col0"> <a href="public_pages.html" class="wikilink1" title="documentation:2.0:public_pages">Public pages</a> </td><td class="col1"> Enable public pages system </td>
 	</tr>
 	<tr class="row19 rowodd">
-		<td class="col0"> <a href="stayconnected" class="wikilink2" title="documentation:2.0:stayconnected" rel="nofollow">Stay connected</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Enable persistent connection on same browser </td>
+		<td class="col0"> <a href="resetpassword.html" class="wikilink1" title="documentation:2.0:resetpassword">Reset password by mail</a> </td><td class="col1"></td>
 	</tr>
 	<tr class="row20 roweven">
+		<td class="col0"> <a href="restservices.html" class="wikilink1" title="documentation:2.0:restservices">REST services</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> REST server for <a href="authproxy.html" class="wikilink1" title="documentation:2.0:authproxy">Proxy</a> </td>
+	</tr>
+	<tr class="row21 rowodd">
+		<td class="col0"> <a href="soapservices.html" class="wikilink1" title="documentation:2.0:soapservices">SOAP services</a> <em>(deprecated)</em> </td><td class="col1"> SOAP server for <a href="authproxy.html" class="wikilink1" title="documentation:2.0:authproxy">Proxy</a> </td>
+	</tr>
+	<tr class="row22 roweven">
+		<td class="col0"> <a href="stayconnected" class="wikilink2" title="documentation:2.0:stayconnected" rel="nofollow">Stay connected</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Enable persistent connection on same browser </td>
+	</tr>
+	<tr class="row23 rowodd">
 		<td class="col0"> Upgrade session <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1"> Plugin that explain to user that a more secure authentication is needed instead of rejected it </td>
 	</tr>
 </table></div>
-<!-- EDIT13 TABLE [7323-9158] -->
+<!-- EDIT13 TABLE [7548-10050] -->
 <p>
 </div></div>
 </p>
 
 </div>
-<!-- EDIT9 SECTION "Portal" [2141-9186] -->
+<!-- EDIT9 SECTION "Portal" [2031-10078] -->
 <h3 class="sectionedit14" id="handlers">Handlers</h3>
 <div class="level3">
 
@@ -601,7 +613,7 @@ Handlers are software control agents to be installed on your web servers <em>(Ng
 	</tr>
 	</thead>
 	<tr class="row1 rowodd">
-		<td class="col0"> Main <em>(default handler)</em> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 centeralign">  <a href="nodehandler.html" class="wikilink1" title="documentation:2.0:nodehandler">Partial</a> <strong><sup><a href="#fn__5" id="fnt__5" class="fn_top">5)</a></sup></strong>  </td><td class="col5 centeralign">  ✔  </td><td class="col6 leftalign">  </td>
+		<td class="col0"> Main <em>(default handler)</em> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 centeralign">  <a href="nodehandler.html" class="wikilink1" title="documentation:2.0:nodehandler">Partial</a> <strong><sup><a href="#fn__10" id="fnt__10" class="fn_top">10)</a></sup></strong>  </td><td class="col5 centeralign">  ✔  </td><td class="col6 leftalign">  </td>
 	</tr>
 	<tr class="row2 roweven">
 		<td class="col0"> <a href="handlerauthbasic.html" class="wikilink1" title="documentation:2.0:handlerauthbasic">AuthBasic</a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 leftalign">  </td><td class="col5 centeralign">  ✔  </td><td class="col6"> Designed for some server-to-server applications </td>
@@ -616,7 +628,7 @@ Handlers are software control agents to be installed on your web servers <em>(Ng
 		<td class="col0"> <a href="devopssthandler.html" class="wikilink1" title="documentation:2.0:devopssthandler">DevOpsST</a> <em>(<a href="ssoaas.html" class="wikilink1" title="documentation:2.0:ssoaas">SSOaaS</a>)</em> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 centeralign">  ✔  </td><td class="col5 leftalign">  </td><td class="col6"> Enables both <a href="devopshandler.html" class="wikilink1" title="documentation:2.0:devopshandler">DevOps</a> and <a href="servertoserver.html" class="wikilink1" title="documentation:2.0:servertoserver">Service Token</a> </td>
 	</tr>
 	<tr class="row6 roweven">
-		<td class="col0"> <a href="oauth2handler.html" class="wikilink1" title="documentation:2.0:oauth2handler">OAuth2</a> <sup><a href="#fn__6" id="fnt__6" class="fn_top">6)</a></sup><a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 leftalign">  </td><td class="col5 centeralign">  ✔  </td><td class="col6"> Uses OpenID Connect/OAuth2 access token to check authentication and authorization, can be used to protect Web Services </td>
+		<td class="col0"> <a href="oauth2handler.html" class="wikilink1" title="documentation:2.0:oauth2handler">OAuth2</a> <sup><a href="#fn__11" id="fnt__11" class="fn_top">11)</a></sup><a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 leftalign">  </td><td class="col5 centeralign">  ✔  </td><td class="col6"> Uses OpenID Connect/OAuth2 access token to check authentication and authorization, can be used to protect Web Services </td>
 	</tr>
 	<tr class="row7 rowodd">
 		<td class="col0"> <a href="securetoken.html" class="wikilink1" title="documentation:2.0:securetoken">Secure Token</a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td><td class="col6"> Designed to secure exchanges between a LLNG reverse-proxy and a remote app </td>
@@ -628,13 +640,13 @@ Handlers are software control agents to be installed on your web servers <em>(Ng
 		<td class="col0"> <a href="applications/zimbra.html" class="wikilink1" title="documentation:2.0:applications:zimbra">Zimbra PreAuth</a> </td><td class="col1 centeralign">  ✔  </td><td class="col2 centeralign">  ✔  </td><td class="col3 centeralign">  ✔  </td><td class="col4 leftalign">  </td><td class="col5 leftalign">  </td>
 	</tr>
 </table></div>
-<!-- EDIT15 TABLE [9460-11243] -->
+<!-- EDIT15 TABLE [10352-12135] -->
 <p>
 </div></div>
 </p>
 
 </div>
-<!-- EDIT14 SECTION "Handlers" [9187-11271] -->
+<!-- EDIT14 SECTION "Handlers" [10079-12163] -->
 <h3 class="sectionedit16" id="llng_databases">LLNG databases</h3>
 <div class="level3">
 
@@ -683,7 +695,7 @@ Handlers are software control agents to be installed on your web servers <em>(Ng
 		<td class="col0 centeralign">  <a href="localconfbackend.html" class="wikilink1" title="documentation:2.0:localconfbackend">Local</a> <a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a>  </td><td class="col1 leftalign">  </td><td class="col2 leftalign"> Use only lemonldap-ng.ini parameters.  </td>
 	</tr>
 </table></div>
-<!-- EDIT17 TABLE [11576-12688] --><div class="notetip">You can not start with an empty configuration, so read <a href="changeconfbackend.html" class="wikilink1" title="documentation:2.0:changeconfbackend">how to change configuration backend</a> to convert your existing configuration into another one.
+<!-- EDIT17 TABLE [12468-13580] --><div class="notetip">You can not start with an empty configuration, so read <a href="changeconfbackend.html" class="wikilink1" title="documentation:2.0:changeconfbackend">how to change configuration backend</a> to convert your existing configuration into another one.
 </div>
 <p>
 </div></div>
@@ -738,13 +750,14 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 <strong>Can be used to secure another backend</strong> for remote servers.  </td>
 	</tr>
 </table></div>
-<!-- EDIT18 TABLE [13553-15253] -->
+<!-- EDIT18 TABLE [14445-16145] -->
 <p>
 </div></div>
 </p>
-
+<div class="notetip">You can migrate from one session backend to another using the <a href="changesessionbackend.html" class="wikilink1" title="documentation:2.0:changesessionbackend">session conversion script</a>. (<a href="documentation/new.png" class="media" title="documentation:new.png"><img src="documentation/new.ae92cc06c5d7671f1d904a7fe6e5ed09.png" class="media" alt="" width="35" /></a> <em>since 2.0.7</em>) 
 </div>
-<!-- EDIT16 SECTION "LLNG databases" [11272-15281] -->
+</div>
+<!-- EDIT16 SECTION "LLNG databases" [12164-16351] -->
 <h2 class="sectionedit19" id="applications_protection">Applications protection</h2>
 <div class="level2">
 
@@ -766,6 +779,8 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </li>
 <li class="level1"><div class="li"> <a href="customhandlers.html" class="wikilink1" title="documentation:2.0:customhandlers">Custom Handlers</a></div>
 </li>
+<li class="level1"><div class="li"> <a href="webserviceprotection.html" class="wikilink1" title="documentation:2.0:webserviceprotection">WebServices / API</a></div>
+</li>
 </ul>
 
 <p>
@@ -773,7 +788,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </p>
 
 </div>
-<!-- EDIT19 SECTION "Applications protection" [15282-15772] -->
+<!-- EDIT19 SECTION "Applications protection" [16352-16889] -->
 <h3 class="sectionedit20" id="well_known_compatible_applications">Well known compatible applications</h3>
 <div class="level3">
 <div class="noteclassic">Here is a list of well known applications that are compatible with <abbr title="LemonLDAP::NG">LL::NG</abbr>. A full list is available on <a href="applications.html" class="wikilink1" title="documentation:2.0:applications">vendor applications page</a>.
@@ -877,7 +892,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </p>
 
 </div>
-<!-- EDIT20 SECTION "Well known compatible applications" [15773-18111] -->
+<!-- EDIT20 SECTION "Well known compatible applications" [16890-19228] -->
 <h2 class="sectionedit21" id="advanced_features">Advanced features</h2>
 <div class="level2">
 
@@ -936,7 +951,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </p>
 
 </div>
-<!-- EDIT21 SECTION "Advanced features" [18112-19331] -->
+<!-- EDIT21 SECTION "Advanced features" [19229-20448] -->
 <h2 class="sectionedit22" id="mini_howtos">Mini howtos</h2>
 <div class="level2">
 
@@ -966,6 +981,8 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </li>
 <li class="level1"><div class="li"> <a href="behindproxyminihowto.html" class="wikilink1" title="documentation:2.0:behindproxyminihowto">Run LemonLDAP::NG components behind a reverse proxy</a></div>
 </li>
+<li class="level1"><div class="li"> <a href="useoutgoingproxy.html" class="wikilink1" title="documentation:2.0:useoutgoingproxy">Configure LL::NG to use an outgoing proxy</a></div>
+</li>
 </ul>
 
 <p>
@@ -973,7 +990,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </p>
 
 </div>
-<!-- EDIT22 SECTION "Mini howtos" [19332-20226] -->
+<!-- EDIT22 SECTION "Mini howtos" [20449-21410] -->
 <h2 class="sectionedit23" id="exploitation">Exploitation</h2>
 <div class="level2">
 
@@ -1008,7 +1025,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
 </p>
 
 </div>
-<!-- EDIT23 SECTION "Exploitation" [20227-20744] -->
+<!-- EDIT23 SECTION "Exploitation" [21411-21928] -->
 <h2 class="sectionedit24" id="bug_report">Bug report</h2>
 <div class="level2">
 
@@ -1017,7 +1034,7 @@ See <a href="bugreport.html" class="wikilink1" title="bugreport">How to report a
 </p>
 
 </div>
-<!-- EDIT24 SECTION "Bug report" [20745-20809] -->
+<!-- EDIT24 SECTION "Bug report" [21929-21993] -->
 <h2 class="sectionedit25" id="developer_corner">Developer corner</h2>
 <div class="level2">
 
@@ -1084,7 +1101,7 @@ If you don&#039;t want to publish your translation <em>(<code>XX</code> must be
 </ul>
 
 </div>
-<!-- EDIT25 SECTION "Developer corner" [20810-] --><div class="footnotes">
+<!-- EDIT25 SECTION "Developer corner" [21994-] --><div class="footnotes">
 <div class="fn"><sup><a href="#fnt__1" id="fn__1" class="fn_bot">1)</a></sup> 
 <a href="authgpg.html" class="wikilink1" title="documentation:2.0:authgpg">GPG</a> is available with LLNG ≥ 2.0.2</div>
 <div class="fn"><sup><a href="#fnt__2" id="fn__2" class="fn_bot">2)</a></sup> 
@@ -1092,10 +1109,19 @@ If you don&#039;t want to publish your translation <em>(<code>XX</code> must be
 <div class="fn"><sup><a href="#fnt__3" id="fn__3" class="fn_bot">3)</a></sup> 
 <a href="sfextra.html" class="wikilink1" title="documentation:2.0:sfextra">Additional second factors</a> is available with LLNG ≥ 2.0.6</div>
 <div class="fn"><sup><a href="#fnt__4" id="fn__4" class="fn_bot">4)</a></sup> 
-<a href="contextswitching.html" class="wikilink1" title="documentation:2.0:contextswitching">Context switching</a> is available with LLNG ≥ 2.0.6</div>
+, <sup><a href="#fnt__8" id="fn__8" class="fn_bot">8)</a></sup> 
+<a href="contextswitching.html" class="wikilink1" title="documentation:2.0:contextswitching">Context switching</a> is available with LLNG ≥ 2.0.3</div>
 <div class="fn"><sup><a href="#fnt__5" id="fn__5" class="fn_bot">5)</a></sup> 
-<a href="nodehandler.html" class="wikilink1" title="documentation:2.0:nodehandler">Node.js handler</a> has not yet reached the same level of functionalities</div>
+<a href="contextswitching.html" class="wikilink1" title="documentation:2.0:contextswitching">Context switching</a> is available with LLNG ≥ 2.0.6</div>
 <div class="fn"><sup><a href="#fnt__6" id="fn__6" class="fn_bot">6)</a></sup> 
+<a href="decryptvalue.html" class="wikilink1" title="documentation:2.0:decryptvalue">Decrypt value</a> is available with LLNG ≥ 2.0.7</div>
+<div class="fn"><sup><a href="#fnt__7" id="fn__7" class="fn_bot">7)</a></sup> 
+<a href="globallogout.html" class="wikilink1" title="documentation:2.0:globallogout">Global Logout</a> is available with LLNG ≥ 2.0.7</div>
+<div class="fn"><sup><a href="#fnt__9" id="fn__9" class="fn_bot">9)</a></sup> 
+<a href="refreshsessionapi.html" class="wikilink1" title="documentation:2.0:refreshsessionapi">Refresh session plugin</a> is available with LLNG ≥ 2.0.7</div>
+<div class="fn"><sup><a href="#fnt__10" id="fn__10" class="fn_bot">10)</a></sup> 
+<a href="nodehandler.html" class="wikilink1" title="documentation:2.0:nodehandler">Node.js handler</a> has not yet reached the same level of functionalities</div>
+<div class="fn"><sup><a href="#fnt__11" id="fn__11" class="fn_bot">11)</a></sup> 
 <a href="oauth2handler.html" class="wikilink1" title="documentation:2.0:oauth2handler">OAuth2 Handler</a> is available with LLNG ≥ 2.0.4</div>
 </div>
 </div>
diff --git a/doc/pages/documentation/current/stayconnected b/doc/pages/documentation/current/stayconnected
index cd0f79986..4e9db8fb1 100644
--- a/doc/pages/documentation/current/stayconnected
+++ b/doc/pages/documentation/current/stayconnected
@@ -90,7 +90,7 @@
         <form action="/start" accept-charset="utf-8" class="search" id="dw__search" method="get" role="search"><div class="no"><input type="hidden" name="do" value="search" /><input type="text" id="qsearch__in" accesskey="f" name="id" class="edit" title="[F]" /><input type="submit" value="Search" class="button" title="Search" /><div id="qsearch__out" class="ajax_qsearch JSpopup"></div></div></form>
         
         <ul class="nav navbar-nav">
-                    <li><a href="/documentation/2.0/stayconnected?do=login&amp;sectok=594f5b54f4cd53665bf9d5ac7a31ad7a"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
+                    <li><a href="/documentation/2.0/stayconnected?do=login&amp;sectok=dd0430f7cec89a350deb28406029abc8"  class="action login" rel="nofollow" title="Login"><i class="glyphicon glyphicon-log-in"></i> Login</a></li>        </ul>
 
       </div>
 
@@ -272,7 +272,7 @@ You&#039;ve followed a link to a topic that doesn&#039;t exist yet. If permissio
       
     </div><!-- /site -->
 
-    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Astayconnected&amp;1569271210" width="2" height="1" alt="" /></div>
+    <div class="no"><img src="/lib/exe/indexer.php?id=documentation%3A2.0%3Astayconnected&amp;1576942870" width="2" height="1" alt="" /></div>
     <div id="screen__mode" class="no">
       <span class="visible-xs"></span>
       <span class="visible-sm"></span>
diff --git a/doc/pages/documentation/current/upgrade.html b/doc/pages/documentation/current/upgrade.html
index 8b181693f..4c7e32e53 100644
--- a/doc/pages/documentation/current/upgrade.html
+++ b/doc/pages/documentation/current/upgrade.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8" />
   <title>documentation:2.0:upgrade</title>
 <meta name="generator" content="DokuWiki"/>
-<meta name="robots" content="index,follow"/>
+<meta name="robots" content="noindex,nofollow"/>
 <meta name="keywords" content="documentation,2.0,upgrade"/>
 <link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
 <link rel="start" href="upgrade.html"/>
@@ -49,6 +49,7 @@
 <div>
 
 <ul class="toc">
+<li class="level1"><div class="li"><a href="#section207">2.0.7</a></div></li>
 <li class="level1"><div class="li"><a href="#section206">2.0.6</a></div></li>
 <li class="level1"><div class="li"><a href="#section205">2.0.5</a></div></li>
 <li class="level1"><div class="li"><a href="#upgrade_order_from_19">Upgrade order from 1.9.*</a></div></li>
@@ -89,7 +90,32 @@ Please apply general caution as you would with any software: have backups and a
 </div>
 </div>
 <!-- EDIT1 SECTION "Upgrade from 2.0.x to 2.0.y" [1-527] -->
-<h2 class="sectionedit2" id="section206">2.0.6</h2>
+<h2 class="sectionedit2" id="section207">2.0.7</h2>
+<div class="level2">
+<ul>
+<li class="level1"><div class="li"> Security:</div>
+<ul>
+<li class="level2"><div class="li"> <a href="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/2040" class="urlextern" title="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/2040"  rel="nofollow">#2040</a>: Configuration of a redirection <abbr title="Uniform Resource Identifier">URI</abbr> for an OpenID Connect Relying Party is now mandatory, as defined in the specifications. If you save your configuration, you will have an error if some of your RP don&#039;t have a redirect <abbr title="Uniform Resource Identifier">URI</abbr> configured.</div>
+</li>
+<li class="level2"><div class="li"> <a href="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1943" class="urlextern" title="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1943"  rel="nofollow">#1943</a> / <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19791" class="urlextern" title="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19791"  rel="nofollow">CVE-2019-19791</a>: along with the patch provided in 2.0.7 in <code>Lemonldap/NG/Common/PSGI/Request.pm</code>, Apache rewrite rule must be updated to avoid an unprotected access to REST services:</div>
+</li>
+</ul>
+</li>
+</ul>
+<pre class="code file apache">    <span class="kw1">RewriteCond</span> <span class="st0">&quot;%{REQUEST_URI}&quot;</span> <span class="st0">&quot;!^/(?:(?:static|javascript|favicon).*|.*<span class="es0">\.</span>fcgi(?:/.*)?)$&quot;</span>
+    <span class="kw1">RewriteRule</span> <span class="st0">&quot;^/(.+)$&quot;</span> <span class="st0">&quot;/index.fcgi/$1&quot;</span> [PT]</pre>
+<ul>
+<li class="level1"><div class="li"> Other:</div>
+<ul>
+<li class="level2"><div class="li"> Option <code>checkTime</code> was enabled by default in <code>lemonldap-ng.ini</code>, this let the portal check the configuration immediately instead of waiting for configuration cache expiration. You can keep this option enabled unless you need strong <a href="performances.html" class="wikilink1" title="documentation:2.0:performances">performances</a>.</div>
+</li>
+</ul>
+</li>
+</ul>
+
+</div>
+<!-- EDIT2 SECTION "2.0.7" [528-1651] -->
+<h2 class="sectionedit3" id="section206">2.0.6</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> Option was added to display generate password box in <a href="resetpassword.html" class="wikilink1" title="documentation:2.0:resetpassword">password reset by mail plugin</a>. If you use this feature, you must enable this option, which is disabled by default.</div>
@@ -97,30 +123,38 @@ Please apply general caution as you would with any software: have backups and a
 <li class="level1"><div class="li"> If you use the default _whatToTrace macro and a case insensitive authentication backend, then a user can generate several persistent sessions for the same login (see <a href="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1869" class="urlextern" title="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1869"  rel="nofollow">issue 1869</a>). This can lead to a security bug if you enabled 2FA, which rely on data stored in the persistent session. To fix this, either choose a unique attribute for _whatToTrace, either force lower case in your macro:</div>
 </li>
 </ul>
-<pre class="code perl"><span class="re0">$_auth</span> <span class="kw1">eq</span> <span class="st_h">'SAML'</span> <span class="sy0">?</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="sy0">.</span><span class="st_h">'@'</span><span class="sy0">.</span><span class="re0">$_idpConfKey</span><span class="br0">&#41;</span> <span class="sy0">:</span> <span class="re0">$_auth</span> <span class="kw1">eq</span> <span class="st_h">'OpenIDConnect'</span> <span class="sy0">?</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="sy0">.</span><span class="st_h">'@'</span><span class="sy0">.</span><span class="re0">$_oidcConnectedRP</span><span class="br0">&#41;</span> <span class="sy0">:</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="br0">&#41;</span></pre>
+<pre class="code perl"><span class="re0">$_auth</span> <span class="kw1">eq</span> <span class="st_h">'SAML'</span> <span class="sy0">?</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="sy0">.</span><span class="st_h">'@'</span><span class="sy0">.</span><span class="re0">$_idpConfKey</span><span class="br0">&#41;</span> <span class="sy0">:</span> <span class="re0">$_auth</span> <span class="kw1">eq</span> <span class="st_h">'OpenIDConnect'</span> <span class="sy0">?</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="sy0">.</span><span class="st_h">'@'</span><span class="sy0">.</span><span class="re0">$_oidc_OP</span><span class="br0">&#41;</span> <span class="sy0">:</span> <a href="http://perldoc.perl.org/functions/lc.html"><span class="kw3">lc</span></a><span class="br0">&#40;</span><span class="re0">$_user</span><span class="br0">&#41;</span></pre>
+<ul>
+<li class="level1"><div class="li"> On CentOS 7 / RHEL 7, a system upgrade breaks ImageMagick, which is used to display captchas (see <a href="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1951" class="urlextern" title="https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1951"  rel="nofollow">#1951</a>). To fix this, you can run the following commands:</div>
+</li>
+</ul>
+<pre class="code">yum install -y urw-base35-fonts-legacy
+sed &#039;s,/usr/share/fonts/default/Type1/,/usr/share/X11/fonts/urw-fonts/,g&#039; -i /etc/ImageMagick/type-ghostscript.xml</pre>
 
 </div>
-<!-- EDIT2 SECTION "2.0.6" [528-1336] -->
-<h2 class="sectionedit3" id="section205">2.0.5</h2>
+<!-- EDIT3 SECTION "2.0.6" [1652-2845] -->
+<h2 class="sectionedit4" id="section205">2.0.5</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> The Text::Unidecode perl module becomes a requirement <em>(it will be automatically installed if you upgrade from from the deb or RPM repositories)</em></div>
 </li>
 <li class="level1"><div class="li"> <abbr title="Central Authentication Service">CAS</abbr> logout starts validating the service= parameter, but only if you use the <abbr title="Central Authentication Service">CAS</abbr> Access control policy. The <abbr title="Uniform Resource Locator">URL</abbr> sent in the service= parameter will be checked against <a href="idpcas.html#configuring_cas_applications" class="wikilink1" title="documentation:2.0:idpcas">known CAS applications</a>, Virtual Hosts, and  <a href="security.html#configure_security_settings" class="wikilink1" title="documentation:2.0:security">trusted domains</a>. Add your target domain to trusted domains if you suddenly start having &quot;Invalid <abbr title="Uniform Resource Locator">URL</abbr>&quot; messages on logout</div>
 </li>
-<li class="level1"><div class="li">Improvements in cryptographic functions: to take advantage of them, <strong>you must change the encryption key</strong> of LemonLDAP::NG (see <a href="cli_examples.html#encryption_key" class="wikilink1" title="documentation:2.0:cli_examples">CLI example</a>).</div>
+<li class="level1"><div class="li"> Improvements in cryptographic functions: to take advantage of them, <strong>you must change the encryption key</strong> of LemonLDAP::NG (see <a href="cli_examples.html#encryption_key" class="wikilink1" title="documentation:2.0:cli_examples">CLI example</a>).</div>
+</li>
+<li class="level1"><div class="li"> Debian packaging:  FastCGI / uWsgi servers require llng-lmlog.conf and llng-lua-headers.conf. Those configuration files are now provided by lemonldap-ng-handler package and installed in /etc/nginx/snippets directory.</div>
 </li>
 </ul>
 
 </div>
-<!-- EDIT3 SECTION "2.0.5" [1337-2105] -->
-<h1 class="sectionedit4" id="upgrade_from_19_to_20">Upgrade from 1.9 to 2.0</h1>
+<!-- EDIT4 SECTION "2.0.5" [2846-3836] -->
+<h1 class="sectionedit5" id="upgrade_from_19_to_20">Upgrade from 1.9 to 2.0</h1>
 <div class="level1">
 <div class="noteimportant">2.0 is a major release, lot of things have been changed. You must read this document before upgrade.
 </div>
 </div>
-<!-- EDIT4 SECTION "Upgrade from 1.9 to 2.0" [2106-2269] -->
-<h2 class="sectionedit5" id="upgrade_order_from_19">Upgrade order from 1.9.*</h2>
+<!-- EDIT5 SECTION "Upgrade from 1.9 to 2.0" [3837-4000] -->
+<h2 class="sectionedit6" id="upgrade_order_from_19">Upgrade order from 1.9.*</h2>
 <div class="level2">
 
 <p>
@@ -137,8 +171,8 @@ As usual, if you use more than 1 server and don&#039;t want to stop <abbr title=
 <div class="noteimportant">You must revalidate your configuration using the manager.
 </div>
 </div>
-<!-- EDIT5 SECTION "Upgrade order from 1.9.*" [2270-2744] -->
-<h2 class="sectionedit6" id="installation">Installation</h2>
+<!-- EDIT6 SECTION "Upgrade order from 1.9.*" [4001-4475] -->
+<h2 class="sectionedit7" id="installation">Installation</h2>
 <div class="level2">
 <div class="noteimportant">French documentation is no more available. Only English version of this documentation is maintained now.
 </div>
@@ -161,8 +195,8 @@ For <abbr title="Security Assertion Markup Language">SAML</abbr> features, we re
 </p>
 
 </div>
-<!-- EDIT6 SECTION "Installation" [2745-3130] -->
-<h2 class="sectionedit7" id="configuration">Configuration</h2>
+<!-- EDIT7 SECTION "Installation" [4476-4861] -->
+<h2 class="sectionedit8" id="configuration">Configuration</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> <strong>lemonldap-ng.ini</strong> requires some new fields in portal section. Update yours using the one given installed by default. New requires fields are:</div>
@@ -199,8 +233,8 @@ For <abbr title="Security Assertion Markup Language">SAML</abbr> features, we re
 
 </div>
 </div>
-<!-- EDIT7 SECTION "Configuration" [3131-4958] -->
-<h3 class="sectionedit8" id="configuration_refresh">Configuration refresh</h3>
+<!-- EDIT8 SECTION "Configuration" [4862-6689] -->
+<h3 class="sectionedit9" id="configuration_refresh">Configuration refresh</h3>
 <div class="level3">
 
 <p>
@@ -209,8 +243,8 @@ Now portal has the same behavior than handlers: it looks to configuration stored
 <div class="noteimportant">If you want to use reload mechanism on a portal only host, you must install a handler in Portal host to be able to refresh local cache. Include <code>handler-nginx.conf</code> or <code>handler-apache2.conf</code> for example
 </div>
 </div>
-<!-- EDIT8 SECTION "Configuration refresh" [4959-5380] -->
-<h2 class="sectionedit9" id="ldap_connection">LDAP connection</h2>
+<!-- EDIT9 SECTION "Configuration refresh" [6690-7111] -->
+<h2 class="sectionedit10" id="ldap_connection">LDAP connection</h2>
 <div class="level2">
 
 <p>
@@ -218,8 +252,8 @@ Now LDAP connections are kept open to improve performances. To allow that, <abbr
 </p>
 
 </div>
-<!-- EDIT9 SECTION "LDAP connection" [5381-5564] -->
-<h2 class="sectionedit10" id="kerberos_or_ssl_usage">Kerberos or SSL usage</h2>
+<!-- EDIT10 SECTION "LDAP connection" [7112-7295] -->
+<h2 class="sectionedit11" id="kerberos_or_ssl_usage">Kerberos or SSL usage</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> A new <a href="authkerberos.html" class="wikilink1" title="documentation:2.0:authkerberos">Kerberos</a> authentication backend has been added since 2.0. This module solves many Kerberos integration problems <em>(usage in conjunction with other backends, better error display,…)</em>. However, you can retain the old integration manner <em>(using <a href="authapache.html" class="wikilink1" title="documentation:2.0:authapache">Apache authentication module</a>)</em>.</div>
@@ -229,8 +263,8 @@ Now LDAP connections are kept open to improve performances. To allow that, <abbr
 </ul>
 
 </div>
-<!-- EDIT10 SECTION "Kerberos or SSL usage" [5565-6073] -->
-<h2 class="sectionedit11" id="logs">Logs</h2>
+<!-- EDIT11 SECTION "Kerberos or SSL usage" [7296-7804] -->
+<h2 class="sectionedit12" id="logs">Logs</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> <strong>Syslog</strong>: logs are now configured in <code>lemonldap-ng.ini</code> file only. If you use Syslog, you must reconfigure it. See <a href="logs.html" class="wikilink1" title="documentation:2.0:logs">logs</a> for more.</div>
@@ -242,8 +276,8 @@ Now LDAP connections are kept open to improve performances. To allow that, <abbr
 </ul>
 
 </div>
-<!-- EDIT11 SECTION "Logs" [6074-6655] -->
-<h2 class="sectionedit12" id="security">Security</h2>
+<!-- EDIT12 SECTION "Logs" [7805-8386] -->
+<h2 class="sectionedit13" id="security">Security</h2>
 <div class="level2">
 
 <p>
@@ -257,8 +291,8 @@ LLNG portal now embeds the following features:
 </ul>
 
 </div>
-<!-- EDIT12 SECTION "Security" [6656-7223] -->
-<h2 class="sectionedit13" id="handlers">Handlers</h2>
+<!-- EDIT13 SECTION "Security" [8387-8954] -->
+<h2 class="sectionedit14" id="handlers">Handlers</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> <strong>Apache only</strong>:</div>
@@ -276,8 +310,8 @@ LLNG portal now embeds the following features:
 </ul>
 
 </div>
-<!-- EDIT13 SECTION "Handlers" [7224-8309] -->
-<h2 class="sectionedit14" id="rules_and_headers">Rules and headers</h2>
+<!-- EDIT14 SECTION "Handlers" [8955-10040] -->
+<h2 class="sectionedit15" id="rules_and_headers">Rules and headers</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> hostname() and remote_ip() are no more provided to avoid some name conflicts <em>(replaced by $ENV{})</em></div>
@@ -289,8 +323,8 @@ LLNG portal now embeds the following features:
 </ul>
 
 </div>
-<!-- EDIT14 SECTION "Rules and headers" [8310-8628] -->
-<h2 class="sectionedit15" id="supported_servers">Supported servers</h2>
+<!-- EDIT15 SECTION "Rules and headers" [10041-10359] -->
+<h2 class="sectionedit16" id="supported_servers">Supported servers</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> Apache-1.3 files are not provided now. You can build them yourself by looking at Apache-2 configuration files</div>
@@ -298,8 +332,8 @@ LLNG portal now embeds the following features:
 </ul>
 
 </div>
-<!-- EDIT15 SECTION "Supported servers" [8629-8774] -->
-<h2 class="sectionedit16" id="ajax_requests">Ajax requests</h2>
+<!-- EDIT16 SECTION "Supported servers" [10360-10505] -->
+<h2 class="sectionedit17" id="ajax_requests">Ajax requests</h2>
 <div class="level2">
 
 <p>
@@ -307,8 +341,8 @@ Before 2.0, an Ajax query launched after session timeout received a 302 code. No
 </p>
 
 </div>
-<!-- EDIT16 SECTION "Ajax requests" [8775-8972] -->
-<h2 class="sectionedit17" id="soaprest_services">SOAP/REST services</h2>
+<!-- EDIT17 SECTION "Ajax requests" [10506-10703] -->
+<h2 class="sectionedit18" id="soaprest_services">SOAP/REST services</h2>
 <div class="level2">
 <ul>
 <li class="level1"><div class="li"> SOAP server activation is now split in 2 parameters (configuration/sessions). You must set them else SOAP service will be disabled</div>
@@ -323,8 +357,8 @@ Before 2.0, an Ajax query launched after session timeout received a 302 code. No
 <div class="noteimportant"><a href="handlerauthbasic.html" class="wikilink1" title="documentation:2.0:handlerauthbasic">AuthBasic Handler</a> uses now REST services instead of SOAP.
 </div>
 </div>
-<!-- EDIT17 SECTION "SOAP/REST services" [8973-9570] -->
-<h2 class="sectionedit18" id="cas">CAS</h2>
+<!-- EDIT18 SECTION "SOAP/REST services" [10704-11301] -->
+<h2 class="sectionedit19" id="cas">CAS</h2>
 <div class="level2">
 
 <p>
@@ -336,13 +370,13 @@ Before 2.0, an Ajax query launched after session timeout received a 302 code. No
 </p>
 
 </div>
-<!-- EDIT18 SECTION "CAS" [9571-9948] -->
-<h2 class="sectionedit19" id="developer_corner">Developer corner</h2>
+<!-- EDIT19 SECTION "CAS" [11302-11679] -->
+<h2 class="sectionedit20" id="developer_corner">Developer corner</h2>
 <div class="level2">
 
 </div>
-<!-- EDIT19 SECTION "Developer corner" [9949-9978] -->
-<h3 class="sectionedit20" id="apis">APIs</h3>
+<!-- EDIT20 SECTION "Developer corner" [11680-11709] -->
+<h3 class="sectionedit21" id="apis">APIs</h3>
 <div class="level3">
 
 <p>
@@ -350,8 +384,8 @@ Portal has now many REST features and includes an <abbr title="Application Progr
 </p>
 
 </div>
-<!-- EDIT20 SECTION "APIs" [9979-10140] -->
-<h3 class="sectionedit21" id="portal_overview">Portal overview</h3>
+<!-- EDIT21 SECTION "APIs" [11710-11871] -->
+<h3 class="sectionedit22" id="portal_overview">Portal overview</h3>
 <div class="level3">
 
 <p>
@@ -372,8 +406,8 @@ Requests are independent objects based on Lemonldap::NG::Portal::Main::Request w
 </p>
 
 </div>
-<!-- EDIT21 SECTION "Portal overview" [10141-10616] -->
-<h3 class="sectionedit22" id="handler">Handler</h3>
+<!-- EDIT22 SECTION "Portal overview" [11872-12347] -->
+<h3 class="sectionedit23" id="handler">Handler</h3>
 <div class="level3">
 
 <p>
@@ -385,6 +419,6 @@ If you used self protected CGI, you also need to rewrite them, see <a href="self
 </p>
 
 </div>
-<!-- EDIT22 SECTION "Handler" [10617-] --></div>
+<!-- EDIT23 SECTION "Handler" [12348-] --></div>
 </body>
 </html>
diff --git a/doc/pages/documentation/current/useoutgoingproxy.html b/doc/pages/documentation/current/useoutgoingproxy.html
new file mode 100644
index 000000000..e7523c6f6
--- /dev/null
+++ b/doc/pages/documentation/current/useoutgoingproxy.html
@@ -0,0 +1,87 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:useoutgoingproxy</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,useoutgoingproxy"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="useoutgoingproxy.html"/>
+<link rel="contents" href="useoutgoingproxy.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:useoutgoingproxy","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+
+<h1 class="sectionedit1" id="use_an_outgoing_proxy">Use an outgoing proxy</h1>
+<div class="level1">
+
+<p>
+For some protocols, <abbr title="LemonLDAP::NG">LL::NG</abbr> has to directly contact the external server. This is the case for example with <abbr title="Central Authentication Service">CAS</abbr> authentication (validation of service ticket) or OpenID Connect authentication (access to token endpoint and userinfo endpoint).
+</p>
+
+<p>
+If the <abbr title="LemonLDAP::NG">LL::NG</abbr> server needs a proxy for outgoing connections, then you need to configure some environment variables.
+</p>
+
+</div>
+<!-- EDIT1 SECTION "Use an outgoing proxy" [1-394] -->
+<h2 class="sectionedit2" id="apache">Apache</h2>
+<div class="level2">
+
+<p>
+In Apache configuration, set:
+</p>
+<pre class="code file apache">FcgidInitialEnv http_proxy http://X.X.X.X:X
+FcgidInitialEnv https_proxy http://X.X.X.X:X
+<span class="co1"># on Centos7, you need LWP::Protocol::connect</span>
+<span class="co1"># FcgidInitialEnv https_proxy connect://X.X.X.X:X</span></pre>
+
+</div>
+<!-- EDIT2 SECTION "Apache" [395-652] -->
+<h2 class="sectionedit3" id="nginxfastcgi">Nginx/FastCGI</h2>
+<div class="level2">
+
+<p>
+add in <code>/etc/default/lemonldap-ng-fastcgi-server</code> :
+</p>
+<pre class="code">http_proxy=http://X.X.X.X:X
+https_proxy=http://X.X.X.X:X
+# on Centos7, you need LWP::Protocol::connect
+# https_proxy=connect://X.X.X.X:X</pre>
+
+</div>
+<!-- EDIT3 SECTION "Nginx/FastCGI" [653-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/webserviceprotection.html b/doc/pages/documentation/current/webserviceprotection.html
new file mode 100644
index 000000000..e5a927852
--- /dev/null
+++ b/doc/pages/documentation/current/webserviceprotection.html
@@ -0,0 +1,179 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="utf-8" />
+  <title>documentation:2.0:webserviceprotection</title>
+<meta name="generator" content="DokuWiki"/>
+<meta name="robots" content="index,follow"/>
+<meta name="keywords" content="documentation,2.0,webserviceprotection"/>
+<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
+<link rel="start" href="webserviceprotection.html"/>
+<link rel="contents" href="webserviceprotection.html" title="Sitemap"/>
+<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
+<!-- //if:usedebianlibs
+  <link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
+//elsif:useexternallibs
+  <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
+//elsif:cssminified
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
+//else -->
+  <link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
+<!-- //endif -->
+<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:webserviceprotection","namespace":"documentation:2.0"};
+/*!]]>*/</script>
+<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script>
+<!-- //if:usedebianlibs
+<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
+//elsif:useexternallibs
+<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
+//elsif:jsminified
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
+//else -->
+<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script>
+<!-- //endif -->
+<!-- //if:usedebianlibs
+  <script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
+//elsif:useexternallibs
+  <script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
+//elsif:jsminified
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.min.js"></script>
+//else -->
+  <script type="text/javascript" src="/static/bwr/jquery-ui/jquery-ui.js"></script>
+<!-- //endif -->
+</head>
+<body>
+<div class="dokuwiki export container">
+<!-- TOC START -->
+<div id="dw__toc">
+<h3 class="toggle">Table of Contents</h3>
+<div>
+
+<ul class="toc">
+<li class="level1"><div class="li"><a href="#presentation">Presentation</a></div></li>
+<li class="level1"><div class="li"><a href="#servicetoken_handler">ServiceToken Handler</a></div></li>
+<li class="level1"><div class="li"><a href="#oauth2_endpoints">OAuth2 endpoints</a></div>
+<ul class="toc">
+<li class="level2"><div class="li"><a href="#userinfo">UserInfo</a></div></li>
+<li class="level2"><div class="li"><a href="#introspection">Introspection</a></div></li>
+</ul>
+</li>
+<li class="level1"><div class="li"><a href="#oauth2_handler">OAuth2 Handler</a></div></li>
+</ul>
+</div>
+</div>
+<!-- TOC END -->
+
+<h1 class="sectionedit1" id="webservicesapi">WebServices / API</h1>
+<div class="level1">
+
+</div>
+<!-- EDIT1 SECTION "WebServices / API" [1-33] -->
+<h2 class="sectionedit2" id="presentation">Presentation</h2>
+<div class="level2">
+
+<p>
+WebServices and <abbr title="Application Programming Interface">API</abbr> are mostly requested by an application, and not the end-user itself. In this case, you can not rely on <abbr title="LemonLDAP::NG">LL::NG</abbr> standard Handler to protect the webservice, as it will expect a cookie, which is not defined in the application requesting the service.
+</p>
+
+<p>
+<abbr title="LemonLDAP::NG">LL::NG</abbr> offers several solutions to protect this kind of service.
+</p>
+
+</div>
+<!-- EDIT2 SECTION "Presentation" [34-392] -->
+<h2 class="sectionedit3" id="servicetoken_handler">ServiceToken Handler</h2>
+<div class="level2">
+
+<p>
+Two Handlers will be used:
+</p>
+<ul>
+<li class="level1"><div class="li"> The frontal Handler that will protect the web application, and will forge a specific token</div>
+</li>
+<li class="level1"><div class="li"> The backend Handler that will protect the web service, and will consume the token</div>
+</li>
+</ul>
+
+<p>
+See <a href="servertoserver.html" class="wikilink1" title="documentation:2.0:servertoserver">ServiceToken Handler documentation</a>.
+</p>
+
+</div>
+<!-- EDIT3 SECTION "ServiceToken Handler" [393-695] -->
+<h2 class="sectionedit4" id="oauth2_endpoints">OAuth2 endpoints</h2>
+<div class="level2">
+
+<p>
+We suppose here that <abbr title="LemonLDAP::NG">LL::NG</abbr> is acting as <a href="idpopenidconnect.html" class="wikilink1" title="documentation:2.0:idpopenidconnect">OpenID Connect provider</a>. The web application will then be able to get an access token from <abbr title="LemonLDAP::NG">LL::NG</abbr>. This token could be sent to the webservice that can then validate it against <abbr title="LemonLDAP::NG">LL::NG</abbr> OAuth2 endpoints.
+</p>
+
+</div>
+<!-- EDIT4 SECTION "OAuth2 endpoints" [696-989] -->
+<h3 class="sectionedit5" id="userinfo">UserInfo</h3>
+<div class="level3">
+
+<p>
+You can use the UserInfo endpoint, which requires the access token to deliver user attributes.
+</p>
+
+<p>
+For example:
+</p>
+<pre class="code">curl \
+  -H &quot;Authorization: Bearer a74d504ec9e784785e70a1da2b95d1d2&quot; \
+  https://auth.example.ccom/oauth2/userinfo | json_pp</pre>
+<pre class="code file javascript"><span class="br0">&#123;</span> 
+  <span class="st0">&quot;family_name&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;OUDOT&quot;</span><span class="sy0">,</span> 
+  <span class="st0">&quot;name&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;Clément OUDOT&quot;</span><span class="sy0">,</span> 
+  <span class="st0">&quot;email&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;clement@example.com&quot;</span><span class="sy0">,</span> 
+  <span class="st0">&quot;sub&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;coudot&quot;</span> 
+<span class="br0">&#125;</span></pre>
+
+</div>
+<!-- EDIT5 SECTION "UserInfo" [990-1412] -->
+<h3 class="sectionedit6" id="introspection">Introspection</h3>
+<div class="level3">
+
+<p>
+Introspection endpoint is defined in <a href="https://tools.ietf.org/html/rfc7662" class="urlextern" title="https://tools.ietf.org/html/rfc7662"  rel="nofollow">RFC 7662</a>. It requires an authentication (same as the authentication for the token endpoint) and takes to access token as parameter.
+</p>
+
+<p>
+For example:
+</p>
+<pre class="code">curl \
+  -H &quot;Authorization: Basic bGVtb25sZGFwOnNlY3JldA==&quot; \
+  -X POST -d &quot;token=a74d504ec9e784785e70a1da2b95d1d2&quot; \
+  https://auth.example.com/oauth2/introspect | json_pp</pre>
+<pre class="code file javascript"><span class="br0">&#123;</span>
+   <span class="st0">&quot;client_id&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;lemonldap&quot;</span><span class="sy0">,</span>
+   <span class="st0">&quot;sub&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;coudot&quot;</span><span class="sy0">,</span>
+   <span class="st0">&quot;exp&quot;</span> <span class="sy0">:</span> <span class="nu0">1572446485</span><span class="sy0">,</span>
+   <span class="st0">&quot;active&quot;</span> <span class="sy0">:</span> <span class="kw2">true</span><span class="sy0">,</span>
+   <span class="st0">&quot;scope&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;openid profile address email phone&quot;</span>
+<span class="br0">&#125;</span></pre>
+
+</div>
+<!-- EDIT6 SECTION "Introspection" [1413-2024] -->
+<h2 class="sectionedit7" id="oauth2_handler">OAuth2 Handler</h2>
+<div class="level2">
+
+<p>
+We also suppose here that <abbr title="LemonLDAP::NG">LL::NG</abbr> is acting as <a href="idpopenidconnect.html" class="wikilink1" title="documentation:2.0:idpopenidconnect">OpenID Connect provider</a>. But the webservice will be protected by the OAuth2 Handler and will just have to read the HTTP headers to know which user is connected.
+</p>
+<pre class="code">curl \
+   -H &quot;Authorization: Bearer a74d504ec9e784785e70a1da2b95d1d2&quot; \
+   https://oauth2.example.ccom/rest/myapi </pre>
+<pre class="code file javascript"><span class="br0">&#123;</span>
+   <span class="st0">&quot;check&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;true&quot;</span><span class="sy0">,</span>
+   <span class="st0">&quot;user&quot;</span> <span class="sy0">:</span> <span class="st0">&quot;coudot&quot;</span>
+<span class="br0">&#125;</span></pre>
+
+<p>
+See <a href="oauth2handler.html" class="wikilink1" title="documentation:2.0:oauth2handler">OAuth2 Handler documentation</a>.
+</p>
+
+</div>
+<!-- EDIT7 SECTION "OAuth2 Handler" [2025-] --></div>
+</body>
+</html>
diff --git a/doc/pages/documentation/current/writingrulesand_headers.html b/doc/pages/documentation/current/writingrulesand_headers.html
index 469c53c3e..145d7ba1c 100644
--- a/doc/pages/documentation/current/writingrulesand_headers.html
+++ b/doc/pages/documentation/current/writingrulesand_headers.html
@@ -52,7 +52,7 @@
 <li class="level1"><div class="li"><a href="#available_env_variables">Available $ENV{} variables</a></div></li>
 <li class="level1"><div class="li"><a href="#rules">Rules</a></div>
 <ul class="toc">
-<li class="level2"><div class="li"><a href="#rules_on_authentication_level">Rules on authentication level</a></div></li>
+<li class="level2"><div class="li"><a href="#rules_based_on_authentication_level">Rules based on authentication level</a></div></li>
 </ul>
 </li>
 <li class="level1"><div class="li"><a href="#headers">Headers</a></div></li>
@@ -187,11 +187,11 @@ By default, user will be redirected on portal if no <abbr title="Uniform Resourc
 </div>
 </div>
 <!-- EDIT3 SECTION "Rules" [1239-3967] -->
-<h3 class="sectionedit6" id="rules_on_authentication_level">Rules on authentication level</h3>
+<h3 class="sectionedit6" id="rules_based_on_authentication_level">Rules based on authentication level</h3>
 <div class="level3">
 
 <p>
-LLNG set an &quot;authentication level&quot; during authentication process. This level is the value of the authentication backend used for this user. Default values are:
+LLNG set an &quot;authentication level&quot; during authentication process. This level depends on authentication backend used by this user. Default values are:
 </p>
 <ul>
 <li class="level1"><div class="li"> 0 for <a href="authnull.html" class="wikilink1" title="documentation:2.0:authnull">Null</a></div>
@@ -209,18 +209,20 @@ LLNG set an &quot;authentication level&quot; during authentication process. This
 </ul>
 
 <p>
-There are two way to impose users to have a high authentication level:
+There are three ways to impose users a higher authentication level:
 </p>
 <ul>
-<li class="level1"><div class="li"> writing a rule based en authentication level: <code>$authenticationLevel &gt; 3</code></div>
+<li class="level1"><div class="li"> writing a rule based on authentication level: <code>$authenticationLevel &gt; 3</code></div>
 </li>
-<li class="level1"><div class="li"> since 2.0, set a minimum level in virtual host options</div>
+<li class="level1"><div class="li"> since 2.0, set a minimum level in virtual host options (default value for ALL access rules)</div>
+</li>
+<li class="level1"><div class="li"> since 2.0.7, a minimum authentication level can be set for each <abbr title="Uniform Resource Identifier">URI</abbr> access rule. Useful if <abbr title="Uniform Resource Identifier">URI</abbr> are protected by different types of handler (AuthBasic -&gt; level 2, Main -&gt; level set by authentication backend).</div>
 </li>
 </ul>
-<div class="notetip">Instead of returning a 403 code, &quot;minimum level&quot; returns user to a form that explain that a higher level is required and propose the user to reauthenticate himself.
+<div class="notetip">Instead of returning a 403 code, &quot;minimum level&quot; returns user to a form that explain that a higher level is required and propose to reauthenticate himself.
 </div>
 </div>
-<!-- EDIT6 SECTION "Rules on authentication level" [3968-4855] -->
+<!-- EDIT6 SECTION "Rules based on authentication level" [3968-5088] -->
 <h2 class="sectionedit7" id="headers">Headers</h2>
 <div class="level2">
 
@@ -250,7 +252,7 @@ Examples:
 		<td class="col0 leftalign"> Give a non ascii data  </td><td class="col1 centeralign">  Display-Name  </td><td class="col2 centeralign">  encode_base64($givenName."&nbsp;".$surName,"")  </td>
 	</tr>
 </table></div>
-<!-- EDIT8 TABLE [5039-5375] -->
+<!-- EDIT8 TABLE [5272-5608] -->
 <p>
 As described in <a href="performances.html#handler_performance" class="wikilink1" title="documentation:2.0:performances">performances chapter</a>, you can use macros, local macros,...
 </p>
@@ -268,7 +270,7 @@ As described in <a href="performances.html#handler_performance" class="wikilink1
 
 </div>
 </div>
-<!-- EDIT7 SECTION "Headers" [4856-6048] -->
+<!-- EDIT7 SECTION "Headers" [5089-6281] -->
 <h2 class="sectionedit9" id="available_functions">Available functions</h2>
 <div class="level2">
 
@@ -283,7 +285,7 @@ In addition to macros and name, you can use some functions in rules and headers:
 </ul>
 
 </div>
-<!-- EDIT9 SECTION "Available functions" [6049-6259] -->
+<!-- EDIT9 SECTION "Available functions" [6282-6492] -->
 <h2 class="sectionedit10" id="wildcards_in_hostnames">Wildcards in hostnames</h2>
 <div class="level2">
 
@@ -306,6 +308,6 @@ Even if a wildcard exists, if a virtualhost is explicitly declared, this rule is
 </ol>
 
 </div>
-<!-- EDIT10 SECTION "Wildcards in hostnames" [6260-] --></div>
+<!-- EDIT10 SECTION "Wildcards in hostnames" [6493-] --></div>
 </body>
 </html>

From 7a37a221777cf4e2ea64c14e45314d095156bf81 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 17:00:17 +0100
Subject: [PATCH 29/60] Update changelog

---
 changelog | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/changelog b/changelog
index d46570fd3..7faa238ce 100644
--- a/changelog
+++ b/changelog
@@ -8,6 +8,7 @@ lemonldap-ng (2.0.7) stable; urgency=medium
     * #1948: Tranlation menu does not work with Diff.html
     * #1949: Don't Store Password shows password in cleartext
     * #1952: "Attributes and macros" session keys should not be translated
+    * #1953: Outgoing emails are missing a Date: field
     * #1954: zimbra preauth not working
     * #1955: Redirection lost after notification validation
     * #1960: REST config service not working
@@ -18,6 +19,7 @@ lemonldap-ng (2.0.7) stable; urgency=medium
     * #1968: skippedUnitTests/skippedGlobalTests have no effect
     * #1969: Force password reset with LDAP password policy does not work if macro _whatToTrace is not defined
     * #1974: ServiceToken handler TTL value always set to default
+    * #1984: Reset expired password doesn't trigger when using Combination
     * #2005: Error in portal "refresh my rights" feature when whatToTrace value is not equal to login
     * #2009: Display authentication error on login form with Combination Kerberos + LDAP
     * #2010: Kerberos not working with session upgrade
@@ -28,6 +30,7 @@ lemonldap-ng (2.0.7) stable; urgency=medium
     * #2045: Authenticating with external OpenID Connect Provider fails because of special chars in user name
 
   * New features:
+    * #813: Provide refresh tokens in OpenID Connect
     * #1605: certificate reset by mail
     * #1956: DecryptValue plugin
     * #1999: Possibility to view/close other sessions opened for the same user
@@ -48,6 +51,7 @@ lemonldap-ng (2.0.7) stable; urgency=medium
     * #1995: Add an option to force claims in ID token
     * #1996: REQUEST_URI env variable is not set by CheckUser plugin
     * #1997: Enable checkTime option by default
+    * #1998: Misleading token ID format
     * #2003: Possibility to set attributes and extra claims in OIDC registration endpoints
     * #2007: Password change prompt displayed even if initial auth fails
     * #2008: Specific message and error code for 2F failure
@@ -58,7 +62,7 @@ lemonldap-ng (2.0.7) stable; urgency=medium
     * #2024: Change default value for cspFormAction
     * #2042: Add per-service macros
 
- -- Clément <clem.oudot@gmail.com>  Sat, 21 Dec 2019 16:30:08 +0100
+ -- Clément <clem.oudot@gmail.com>  Sat, 21 Dec 2019 16:59:22 +0100
 
 lemonldap-ng (2.0.6) stable; urgency=medium
 

From 165eced237c9590ec190d8d21552f7aa0763f16b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 17:02:40 +0100
Subject: [PATCH 30/60] Update version in packaging files

---
 debian/changelog      | 7 +++++++
 rpm/lemonldap-ng.spec | 3 +++
 2 files changed, 10 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index d6a1f362e..5f678ac6f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+lemonldap-ng (2.0.7-1) unstable; urgency=medium
+
+  * New release. See changes on our website:
+    https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng
+
+ -- Clement OUDOT <clement@oodo.net>  Sat, 21 Dec 2019 17:00:00 +0100
+
 lemonldap-ng (2.0.6-1) unstable; urgency=medium
 
   * New release. See changes on our website:
diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 919e3c904..67510c2b0 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -649,6 +649,9 @@ fi
 # Changelog
 #==============================================================================
 %changelog
+* Sat Dec 21 2019 Clement Oudot <clem.oudot@gmail.com> - 2.0.7-1
+- Update to 2.0.7
+
 * Fri Dec 06 2019 Xavier Bachelot <xavier@bachelot.org> - 2.0.6-2
 - Tweak for EL8.
 - Enhance BuildRequires and Requires.

From fd015301a5748a24ea8dc095f9db03858f4f8e26 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 20 Dec 2019 21:45:35 +0100
Subject: [PATCH 31/60] Typo & make minify

---
 lemonldap-ng-common/lemonldap-ng.ini                           | 2 +-
 .../lib/Lemonldap/NG/Common/Notifications/File.pm              | 2 +-
 lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js     | 3 +--
 lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map | 2 +-
 4 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/lemonldap-ng-common/lemonldap-ng.ini b/lemonldap-ng-common/lemonldap-ng.ini
index 47c647b2e..d934302e9 100644
--- a/lemonldap-ng-common/lemonldap-ng.ini
+++ b/lemonldap-ng-common/lemonldap-ng.ini
@@ -304,7 +304,7 @@ languages    = en, fr, vi, it, ar, de, fi, tr
 ; CUSTOM PLUGINS
 ; If you want to add custom plugins, set list here (comma separated)
 ; Read Lemonldap::NG::Portal::Main::Plugin(3pm) man page.
-;customPlugins = My::Package1, My::Package2
+;customPlugins = ::My::Package1, ::My::Package2
 
 ; To avoid bad/expired OTT if "authssl" and "auth" are served by different Load Balancers
 ; you can override OTT configuration to store Upgrade or Issuer OTT into global storage
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
index cedef055f..4a5ab1398 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
@@ -60,7 +60,7 @@ sub get {
 ## @method hashref getAll()
 # Return all pending notifications.
 # @return hashref where keys are internal reference and values are hashref with
-# keys date, uid, ref ans condition.
+# keys date, uid, ref and condition.
 sub getAll {
     my $self = shift;
     opendir D, $self->{dirName};
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
index 160c7fec9..bcbb45f8a 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js
@@ -1,2 +1 @@
-function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
-//# sourceMappingURL=lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
\ No newline at end of file
+function templates(t,a){switch(t){case"casAppMetaDataNode":return[{cnodes:t+"s/"+a+"/casAppMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casAppMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casAppMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casAppMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casAppMetaDataExportedVars",title:"casAppMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casAppMetaDataOptionsService",id:t+"s/"+a+"/casAppMetaDataOptionsService",title:"casAppMetaDataOptionsService"},{get:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",id:t+"s/"+a+"/casAppMetaDataOptionsUserAttribute",title:"casAppMetaDataOptionsUserAttribute"},{get:t+"s/"+a+"/casAppMetaDataOptionsRule",id:t+"s/"+a+"/casAppMetaDataOptionsRule",title:"casAppMetaDataOptionsRule"}],id:"casAppMetaDataOptions",title:"casAppMetaDataOptions",type:"simpleInputContainer"},{cnodes:t+"s/"+a+"/casAppMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/casAppMetaDataMacros",title:"casAppMetaDataMacros",type:"keyTextContainer"}];case"casSrvMetaDataNode":return[{cnodes:t+"s/"+a+"/casSrvMetaDataExportedVars",default:[{data:"cn",id:t+"s/"+a+"/casSrvMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"mail",id:t+"s/"+a+"/casSrvMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"uid",id:t+"s/"+a+"/casSrvMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/casSrvMetaDataExportedVars",title:"casSrvMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",id:t+"s/"+a+"/casSrvMetaDataOptionsProxiedServices",title:"casSrvMetaDataOptionsProxiedServices",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsUrl",id:t+"s/"+a+"/casSrvMetaDataOptionsUrl",title:"casSrvMetaDataOptionsUrl"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsRenew",id:t+"s/"+a+"/casSrvMetaDataOptionsRenew",title:"casSrvMetaDataOptionsRenew",type:"bool"},{default:0,get:t+"s/"+a+"/casSrvMetaDataOptionsGateway",id:t+"s/"+a+"/casSrvMetaDataOptionsGateway",title:"casSrvMetaDataOptionsGateway",type:"bool"}],id:"casSrvMetaDataOptions",title:"casSrvMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",id:t+"s/"+a+"/casSrvMetaDataOptionsDisplayName",title:"casSrvMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/casSrvMetaDataOptionsIcon",id:t+"s/"+a+"/casSrvMetaDataOptionsIcon",title:"casSrvMetaDataOptionsIcon"},{get:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",id:t+"s/"+a+"/casSrvMetaDataOptionsSortNumber",title:"casSrvMetaDataOptionsSortNumber",type:"int"}],id:"casSrvMetaDataOptionsDisplay",title:"casSrvMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"oidcOPMetaDataNode":return[{get:t+"s/"+a+"/oidcOPMetaDataJSON",id:t+"s/"+a+"/oidcOPMetaDataJSON",title:"oidcOPMetaDataJSON",type:"file"},{get:t+"s/"+a+"/oidcOPMetaDataJWKS",id:t+"s/"+a+"/oidcOPMetaDataJWKS",title:"oidcOPMetaDataJWKS",type:"file"},{cnodes:t+"s/"+a+"/oidcOPMetaDataExportedVars",default:[{data:"name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/cn",title:"cn",type:"keyText"},{data:"email",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/mail",title:"mail",type:"keyText"},{data:"family_name",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/sn",title:"sn",type:"keyText"},{data:"sub",id:t+"s/"+a+"/oidcOPMetaDataExportedVars/uid",title:"uid",type:"keyText"}],id:t+"s/"+a+"/oidcOPMetaDataExportedVars",title:"oidcOPMetaDataExportedVars",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",id:t+"s/"+a+"/oidcOPMetaDataOptionsConfigurationURI",title:"oidcOPMetaDataOptionsConfigurationURI"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",id:t+"s/"+a+"/oidcOPMetaDataOptionsJWKSTimeout",title:"oidcOPMetaDataOptionsJWKSTimeout",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientID",title:"oidcOPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcOPMetaDataOptionsClientSecret",title:"oidcOPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",id:t+"s/"+a+"/oidcOPMetaDataOptionsStoreIDToken",title:"oidcOPMetaDataOptionsStoreIDToken",type:"bool"}],id:"oidcOPMetaDataOptionsConfiguration",title:"oidcOPMetaDataOptionsConfiguration",type:"simpleInputContainer"},{_nodes:[{default:"openid profile",get:t+"s/"+a+"/oidcOPMetaDataOptionsScope",id:t+"s/"+a+"/oidcOPMetaDataOptionsScope",title:"oidcOPMetaDataOptionsScope"},{default:"",get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplay",select:[{k:"",v:""},{k:"page",v:"page"},{k:"popup",v:"popup"},{k:"touch",v:"touch"},{k:"wap",v:"wap"}],title:"oidcOPMetaDataOptionsDisplay",type:"select"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",id:t+"s/"+a+"/oidcOPMetaDataOptionsPrompt",title:"oidcOPMetaDataOptionsPrompt"},{default:0,get:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsMaxAge",title:"oidcOPMetaDataOptionsMaxAge",type:"int"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",id:t+"s/"+a+"/oidcOPMetaDataOptionsUiLocales",title:"oidcOPMetaDataOptionsUiLocales"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",id:t+"s/"+a+"/oidcOPMetaDataOptionsAcrValues",title:"oidcOPMetaDataOptionsAcrValues"},{default:"client_secret_post",get:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",id:t+"s/"+a+"/oidcOPMetaDataOptionsTokenEndpointAuthMethod",select:[{k:"client_secret_post",v:"client_secret_post"},{k:"client_secret_basic",v:"client_secret_basic"}],title:"oidcOPMetaDataOptionsTokenEndpointAuthMethod",type:"select"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",id:t+"s/"+a+"/oidcOPMetaDataOptionsCheckJWTSignature",title:"oidcOPMetaDataOptionsCheckJWTSignature",type:"bool"},{default:30,get:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",id:t+"s/"+a+"/oidcOPMetaDataOptionsIDTokenMaxAge",title:"oidcOPMetaDataOptionsIDTokenMaxAge",type:"int"},{default:1,get:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",id:t+"s/"+a+"/oidcOPMetaDataOptionsUseNonce",title:"oidcOPMetaDataOptionsUseNonce",type:"bool"}],id:"oidcOPMetaDataOptionsProtocol",title:"oidcOPMetaDataOptionsProtocol",type:"simpleInputContainer"}],id:"oidcOPMetaDataOptions",title:"oidcOPMetaDataOptions"},{_nodes:[{get:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcOPMetaDataOptionsDisplayName",title:"oidcOPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcOPMetaDataOptionsIcon",title:"oidcOPMetaDataOptionsIcon"},{get:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",id:t+"s/"+a+"/oidcOPMetaDataOptionsSortNumber",title:"oidcOPMetaDataOptionsSortNumber",type:"int"}],id:"oidcOPMetaDataOptionsDisplayParams",title:"oidcOPMetaDataOptionsDisplayParams",type:"simpleInputContainer"}];case"oidcRPMetaDataNode":return[{cnodes:t+"s/"+a+"/oidcRPMetaDataExportedVars",default:[{data:"mail",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/email",title:"email",type:"keyText"},{data:"sn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/family_name",title:"family_name",type:"keyText"},{data:"cn",id:t+"s/"+a+"/oidcRPMetaDataExportedVars/name",title:"name",type:"keyText"}],id:t+"s/"+a+"/oidcRPMetaDataExportedVars",title:"oidcRPMetaDataExportedVars",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",default:[],id:t+"s/"+a+"/oidcRPMetaDataOptionsExtraClaims",title:"oidcRPMetaDataOptionsExtraClaims",type:"keyTextContainer"},{_nodes:[{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientID",title:"oidcRPMetaDataOptionsClientID"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",id:t+"s/"+a+"/oidcRPMetaDataOptionsClientSecret",title:"oidcRPMetaDataOptionsClientSecret",type:"password"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",id:t+"s/"+a+"/oidcRPMetaDataOptionsPublic",title:"oidcRPMetaDataOptionsPublic",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",id:t+"s/"+a+"/oidcRPMetaDataOptionsRequirePKCE",title:"oidcRPMetaDataOptionsRequirePKCE",type:"bool"}],id:"oidcRPMetaDataOptionsAuthentication",title:"oidcRPMetaDataOptionsAuthentication",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",id:t+"s/"+a+"/oidcRPMetaDataOptionsUserIDAttr",title:"oidcRPMetaDataOptionsUserIDAttr"},{default:"HS512",get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenSignAlg",select:[{k:"none",v:"None"},{k:"HS256",v:"HS256"},{k:"HS384",v:"HS384"},{k:"HS512",v:"HS512"},{k:"RS256",v:"RS256"},{k:"RS384",v:"RS384"},{k:"RS512",v:"RS512"}],title:"oidcRPMetaDataOptionsIDTokenSignAlg",type:"select"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenExpiration",title:"oidcRPMetaDataOptionsIDTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",id:t+"s/"+a+"/oidcRPMetaDataOptionsIDTokenForceClaims",title:"oidcRPMetaDataOptionsIDTokenForceClaims",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAccessTokenExpiration",title:"oidcRPMetaDataOptionsAccessTokenExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsAuthorizationCodeExpiration",title:"oidcRPMetaDataOptionsAuthorizationCodeExpiration",type:"int"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",id:t+"s/"+a+"/oidcRPMetaDataOptionsAllowOffline",title:"oidcRPMetaDataOptionsAllowOffline",type:"bool"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",id:t+"s/"+a+"/oidcRPMetaDataOptionsRefreshToken",title:"oidcRPMetaDataOptionsRefreshToken",type:"bool"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",id:t+"s/"+a+"/oidcRPMetaDataOptionsOfflineSessionExpiration",title:"oidcRPMetaDataOptionsOfflineSessionExpiration",type:"int"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsRedirectUris",title:"oidcRPMetaDataOptionsRedirectUris"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",help:"openidconnectclaims.html",id:t+"s/"+a+"/oidcRPMetaDataOptionsBypassConsent",title:"oidcRPMetaDataOptionsBypassConsent",type:"bool"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",id:t+"s/"+a+"/oidcRPMetaDataOptionsPostLogoutRedirectUris",title:"oidcRPMetaDataOptionsPostLogoutRedirectUris"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutUrl",title:"oidcRPMetaDataOptionsLogoutUrl"},{default:"front",get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutType",select:[{k:"front",v:"Front Channel"},{k:"back",v:"Back Channel"}],title:"oidcRPMetaDataOptionsLogoutType",type:"select"},{default:0,get:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",id:t+"s/"+a+"/oidcRPMetaDataOptionsLogoutSessionRequired",title:"oidcRPMetaDataOptionsLogoutSessionRequired",type:"bool"}],id:"logout",title:"logout",type:"simpleInputContainer"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsRule",id:t+"s/"+a+"/oidcRPMetaDataOptionsRule",title:"oidcRPMetaDataOptionsRule"}],id:"oidcRPMetaDataOptions",title:"oidcRPMetaDataOptions"},{cnodes:t+"s/"+a+"/oidcRPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/oidcRPMetaDataMacros",title:"oidcRPMetaDataMacros",type:"keyTextContainer"},{_nodes:[{get:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",id:t+"s/"+a+"/oidcRPMetaDataOptionsDisplayName",title:"oidcRPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",id:t+"s/"+a+"/oidcRPMetaDataOptionsIcon",title:"oidcRPMetaDataOptionsIcon"}],id:"oidcRPMetaDataOptionsDisplay",title:"oidcRPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlIDPMetaDataNode":return[{get:t+"s/"+a+"/samlIDPMetaDataXML",id:t+"s/"+a+"/samlIDPMetaDataXML",title:"samlIDPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",default:[],help:"authsaml.html#exported_attributes",id:t+"s/"+a+"/samlIDPMetaDataExportedAttributes",title:"samlIDPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",id:t+"s/"+a+"/samlIDPMetaDataOptionsAdaptSessionUtime",title:"samlIDPMetaDataOptionsAdaptSessionUtime",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceUTF8",title:"samlIDPMetaDataOptionsForceUTF8",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",id:t+"s/"+a+"/samlIDPMetaDataOptionsStoreSAMLToken",title:"samlIDPMetaDataOptionsStoreSAMLToken",type:"bool"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",id:t+"s/"+a+"/samlIDPMetaDataOptionsUserAttribute",title:"samlIDPMetaDataOptionsUserAttribute"}],id:"samlIDPMetaDataOptionsSession",title:"samlIDPMetaDataOptionsSession",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSSOMessage",title:"samlIDPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSSOMessageSignature",title:"samlIDPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlIDPMetaDataOptionsSignSLOMessage",title:"samlIDPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckSLOMessageSignature",title:"samlIDPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlIDPMetaDataOptionsSignature",title:"samlIDPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSSOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"artifact-get",v:"Artifact GET"}],title:"samlIDPMetaDataOptionsSSOBinding",type:"select"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",id:t+"s/"+a+"/samlIDPMetaDataOptionsSLOBinding",select:[{k:"",v:""},{k:"http-post",v:"POST"},{k:"http-redirect",v:"Redirect"},{k:"http-soap",v:"SOAP"}],title:"samlIDPMetaDataOptionsSLOBinding",type:"select"}],id:"samlIDPMetaDataOptionsBinding",title:"samlIDPMetaDataOptionsBinding",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlIDPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlIDPMetaDataOptionsEncryptionMode",type:"select"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckTime",title:"samlIDPMetaDataOptionsCheckTime",type:"bool"},{default:1,get:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",id:t+"s/"+a+"/samlIDPMetaDataOptionsCheckAudience",title:"samlIDPMetaDataOptionsCheckAudience",type:"bool"}],id:"samlIDPMetaDataOptionsSecurity",title:"samlIDPMetaDataOptionsSecurity",type:"simpleInputContainer"},{_nodes:[{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",id:t+"s/"+a+"/samlIDPMetaDataOptionsResolutionRule",title:"samlIDPMetaDataOptionsResolutionRule",type:"longtext"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlIDPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlIDPMetaDataOptionsNameIDFormat",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsForceAuthn",title:"samlIDPMetaDataOptionsForceAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",id:t+"s/"+a+"/samlIDPMetaDataOptionsIsPassive",title:"samlIDPMetaDataOptionsIsPassive",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowProxiedAuthn",title:"samlIDPMetaDataOptionsAllowProxiedAuthn",type:"bool"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",id:t+"s/"+a+"/samlIDPMetaDataOptionsAllowLoginFromIDP",title:"samlIDPMetaDataOptionsAllowLoginFromIDP",type:"bool"},{default:"",get:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",id:t+"s/"+a+"/samlIDPMetaDataOptionsRequestedAuthnContext",select:[{k:"",v:""},{k:"kerberos",v:"Kerberos"},{k:"password-protected-transport",v:"Password protected transport"},{k:"password",v:"Password"},{k:"tls-client",v:"TLS client certificate"}],title:"samlIDPMetaDataOptionsRequestedAuthnContext",type:"select"},{default:0,get:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",id:t+"s/"+a+"/samlIDPMetaDataOptionsRelayStateURL",title:"samlIDPMetaDataOptionsRelayStateURL",type:"bool"}],help:"authsaml.html#options",id:"samlIDPMetaDataOptions",title:"samlIDPMetaDataOptions",type:"simpleInputContainer"},{_nodes:[{get:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",id:t+"s/"+a+"/samlIDPMetaDataOptionsDisplayName",title:"samlIDPMetaDataOptionsDisplayName"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",id:t+"s/"+a+"/samlIDPMetaDataOptionsIcon",title:"samlIDPMetaDataOptionsIcon"},{get:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",id:t+"s/"+a+"/samlIDPMetaDataOptionsSortNumber",title:"samlIDPMetaDataOptionsSortNumber",type:"int"}],id:"samlIDPMetaDataOptionsDisplay",title:"samlIDPMetaDataOptionsDisplay",type:"simpleInputContainer"}];case"samlSPMetaDataNode":return[{get:t+"s/"+a+"/samlSPMetaDataXML",id:t+"s/"+a+"/samlSPMetaDataXML",title:"samlSPMetaDataXML",type:"file"},{cnodes:t+"s/"+a+"/samlSPMetaDataExportedAttributes",default:[],help:"idpsaml.html#exported_attributes",id:t+"s/"+a+"/samlSPMetaDataExportedAttributes",title:"samlSPMetaDataExportedAttributes",type:"samlAttributeContainer"},{_nodes:[{_nodes:[{default:"",get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDFormat",select:[{k:"",v:""},{k:"unspecified",v:"Unspecified"},{k:"email",v:"Email"},{k:"x509",v:"X509 certificate"},{k:"windows",v:"Windows"},{k:"kerberos",v:"Kerberos"},{k:"entity",v:"Entity"},{k:"persistent",v:"Persistent"},{k:"transient",v:"Transient"},{k:"encrypted",v:"Encrypted"}],title:"samlSPMetaDataOptionsNameIDFormat",type:"select"},{get:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",id:t+"s/"+a+"/samlSPMetaDataOptionsNameIDSessionKey",title:"samlSPMetaDataOptionsNameIDSessionKey"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",id:t+"s/"+a+"/samlSPMetaDataOptionsOneTimeUse",title:"samlSPMetaDataOptionsOneTimeUse",type:"bool"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsSessionNotOnOrAfterTimeout",type:"int"},{default:72e3,get:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",id:t+"s/"+a+"/samlSPMetaDataOptionsNotOnOrAfterTimeout",title:"samlSPMetaDataOptionsNotOnOrAfterTimeout",type:"int"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",id:t+"s/"+a+"/samlSPMetaDataOptionsForceUTF8",title:"samlSPMetaDataOptionsForceUTF8",type:"bool"}],id:"samlSPMetaDataOptionsAuthnResponse",title:"samlSPMetaDataOptionsAuthnResponse",type:"simpleInputContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSSOMessage",title:"samlSPMetaDataOptionsSignSSOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSSOMessageSignature",title:"samlSPMetaDataOptionsCheckSSOMessageSignature",type:"bool"},{default:-1,get:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",id:t+"s/"+a+"/samlSPMetaDataOptionsSignSLOMessage",title:"samlSPMetaDataOptionsSignSLOMessage",type:"trool"},{default:1,get:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",id:t+"s/"+a+"/samlSPMetaDataOptionsCheckSLOMessageSignature",title:"samlSPMetaDataOptionsCheckSLOMessageSignature",type:"bool"}],id:"samlSPMetaDataOptionsSignature",title:"samlSPMetaDataOptionsSignature",type:"simpleInputContainer"},{_nodes:[{default:"none",get:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",id:t+"s/"+a+"/samlSPMetaDataOptionsEncryptionMode",select:[{k:"none",v:"None"},{k:"nameid",v:"Name ID"},{k:"assertion",v:"Assertion"}],title:"samlSPMetaDataOptionsEncryptionMode",type:"select"},{default:0,get:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",id:t+"s/"+a+"/samlSPMetaDataOptionsEnableIDPInitiatedURL",title:"samlSPMetaDataOptionsEnableIDPInitiatedURL",type:"bool"},{get:t+"s/"+a+"/samlSPMetaDataOptionsRule",id:t+"s/"+a+"/samlSPMetaDataOptionsRule",title:"samlSPMetaDataOptionsRule"}],id:"samlSPMetaDataOptionsSecurity",title:"samlSPMetaDataOptionsSecurity",type:"simpleInputContainer"}],help:"idpsaml.html#options",id:"samlSPMetaDataOptions",title:"samlSPMetaDataOptions"},{cnodes:t+"s/"+a+"/samlSPMetaDataMacros",default:[],help:"exportedvars.html#extend_variables_using_macros_and_groups",id:t+"s/"+a+"/samlSPMetaDataMacros",title:"samlSPMetaDataMacros",type:"keyTextContainer"}];case"virtualHost":return[{cnodes:t+"s/"+a+"/locationRules",default:[{data:"deny",id:t+"s/"+a+"/locationRules/default",re:"default",title:"default",type:"rule"}],help:"writingrulesand_headers.html#rules",id:t+"s/"+a+"/locationRules",title:"locationRules",type:"ruleContainer"},{cnodes:t+"s/"+a+"/exportedHeaders",help:"writingrulesand_headers.html#headers",id:t+"s/"+a+"/exportedHeaders",title:"exportedHeaders",type:"keyTextContainer"},{cnodes:t+"s/"+a+"/post",help:"formreplay.html",id:t+"s/"+a+"/post",title:"post",type:"postContainer"},{_nodes:[{default:-1,get:t+"s/"+a+"/vhostPort",id:t+"s/"+a+"/vhostPort",title:"vhostPort",type:"int"},{default:-1,get:t+"s/"+a+"/vhostHttps",id:t+"s/"+a+"/vhostHttps",title:"vhostHttps",type:"trool"},{default:0,get:t+"s/"+a+"/vhostMaintenance",id:t+"s/"+a+"/vhostMaintenance",title:"vhostMaintenance",type:"bool"},{default:"",get:t+"s/"+a+"/vhostAliases",id:t+"s/"+a+"/vhostAliases",title:"vhostAliases"},{default:"Main",get:t+"s/"+a+"/vhostType",id:t+"s/"+a+"/vhostType",select:[{k:"AuthBasic",v:"AuthBasic"},{k:"CDA",v:"CDA"},{k:"DevOps",v:"DevOps"},{k:"DevOpsST",v:"DevOpsST"},{k:"Main",v:"Main"},{k:"OAuth2",v:"OAuth2"},{k:"SecureToken",v:"SecureToken"},{k:"ServiceToken",v:"ServiceToken"},{k:"ZimbraPreAuth",v:"ZimbraPreAuth"}],title:"vhostType",type:"select"},{get:t+"s/"+a+"/vhostAuthnLevel",id:t+"s/"+a+"/vhostAuthnLevel",title:"vhostAuthnLevel",type:"int"},{default:-1,get:t+"s/"+a+"/vhostServiceTokenTTL",id:t+"s/"+a+"/vhostServiceTokenTTL",title:"vhostServiceTokenTTL",type:"int"}],help:"configvhost.html#options",id:"vhostOptions",title:"vhostOptions",type:"simpleInputContainer"}];default:return[]}}function setScopeVars(t){t.portal=t.data[0]._nodes[0]._nodes[0],t.getKey(t.portal),t.domain=t.data[0]._nodes[4]._nodes[1],t.getKey(t.domain)}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
index f2e0f8531..23f1b0857 100644
--- a/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
+++ b/lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js.map
@@ -1 +1 @@
-{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,QAASA,WAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,QAEEE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,iCAGVG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,uCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,6BAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGTH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,YAGTH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,gCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,SAEMC,EAAM,qBACNC,EAAM,uBAGND,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,0BAGVE,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGVG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,YAGTH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,qBAGTC,SAEMA,SAEMC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,kCAGVG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,aAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,oCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGND,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAGTE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,SAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,gDAGVG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,mCAGVH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,SAEMC,EAAM,QACNC,EAAM,kBAGND,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,yBAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,qCAGVG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,wBAIb,KAAK,sBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,WACAO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,2BAGTC,SAEML,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,WAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,YACNC,EAAM,SAGND,EAAM,gBACNC,EAAM,aAGND,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,aAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,WACNC,EAAM,aAGND,EAAM,+BACNC,EAAM,iCAGND,EAAM,WACNC,EAAM,aAGND,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,yBAGTC,SAEMC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,sCAGVG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,+BAGVG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAIb,KAAK,qBACH,QAEEE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,SAGTL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,WACAO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,2BAGTC,SAEMA,SAEML,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,SAEMC,EAAM,GACNC,EAAM,KAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,QACNC,EAAM,UAGND,EAAM,OACNC,EAAM,qBAGND,EAAM,UACNC,EAAM,YAGND,EAAM,WACNC,EAAM,aAGND,EAAM,SACNC,EAAM,WAGND,EAAM,aACNC,EAAM,eAGND,EAAM,YACNC,EAAM,cAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,0CAGVH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,SAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,QAGTJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,QAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,yBAGTC,SAEML,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,SAEMC,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,YAGND,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,WAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGTE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,0BAGVJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,WACAO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAIb,KAAK,cACH,QAEEL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,UAEMC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,kBAGTL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,qBAGTL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,kBAGTC,SAEML,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,UAGTJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,SAGTJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,iBAGVH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,SAEMC,EAAM,YACNC,EAAM,cAGND,EAAM,MACNC,EAAM,QAGND,EAAM,SACNC,EAAM,WAGND,EAAM,WACNC,EAAM,aAGND,EAAM,OACNC,EAAM,SAGND,EAAM,SACNC,EAAM,WAGND,EAAM,cACNC,EAAM,gBAGND,EAAM,eACNC,EAAM,iBAGND,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,WAGTE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,QAGTJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,wBAIb,SACE,UAIJ,QAASQ,cAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG","file":"lemonldap-ng-manager/site/htdocs/static/js/conftree.min.js"}
\ No newline at end of file
+{"version":3,"sources":["lemonldap-ng-manager/site/htdocs/static/js/conftree.js"],"names":["templates","tpl","key","cnodes","default","data","id","title","type","_nodes","get","help","select","k","v","re","setScopeVars","scope","portal","getKey","domain"],"mappings":"AAAA,SAASA,UAAUC,EAAIC,GASrB,OAAOD,GACP,IAAK,qBACH,MAAO,CACR,CACGE,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,gCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,sCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,wCACxBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,4BACrBI,GAAOL,EAAI,KAAKC,EAAI,4BACpBK,MAAU,4BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBK,MAAU,+BACVC,KAAS,SAGfF,GAAO,wBACPC,MAAU,wBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,QACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,WAEZ,CACGH,KAAS,cACTC,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,KACVC,KAAS,WAEZ,CACGH,KAAS,MACTC,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,MACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,iBACZM,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGH,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gCACrBI,GAAOL,EAAI,KAAKC,EAAI,gCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,MACNC,EAAM,QAGZP,MAAU,+BACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,+BAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,qBACZM,IAAQT,EAAI,KAAKC,EAAI,gDACrBI,GAAOL,EAAI,KAAKC,EAAI,gDACpBU,OAAW,CACR,CACGC,EAAM,qBACNC,EAAM,sBAET,CACGD,EAAM,sBACNC,EAAM,wBAGZP,MAAU,+CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,gCACVC,KAAS,SAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfF,GAAO,wBACPC,MAAU,yBAEb,CACGE,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,6BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,8BACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,QACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,cACVC,KAAS,WAEZ,CACGH,KAAS,KACTC,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,OACVC,KAAS,YAGfF,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,6BACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZE,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,iCACrBI,GAAOL,EAAI,KAAKC,EAAI,iCACpBK,MAAU,iCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,YAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,+BACrBI,GAAOL,EAAI,KAAKC,EAAI,+BACpBK,MAAU,8BACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,SAGfF,GAAO,sCACPC,MAAU,sCACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,mCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,QACNC,EAAM,UAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,0CACrBI,GAAOL,EAAI,KAAKC,EAAI,0CACpBK,MAAU,yCACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,oDACrBI,GAAOL,EAAI,KAAKC,EAAI,oDACpBK,MAAU,mDACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,OAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBS,KAAS,2BACTL,GAAOL,EAAI,KAAKC,EAAI,sCACpBK,MAAU,qCACVC,KAAS,QAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBK,MAAU,+CAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,kCAEb,CACGH,QAAY,QACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBU,OAAW,CACR,CACGC,EAAM,QACNC,EAAM,iBAET,CACGD,EAAM,OACNC,EAAM,iBAGZP,MAAU,kCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,SAGfF,GAAO,SACPC,MAAU,SACVC,KAAS,wBAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,oBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,oCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,+BACPC,MAAU,+BACVC,KAAS,yBAIb,IAAK,sBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,sBACrBI,GAAOL,EAAI,KAAKC,EAAI,sBACpBK,MAAU,qBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,qCACxBE,QAAY,GACZO,KAAS,oCACTL,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,oCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGL,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,wCAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kDACrBI,GAAOL,EAAI,KAAKC,EAAI,kDACpBK,MAAU,iDACVC,KAAS,SAGfF,GAAO,kCACPC,MAAU,kCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,eACNC,EAAM,iBAGZP,MAAU,mCACVC,KAAS,UAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,YACNC,EAAM,QAET,CACGD,EAAM,gBACNC,EAAM,YAET,CACGD,EAAM,YACNC,EAAM,SAGZP,MAAU,mCACVC,KAAS,WAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,uCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,wCACrBI,GAAOL,EAAI,KAAKC,EAAI,wCACpBK,MAAU,uCACVC,KAAS,YAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,sCACrBI,GAAOL,EAAI,KAAKC,EAAI,sCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,qCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,2CACrBI,GAAOL,EAAI,KAAKC,EAAI,2CACpBK,MAAU,0CACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,+CACrBI,GAAOL,EAAI,KAAKC,EAAI,+CACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,+BACNC,EAAM,gCAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,aACNC,EAAM,2BAGZP,MAAU,8CACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAGfG,KAAS,wBACTL,GAAO,yBACPC,MAAU,yBACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGC,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBK,MAAU,qCAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,8BACrBI,GAAOL,EAAI,KAAKC,EAAI,8BACpBK,MAAU,8BAEb,CACGG,IAAQT,EAAI,KAAKC,EAAI,oCACrBI,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,QAGfF,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAIb,IAAK,qBACH,MAAO,CACR,CACGE,IAAQT,EAAI,KAAKC,EAAI,qBACrBI,GAAOL,EAAI,KAAKC,EAAI,qBACpBK,MAAU,oBACVC,KAAS,QAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,oCACxBE,QAAY,GACZO,KAAS,mCACTL,GAAOL,EAAI,KAAKC,EAAI,oCACpBK,MAAU,mCACVC,KAAS,0BAEZ,CACGC,OAAW,CACR,CACGA,OAAW,CACR,CACGL,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,qCACrBI,GAAOL,EAAI,KAAKC,EAAI,qCACpBU,OAAW,CACR,CACGC,EAAM,GACNC,EAAM,IAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,QACNC,EAAM,SAET,CACGD,EAAM,OACNC,EAAM,oBAET,CACGD,EAAM,UACNC,EAAM,WAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,aACNC,EAAM,cAET,CACGD,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,oCACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,yCACrBI,GAAOL,EAAI,KAAKC,EAAI,yCACpBK,MAAU,yCAEb,CACGH,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,mCACrBI,GAAOL,EAAI,KAAKC,EAAI,mCACpBK,MAAU,kCACVC,KAAS,QAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,mDACrBI,GAAOL,EAAI,KAAKC,EAAI,mDACpBK,MAAU,kDACVC,KAAS,OAEZ,CACGJ,QAAY,KACZM,IAAQT,EAAI,KAAKC,EAAI,4CACrBI,GAAOL,EAAI,KAAKC,EAAI,4CACpBK,MAAU,2CACVC,KAAS,OAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,kCACrBI,GAAOL,EAAI,KAAKC,EAAI,kCACpBK,MAAU,iCACVC,KAAS,SAGfF,GAAO,qCACPC,MAAU,qCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,QAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBK,MAAU,sCACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,iDACrBI,GAAOL,EAAI,KAAKC,EAAI,iDACpBK,MAAU,gDACVC,KAAS,SAGfF,GAAO,iCACPC,MAAU,iCACVC,KAAS,wBAEZ,CACGC,OAAW,CACR,CACGL,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,uCACrBI,GAAOL,EAAI,KAAKC,EAAI,uCACpBU,OAAW,CACR,CACGC,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,WAET,CACGD,EAAM,YACNC,EAAM,cAGZP,MAAU,sCACVC,KAAS,UAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,8CACrBI,GAAOL,EAAI,KAAKC,EAAI,8CACpBK,MAAU,6CACVC,KAAS,QAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,6BACrBI,GAAOL,EAAI,KAAKC,EAAI,6BACpBK,MAAU,8BAGhBD,GAAO,gCACPC,MAAU,gCACVC,KAAS,yBAGfG,KAAS,uBACTL,GAAO,wBACPC,MAAU,yBAEb,CACGJ,OAAWF,EAAI,KAAKC,EAAI,wBACxBE,QAAY,GACZO,KAAS,6DACTL,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,qBAIb,IAAK,cACH,MAAO,CACR,CACGL,OAAWF,EAAI,KAAKC,EAAI,iBACxBE,QAAY,CACT,CACGC,KAAS,OACTC,GAAOL,EAAI,KAAKC,EAAI,yBACpBa,GAAO,UACPR,MAAU,UACVC,KAAS,SAGfG,KAAS,qCACTL,GAAOL,EAAI,KAAKC,EAAI,iBACpBK,MAAU,gBACVC,KAAS,iBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,mBACxBS,KAAS,uCACTL,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,oBAEZ,CACGL,OAAWF,EAAI,KAAKC,EAAI,QACxBS,KAAS,kBACTL,GAAOL,EAAI,KAAKC,EAAI,QACpBK,MAAU,OACVC,KAAS,iBAEZ,CACGC,OAAW,CACR,CACGL,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBK,MAAU,YACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,cACrBI,GAAOL,EAAI,KAAKC,EAAI,cACpBK,MAAU,aACVC,KAAS,SAEZ,CACGJ,QAAY,EACZM,IAAQT,EAAI,KAAKC,EAAI,oBACrBI,GAAOL,EAAI,KAAKC,EAAI,oBACpBK,MAAU,mBACVC,KAAS,QAEZ,CACGJ,QAAY,GACZM,IAAQT,EAAI,KAAKC,EAAI,gBACrBI,GAAOL,EAAI,KAAKC,EAAI,gBACpBK,MAAU,gBAEb,CACGH,QAAY,OACZM,IAAQT,EAAI,KAAKC,EAAI,aACrBI,GAAOL,EAAI,KAAKC,EAAI,aACpBU,OAAW,CACR,CACGC,EAAM,YACNC,EAAM,aAET,CACGD,EAAM,MACNC,EAAM,OAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,WACNC,EAAM,YAET,CACGD,EAAM,OACNC,EAAM,QAET,CACGD,EAAM,SACNC,EAAM,UAET,CACGD,EAAM,cACNC,EAAM,eAET,CACGD,EAAM,eACNC,EAAM,gBAET,CACGD,EAAM,gBACNC,EAAM,kBAGZP,MAAU,YACVC,KAAS,UAEZ,CACGE,IAAQT,EAAI,KAAKC,EAAI,mBACrBI,GAAOL,EAAI,KAAKC,EAAI,mBACpBK,MAAU,kBACVC,KAAS,OAEZ,CACGJ,SAAa,EACbM,IAAQT,EAAI,KAAKC,EAAI,wBACrBI,GAAOL,EAAI,KAAKC,EAAI,wBACpBK,MAAU,uBACVC,KAAS,QAGfG,KAAS,2BACTL,GAAO,eACPC,MAAU,eACVC,KAAS,yBAIb,QACE,MAAO,IAIX,SAASQ,aAAaC,GACpBA,EAAMC,OAASD,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMC,QACnBD,EAAMG,OAASH,EAAMZ,KAAK,GAAGI,OAAO,GAAGA,OAAO,GAC9CQ,EAAME,OAAOF,EAAMG"}
\ No newline at end of file

From a33d43c2f04824d555ba616faed6c1bb64c03f61 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sat, 21 Dec 2019 21:57:58 +0100
Subject: [PATCH 32/60] Change minor package version

---
 rpm/lemonldap-ng.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index 67510c2b0..b7722ae05 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -29,7 +29,7 @@
 #==============================================================================
 Name:           lemonldap-ng
 Version:        2.0.7
-Release:        %{?pre_release:0.}2%{?pre_release:.%{pre_release}}%{?dist}
+Release:        %{?pre_release:0.}1%{?pre_release:.%{pre_release}}%{?dist}
 Summary:        LemonLDAP-NG WebSSO
 License:        GPLv2+
 URL:            http://lemonldap-ng.org

From cabdec60928191b2e938479a235efd6cf29ffd51 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20OUDOT?= <clement@oodo.net>
Date: Sun, 22 Dec 2019 12:52:04 +0100
Subject: [PATCH 33/60] Fix bad translation

---
 lemonldap-ng-manager/site/htdocs/static/languages/en.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index 572712066..7343060a8 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -176,7 +176,7 @@
 "corsAllow_Origin":"Access-Control-Allow-Origin",
 "corsExpose_Headers":"Access-Control-Expose-Headers",
 "corsMax_Age":"Access-Control-Max-Age",
-"cfgLog":"Resume",
+"cfgLog":"Summary",
 "cfgVersion":"Configuration version",
 "checkXSS":"Check XSS attacks",
 "clickHereToForce":"Click here to force",

From 2954ea2abc5d088c861a3b03fd8eef0f2aa66e38 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Sun, 22 Dec 2019 13:05:15 +0100
Subject: [PATCH 34/60] Disable compactConf by default & Update unit tests
 (#2046)

---
 .../lib/Lemonldap/NG/Common/Conf/Compact.pm   |  4 +--
 .../lib/Lemonldap/NG/Common/Conf/Constants.pm |  4 +--
 .../Lemonldap/NG/Common/Conf/DefaultValues.pm |  2 +-
 .../Lemonldap/NG/Common/Conf/ReConstants.pm   |  2 +-
 .../NG/Handler/Lib/StatusConstants.pm         |  2 +-
 .../lib/Lemonldap/NG/Manager/Attributes.pm    | 10 +++----
 .../Lemonldap/NG/Manager/Build/Attributes.pm  |  4 +--
 .../lib/Lemonldap/NG/Manager/Build/Tree.pm    |  4 +--
 .../lib/Lemonldap/NG/Manager/Conf/Parser.pm   | 27 ++++++++++++-------
 .../site/htdocs/static/languages/ar.json      |  2 +-
 .../site/htdocs/static/languages/de.json      |  2 +-
 .../site/htdocs/static/languages/en.json      |  2 +-
 .../site/htdocs/static/languages/fr.json      |  2 +-
 .../site/htdocs/static/languages/it.json      |  2 +-
 .../site/htdocs/static/languages/tr.json      |  2 +-
 .../site/htdocs/static/languages/vi.json      |  2 +-
 .../site/htdocs/static/languages/zh.json      |  2 +-
 .../site/htdocs/static/reverseTree.json       |  2 +-
 .../site/htdocs/static/struct.json            |  2 +-
 lemonldap-ng-manager/t/conf/lmConf-1.json     |  1 +
 .../11-modified-with-confirmation.json        |  6 +++++
 .../t/jsonfiles/12-modified.json              |  6 +++++
 lemonldap-ng-manager/t/jsonfiles/70-diff.json | 17 +++++++++---
 .../lib/Lemonldap/NG/Portal/Main/Constants.pm |  2 +-
 .../t/31-Auth-and-issuer-CAS-declared-apps.t  |  1 +
 25 files changed, 71 insertions(+), 41 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Compact.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Compact.pm
index 10aee4b04..78465feb0 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Compact.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Compact.pm
@@ -4,12 +4,12 @@ use strict;
 use Mouse;
 use Lemonldap::NG::Common::Conf::ReConstants;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 sub compactConf {
     my ( $self, $conf ) = @_;
 
-    return $conf if ( $conf->{'dontCompactConf'} );
+    return $conf unless ( $conf->{'compactConf'} );
 
     # Remove unused auth parameters
     my %keep;
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
index 10a1bc9d7..0723bbc1b 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/Constants.pm
@@ -5,7 +5,7 @@ use strict;
 use Exporter 'import';
 use base qw(Exporter);
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 # CONSTANTS
 
@@ -24,7 +24,7 @@ use constant MANAGERSECTION  => "manager";
 use constant SESSIONSEXPLORERSECTION => "sessionsExplorer";
 use constant APPLYSECTION            => "apply";
 our $hashParameters = qr/^(?:(?:l(?:o(?:ca(?:lSessionStorageOption|tionRule)|goutService)|dapExportedVar|wp(?:Ssl)?Opt)|(?:(?:d(?:emo|bi)|facebook|webID)ExportedVa|exported(?:Heade|Va)|issuerDBGetParamete)r|re(?:moteGlobalStorageOption|st2f(?:Verify|Init)Arg|loadUrl)|g(?:r(?:antSessionRule|oup)|lobalStorageOption)|n(?:otificationStorageOption|ginxCustomHandler)|macro)s|o(?:idc(?:S(?:ervice(?:DynamicRegistrationEx(?:portedVar|traClaim)s|MetaDataAuthnContext)|torageOptions)|RPMetaData(?:(?:Option(?:sExtraClaim)?|ExportedVar|Macro)s|Node)|OPMetaData(?:(?:ExportedVar|Option)s|J(?:SON|WKS)|Node))|penIdExportedVars)|s(?:aml(?:S(?:PMetaData(?:(?:ExportedAttribute|Option|Macro)s|Node|XML)|torageOptions)|IDPMetaData(?:(?:ExportedAttribute|Option)s|Node|XML))|essionDataToRemember|laveExportedVars|fExtra)|c(?:as(?:A(?:ppMetaData(?:(?:ExportedVar|Option|Macro)s|Node)|ttributes)|S(?:rvMetaData(?:(?:ExportedVar|Option)s|Node)|torageOptions))|(?:ustom(?:Plugins|Add)Param|ombModule)s)|p(?:ersistentStorageOptions|o(?:rtalSkinRules|st))|a(?:ut(?:hChoiceMod|oSigninR)ules|pplicationList)|v(?:hostOptions|irtualHost)|S(?:MTPTLSOpts|SLVarIf))$/;
-our $boolKeys = qr/^(?:s(?:aml(?:IDP(?:MetaDataOptions(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|IsPassiv)e|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Force(?:Authn|UTF8)|StoreSAMLToken|RelayStateURL)|SSODescriptorWantAuthnRequestsSigned)|S(?:P(?:MetaDataOptions(?:(?:CheckS[LS]OMessageSignatur|OneTimeUs)e|EnableIDPInitiatedURL|ForceUTF8)|SSODescriptor(?:WantAssertion|AuthnRequest)sSigned)|erviceUseCertificateInResponse)|DiscoveryProtocol(?:Activation|IsPassive)|CommonDomainCookieActivation|UseQueryStringSpecific|MetadataForceUTF8)|ingle(?:Session(?:UserByIP)?|(?:UserBy)?IP)|oap(?:Session|Config)Server|t(?:ayConnecte|orePasswor)d|kipRenewConfirmation|fRemovedUseNotif|laveDisplayLogo|howLanguages|slByAjax)|o(?:idc(?:RPMetaDataOptions(?:Re(?:freshToken|quirePKCE)|LogoutSessionRequired|IDTokenForceClaims|BypassConsent|AllowOffline|Public)|ServiceAllow(?:(?:AuthorizationCode|Implicit|Hybrid)Flow|DynamicRegistration)|OPMetaDataOptions(?:(?:CheckJWTSignatur|UseNonc)e|StoreIDToken))|ldNotifFormat)|p(?:ortal(?:Display(?:Re(?:setPassword|gister)|GeneratePassword|PasswordPolicy)|ErrorOn(?:ExpiredSession|MailNotFound)|(?:CheckLogin|Statu)s|OpenLinkInNewWindow|RequireOldPassword|ForceAuthn|AntiFrame)|roxyUseSoap)|c(?:a(?:ptcha_(?:register|login|mail)_enabled|sSrvMetaDataOptions(?:Gateway|Renew))|heck(?:User(?:Display(?:PersistentInfo|EmptyValues))?|State|XSS)|o(?:ntextSwitchingStopWithLogout|rsEnabled)|da)|l(?:dap(?:(?:Group(?:DecodeSearchedValu|Recursiv)|UsePasswordResetAttribut)e|(?:AllowResetExpired|Set)Password|ChangePasswordAsUser|PpolicyControl|ITDS)|oginHistoryEnabled)|i(?:ssuerDB(?:OpenID(?:Connect)?|SAML|CAS|Get)Activation|mpersonationSkipEmptyValues)|no(?:tif(?:ication(?:Server(?:(?:POS|GE)T|DELETE)?)?|y(?:Deleted|Other))|AjaxHook)|to(?:tp2f(?:UserCan(?:Chang|Remov)eKey|DisplayExistingSecret)|kenUseGlobalStorage)|u(?:se(?:RedirectOn(?:Forbidden|Error)|SafeJail)|2fUserCanRemoveKey|pgradeSession)|re(?:st(?:(?:Session|Config)Server|ExportSecretKeys)|freshSessions)|d(?:isablePersistentStorage|biDynamicHashEnabled|ontCompactConf)|(?:mai(?:lOnPasswordChang|ntenanc)|vhostMaintenanc)e|br(?:owsersDontStorePassword|uteForceProtection)|(?:(?:globalLogout|active)Tim|wsdlServ)er|h(?:ideOldPassword|ttpOnly)|yubikey2fUserCanRemoveKey|krb(?:RemoveDomain|ByJs))$/;
+our $boolKeys = qr/^(?:s(?:aml(?:IDP(?:MetaDataOptions(?:(?:Check(?:S[LS]OMessageSignatur|Audienc|Tim)|IsPassiv)e|A(?:llow(?:LoginFromIDP|ProxiedAuthn)|daptSessionUtime)|Force(?:Authn|UTF8)|StoreSAMLToken|RelayStateURL)|SSODescriptorWantAuthnRequestsSigned)|S(?:P(?:MetaDataOptions(?:(?:CheckS[LS]OMessageSignatur|OneTimeUs)e|EnableIDPInitiatedURL|ForceUTF8)|SSODescriptor(?:WantAssertion|AuthnRequest)sSigned)|erviceUseCertificateInResponse)|DiscoveryProtocol(?:Activation|IsPassive)|CommonDomainCookieActivation|UseQueryStringSpecific|MetadataForceUTF8)|ingle(?:Session(?:UserByIP)?|(?:UserBy)?IP)|oap(?:Session|Config)Server|t(?:ayConnecte|orePasswor)d|kipRenewConfirmation|fRemovedUseNotif|laveDisplayLogo|howLanguages|slByAjax)|o(?:idc(?:RPMetaDataOptions(?:Re(?:freshToken|quirePKCE)|LogoutSessionRequired|IDTokenForceClaims|BypassConsent|AllowOffline|Public)|ServiceAllow(?:(?:AuthorizationCode|Implicit|Hybrid)Flow|DynamicRegistration)|OPMetaDataOptions(?:(?:CheckJWTSignatur|UseNonc)e|StoreIDToken))|ldNotifFormat)|p(?:ortal(?:Display(?:Re(?:setPassword|gister)|GeneratePassword|PasswordPolicy)|ErrorOn(?:ExpiredSession|MailNotFound)|(?:CheckLogin|Statu)s|OpenLinkInNewWindow|RequireOldPassword|ForceAuthn|AntiFrame)|roxyUseSoap)|c(?:a(?:ptcha_(?:register|login|mail)_enabled|sSrvMetaDataOptions(?:Gateway|Renew))|heck(?:User(?:Display(?:PersistentInfo|EmptyValues))?|State|XSS)|o(?:ntextSwitchingStopWithLogout|mpactConf|rsEnabled)|da)|l(?:dap(?:(?:Group(?:DecodeSearchedValu|Recursiv)|UsePasswordResetAttribut)e|(?:AllowResetExpired|Set)Password|ChangePasswordAsUser|PpolicyControl|ITDS)|oginHistoryEnabled)|i(?:ssuerDB(?:OpenID(?:Connect)?|SAML|CAS|Get)Activation|mpersonationSkipEmptyValues)|no(?:tif(?:ication(?:Server(?:(?:POS|GE)T|DELETE)?)?|y(?:Deleted|Other))|AjaxHook)|to(?:tp2f(?:UserCan(?:Chang|Remov)eKey|DisplayExistingSecret)|kenUseGlobalStorage)|u(?:se(?:RedirectOn(?:Forbidden|Error)|SafeJail)|2fUserCanRemoveKey|pgradeSession)|re(?:st(?:(?:Session|Config)Server|ExportSecretKeys)|freshSessions)|(?:mai(?:lOnPasswordChang|ntenanc)|vhostMaintenanc)e|d(?:isablePersistentStorage|biDynamicHashEnabled)|br(?:owsersDontStorePassword|uteForceProtection)|(?:(?:globalLogout|active)Tim|wsdlServ)er|h(?:ideOldPassword|ttpOnly)|yubikey2fUserCanRemoveKey|krb(?:RemoveDomain|ByJs))$/;
 
 our @sessionTypes = ( 'remoteGlobal', 'global', 'localSession', 'persistent', 'saml', 'oidc', 'cas' );
 
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
index 6035dbe33..865683cec 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
@@ -1,7 +1,7 @@
 # This file is generated by Lemonldap::NG::Manager::Build. Don't modify it by hand
 package Lemonldap::NG::Common::Conf::DefaultValues;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 sub defaultValues {
     return {
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
index 0ab8b21c3..909a72d93 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/ReConstants.pm
@@ -5,7 +5,7 @@ use strict;
 use Exporter 'import';
 use base qw(Exporter);
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 our %EXPORT_TAGS = ( 'all' => [qw($simpleHashKeys $doubleHashKeys $specialNodeKeys $casAppMetaDataNodeKeys $casSrvMetaDataNodeKeys $oidcOPMetaDataNodeKeys $oidcRPMetaDataNodeKeys $samlIDPMetaDataNodeKeys $samlSPMetaDataNodeKeys $virtualHostKeys $specialNodeHash $authParameters $issuerParameters $samlServiceParameters $oidcServiceParameters $casServiceParameters)] );
 our @EXPORT_OK   = ( @{ $EXPORT_TAGS{'all'} } );
diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
index e6a74f091..1dbe54194 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
@@ -4,7 +4,7 @@ package Lemonldap::NG::Handler::Lib::StatusConstants;
 use strict;
 use Exporter 'import';
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 sub portalConsts {
     return {
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
index ab484062d..c37c7e25f 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
@@ -1,7 +1,7 @@
 # This file is generated by Lemonldap::NG::Manager::Build. Don't modify it by hand
 package Lemonldap::NG::Manager::Attributes;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 sub perlExpr {
     my ( $val, $conf ) = @_;
@@ -968,6 +968,10 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
             },
             'type' => 'cmbModuleContainer'
         },
+        'compactConf' => {
+            'default' => 0,
+            'type'    => 'bool'
+        },
         'configStorage' => {
             'type' => 'text'
         },
@@ -1185,10 +1189,6 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
 qr/^(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.])*(?:[a-zA-Z][-a-zA-Z0-9]*[a-zA-Z0-9]|[a-zA-Z])[.]?))?$/,
             'type' => 'text'
         },
-        'dontCompactConf' => {
-            'default' => 0,
-            'type'    => 'bool'
-        },
         'exportedAttr' => {
             'type' => 'text'
         },
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 45622b212..b992018ca 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -6,7 +6,7 @@
 
 package Lemonldap::NG::Manager::Build::Attributes;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 use strict;
 use Regexp::Common qw/URI/;
 
@@ -390,7 +390,7 @@ sub attributes {
             msgFail       => '__badUrl__',
             documentation => 'URL to call on reload',
         },
-        dontCompactConf => {
+        compactConf => {
             type          => 'bool',
             default       => 0,
             documentation => 'Don t compact configuration',
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index f2c8083da..85429562b 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -17,7 +17,7 @@
 
 package Lemonldap::NG::Manager::Build::Tree;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 # TODO: Missing:
 #  * activeTimer
@@ -571,7 +571,7 @@ sub tree {
                     title => 'reloadParams',
                     help  => 'configlocation.html#configuration_reload',
                     nodes =>
-                      [ 'reloadUrls', 'reloadTimeout', 'dontCompactConf' ]
+                      [ 'reloadUrls', 'reloadTimeout', 'compactConf' ]
                 },
                 {
                     title => 'plugins',
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Parser.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Parser.pm
index d89926e56..25d3dcbad 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Parser.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Conf/Parser.pm
@@ -26,7 +26,7 @@ use JSON 'to_json';
 use Lemonldap::NG::Common::Conf::ReConstants;
 use Lemonldap::NG::Manager::Attributes;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 extends 'Lemonldap::NG::Common::Conf::Compact';
 
@@ -115,19 +115,19 @@ sub check {
         $self->message('__confNotChanged__');
         return 0;
     }
-    unless ( $self->newConf->{dontCompactConf} ) {
+    if ( $self->newConf->{compactConf} ) {
         foreach ( sort keys %conf ) {
             push @removedKeys, $_ unless exists $compactedConf{$_};
         }
     }
     push @{ $self->changes },
       (
-        $self->{newConf}->{dontCompactConf}
-        ? { confCompacted => '0' }
-        : {
+        $self->{newConf}->{compactConf}
+        ? {
             confCompacted => '1',
             removedKeys   => join( $separator, @removedKeys )
-        }
+          }
+        : { confCompacted => '0' }
       );
     return 1;
 }
@@ -266,7 +266,8 @@ sub _scanNodes {
                               $leaf->{comment}
                               ? "(?#$leaf->{comment})$leaf->{re}"
                               : $leaf->{re};
-                            $k .= "(?#AuthnLevel=$leaf->{level})" if $leaf->{level};
+                            $k .= "(?#AuthnLevel=$leaf->{level})"
+                              if $leaf->{level};
                             $self->set( $target, $key, $k, $leaf->{data} );
                         }
                         else {
@@ -334,7 +335,9 @@ sub _scanNodes {
                     hdebug("  SAML data is an array, serializing");
                     $leaf->{data} = join ';', @{ $leaf->{data} };
                 }
-                if ( $target =~ /^saml(?:S|ID)PMetaData(?:ExportedAttributes|Macros)$/ ) {
+                if ( $target =~
+                    /^saml(?:S|ID)PMetaData(?:ExportedAttributes|Macros)$/ )
+                {
                     if ( $leaf->{cnodes} ) {
                         hdebug("  $target: unopened node");
                         $self->newConf->{$target}->{$key} =
@@ -394,7 +397,9 @@ sub _scanNodes {
                     hdebug("  $target");
                     $self->set( $target, $key, $leaf->{data} );
                 }
-                elsif ( $target =~ /^oidc(?:O|R)PMetaData(?:ExportedVars|Macros)$/ ) {
+                elsif (
+                    $target =~ /^oidc(?:O|R)PMetaData(?:ExportedVars|Macros)$/ )
+                {
                     hdebug("  $target");
                     if ( $leaf->{cnodes} ) {
                         hdebug('    unopened');
@@ -463,7 +468,9 @@ sub _scanNodes {
                     $self->_scanNodes($subNodes);
                     $self->set( $target, $key, $leaf->{title}, $leaf->{data} );
                 }
-                elsif ( $target =~ /^cas(?:App|Srv)MetaData(?:ExportedVars|Macros)$/ ) {
+                elsif ( $target =~
+                    /^cas(?:App|Srv)MetaData(?:ExportedVars|Macros)$/ )
+                {
                     hdebug("  $target");
                     if ( $leaf->{cnodes} ) {
                         hdebug('    unopened');
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
index 26be010a2..fdf74c273 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@@ -273,7 +273,7 @@
 "dateTitle":"تاريخ",
 "dn":"دي أن",
 "domain":"نطاق",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"تحميل",
 "downloadIt":"نزله",
 "duplicate":"مكررة",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/de.json b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
index ab9de1451..5724ac2bd 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@@ -273,7 +273,7 @@
 "dateTitle":"Dates",
 "dn":"DN",
 "domain":"Domain",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"Download",
 "downloadIt":"Download it",
 "duplicate":"Duplicate",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index 7343060a8..d63ed755c 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -273,7 +273,7 @@
 "dateTitle":"Dates",
 "dn":"DN",
 "domain":"Domain",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"Download",
 "downloadIt":"Download it",
 "duplicate":"Duplicate",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
index 846eab8e3..1f0744488 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
@@ -273,7 +273,7 @@
 "dateTitle":"Dates",
 "dn":"DN",
 "domain":"Domaine",
-"dontCompactConf":"Ne pas compacter le fichier de configuration",
+"compactConf":"Compacter le fichier de configuration",
 "download":"Télécharger",
 "downloadIt":"Télécharger",
 "duplicate":"Dupliquer",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/it.json b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
index 214c11e50..f561dfca8 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@@ -273,7 +273,7 @@
 "dateTitle":"Date",
 "dn":"DN",
 "domain":"Dominio",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"Scarica",
 "downloadIt":"Scaricalo",
 "duplicate":"Duplicato",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
index 1a23572b7..9c39830c5 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@@ -273,7 +273,7 @@
 "dateTitle":"Tarihler",
 "dn":"DN",
 "domain":"Etki alanı",
-"dontCompactConf":"Yapılandırma dosyasını sıkıştırma",
+"compactConf":"Compact configuration file",
 "download":"İndir",
 "downloadIt":"İndir",
 "duplicate":"Mükerrer",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
index 526ec0fbd..755236a10 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@@ -273,7 +273,7 @@
 "dateTitle":"Ngày",
 "dn":"DN",
 "domain":"Tên miền",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"Tải xuống",
 "downloadIt":"Tải xuống",
 "duplicate":"Sao y",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
index b6a84befa..0c271b4ef 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@@ -273,7 +273,7 @@
 "dateTitle":"日期",
 "dn":"LDAP 唯一名称",
 "domain":"域",
-"dontCompactConf":"Don't compact configuration file",
+"compactConf":"Compact configuration file",
 "download":"下载",
 "downloadIt":"下载它",
 "duplicate":"Duplicate",
diff --git a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
index 07813df62..46356e50d 100644
--- a/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
+++ b/lemonldap-ng-manager/site/htdocs/static/reverseTree.json
@@ -1 +1 @@
-{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","certificateResetByMailCeaAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailCertificateAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailReplyTo":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailSender":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailURL":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailValidityDelay":"generalParameters/plugins/certificateResetByMailManagement/mailOther","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","dontCompactConf":"generalParameters/reloadParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceDynamicRegistrationExportedVars":"oidcServiceMetaData","oidcServiceDynamicRegistrationExtraClaims":"oidcServiceMetaData","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayCertificateResetByMail":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
+{"ADPwdExpireWarning":"generalParameters/authParams/adParams","ADPwdMaxAge":"generalParameters/authParams/adParams","AuthLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","LDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","SMTPAuthPass":"generalParameters/advancedParams/SMTP","SMTPAuthUser":"generalParameters/advancedParams/SMTP","SMTPPort":"generalParameters/advancedParams/SMTP","SMTPServer":"generalParameters/advancedParams/SMTP","SMTPTLS":"generalParameters/advancedParams/SMTP","SMTPTLSOpts":"generalParameters/advancedParams/SMTP","SSLAuthnLevel":"generalParameters/authParams/sslParams","SSLVar":"generalParameters/authParams/sslParams","SSLVarIf":"generalParameters/authParams/sslParams","activeTimer":"generalParameters/advancedParams/forms","apacheAuthnLevel":"generalParameters/authParams/apacheParams","applicationList":"generalParameters/portalParams/portalMenu","authChoiceAuthBasic":"generalParameters/authParams/choiceParams","authChoiceModules":"generalParameters/authParams/choiceParams","authChoiceParam":"generalParameters/authParams/choiceParams","authentication":"generalParameters/authParams","autoSigninRules":"generalParameters/plugins/autoSignin","browsersDontStorePassword":"generalParameters/advancedParams/security","bruteForceProtection":"generalParameters/advancedParams/security","captcha_login_enabled":"generalParameters/portalParams/portalCaptcha","captcha_mail_enabled":"generalParameters/portalParams/portalCaptcha","captcha_register_enabled":"generalParameters/portalParams/portalCaptcha","captcha_size":"generalParameters/portalParams/portalCaptcha","casAccessControlPolicy":"casServiceMetadata","casAppMetaDataNodes":"","casAttr":"casServiceMetadata","casAttributes":"casServiceMetadata","casAuthnLevel":"generalParameters/authParams/casParams","casSrvMetaDataNodes":"","casStorage":"casServiceMetadata","casStorageOptions":"casServiceMetadata","cda":"generalParameters/cookieParams","certificateResetByMailCeaAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailCertificateAttribute":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailReplyTo":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailSender":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep1Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Body":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailStep2Subject":"generalParameters/plugins/certificateResetByMailManagement/certificateMailContent","certificateResetByMailURL":"generalParameters/plugins/certificateResetByMailManagement/mailOther","certificateResetByMailValidityDelay":"generalParameters/plugins/certificateResetByMailManagement/mailOther","checkState":"generalParameters/plugins/stateCheck","checkStateSecret":"generalParameters/plugins/stateCheck","checkUser":"generalParameters/plugins/checkUsers","checkUserDisplayEmptyValues":"generalParameters/plugins/checkUsers","checkUserDisplayPersistentInfo":"generalParameters/plugins/checkUsers","checkUserHiddenAttributes":"generalParameters/plugins/checkUsers","checkUserIdRule":"generalParameters/plugins/checkUsers","checkUserSearchAttributes":"generalParameters/plugins/checkUsers","checkXSS":"generalParameters/advancedParams/security","combModules":"generalParameters/authParams/combinationParams","combination":"generalParameters/authParams/combinationParams","compactConf":"generalParameters/reloadParams","confirmFormMethod":"generalParameters/advancedParams/forms","contextSwitchingIdRule":"generalParameters/plugins/contextSwitching","contextSwitchingRule":"generalParameters/plugins/contextSwitching","contextSwitchingStopWithLogout":"generalParameters/plugins/contextSwitching","cookieExpiration":"generalParameters/cookieParams","cookieName":"generalParameters/cookieParams","corsAllow_Credentials":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Methods":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsAllow_Origin":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsEnabled":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsExpose_Headers":"generalParameters/advancedParams/security/crossOrigineResourceSharing","corsMax_Age":"generalParameters/advancedParams/security/crossOrigineResourceSharing","cspConnect":"generalParameters/advancedParams/security/contentSecurityPolicy","cspDefault":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFont":"generalParameters/advancedParams/security/contentSecurityPolicy","cspFormAction":"generalParameters/advancedParams/security/contentSecurityPolicy","cspImg":"generalParameters/advancedParams/security/contentSecurityPolicy","cspScript":"generalParameters/advancedParams/security/contentSecurityPolicy","cspStyle":"generalParameters/advancedParams/security/contentSecurityPolicy","customAddParams":"generalParameters/authParams/customParams","customAuth":"generalParameters/authParams/customParams","customFunctions":"generalParameters/advancedParams","customPassword":"generalParameters/authParams/customParams","customPlugins":"generalParameters/plugins/customPluginsNode","customPluginsParams":"generalParameters/plugins/customPluginsNode","customRegister":"generalParameters/authParams/customParams","customToTrace":"generalParameters/logParams","customUserDB":"generalParameters/authParams/customParams","dbiAuthChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthLoginCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthPasswordCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthPasswordHash":"generalParameters/authParams/dbiParams/dbiPassword","dbiAuthTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiAuthUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionAuth","dbiAuthnLevel":"generalParameters/authParams/dbiParams","dbiDynamicHashEnabled":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashNewPasswordScheme":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSaltedSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiDynamicHashValidSchemes":"generalParameters/authParams/dbiParams/dbiPassword/dbiDynamicHash","dbiExportedVars":"generalParameters/authParams/dbiParams","dbiPasswordMailCol":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserChain":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserPassword":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","dbiUserTable":"generalParameters/authParams/dbiParams/dbiSchema","dbiUserUser":"generalParameters/authParams/dbiParams/dbiConnection/dbiConnectionUser","decryptValueFunctions":"generalParameters/plugins/decryptValue","decryptValueRule":"generalParameters/plugins/decryptValue","demoExportedVars":"generalParameters/authParams/demoParams","disablePersistentStorage":"generalParameters/sessionParams/persistentSessions","domain":"generalParameters/cookieParams","exportedAttr":"generalParameters/plugins/portalServers","exportedVars":"variables","ext2FSendCommand":"generalParameters/secondFactors/ext2f","ext2FValidateCommand":"generalParameters/secondFactors/ext2f","ext2fActivation":"generalParameters/secondFactors/ext2f","ext2fAuthnLevel":"generalParameters/secondFactors/ext2f","ext2fCodeActivation":"generalParameters/secondFactors/ext2f","ext2fLabel":"generalParameters/secondFactors/ext2f","ext2fLogo":"generalParameters/secondFactors/ext2f","facebookAppId":"generalParameters/authParams/facebookParams","facebookAppSecret":"generalParameters/authParams/facebookParams","facebookAuthnLevel":"generalParameters/authParams/facebookParams","facebookExportedVars":"generalParameters/authParams/facebookParams","facebookUserField":"generalParameters/authParams/facebookParams","failedLoginNumber":"generalParameters/plugins/loginHistory","formTimeout":"generalParameters/advancedParams/security","globalLogoutRule":"generalParameters/plugins/globalLogout","globalLogoutTimer":"generalParameters/plugins/globalLogout","globalStorage":"generalParameters/sessionParams/sessionStorage","globalStorageOptions":"generalParameters/sessionParams/sessionStorage","gpgAuthnLevel":"generalParameters/authParams/gpgParams","gpgDb":"generalParameters/authParams/gpgParams","grantSessionRules":"generalParameters/sessionParams","groups":"variables","hiddenAttributes":"generalParameters/logParams","hideOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","httpOnly":"generalParameters/cookieParams","https":"generalParameters/advancedParams/redirection","impersonationHiddenAttributes":"generalParameters/plugins/impersonation","impersonationIdRule":"generalParameters/plugins/impersonation","impersonationMergeSSOgroups":"generalParameters/plugins/impersonation","impersonationRule":"generalParameters/plugins/impersonation","impersonationSkipEmptyValues":"generalParameters/plugins/impersonation","infoFormMethod":"generalParameters/advancedParams/forms","issuerDBCASActivation":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASPath":"generalParameters/issuerParams/issuerDBCAS","issuerDBCASRule":"generalParameters/issuerParams/issuerDBCAS","issuerDBGetActivation":"generalParameters/issuerParams/issuerDBGet","issuerDBGetParameters":"generalParameters/issuerParams/issuerDBGet","issuerDBGetPath":"generalParameters/issuerParams/issuerDBGet","issuerDBGetRule":"generalParameters/issuerParams/issuerDBGet","issuerDBOpenIDActivation":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDConnectActivation":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectPath":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDConnectRule":"generalParameters/issuerParams/issuerDBOpenIDConnect","issuerDBOpenIDPath":"generalParameters/issuerParams/issuerDBOpenID","issuerDBOpenIDRule":"generalParameters/issuerParams/issuerDBOpenID","issuerDBSAMLActivation":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLPath":"generalParameters/issuerParams/issuerDBSAML","issuerDBSAMLRule":"generalParameters/issuerParams/issuerDBSAML","issuersTimeout":"generalParameters/issuerParams/issuerOptions","jsRedirect":"generalParameters/advancedParams/portalRedirection","key":"generalParameters/advancedParams/security","krbAuthnLevel":"generalParameters/authParams/kerberosParams","krbByJs":"generalParameters/authParams/kerberosParams","krbKeytab":"generalParameters/authParams/kerberosParams","krbRemoveDomain":"generalParameters/authParams/kerberosParams","ldapAllowResetExpiredPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapAuthnLevel":"generalParameters/authParams/ldapParams","ldapBase":"generalParameters/authParams/ldapParams/ldapConnection","ldapChangePasswordAsUser":"generalParameters/authParams/ldapParams/ldapPassword","ldapExportedVars":"generalParameters/authParams/ldapParams","ldapGroupAttributeName":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameGroup":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameSearch":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupAttributeNameUser":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupBase":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupDecodeSearchedValue":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupObjectClass":"generalParameters/authParams/ldapParams/ldapGroups","ldapGroupRecursive":"generalParameters/authParams/ldapParams/ldapGroups","ldapITDS":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapPasswordResetAttributeValue":"generalParameters/authParams/ldapParams/ldapPassword","ldapPort":"generalParameters/authParams/ldapParams/ldapConnection","ldapPpolicyControl":"generalParameters/authParams/ldapParams/ldapPassword","ldapPwdEnc":"generalParameters/authParams/ldapParams/ldapPassword","ldapRaw":"generalParameters/authParams/ldapParams/ldapConnection","ldapSearchDeref":"generalParameters/authParams/ldapParams/ldapFilters","ldapServer":"generalParameters/authParams/ldapParams/ldapConnection","ldapSetPassword":"generalParameters/authParams/ldapParams/ldapPassword","ldapTimeout":"generalParameters/authParams/ldapParams/ldapConnection","ldapUsePasswordResetAttribute":"generalParameters/authParams/ldapParams/ldapPassword","ldapVersion":"generalParameters/authParams/ldapParams/ldapConnection","linkedInAuthnLevel":"generalParameters/authParams/linkedinParams","linkedInClientID":"generalParameters/authParams/linkedinParams","linkedInClientSecret":"generalParameters/authParams/linkedinParams","linkedInFields":"generalParameters/authParams/linkedinParams","linkedInScope":"generalParameters/authParams/linkedinParams","linkedInUserField":"generalParameters/authParams/linkedinParams","localSessionStorage":"generalParameters/sessionParams/sessionStorage","localSessionStorageOptions":"generalParameters/sessionParams/sessionStorage","loginHistoryEnabled":"generalParameters/plugins/loginHistory","logoutServices":"generalParameters/advancedParams","lwpOpts":"generalParameters/advancedParams/security","lwpSslOpts":"generalParameters/advancedParams/security","macros":"variables","mail2fActivation":"generalParameters/secondFactors/mail2f","mail2fAuthnLevel":"generalParameters/secondFactors/mail2f","mail2fBody":"generalParameters/secondFactors/mail2f","mail2fCodeRegex":"generalParameters/secondFactors/mail2f","mail2fLabel":"generalParameters/secondFactors/mail2f","mail2fLogo":"generalParameters/secondFactors/mail2f","mail2fSubject":"generalParameters/secondFactors/mail2f","mail2fTimeout":"generalParameters/secondFactors/mail2f","mailBody":"generalParameters/plugins/passwordManagement/mailContent","mailCharset":"generalParameters/advancedParams/SMTP/mailHeaders","mailConfirmBody":"generalParameters/plugins/passwordManagement/mailContent","mailConfirmSubject":"generalParameters/plugins/passwordManagement/mailContent","mailFrom":"generalParameters/advancedParams/SMTP/mailHeaders","mailLDAPFilter":"generalParameters/authParams/ldapParams/ldapFilters","mailOnPasswordChange":"generalParameters/portalParams/portalCustomization/passwordManagement","mailReplyTo":"generalParameters/advancedParams/SMTP/mailHeaders","mailSessionKey":"generalParameters/advancedParams/SMTP","mailSubject":"generalParameters/plugins/passwordManagement/mailContent","mailTimeout":"generalParameters/plugins/passwordManagement/mailOther","mailUrl":"generalParameters/plugins/passwordManagement/mailOther","maintenance":"generalParameters/advancedParams/redirection","managerDn":"generalParameters/authParams/ldapParams/ldapConnection","managerPassword":"generalParameters/authParams/ldapParams/ldapConnection","multiValuesSeparator":"generalParameters/advancedParams","nginxCustomHandlers":"generalParameters/advancedParams","noAjaxHook":"generalParameters/advancedParams/portalRedirection","notification":"generalParameters/plugins/notifications","notificationDefaultCond":"generalParameters/plugins/notifications/serverNotification","notificationServer":"generalParameters/plugins/notifications/serverNotification","notificationServerDELETE":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerGET":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerPOST":"generalParameters/plugins/notifications/serverNotification/notificationServerMethods","notificationServerSentAttributes":"generalParameters/plugins/notifications/serverNotification","notificationStorage":"generalParameters/plugins/notifications","notificationStorageOptions":"generalParameters/plugins/notifications","notificationWildcard":"generalParameters/plugins/notifications","notificationXSLTfile":"generalParameters/plugins/notifications","notifyDeleted":"generalParameters/sessionParams/multipleSessions","notifyOther":"generalParameters/sessionParams/multipleSessions","nullAuthnLevel":"generalParameters/authParams/nullParams","oidcAuthnLevel":"generalParameters/authParams/oidcParams","oidcOPMetaDataNodes":"","oidcRPCallbackGetParam":"generalParameters/authParams/oidcParams","oidcRPMetaDataNodes":"","oidcRPStateTimeout":"generalParameters/authParams/oidcParams","oidcServiceAccessTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowAuthorizationCodeFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowDynamicRegistration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowHybridFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAllowImplicitFlow":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceAuthorizationCodeExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceDynamicRegistrationExportedVars":"oidcServiceMetaData","oidcServiceDynamicRegistrationExtraClaims":"oidcServiceMetaData","oidcServiceIDTokenExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceKeyIdSig":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServiceMetaDataAuthnContext":"oidcServiceMetaData","oidcServiceMetaDataAuthorizeURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataBackChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataCheckSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataEndSessionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataFrontChannelURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIntrospectionURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataIssuer":"oidcServiceMetaData","oidcServiceMetaDataJWKSURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataRegistrationURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataTokenURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceMetaDataUserInfoURI":"oidcServiceMetaData/oidcServiceMetaDataEndPoints","oidcServiceOfflineSessionExpiration":"oidcServiceMetaData/oidcServiceMetaDataSecurity","oidcServicePrivateKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcServicePublicKeySig":"oidcServiceMetaData/oidcServiceMetaDataSecurity/oidcServiceMetaDataKeys","oidcStorage":"oidcServiceMetaData/oidcServiceMetaDataSessions","oidcStorageOptions":"oidcServiceMetaData/oidcServiceMetaDataSessions","oldNotifFormat":"generalParameters/plugins/notifications","openIdAttr":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdAuthnLevel":"generalParameters/authParams/openidParams","openIdExportedVars":"generalParameters/authParams/openidParams","openIdIDPList":"generalParameters/authParams/openidParams","openIdIssuerSecret":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSPList":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions","openIdSecret":"generalParameters/authParams/openidParams","openIdSreg_country":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_dob":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_email":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_fullname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_gender":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_language":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_nickname":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_postcode":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","openIdSreg_timezone":"generalParameters/issuerParams/issuerDBOpenID/issuerDBOpenIDOptions/openIdSreg","pamAuthnLevel":"generalParameters/authParams/pamParams","pamService":"generalParameters/authParams/pamParams","passwordDB":"generalParameters/authParams","passwordPolicyMinDigit":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinLower":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinSize":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordPolicyMinUpper":"generalParameters/portalParams/portalCustomization/passwordManagement","passwordResetAllowedRetries":"generalParameters/portalParams/portalCustomization/portalButtons","persistentStorage":"generalParameters/sessionParams/persistentSessions","persistentStorageOptions":"generalParameters/sessionParams/persistentSessions","port":"generalParameters/advancedParams/redirection","portal":"generalParameters/portalParams","portalAntiFrame":"generalParameters/portalParams/portalCustomization/portalOther","portalCheckLogins":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayAppslist":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayCertificateResetByMail":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayChangePassword":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayGeneratePassword":"generalParameters/plugins/passwordManagement/mailOther","portalDisplayLoginHistory":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayLogout":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayOidcConsents":"generalParameters/portalParams/portalMenu/portalModules","portalDisplayPasswordPolicy":"generalParameters/portalParams/portalCustomization/passwordManagement","portalDisplayRegister":"generalParameters/portalParams/portalCustomization/portalButtons","portalDisplayResetPassword":"generalParameters/portalParams/portalCustomization/portalButtons","portalErrorOnExpiredSession":"generalParameters/portalParams/portalCustomization/portalOther","portalErrorOnMailNotFound":"generalParameters/portalParams/portalCustomization/portalOther","portalForceAuthn":"generalParameters/advancedParams/security","portalForceAuthnInterval":"generalParameters/advancedParams/security","portalMainLogo":"generalParameters/portalParams/portalCustomization","portalOpenLinkInNewWindow":"generalParameters/portalParams/portalCustomization/portalOther","portalPingInterval":"generalParameters/portalParams/portalCustomization/portalOther","portalRequireOldPassword":"generalParameters/portalParams/portalCustomization/passwordManagement","portalSkin":"generalParameters/portalParams/portalCustomization","portalSkinBackground":"generalParameters/portalParams/portalCustomization","portalSkinRules":"generalParameters/portalParams/portalCustomization","portalStatus":"generalParameters/plugins","portalUserAttr":"generalParameters/portalParams/portalCustomization/portalOther","proxyAuthService":"generalParameters/authParams/proxyParams","proxyAuthnLevel":"generalParameters/authParams/proxyParams","proxySessionService":"generalParameters/authParams/proxyParams","proxyUseSoap":"generalParameters/authParams/proxyParams","radius2fActivation":"generalParameters/secondFactors/radius2f","radius2fAuthnLevel":"generalParameters/secondFactors/radius2f","radius2fLabel":"generalParameters/secondFactors/radius2f","radius2fLogo":"generalParameters/secondFactors/radius2f","radius2fSecret":"generalParameters/secondFactors/radius2f","radius2fServer":"generalParameters/secondFactors/radius2f","radius2fTimeout":"generalParameters/secondFactors/radius2f","radius2fUsernameSessionKey":"generalParameters/secondFactors/radius2f","radiusAuthnLevel":"generalParameters/authParams/radiusParams","radiusSecret":"generalParameters/authParams/radiusParams","radiusServer":"generalParameters/authParams/radiusParams","randomPasswordRegexp":"generalParameters/plugins/passwordManagement/mailOther","redirectFormMethod":"generalParameters/advancedParams/forms","refreshSessions":"generalParameters/plugins","registerConfirmSubject":"generalParameters/plugins/register","registerDB":"generalParameters/authParams","registerDoneSubject":"generalParameters/plugins/register","registerTimeout":"generalParameters/plugins/register","registerUrl":"generalParameters/plugins/register","reloadTimeout":"generalParameters/reloadParams","reloadUrls":"generalParameters/reloadParams","remoteCookieName":"generalParameters/authParams/remoteParams","remoteGlobalStorage":"generalParameters/authParams/remoteParams","remoteGlobalStorageOptions":"generalParameters/authParams/remoteParams","remotePortal":"generalParameters/authParams/remoteParams","requireToken":"generalParameters/advancedParams/security","rest2fActivation":"generalParameters/secondFactors/rest2f","rest2fAuthnLevel":"generalParameters/secondFactors/rest2f","rest2fInitArgs":"generalParameters/secondFactors/rest2f","rest2fInitUrl":"generalParameters/secondFactors/rest2f","rest2fLabel":"generalParameters/secondFactors/rest2f","rest2fLogo":"generalParameters/secondFactors/rest2f","rest2fVerifyArgs":"generalParameters/secondFactors/rest2f","rest2fVerifyUrl":"generalParameters/secondFactors/rest2f","restAuthUrl":"generalParameters/authParams/restParams","restAuthnLevel":"generalParameters/authParams/restParams","restClockTolerance":"generalParameters/plugins/portalServers","restConfigServer":"generalParameters/plugins/portalServers","restExportSecretKeys":"generalParameters/plugins/portalServers","restPwdConfirmUrl":"generalParameters/authParams/restParams","restPwdModifyUrl":"generalParameters/authParams/restParams","restSessionServer":"generalParameters/plugins/portalServers","restUserDBUrl":"generalParameters/authParams/restParams","samlAttributeAuthorityDescriptorAttributeServiceSOAP":"samlServiceMetaData/samlAttributeAuthorityDescriptor/samlAttributeAuthorityDescriptorAttributeService","samlAuthnContextMapKerberos":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPassword":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapPasswordProtectedTransport":"samlServiceMetaData/samlAuthnContextMap","samlAuthnContextMapTLSClient":"samlServiceMetaData/samlAuthnContextMap","samlCommonDomainCookieActivation":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieDomain":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieReader":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlCommonDomainCookieWriter":"samlServiceMetaData/samlAdvanced/samlCommonDomainCookie","samlDiscoveryProtocolActivation":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolIsPassive":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolPolicy":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlDiscoveryProtocolURL":"samlServiceMetaData/samlAdvanced/samlDiscoveryProtocol","samlEntityID":"samlServiceMetaData","samlIDPMetaDataNodes":"","samlIDPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorArtifactResolutionService","samlIDPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleLogoutService","samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPPost":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect":"samlServiceMetaData/samlIDPSSODescriptor/samlIDPSSODescriptorSingleSignOnService","samlIDPSSODescriptorWantAuthnRequestsSigned":"samlServiceMetaData/samlIDPSSODescriptor","samlMetadataForceUTF8":"samlServiceMetaData/samlAdvanced","samlNameIDFormatMapEmail":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapKerberos":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapWindows":"samlServiceMetaData/samlNameIDFormatMap","samlNameIDFormatMapX509":"samlServiceMetaData/samlNameIDFormatMap","samlOrganizationDisplayName":"samlServiceMetaData/samlOrganization","samlOrganizationName":"samlServiceMetaData/samlOrganization","samlOrganizationURL":"samlServiceMetaData/samlOrganization","samlOverrideIDPEntityID":"samlServiceMetaData/samlAdvanced","samlRelayStateTimeout":"samlServiceMetaData/samlAdvanced","samlSPMetaDataNodes":"","samlSPSSODescriptorArtifactResolutionServiceArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorArtifactResolutionService","samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAssertionConsumerServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorAssertionConsumerService","samlSPSSODescriptorAuthnRequestsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlSPSSODescriptorSingleLogoutServiceHTTPPost":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceHTTPRedirect":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorSingleLogoutServiceSOAP":"samlServiceMetaData/samlSPSSODescriptor/samlSPSSODescriptorSingleLogoutService","samlSPSSODescriptorWantAssertionsSigned":"samlServiceMetaData/samlSPSSODescriptor","samlServicePrivateKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeyEncPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePrivateKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePrivateKeySigPwd":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServicePublicKeyEnc":"samlServiceMetaData/samlServiceSecurity/samlServiceSecurityEnc","samlServicePublicKeySig":"samlServiceMetaData/samlServiceSecurity/samlServiceSecuritySig","samlServiceSignatureMethod":"samlServiceMetaData/samlServiceSecurity","samlServiceUseCertificateInResponse":"samlServiceMetaData/samlServiceSecurity","samlStorage":"samlServiceMetaData/samlAdvanced","samlStorageOptions":"samlServiceMetaData/samlAdvanced","samlUseQueryStringSpecific":"samlServiceMetaData/samlAdvanced","securedCookie":"generalParameters/cookieParams","sessionDataToRemember":"generalParameters/plugins/loginHistory","sfExtra":"generalParameters/secondFactors","sfRemovedMsgRule":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifMsg":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifRef":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedNotifTitle":"generalParameters/secondFactors/sfRemovedNotification","sfRemovedUseNotif":"generalParameters/secondFactors/sfRemovedNotification","sfRequired":"generalParameters/secondFactors","showLanguages":"generalParameters/portalParams/portalCustomization","singleIP":"generalParameters/sessionParams/multipleSessions","singleSession":"generalParameters/sessionParams/multipleSessions","singleSessionUserByIP":"generalParameters/sessionParams/multipleSessions","singleUserByIP":"generalParameters/sessionParams/multipleSessions","skipRenewConfirmation":"generalParameters/advancedParams/portalRedirection","slaveAuthnLevel":"generalParameters/authParams/slaveParams","slaveDisplayLogo":"generalParameters/authParams/slaveParams","slaveExportedVars":"generalParameters/authParams/slaveParams","slaveHeaderContent":"generalParameters/authParams/slaveParams","slaveHeaderName":"generalParameters/authParams/slaveParams","slaveMasterIP":"generalParameters/authParams/slaveParams","slaveUserHeader":"generalParameters/authParams/slaveParams","soapConfigServer":"generalParameters/plugins/portalServers","soapSessionServer":"generalParameters/plugins/portalServers","sslByAjax":"generalParameters/authParams/sslParams","sslHost":"generalParameters/authParams/sslParams","stayConnected":"generalParameters/plugins","storePassword":"generalParameters/sessionParams","successLoginNumber":"generalParameters/plugins/loginHistory","timeout":"generalParameters/sessionParams","timeoutActivity":"generalParameters/sessionParams","timeoutActivityInterval":"generalParameters/sessionParams","tokenUseGlobalStorage":"generalParameters/advancedParams/security","totp2fActivation":"generalParameters/secondFactors/totp2f","totp2fAuthnLevel":"generalParameters/secondFactors/totp2f","totp2fDigits":"generalParameters/secondFactors/totp2f","totp2fDisplayExistingSecret":"generalParameters/secondFactors/totp2f","totp2fInterval":"generalParameters/secondFactors/totp2f","totp2fIssuer":"generalParameters/secondFactors/totp2f","totp2fLabel":"generalParameters/secondFactors/totp2f","totp2fLogo":"generalParameters/secondFactors/totp2f","totp2fRange":"generalParameters/secondFactors/totp2f","totp2fSelfRegistration":"generalParameters/secondFactors/totp2f","totp2fTTL":"generalParameters/secondFactors/totp2f","totp2fUserCanChangeKey":"generalParameters/secondFactors/totp2f","totp2fUserCanRemoveKey":"generalParameters/secondFactors/totp2f","trustedDomains":"generalParameters/advancedParams/security","twitterAppName":"generalParameters/authParams/twitterParams","twitterAuthnLevel":"generalParameters/authParams/twitterParams","twitterKey":"generalParameters/authParams/twitterParams","twitterSecret":"generalParameters/authParams/twitterParams","twitterUserField":"generalParameters/authParams/twitterParams","u2fActivation":"generalParameters/secondFactors/u2f","u2fAuthnLevel":"generalParameters/secondFactors/u2f","u2fLabel":"generalParameters/secondFactors/u2f","u2fLogo":"generalParameters/secondFactors/u2f","u2fSelfRegistration":"generalParameters/secondFactors/u2f","u2fTTL":"generalParameters/secondFactors/u2f","u2fUserCanRemoveKey":"generalParameters/secondFactors/u2f","upgradeSession":"generalParameters/plugins","useRedirectOnError":"generalParameters/advancedParams/redirection","useRedirectOnForbidden":"generalParameters/advancedParams/redirection","useSafeJail":"generalParameters/advancedParams/security","userControl":"generalParameters/advancedParams/security","userDB":"generalParameters/authParams","userPivot":"generalParameters/authParams/dbiParams/dbiSchema","utotp2fActivation":"generalParameters/secondFactors/utotp2f","utotp2fAuthnLevel":"generalParameters/secondFactors/utotp2f","utotp2fLabel":"generalParameters/secondFactors/utotp2f","utotp2fLogo":"generalParameters/secondFactors/utotp2f","virtualHosts":"","webIDAuthnLevel":"generalParameters/authParams/webidParams","webIDExportedVars":"generalParameters/authParams/webidParams","webIDWhitelist":"generalParameters/authParams/webidParams","whatToTrace":"generalParameters/logParams","wsdlServer":"generalParameters/plugins/portalServers","yubikey2fActivation":"generalParameters/secondFactors/yubikey2f","yubikey2fAuthnLevel":"generalParameters/secondFactors/yubikey2f","yubikey2fClientID":"generalParameters/secondFactors/yubikey2f","yubikey2fLabel":"generalParameters/secondFactors/yubikey2f","yubikey2fLogo":"generalParameters/secondFactors/yubikey2f","yubikey2fNonce":"generalParameters/secondFactors/yubikey2f","yubikey2fPublicIDSize":"generalParameters/secondFactors/yubikey2f","yubikey2fSecretKey":"generalParameters/secondFactors/yubikey2f","yubikey2fSelfRegistration":"generalParameters/secondFactors/yubikey2f","yubikey2fTTL":"generalParameters/secondFactors/yubikey2f","yubikey2fUrl":"generalParameters/secondFactors/yubikey2f","yubikey2fUserCanRemoveKey":"generalParameters/secondFactors/yubikey2f"}
\ No newline at end of file
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index 637cc5f0a..4b458bb19 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"dontCompactConf","title":"dontCompactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"compactConf","title":"compactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
diff --git a/lemonldap-ng-manager/t/conf/lmConf-1.json b/lemonldap-ng-manager/t/conf/lmConf-1.json
index 29563bd15..9a37b6a09 100644
--- a/lemonldap-ng-manager/t/conf/lmConf-1.json
+++ b/lemonldap-ng-manager/t/conf/lmConf-1.json
@@ -154,6 +154,7 @@
   },
   "portal": "http://auth.example.com/",
   "reloadUrls": {},
+  "compactConf": 1,
   "securedCookie": 0,
   "sessionDataToRemember": {},
   "timeout": 72000,
diff --git a/lemonldap-ng-manager/t/jsonfiles/11-modified-with-confirmation.json b/lemonldap-ng-manager/t/jsonfiles/11-modified-with-confirmation.json
index 758bf4659..c164147f4 100644
--- a/lemonldap-ng-manager/t/jsonfiles/11-modified-with-confirmation.json
+++ b/lemonldap-ng-manager/t/jsonfiles/11-modified-with-confirmation.json
@@ -1379,6 +1379,12 @@
     "title": "reloadUrls",
     "type": "keyTextContainer"
   }, {
+    "default": 0,
+    "id": "compactConf",
+    "title": "compactConf",
+    "type": "bool",
+    "data": 1
+  },  {
     "id": "advancedParams",
     "title": "advancedParams",
     "nodes": [{
diff --git a/lemonldap-ng-manager/t/jsonfiles/12-modified.json b/lemonldap-ng-manager/t/jsonfiles/12-modified.json
index c0b30cd03..ac6d0d8b3 100644
--- a/lemonldap-ng-manager/t/jsonfiles/12-modified.json
+++ b/lemonldap-ng-manager/t/jsonfiles/12-modified.json
@@ -1380,6 +1380,12 @@
     "id": "reloadUrls",
     "title": "reloadUrls",
     "type": "keyTextContainer"
+  }, {
+    "default": 0,
+    "id": "compactConf",
+    "title": "compactConf",
+    "type": "bool",
+    "data": 1
   }, {
     "id": "advancedParams",
     "title": "advancedParams",
diff --git a/lemonldap-ng-manager/t/jsonfiles/70-diff.json b/lemonldap-ng-manager/t/jsonfiles/70-diff.json
index f75b3b980..9a7312cbf 100644
--- a/lemonldap-ng-manager/t/jsonfiles/70-diff.json
+++ b/lemonldap-ng-manager/t/jsonfiles/70-diff.json
@@ -1209,10 +1209,19 @@
     "id": "sessionParams",
     "title": "sessionParams"
   }, {
-    "cnodes": "reloadUrls",
-    "id": "reloadUrls",
-    "title": "reloadUrls",
-    "type": "keyTextContainer"
+    "_nodes": [{
+      "cnodes": "reloadUrls",
+      "id": "reloadUrls",
+      "title": "reloadUrls",
+      "type": "keyTextContainer"
+    }, {
+      "default": 0,
+      "id": "compactConf",
+      "title": "compactConf",
+      "type": "bool"
+    }],
+    "id": "reloadParams",
+    "title": "reloadParams"
   }, {
     "_nodes": [{
       "id": "customFunctions",
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
index ce10fa8eb..25861cb3e 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
@@ -4,7 +4,7 @@ package Lemonldap::NG::Portal::Main::Constants;
 use strict;
 use Exporter 'import';
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 use constant HANDLER => 'Lemonldap::NG::Handler::PSGI::Main';
 use constant {
diff --git a/lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-apps.t b/lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-apps.t
index ed2e1b4de..b4fedba2a 100644
--- a/lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-apps.t
+++ b/lemonldap-ng-portal/t/31-Auth-and-issuer-CAS-declared-apps.t
@@ -150,6 +150,7 @@ sub sp {
                 portal                => 'http://auth.sp.com',
                 authentication        => 'CAS',
                 userDB                => 'CAS',
+                compactConf           => 1,
                 restSessionServer     => 1,
                 issuerDBCASActivation => 0,
                 multiValuesSeparator  => ';',

From 8acc855e452847f7a7665b3cfe0cca3fb6522766 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Sun, 22 Dec 2019 13:09:58 +0100
Subject: [PATCH 35/60] Fix comment (#2046)

---
 .../lib/Lemonldap/NG/Manager/Build/Attributes.pm                | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index b992018ca..36388ee1d 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -393,7 +393,7 @@ sub attributes {
         compactConf => {
             type          => 'bool',
             default       => 0,
-            documentation => 'Don t compact configuration',
+            documentation => 'Compact configuration',
         },
         portalMainLogo => {
             type          => 'text',

From d53aff9c74adf2f84029701915b2aea7edb102fd Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Mon, 23 Dec 2019 16:54:59 +0100
Subject: [PATCH 36/60] Re-order Plugins parameters

---
 lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm | 2 +-
 lemonldap-ng-manager/site/htdocs/static/struct.json         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index 85429562b..97da8746f 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -580,6 +580,7 @@ sub tree {
                         'stayConnected',
                         'portalStatus',
                         'upgradeSession',
+                        'refreshSessions',
                         {
                             title => 'portalServers',
                             help  => 'portalservers.html',
@@ -761,7 +762,6 @@ sub tree {
                             help  => 'plugincustom.html',
                             nodes => [ 'customPlugins', 'customPluginsParams' ]
                         },
-                        'refreshSessions',
                     ]
                 },
                 {
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index 4b458bb19..5d0fad336 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"compactConf","title":"compactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"compactConf","title":"compactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file

From d4372eaeb21268b4926e496f3455b4c9771af186 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Mon, 23 Dec 2019 16:56:35 +0100
Subject: [PATCH 37/60] Fix month value (#2049)

---
 .../lib/Lemonldap/NG/Common/Notifications/DBI.pm               | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
index 6a06db357..1e8da623c 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
@@ -11,7 +11,7 @@ use Time::Local;
 use DBI;
 use Encode;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -220,6 +220,7 @@ sub getDone {
     my $result;
     while ( my $h = $self->sth->fetchrow_hashref() ) {
         my @t = split( /\D+/, $h->{date} );
+        $t[1]--;
         my $done =
           timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1], $t[0] );
         $result->{"$h->{date}#$h->{uid}#$h->{ref}"} =

From 8968978ba39521f2be12b4ef61b62464f862c667 Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Mon, 23 Dec 2019 17:32:07 +0100
Subject: [PATCH 38/60] Remove workaround now 2.0.7 is released

---
 rpm/lemonldap-ng.spec | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/rpm/lemonldap-ng.spec b/rpm/lemonldap-ng.spec
index b7722ae05..e6f8b3afa 100644
--- a/rpm/lemonldap-ng.spec
+++ b/rpm/lemonldap-ng.spec
@@ -541,16 +541,12 @@ fi
 %config(noreplace) %{apache_confdir}/z-lemonldap-ng-manager.conf
 %config(noreplace) %{apache_confdir}/z-lemonldap-ng-portal.conf
 %{_mandir}/man1/convertConfig*
-%if "%{version}" >= "2.0.7"
 %{_mandir}/man1/convertSessions*
-%endif
 %dir %{_libexecdir}/%{name}
 %dir %{lm_sbindir}
 %dir %{lm_bindir}
 %{lm_bindir}/convertConfig
-%if "%{version}" >= "2.0.7"
 %{lm_bindir}/convertSessions
-%endif
 %{lm_bindir}/importMetadata
 %{lm_bindir}/lmMigrateConfFiles2ini
 %{lm_bindir}/rotateOidcKeys

From 931cdc611da6d512b62b9795fcf3ffde0d3ea94f Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Mon, 23 Dec 2019 21:18:44 +0100
Subject: [PATCH 39/60] Catch error and Improve parameter tests & Improve unit
 test (#2049)

---
 .../Lemonldap/NG/Common/Notifications/DBI.pm  | 21 +++++++----
 .../Lemonldap/NG/Common/Notifications/File.pm | 10 +++++-
 .../Lemonldap/NG/Common/Notifications/LDAP.pm | 20 ++++++++---
 lemonldap-ng-manager/t/50-notifications-DBI.t | 30 ++++++++++++++--
 lemonldap-ng-manager/t/50-notifications.t     | 31 ++++++++++++++--
 .../t/40-Notifications-JSON-Server.t          | 36 +++++++++++++++++--
 6 files changed, 129 insertions(+), 19 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
index 1e8da623c..22d7c0346 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/DBI.pm
@@ -120,9 +120,7 @@ sub getAll {
 # keys date, uid, ref and condition.
 sub getExisting {
     my $self = shift;
-    $self->_execute( 'SELECT * FROM '
-          . $self->dbiTable
-          . ' ORDER BY date' );
+    $self->_execute( 'SELECT * FROM ' . $self->dbiTable . ' ORDER BY date' );
     my $result;
     while ( my $h = $self->sth->fetchrow_hashref() ) {
         $result->{"$h->{date}#$h->{uid}#$h->{ref}"} = {
@@ -194,7 +192,12 @@ sub purge {
 # @return true if succeed
 sub newNotif {
     my ( $self, $date, $uid, $ref, $condition, $xml ) = @_;
-
+    my @t = split( /\D+/, $date );
+    $t[1]--;
+    eval {
+        timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1], $t[0] );
+    };
+    return ( 0, "Bad date" ) if ($@);
     my $res =
       $condition =~ /.+/
       ? $self->_execute( 'INSERT INTO '
@@ -221,8 +224,14 @@ sub getDone {
     while ( my $h = $self->sth->fetchrow_hashref() ) {
         my @t = split( /\D+/, $h->{date} );
         $t[1]--;
-        my $done =
-          timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1], $t[0] );
+        my $done = eval {
+            timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1],
+                $t[0] );
+        };
+        if ($@) {
+            $self->logger->warn("Bad date: $h->{date}");
+            return {};
+        }
         $result->{"$h->{date}#$h->{uid}#$h->{ref}"} =
           { notified => $done, uid => $h->{uid}, ref => $h->{ref}, };
     }
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
index 4a5ab1398..259a34b39 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/File.pm
@@ -7,9 +7,10 @@ package Lemonldap::NG::Common::Notifications::File;
 
 use strict;
 use Mouse;
+use Time::Local;
 use MIME::Base64;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -129,6 +130,13 @@ sub purge {
 sub newNotif {
     my ( $self, $date, $uid, $ref, $condition, $content ) = @_;
     my $fns = $self->{fileNameSeparator};
+    $fns ||= '_';
+    my @t = split( /\D+/, $date );
+    $t[1]--;
+    eval {
+        timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1], $t[0] );
+    };
+    return ( 0, "Bad date" ) if ($@);
     $date =~ s/-//g;
     return ( 0, "Bad date" ) unless ( $date =~ /^\d{8}/ );
     my $filename =
diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
index 59efabfff..e25d933eb 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Notifications/LDAP.pm
@@ -13,7 +13,7 @@ use MIME::Base64;
 use Net::LDAP;
 use utf8;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 extends 'Lemonldap::NG::Common::Notifications';
 
@@ -187,6 +187,12 @@ sub newNotif {
     my ( $self, $date, $uid, $ref, $condition, $xml ) = @_;
     my $fns = $self->conf->{fileNameSeparator};
     $fns ||= '_';
+    my @t = split( /\D+/, $date );
+    $t[1]--;
+    eval {
+        timelocal( $t[5] || 0, $t[4] || 0, $t[3] || 0, $t[2], $t[1], $t[0] );
+    };
+    return ( 0, "Bad date" ) if ($@);
     $date =~ s/-//g;
     return ( 0, "Bad date" ) unless ( $date =~ /^\d{8}/ );
     my $cn = "${date}${fns}${uid}${fns}" . encode_base64( $ref, '' );
@@ -230,16 +236,20 @@ sub getDone {
             $v = decodeLdapValue($v);
             $f->{$k} = $v;
         }
-        my @t    = split( /\D+/, $f->{done} );
-        my $done = timelocal( $t[5], $t[4], $t[3], $t[2], $t[1], $t[0] );
+        my @t = split( /\D+/, $f->{done} );
+        $t[1]--;
+        my $done =
+          eval { timelocal( $t[5], $t[4], $t[3], $t[2], $t[1], $t[0] ) };
+        if ($@) {
+            $self->logger->warn("Bad date: $f->{done}");
+            return {};
+        }
         $result->{"$f->{date}#$f->{uid}#$f->{ref}"} =
           { notified => $done, uid => $f->{uid}, ref => $f->{ref}, };
-
     }
 
     # $ldap->unbind() && delete $self->{ldap};
     return $result;
-
 }
 
 ## @method object private _ldap()
diff --git a/lemonldap-ng-manager/t/50-notifications-DBI.t b/lemonldap-ng-manager/t/50-notifications-DBI.t
index 79192e8a4..69c98698b 100644
--- a/lemonldap-ng-manager/t/50-notifications-DBI.t
+++ b/lemonldap-ng-manager/t/50-notifications-DBI.t
@@ -8,7 +8,7 @@ use Test::More;
 
 my $count     = 0;
 my $file      = 't/notifications.db';
-my $maintests = 8;
+my $maintests = 11;
 my ( $res, $client );
 eval { unlink $file };
 
@@ -39,7 +39,31 @@ SKIP: {
 
     # Try to create a notification
     my $notif =
-'{"date":"2099-05-03","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+'{"date":"2099-02-30","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+    $res =
+      $client->jsonPostResponse( 'notifications/actives', '',
+        IO::String->new($notif),
+        'application/json', length($notif) );
+    ok( $res->{error} =~ /^Notification not created: Bad date/, 'Notification not inserted' );
+
+    $notif =
+'{"date":"2099-13-30","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+    $res =
+      $client->jsonPostResponse( 'notifications/actives', '',
+        IO::String->new($notif),
+        'application/json', length($notif) );
+    ok( $res->{error} =~ /^Notification not created: Bad date/, 'Notification not inserted' );
+
+    $notif =
+'{"date":"2099-05_12","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+    $res =
+      $client->jsonPostResponse( 'notifications/actives', '',
+        IO::String->new($notif),
+        'application/json', length($notif) );
+    ok( $res->{error} =~ /^Malformed date$/, 'Notification not inserted' );
+
+    $notif =
+'{"date":"2099-12-31","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
     $res =
       $client->jsonPostResponse( 'notifications/actives', '',
         IO::String->new($notif),
@@ -70,7 +94,7 @@ SKIP: {
 
     # Delete notification
     $res =
-      $client->_del('notifications/done/dwho_Test_20990503_dwho_VGVzdA==.done');
+      $client->_del('notifications/done/dwho_Test_20991231_dwho_VGVzdA==.done');
     $res =
       $client->jsonResponse( 'notifications/done', 'groupBy=substr(uid,1)' );
     ok( $res->{result} == 1, 'Result = 1' );
diff --git a/lemonldap-ng-manager/t/50-notifications.t b/lemonldap-ng-manager/t/50-notifications.t
index 89e896ac6..d482b40ef 100644
--- a/lemonldap-ng-manager/t/50-notifications.t
+++ b/lemonldap-ng-manager/t/50-notifications.t
@@ -11,11 +11,38 @@ require 't/test-lib.pm';
 
 # Try to create a notification
 my $notif =
-'{"date":"2099-05-03","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+'{"date":"2099-02-30","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
 my $res =
   &client->jsonPostResponse( 'notifications/actives', '',
     IO::String->new($notif),
     'application/json', length($notif) );
+ok( $res->{error} =~ /^Notification not created: Bad date/, 'Notification not inserted' );
+count(1);
+
+$notif =
+'{"date":"2099-13-30","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+my $res =
+  &client->jsonPostResponse( 'notifications/actives', '',
+    IO::String->new($notif),
+    'application/json', length($notif) );
+ok( $res->{error} =~ /^Notification not created: Bad date/, 'Notification not inserted' );
+count(1);
+
+$notif =
+'{"date":"2099-05_12","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+my $res =
+  &client->jsonPostResponse( 'notifications/actives', '',
+    IO::String->new($notif),
+    'application/json', length($notif) );
+ok( $res->{error} =~ /^Malformed date$/, 'Notification not inserted' );
+count(1);
+
+$notif =
+'{"date":"2099-12-31","uid":"dwho","reference":"Test","xml":"{\"title\":\"Test\"}"}';
+$res =
+  &client->jsonPostResponse( 'notifications/actives', '',
+    IO::String->new($notif),
+    'application/json', length($notif) );
 
 ok( $res->{result}, 'Result is true' );
 count(1);
@@ -44,7 +71,7 @@ displayTests('done');
 
 # Delete notification
 $res =
-  &client->_del('notifications/done/dwho_Test_20990503_dwho_VGVzdA==.done');
+  &client->_del('notifications/done/dwho_Test_20991231_dwho_VGVzdA==.done');
 $res = &client->jsonResponse( 'notifications/done', 'groupBy=substr(uid,1)' );
 ok( $res->{result} == 1, 'Result = 1' );
 ok( $res->{count} == 0,  'Count = 0' );
diff --git a/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t b/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
index 6a08646c1..6496ee444 100644
--- a/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
+++ b/lemonldap-ng-portal/t/40-Notifications-JSON-Server.t
@@ -15,6 +15,22 @@ my $json = '{
 "text": "This is a test text"
 }';
 
+my $bad_json = '{
+"date": "2016-13-30 15:35:10",
+"reference": "testref",
+"uid": "dwho",
+"title": "Test title",
+"text": "This is a test text"
+}';
+
+my $bad_json2 = '{
+"date": "2016-13_30 15:35:10",
+"reference": "testref",
+"uid": "dwho",
+"title": "Test title",
+"text": "This is a test text"
+}';
+
 my $jsonbis = '{
 "date": "2016-05-31",
 "reference": "testref",
@@ -103,6 +119,21 @@ my $client = LLNG::Manager::Test->new( {
 );
 
 my $res;
+foreach ( $bad_json, $bad_json2 ) {
+    ok(
+        $res = $client->_post(
+            '/notifications', IO::String->new($_),
+            type   => 'application/json',
+            length => length($_)
+        ),
+        "POST notification $_"
+    );
+    ok( $res->[2]->[0] =~ /"error"\s*:\s*"Bad date/,
+        'Notification not inserted' )
+      or print STDERR Dumper( $res->[2]->[0] );
+    count(2);
+}
+
 foreach ( $json, $json2, $jsonall ) {
     ok(
         $res = $client->_post(
@@ -155,7 +186,7 @@ ok( $json = eval { from_json( $res->[2]->[0] ) }, 'Response is JSON' );
 ok( scalar @{ $json->{result} } == 3, 'Three notifications found' )
   or print STDERR Dumper($json);
 
-foreach ( @{$json->{result}} ) {
+foreach ( @{ $json->{result} } ) {
     ok( $_->{reference} =~ /^testref/, "Reference \'$_->{reference}\' found" )
       or print STDERR Dumper($json);
     ok( $_->{uid} =~ /^(dwho|everyone)$/, "UID \'$_->{uid}\' found" )
@@ -304,7 +335,8 @@ count(2);
 
 ok(
     $res = $client->_get(
-        '/notifications/_allExisting_', type => 'application/json',
+        '/notifications/_allExisting_',
+        type => 'application/json',
     ),
     'List all existing notifications'
 );

From d069f3243874cc82858c5343eb00cc2e39667ab9 Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Wed, 25 Dec 2019 13:11:58 +0100
Subject: [PATCH 40/60] Fix bad export

---
 .../lib/Lemonldap/NG/Portal/Main/Constants.pm        | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
index 25861cb3e..692f25b5c 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Constants.pm
@@ -100,8 +100,8 @@ use constant {
     PE_ISSUERMISSINGREQATTR              => 94,
     PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED  => 95,
     PE_BADOTP                            => 96,
-    PE_RESETCERTIFICATE_INVALIDE         => 97,
-    PE_RESETCERTIFICATE_FOREMPTY         => 98,
+    PE_RESETCERTIFICATE_INVALID          => 97,
+    PE_RESETCERTIFICATE_FORMEMPTY        => 98,
     PE_RESETCERTIFICATE_FIRSTACCESS      => 99,
 };
 
@@ -199,8 +199,8 @@ sub portalConsts {
         '94' => 'PE_ISSUERMISSINGREQATTR',
         '95' => 'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
         '96' => 'PE_BADOTP',
-        '97' => 'PE_RESETCERTIFICATE_INVALIDE',
-        '98' => 'PE_RESETCERTIFICATE_FOREMPTY',
+        '97' => 'PE_RESETCERTIFICATE_INVALID',
+        '98' => 'PE_RESETCERTIFICATE_FORMEMPTY',
         '99' => 'PE_RESETCERTIFICATE_FIRSTACCESS'
     };
 
@@ -302,8 +302,8 @@ our @EXPORT_OK = (
     'PE_ISSUERMISSINGREQATTR',
     'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
     'PE_BADOTP',
-    'PE_RESETCERTIFICATE_INVALIDE',
-    'PE_RESETCERTIFICATE_FOREMPTY',
+    'PE_RESETCERTIFICATE_INVALID',
+    'PE_RESETCERTIFICATE_FORMEMPTY',
     'PE_RESETCERTIFICATE_FIRSTACCESS'
 );
 our %EXPORT_TAGS = ( 'all' => [ @EXPORT_OK, 'import' ], );

From 8d5a29075b8a314fa4969f6312961bdcdd67102d Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Wed, 25 Dec 2019 13:17:43 +0100
Subject: [PATCH 41/60] Another bad export

---
 .../lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm           | 4 ++--
 .../lib/Lemonldap/NG/Manager/Build/PortalConstants.pm         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
index 1dbe54194..dbb4ee555 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
@@ -100,8 +100,8 @@ sub portalConsts {
         '94' => 'PE_ISSUERMISSINGREQATTR',
         '95' => 'PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED',
         '96' => 'PE_BADOTP',
-        '97' => 'PE_RESETCERTIFICATE_INVALIDE',
-        '98' => 'PE_RESETCERTIFICATE_FOREMPTY',
+        '97' => 'PE_RESETCERTIFICATE_INVALID',
+        '98' => 'PE_RESETCERTIFICATE_FORMEMPTY',
         '99' => 'PE_RESETCERTIFICATE_FIRSTACCESS'
     };
 
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
index ce0b9a720..3d4066392 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
@@ -104,8 +104,8 @@ sub portalConstants {
         PE_ISSUERMISSINGREQATTR              => 94,
         PE_DECRYPTVALUE_SERVICE_NOT_ALLOWED  => 95,
         PE_BADOTP                            => 96,
-        PE_RESETCERTIFICATE_INVALIDE         => 97,
-        PE_RESETCERTIFICATE_FOREMPTY         => 98,
+        PE_RESETCERTIFICATE_INVALID          => 97,
+        PE_RESETCERTIFICATE_FORMEMPTY        => 98,
         PE_RESETCERTIFICATE_FIRSTACCESS      => 99
     };
 }

From 3317ab9fb1312c3112f2aa5a780c41bd8db561a6 Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Wed, 25 Dec 2019 13:30:54 +0100
Subject: [PATCH 42/60] Fix...

---
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
index d2022db7e..d41e6238a 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Request.pm
@@ -109,7 +109,7 @@ sub error_type {
                 PE_CONFIRM,                       PE_MAILFORMEMPTY,
                 PE_MAILCONFIRMATION_ALREADY_SENT, PE_PASSWORDFORMEMPTY,
                 PE_CAPTCHAEMPTY,                  PE_REGISTERFORMEMPTY,
-                PE_PP_CHANGE_AFTER_RESET,         PE_RESETCERTIFICATE_FOREMPTY,
+                PE_PP_CHANGE_AFTER_RESET,         PE_RESETCERTIFICATE_FORMEMPTY,
             )
         )
       );

From 7b499f9bd177380d613a71b5c1a8ff2e0ac60dba Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Thu, 26 Dec 2019 16:40:51 +0100
Subject: [PATCH 43/60] Fix wrong message & Improve unit test (#2050)

---
 .../Lemonldap/NG/Portal/Plugins/CheckUser.pm  | 35 ++++++++-----------
 .../t/67-CheckUser-with-token.t               |  1 +
 .../t/68-Impersonation-with-filtered-merge.t  |  4 +--
 3 files changed, 18 insertions(+), 22 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CheckUser.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CheckUser.pm
index 19d4585fa..9d455cee4 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CheckUser.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CheckUser.pm
@@ -9,7 +9,7 @@ use Lemonldap::NG::Portal::Main::Constants qw(
   PE_MALFORMEDUSER
 );
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 extends qw(
   Lemonldap::NG::Portal::Main::Plugin
@@ -31,6 +31,7 @@ has ott => (
 );
 has idRule => ( is => 'rw', default => sub { 1 } );
 has sorted => ( is => 'rw', default => sub { 0 } );
+has merged => ( is => 'rw', default => '' );
 
 sub hAttr {
     $_[0]->{conf}->{checkUserHiddenAttributes} . ' '
@@ -56,6 +57,8 @@ sub init {
     $self->idRule($rule);
     $self->sorted( $self->conf->{impersonationRule}
           || $self->conf->{contextSwitchingRule} );
+    $self->merged( $self->conf->{impersonationMergeSSOgroups}
+          && $self->conf->{impersonationRule} ? 'Merged' : '' );
     return 1;
 }
 
@@ -93,24 +96,19 @@ sub display {
 
     # Display form
     my $params = {
-        PORTAL    => $self->conf->{portal},
-        MAIN_LOGO => $self->conf->{portalMainLogo},
-        SKIN      => $self->p->getSkin($req),
-        LANGS     => $self->conf->{showLanguages},
-        MSG       => (
-            $self->{conf}->{impersonationMergeSSOgroups} ? 'checkUserMerged'
-            : 'checkUser'
-        ),
-        ALERTE => (
-            $self->{conf}->{impersonationMergeSSOgroups} ? 'alert-warning'
-            : 'alert-info'
-        ),
+        PORTAL     => $self->conf->{portal},
+        MAIN_LOGO  => $self->conf->{portalMainLogo},
+        SKIN       => $self->p->getSkin($req),
+        LANGS      => $self->conf->{showLanguages},
+        MSG        => 'checkUser' . $self->merged,
+        ALERTE     => ( $self->merged ? 'alert-warning' : 'alert-info' ),
         LOGIN      => $req->{userData}->{ $self->conf->{whatToTrace} },
         ATTRIBUTES => $array_attrs->[2],
         MACROS     => $array_attrs->[1],
         GROUPS     => $array_attrs->[0],
         TOKEN      => (
-            $self->ottRule->( $req, {} ) ? $self->ott->createToken()
+              $self->ottRule->( $req, {} )
+            ? $self->ott->createToken()
             : ''
         )
     };
@@ -123,7 +121,7 @@ sub display {
 sub check {
     my ( $self, $req ) = @_;
     my ( $attrs, $array_attrs, $array_hdrs ) = ( {}, [], [] );
-    my $msg       = my $auth = my $compute = '';
+    my $msg = my $auth = my $compute = '';
     my $authLevel = $req->userData->{authenticationLevel};
     my $authMode  = $req->userData->{_auth};
 
@@ -241,10 +239,7 @@ sub check {
         $attrs       = {};
     }
     else {
-        $msg =
-          $self->{conf}->{impersonationMergeSSOgroups} eq 1
-          ? 'checkUserMerged'
-          : 'checkUser';
+        $msg = 'checkUser' . $self->merged;
         if ($compute) {
             $msg                          = 'checkUserComputeSession';
             $attrs->{authenticationLevel} = $authLevel;
@@ -442,7 +437,7 @@ sub _splitAttributes {
         if ( $element->{key} eq 'groups' ) {
             $self->logger->debug('Key "groups" found');
             my $separator = $self->{conf}->{multiValuesSeparator};
-            my @tmp       = split /\Q$separator/, $element->{value};
+            my @tmp = split /\Q$separator/, $element->{value};
             $grps = [ map { { value => $_ } } sort @tmp ];
             next;
         }
diff --git a/lemonldap-ng-portal/t/67-CheckUser-with-token.t b/lemonldap-ng-portal/t/67-CheckUser-with-token.t
index 3f69f01c9..9dcd8f560 100644
--- a/lemonldap-ng-portal/t/67-CheckUser-with-token.t
+++ b/lemonldap-ng-portal/t/67-CheckUser-with-token.t
@@ -21,6 +21,7 @@ my $client = LLNG::Manager::Test->new( {
             formTimeout                    => 120,
             checkUserDisplayPersistentInfo => 1,
             checkUserDisplayEmptyValues    => 1,
+            impersonationMergeSSOgroups    => 1,
         }
     }
 );
diff --git a/lemonldap-ng-portal/t/68-Impersonation-with-filtered-merge.t b/lemonldap-ng-portal/t/68-Impersonation-with-filtered-merge.t
index 878f8c0e6..c4c58f9aa 100644
--- a/lemonldap-ng-portal/t/68-Impersonation-with-filtered-merge.t
+++ b/lemonldap-ng-portal/t/68-Impersonation-with-filtered-merge.t
@@ -101,8 +101,8 @@ count(1);
 
 ( $host, $url, $query ) =
   expectForm( $res, undef, '/checkuser', 'user', 'url' );
-ok( $res->[2]->[0] =~ m%<span trspan="checkUser">%, 'Found trspan="checkUser"' )
-  or explain( $res->[2]->[0], 'trspan="checkUser"' );
+ok( $res->[2]->[0] =~ m%<span trspan="checkUserMerged">%, 'Found trspan="checkUser"' )
+  or explain( $res->[2]->[0], 'trspan="checkUserMerged"' );
 ok(
     $res->[2]->[0] =~
 m%<div class="alert alert-success"><div class="text-center"><b><span trspan="allowed"></span></b></div></div>%,

From 4c85903235eb5e5e3908208b67c40c3962125aee Mon Sep 17 00:00:00 2001
From: Maxime Besson <maxime.besson@worteks.com>
Date: Fri, 27 Dec 2019 13:12:55 +0100
Subject: [PATCH 44/60] Fix manager display issue in SAML macros (#2051)

---
 .../Lemonldap/NG/Common/Conf/RESTServer.pm    | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/RESTServer.pm b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/RESTServer.pm
index 348fc9b86..8a85c53cc 100644
--- a/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/RESTServer.pm
+++ b/lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/RESTServer.pm
@@ -269,9 +269,7 @@ sub _samlMetaDataNodes {
     my ( $id, $resp ) = ( 1, [] );
 
     # Return all exported attributes if asked
-    if ( $query =~
-        /^saml${type}MetaDataExportedAttributes|samlSPMetaDataMacros$/ )
-    {
+    if ( $query =~ /^saml${type}MetaDataExportedAttributes$/ ) {
         my $pk =
           eval { $self->getConfKey( $req, $query )->{$partner} } // {};
         return $self->sendError( $req, undef, 400 ) if ( $req->error );
@@ -286,6 +284,21 @@ sub _samlMetaDataNodes {
         }
         return $self->sendJSONresponse( $req, $resp );
     }
+    elsif ( $query eq "samlSPMetaDataMacros" ) {
+        my $pk =
+          eval { $self->getConfKey( $req, $query )->{$partner} } // {};
+        return $self->sendError( $req, undef, 400 ) if ( $req->error );
+        foreach my $h ( sort keys %$pk ) {
+            push @$resp,
+              {
+                id    => "saml${type}MetaDataNodes/$partner/$query/" . $id++,
+                title => $h,
+                data  => $pk->{$h},
+                type  => 'keyText',
+              };
+        }
+        return $self->sendJSONresponse( $req, $resp );
+    }
 
     # Simple root keys
     elsif ( $query =~ /^saml${type}MetaDataXML$/ ) {

From 33b0942a5ef49822824b61697d23f1ceac6e5d5a Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 27 Dec 2019 19:00:30 +0100
Subject: [PATCH 45/60] Improve unit test (#2019)

---
 lemonldap-ng-portal/t/41-Captcha.t | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lemonldap-ng-portal/t/41-Captcha.t b/lemonldap-ng-portal/t/41-Captcha.t
index 701e6ab9e..6ad530b0e 100644
--- a/lemonldap-ng-portal/t/41-Captcha.t
+++ b/lemonldap-ng-portal/t/41-Captcha.t
@@ -6,7 +6,7 @@ require 't/test-lib.pm';
 
 my $res;
 
-my $maintests = 24;
+my $maintests = 25;
 SKIP: {
     eval 'use GD::SecurityImage;use Image::Magick;';
     if ($@) {
@@ -112,6 +112,11 @@ m%<input name="password" type="text" class="form-control key" autocomplete="off"
     ok( $newtoken ne $token, ' Token is refreshed' );
     ok( $res->[2]->[0] =~ m#<img id="captcha" src="data:image/png;base64#,
         ' New captcha image inserted' );
+    ok(
+        $res->[2]->[0] =~
+m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+        ' Renew Captcha button found'
+    );
 
     # Try to renew captcha
     ok( $res = $client->_get( '/renewcaptcha', accept => 'text/html' ),

From 884e86f70b60d15d5821562f969089ec438be8c3 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 27 Dec 2019 19:09:35 +0100
Subject: [PATCH 46/60] Improve unit test (#2019)

---
 lemonldap-ng-portal/t/41-Captcha.t | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lemonldap-ng-portal/t/41-Captcha.t b/lemonldap-ng-portal/t/41-Captcha.t
index 6ad530b0e..0bdf754a9 100644
--- a/lemonldap-ng-portal/t/41-Captcha.t
+++ b/lemonldap-ng-portal/t/41-Captcha.t
@@ -114,9 +114,9 @@ m%<input name="password" type="text" class="form-control key" autocomplete="off"
         ' New captcha image inserted' );
     ok(
         $res->[2]->[0] =~
-m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+m#<img class="renewcaptchaclic" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
         ' Renew Captcha button found'
-    );
+    ) or explain( $res->[2]->[0], 'Renew captcha button not found' );
 
     # Try to renew captcha
     ok( $res = $client->_get( '/renewcaptcha', accept => 'text/html' ),

From 9a86559847b28383bb9101bee9994b25642be3a9 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 27 Dec 2019 21:23:28 +0100
Subject: [PATCH 47/60] Typo (#2055)

---
 .../lib/Lemonldap/NG/Handler/Main/Run.pm      | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
index d70b4c71d..885a344a0 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
@@ -437,15 +437,16 @@ sub goToError {
 # @return Value of the cookie if found, 0 else
 sub fetchId {
     my ( $class, $req ) = @_;
-    my $t                 = $req->{env}->{HTTP_COOKIE} or return 0;
-    my $vhost             = $class->resolveAlias($req);
+    my $t     = $req->{env}->{HTTP_COOKIE} or return 0;
+    my $vhost = $class->resolveAlias($req);
+    $class->logger->debug("VH $vhost is HTTPS") if $class->_isHttps( $req, $vhost );
     my $lookForHttpCookie = ( $class->tsv->{securedCookie} =~ /^(2|3)$/
           and not $class->_isHttps( $req, $vhost ) );
     my $cn = $class->tsv->{cookieName};
     my $value =
       $lookForHttpCookie
       ? ( $t =~ /${cn}http=([^,; ]+)/o ? $1 : 0 )
-      : ( $t =~ /$cn=([^,; ]+)/o       ? $1 : 0 );
+      : ( $t =~ /$cn=([^,; ]+)/o ? $1 : 0 );
 
     if ( $value && $lookForHttpCookie && $class->tsv->{securedCookie} == 3 ) {
         $value = $class->tsv->{cipher}->decryptHex( $value, "http" );
@@ -573,11 +574,8 @@ sub retrieveSession {
 # Returns the port on which this vhost is accessed
 # @param $s VHost name
 # @return PORT
-
 sub _getPort {
-
     my ( $class, $req, $vhost ) = @_;
-
     if ( defined $class->tsv->{port}->{$vhost}
         and ( $class->tsv->{port}->{$vhost} > 0 ) )
     {
@@ -594,15 +592,14 @@ sub _getPort {
         }
     }
 }
-## @cmethod private boot _isHttps(string s)
-# Returns whether this VHost should he accessed
+
+## @cmethod private bool _isHttps(string s)
+# Returns whether this VHost should be accessed
 # via HTTPS
 # @param $s VHost name
-# @return RUE if the vhost should be accessed over HTTPS
+# @return TRUE if the vhost should be accessed over HTTPS
 sub _isHttps {
-
     my ( $class, $req, $vhost ) = @_;
-
     if ( defined $class->tsv->{https}->{$vhost}
         and ( $class->tsv->{https}->{$vhost} > -1 ) )
     {

From 7b064542f2e83bfa20ba6ea4a4a80887614dbcb4 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Sat, 28 Dec 2019 12:14:47 +0100
Subject: [PATCH 48/60] Improve unit test (#2019)

---
 lemonldap-ng-portal/t/28-AuthChoice-with-captcha.t        | 8 +++++++-
 lemonldap-ng-portal/t/41-Captcha.t                        | 5 +++--
 lemonldap-ng-portal/t/42-Register-Demo-with-captcha.t     | 8 +++++++-
 lemonldap-ng-portal/t/43-MailPasswordReset-with-captcha.t | 8 +++++++-
 4 files changed, 24 insertions(+), 5 deletions(-)

diff --git a/lemonldap-ng-portal/t/28-AuthChoice-with-captcha.t b/lemonldap-ng-portal/t/28-AuthChoice-with-captcha.t
index ccb5e6caa..d239c9fc4 100644
--- a/lemonldap-ng-portal/t/28-AuthChoice-with-captcha.t
+++ b/lemonldap-ng-portal/t/28-AuthChoice-with-captcha.t
@@ -5,7 +5,7 @@ use strict;
 require 't/test-lib.pm';
 
 my $res;
-my $maintests = 14;
+my $maintests = 16;
 SKIP: {
     eval 'use GD::SecurityImage;use Image::Magick;';
     if ($@) {
@@ -39,6 +39,12 @@ SKIP: {
     ok( $token = $1, ' Token value is defined' );
     ok( $res->[2]->[0] =~ m#<img id="captcha" src="data:image/png;base64#,
         ' Captcha image inserted' );
+    ok(
+        $res->[2]->[0] =~
+m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+        ' Renew Captcha button found'
+    ) or explain( $res->[2]->[0], 'Renew captcha button not found' );
+    ok( $res->[2]->[0] =~ /captcha\.(?:min\.)?js/, 'Get captcha javascript' );
 
     my @form = ( $res->[2]->[0] =~ m#<form.*?</form>#sg );
     ok( @form == 2, 'Display 2 choices' );
diff --git a/lemonldap-ng-portal/t/41-Captcha.t b/lemonldap-ng-portal/t/41-Captcha.t
index 0bdf754a9..eb41ecfcb 100644
--- a/lemonldap-ng-portal/t/41-Captcha.t
+++ b/lemonldap-ng-portal/t/41-Captcha.t
@@ -6,7 +6,7 @@ require 't/test-lib.pm';
 
 my $res;
 
-my $maintests = 25;
+my $maintests = 26;
 SKIP: {
     eval 'use GD::SecurityImage;use Image::Magick;';
     if ($@) {
@@ -114,9 +114,10 @@ m%<input name="password" type="text" class="form-control key" autocomplete="off"
         ' New captcha image inserted' );
     ok(
         $res->[2]->[0] =~
-m#<img class="renewcaptchaclic" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
         ' Renew Captcha button found'
     ) or explain( $res->[2]->[0], 'Renew captcha button not found' );
+    ok( $res->[2]->[0] =~ /captcha\.(?:min\.)?js/, 'Get captcha javascript' );
 
     # Try to renew captcha
     ok( $res = $client->_get( '/renewcaptcha', accept => 'text/html' ),
diff --git a/lemonldap-ng-portal/t/42-Register-Demo-with-captcha.t b/lemonldap-ng-portal/t/42-Register-Demo-with-captcha.t
index aa54f91c4..8f965561f 100644
--- a/lemonldap-ng-portal/t/42-Register-Demo-with-captcha.t
+++ b/lemonldap-ng-portal/t/42-Register-Demo-with-captcha.t
@@ -9,7 +9,7 @@ BEGIN {
     };
 }
 
-my $maintests = 26;
+my $maintests = 28;
 my ( $res, $user, $pwd, $host, $url, $query );
 my $mailSend = 0;
 
@@ -60,6 +60,12 @@ s/^.*token=([^&]+).*$/token=$1&firstname=who&lastname=doctor&mail=dwho%40badwolf
         $res->[2]->[0] =~ m%<img src="/static/common/logos/logo_llng_old.png"%,
         'Found custom Main Logo'
     ) or print STDERR Dumper( $res->[2]->[0] );
+    ok(
+        $res->[2]->[0] =~
+m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+        ' Renew Captcha button found'
+    ) or explain( $res->[2]->[0], 'Renew captcha button not found' );
+    ok( $res->[2]->[0] =~ /captcha\.(?:min\.)?js/, 'Get captcha javascript' );
 
     $query .= "&captcha=$captcha";
 
diff --git a/lemonldap-ng-portal/t/43-MailPasswordReset-with-captcha.t b/lemonldap-ng-portal/t/43-MailPasswordReset-with-captcha.t
index d733c70ca..1aae677ac 100644
--- a/lemonldap-ng-portal/t/43-MailPasswordReset-with-captcha.t
+++ b/lemonldap-ng-portal/t/43-MailPasswordReset-with-captcha.t
@@ -10,7 +10,7 @@ BEGIN {
 }
 
 my ( $res, $host, $url, $query );
-my $maintests = 14;
+my $maintests = 16;
 my $mailSend  = 0;
 my $mail2     = 0;
 
@@ -67,6 +67,12 @@ m%<a class="btn btn-secondary" href="http://auth.example.com/resetpwd\?skin=boot
         $res->[2]->[0] =~ m%<img src="/static/common/logos/logo_llng_old.png"%,
         'Found custom Main Logo'
     ) or print STDERR Dumper( $res->[2]->[0] );
+    ok(
+        $res->[2]->[0] =~
+m#<img class="renewcaptchaclick" src="/static/common/icons/arrow_refresh.png" alt="Renew Captcha" title="Renew Captcha" class="img-thumbnail mb-3" />#,
+        ' Renew Captcha button found'
+    ) or explain( $res->[2]->[0], 'Renew captcha button not found' );
+    ok( $res->[2]->[0] =~ /captcha\.(?:min\.)?js/, 'Get captcha javascript' );
 
     $query .= "&captcha=$captcha";
 

From 908082aa54f4926bb500e0474051fb0d15cc2bac Mon Sep 17 00:00:00 2001
From: epictete <bwterminator1@free.fr>
Date: Sun, 29 Dec 2019 00:18:14 +0100
Subject: [PATCH 49/60] fix call to mailTemplate in ResetCertificate module
 (#1605)

---
 .../Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm   | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
index b8ef82be2..83f18a6d1 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
@@ -376,7 +376,8 @@ sub _certificateReset {
         else {
 
             # Use HTML template
-            $body = $self->loadTemplate(
+            $body = $self->loadMailTemplate(
+                $req,
                 'mail_confirm',
                 filter => $tr,
                 params => \%tplPrms
@@ -562,7 +563,8 @@ sub modifyCertificate {
     else {
 
         # Use HTML template
-        $body = $self->loadTemplate(
+        $body = $self->loadMailTemplate(
+            $req,
             'mail_certificatReset',
             filter => $tr,
             params => \%tplPrms

From ca894220883898697503d613f5fee7724bee9fe5 Mon Sep 17 00:00:00 2001
From: epictete <bwterminator1@free.fr>
Date: Sun, 29 Dec 2019 02:17:32 +0100
Subject: [PATCH 50/60] improve reset-certificate unit test (test invalid
 certificates) (#1605)

---
 .../t/44-CertificateResetByMail-LDAP.t        | 155 +++++++++++++++++-
 1 file changed, 154 insertions(+), 1 deletion(-)

diff --git a/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t b/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t
index 2acc0a89a..1f6deebf6 100644
--- a/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t
+++ b/lemonldap-ng-portal/t/44-CertificateResetByMail-LDAP.t
@@ -5,6 +5,11 @@ use strict;
 use IO::String;
 use File::Copy;
 
+use Lemonldap::NG::Portal::Main::Constants qw(
+  PE_RESETCERTIFICATE_INVALID PE_RESETCERTIFICATE_FORMEMPTY
+  PE_RESETCERTIFICATE_FIRSTACCESS
+);
+
 BEGIN {
     eval {
         require 't/test-lib.pm';
@@ -13,7 +18,7 @@ BEGIN {
 }
 
 my ( $res, $user );
-my $maintests = 6;
+my $maintests = 12;
 
 SKIP: {
     eval
@@ -212,6 +217,154 @@ lkRrWfQftwmLyNIu3HfSgXlgAZS30ymfbzBU
 
     ok( mail() =~ /Certificate Reset sucessfully/, 'Certificate was changed' );
 
+
+
+    # Test invalid certificate
+
+    # Test form
+    # ------------------------
+    ok( $res = $client->_get( '/certificateReset', accept => 'text/html' ),
+        'Reset form', );
+    my ( $host, $url, $query ) = expectForm( $res, '#', undef, 'mail' );
+
+    $query = 'mail=dwho%40badwolf.org';
+
+    # Post email
+    ok(
+        $res = $client->_post(
+            '/certificateReset', IO::String->new($query),
+            length => length($query),
+            accept => 'text/html'
+        ),
+        'Post mail'
+    );
+
+    ok( mail() =~ m#a href="http://auth.example.com/certificateReset\?(.*?)"#,
+        'Found link in mail' );
+    $query = $1;
+    my $querymail = $query;
+    ok(
+        $res = $client->_get(
+            '/certificateReset',
+            query  => $query,
+            accept => 'text/html'
+        ),
+        'Post mail token received by mail'
+    );
+
+    # print STDERR Dumper($res);
+
+    ( $host, $url, $query ) = expectForm( $res, '#', undef, 'token' );
+    ok( $res->[2]->[0] =~ /certif/s, ' Ask for a new certificate file' );
+
+    #print STDERR Dumper($query);
+    my %inputs   = split( /[=&]/, $query );
+    my %querytab = split( /[=&]/, $querymail );
+
+    # Create the certificate  file
+    my $cert = "INVALID CERTIFICATE";
+
+    open my $FH2, '>', '/tmp/v296ZJQ_kG';
+    print {$FH2} "$cert";
+    close $FH2;
+
+    $res = $client->app->( {
+            'plack.request.query' => bless( {
+                    'skin'       => $querytab{'skin'},
+                    'mail_token' => $querytab{'mail_token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'PATH_INFO' => '/certificateReset',
+            'HTTP_ACCEPT' =>
+'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3',
+            'REQUEST_METHOD'       => 'POST',
+            'HTTP_ORIGIN'          => 'http://auth.example.com',
+            'HTTP_ACCEPT_LANGUAGE' => 'fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3',
+            'REQUEST_SCHEME'       => 'http',
+            'HTTP_CACHE_CONTROL'   => 'max-age=0',
+
+            'plack.request.merged' => bless( {
+                    'skin'       => $querytab{'skin'},
+                    'mail_token' => $querytab{'mail_token'},
+                    'url'        => '',
+                    'token'      => $inputs{'token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'REMOTE_PORT'                    => '36674',
+            'QUERY_STRING'                   => $querymail,
+            'SERVER_SIGNATURE'               => '',
+            'psgix.input.buffered'           => 1,
+            'HTTP_UPGRADE_INSECURE_REQUESTS' => '1',
+            'CONTENT_TYPE' =>
+'multipart/form-data; boundary=----WebKitFormBoundarybabRY9u6K9tERoLr',
+            'plack.request.upload' => bless( {
+                    'certif' => bless( {
+                            'headers' => bless( {
+                                    'content-disposition' =>
+'form-data; name="certif"; filename="user.pem"',
+                                    'content-type' =>
+                                      'application/x-x509-ca-cert',
+                                    '::std_case' => {
+                                        'content-disposition' =>
+                                          'Content-Disposition'
+                                    }
+                                },
+                                'HTTP::Headers'
+                            ),
+                            'filename' => 'user.pem',
+                            'tempname' => '/tmp/v296ZJQ_kG',
+                            'size'     => 1261
+                        },
+                        'Plack::Request::Upload'
+                    )
+                },
+                'Hash::MultiValue'
+            ),
+            'psgi.streaming'     => 1,
+            'plack.request.body' => bless( {
+                    'skin'  => 'bootstrap',
+                    'url'   => '',
+                    'token' => $inputs{'token'}
+                },
+                'Hash::MultiValue'
+            ),
+            'SCRIPT_URL'   => '/certificateReset',
+            'SERVER_NAME'  => 'auth.example.com',
+            'HTTP_REFERER' => 'http://auth.example.com/certificateReset?'
+              . $querymail,
+            'HTTP_CONNECTION'     => 'close',
+            'CONTENT_LENGTH'      => '1759',
+            'SCRIPT_URI'          => 'http://auth.example.com/certificateReset',
+            'plack.cookie.parsed' => {
+                'llnglanguage' => 'fr'
+            },
+            'SERVER_PORT'     => '80',
+            'SERVER_NAME'     => 'auth.example.com',
+            'SERVER_PROTOCOL' => 'HTTP/1.1',
+            'SCRIPT_NAME'     => '',
+            'HTTP_USER_AGENT' =>
+              'Mozilla/5.0 (VAX-4000; rv:36.0) Gecko/20350101 Firefox',
+            'HTTP_COOKIE'         => 'llnglanguage=fr',
+            'REMOTE_ADDR'         => '127.0.0.1',
+            'REQUEST_URI'         => '/certificateReset?' . $querymail,
+            'plack.cookie.string' => 'llnglanguage=fr',
+            'SERVER_ADDR'         => '127.0.0.1',
+            'psgi.url_scheme'     => 'http',
+            'psgix.harakiri'      => '',
+            'HTTP_HOST'           => 'auth.example.com'
+        }
+    );
+
+    my $trmsg = $res->[2]->[0]; # get html response
+    my @trmsg = split(/\n/, $trmsg); # split into lines
+    @trmsg = grep(/trmsg="/, @trmsg); # only get line corresponding to message
+    $trmsg = $trmsg[0]; # get the first one only
+    $trmsg =~ s/.*trmsg="([0-9]+)".*/$1/g; # get error code number
+    ok ( $trmsg == PE_RESETCERTIFICATE_INVALID, 'Invalid certificate' );
+
+
 }
 count($maintests);
 stopLdapServer() if $ENV{LLNGTESTLDAP};

From bd85aff978719c8d1cfd92381fefce0b90ab4bcf Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Sun, 29 Dec 2019 21:46:01 +0100
Subject: [PATCH 51/60] Typo & FR translation & Container type (#1605)

---
 .../Lemonldap/NG/Manager/Build/Attributes.pm  | 15 ++---
 .../lib/Lemonldap/NG/Manager/Build/Tree.pm    | 62 +++++++++----------
 .../site/htdocs/static/languages/ar.json      |  8 +--
 .../site/htdocs/static/languages/de.json      |  8 +--
 .../site/htdocs/static/languages/en.json      |  8 +--
 .../site/htdocs/static/languages/fr.json      | 26 ++++----
 .../site/htdocs/static/languages/it.json      |  8 +--
 .../site/htdocs/static/languages/tr.json      |  8 +--
 .../site/htdocs/static/languages/vi.json      |  8 +--
 .../site/htdocs/static/languages/zh.json      |  8 +--
 .../site/htdocs/static/struct.json            |  2 +-
 .../NG/Portal/CertificateResetByMail/LDAP.pm  |  2 +-
 .../Portal/Plugins/CertificateResetByMail.pm  | 26 +++-----
 13 files changed, 92 insertions(+), 97 deletions(-)

diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
index 36388ee1d..30f7c2691 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
@@ -1458,14 +1458,15 @@ sub attributes {
             default       => 'http://auth.example.com/resetpwd',
             documentation => 'URL of password reset page',
         },
-                   # Certificate reset by mail
+
+        # Certificate reset by mail
         certificateResetByMailCeaAttribute => {
-            type          => 'text',
-            default       => 'description'
+            type    => 'text',
+            default => 'description'
         },
         certificateResetByMailCertificateAttribute => {
-            type          => 'text',
-            default       => 'userCertificate;binary',
+            type    => 'text',
+            default => 'userCertificate;binary',
         },
         certificateResetByMailStep1Body => {
             type          => 'longtext',
@@ -1501,8 +1502,8 @@ sub attributes {
             documentation => 'URL of certificate reset page',
         },
         certificateResetByMailValidityDelay => {
-            type          => 'int',
-            default       => 0
+            type    => 'int',
+            default => 0
         },
 
         # Registration
diff --git a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
index 97da8746f..a89c5b30a 100644
--- a/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
+++ b/lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Tree.pm
@@ -570,8 +570,7 @@ sub tree {
                 {
                     title => 'reloadParams',
                     help  => 'configlocation.html#configuration_reload',
-                    nodes =>
-                      [ 'reloadUrls', 'reloadTimeout', 'compactConf' ]
+                    nodes => [ 'reloadUrls', 'reloadTimeout', 'compactConf' ]
                 },
                 {
                     title => 'plugins',
@@ -657,34 +656,34 @@ sub tree {
                                     ]
                                 }
                             ]
-                         },
-                          {
+                        },
+                        {
                             title => 'certificateResetByMailManagement',
-                             form  => 'simpleInputContainer',
-                             nodes => [ {
-                                     title => 'certificateMailContent',
-                                     form  => 'simpleInputContainer',
-                                     nodes => [ 
-                                         'certificateResetByMailSender',
-                                         'certificateResetByMailReplyTo',
-                                         'certificateResetByMailStep1Subject',
-                                         'certificateResetByMailStep1Body',
-                                         'certificateResetByMailStep2Subject',
-                                         'certificateResetByMailStep2Body'
-                                      ]
-                                  },
-  
-                                  {
-                                      title => 'mailOther',
-                                      form  => 'simpleInputContainer',
-                                      nodes => [
-                                          'certificateResetByMailURL',
-                                          'certificateResetByMailCeaAttribute',
-                                          'certificateResetByMailCertificateAttribute',
-                                          'certificateResetByMailValidityDelay'
+                            help  => 'resetcertificate.html',
+                            nodes => [ {
+                                    title => 'certificateMailContent',
+                                    form  => 'simpleInputContainer',
+                                    nodes => [
+                                        'certificateResetByMailSender',
+                                        'certificateResetByMailReplyTo',
+                                        'certificateResetByMailStep1Subject',
+                                        'certificateResetByMailStep1Body',
+                                        'certificateResetByMailStep2Subject',
+                                        'certificateResetByMailStep2Body'
                                     ]
-                                 } 
-                             ]
+                                },
+
+                                {
+                                    title => 'mailOther',
+                                    form  => 'simpleInputContainer',
+                                    nodes => [
+                                        'certificateResetByMailURL',
+                                        'certificateResetByMailCeaAttribute',
+'certificateResetByMailCertificateAttribute',
+                                        'certificateResetByMailValidityDelay'
+                                    ]
+                                }
+                            ]
                         },
                         {
                             title => 'register',
@@ -1057,7 +1056,8 @@ sub tree {
                     help  => 'samlservice.html#organization',
                     form  => 'simpleInputContainer',
                     nodes => [
-                        'samlOrganizationDisplayName', 'samlOrganizationName',
+                        'samlOrganizationDisplayName',
+                        'samlOrganizationName',
                         'samlOrganizationURL'
                     ]
                 },
@@ -1217,8 +1217,8 @@ sub tree {
                     title => "oidcServiceMetaDataSessions",
                     nodes => [ 'oidcStorage', 'oidcStorageOptions', ],
                 },
-		'oidcServiceDynamicRegistrationExportedVars',
-		'oidcServiceDynamicRegistrationExtraClaims',
+                'oidcServiceDynamicRegistrationExportedVars',
+                'oidcServiceDynamicRegistrationExtraClaims',
             ]
         },
         'oidcOPMetaDataNodes',
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
index fdf74c273..d382bd521 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/ar.json
@@ -143,10 +143,10 @@
 "categoryName":"اسم الفئة",
 "cda":"نطاقات متعددة",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"السياسة الأمنية للمحتوى",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/de.json b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
index 5724ac2bd..ac42e632e 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/de.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/de.json
@@ -143,10 +143,10 @@
 "categoryName":"Category name",
 "cda":"Mehrere Domains",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/en.json b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
index d63ed755c..f7c6fc499 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/en.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/en.json
@@ -143,10 +143,10 @@
 "categoryName":"Category name",
 "cda":"Multiple domains",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
index 1f0744488..d4e388408 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/fr.json
@@ -142,19 +142,19 @@
 "casStorageOptions":"Options du module des sessions CAS",
 "categoryName":"Nom de la catégorie",
 "cda":"Domaines multiples",
-"certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
-"certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
-"certificateResetByMailSender":"Mail sender",
-"certificateResetByMailReplyTo":"Reply address",
-"certificateResetByMailStep1Subject":"Certificate reset mail subject",
-"certificateResetByMailStep1Body":"Certificate reset mail content",
-"certificateResetByMailStep2Subject":"Confirmation mail subject",
-"certificateResetByMailStep2Body":"Confirmation mail content",
-"certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"certificateMailContent":"Contenu du mail du certificat",
+"certificateResetByMailManagement":"Gestion de la réinitialisation des certificats",
+"certificateResetByMailURL":"URL de la page de réinitialisation",
+"certificateResetByMailCeaAttribute":"Attribut CEA du certificat",
+"certificateResetByMailCertificateAttribute":"Nom de l'attribut du certificat",
+"certificateResetByMailSender":"Expéditeur",
+"certificateResetByMailReplyTo":"Adresse pour la réponse",
+"certificateResetByMailStep1Subject":"Sujet du mail",
+"certificateResetByMailStep1Body":"Contenu du mail",
+"certificateResetByMailStep2Subject":"Sujet du mail de confirmation",
+"certificateResetByMailStep2Body":"Contenu du mail de confirmation",
+"certificateResetByMailValidityDelay":"Durée minimun avant expiration",
+"portalDisplayCertificateResetByMail":"Réinitialiser votre certificat",
 "contentSecurityPolicy":"Politique de sécurité de contenu",
 "contextSwitching":"Endossement d'identité",
 "contextSwitchingHiddenAttributes":"Attributs masqués",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/it.json b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
index f561dfca8..0a8304a23 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/it.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/it.json
@@ -143,10 +143,10 @@
 "categoryName":"Nome della categoria",
 "cda":"Domini multipli",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificat CEA attribut",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your crtificate",
 "contentSecurityPolicy":"Politica di protezione dei contenuti",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Attributi nascosti",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
index 9c39830c5..d391b2966 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/tr.json
@@ -143,10 +143,10 @@
 "categoryName":"Kategori ismi",
 "cda":"Çoklu alan adları",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"İçerik güvenlik ilkesi",
 "contextSwitching":"İçeriği başka bir kullanıcıyla değiştir",
 "contextSwitchingHiddenAttributes":"Gizli nitelikler",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
index 755236a10..785c3588f 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/vi.json
@@ -143,10 +143,10 @@
 "categoryName":"Tên thể loại",
 "cda":"Nhiều tên miền",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"Chính sách bảo mật nội dung",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
index 0c271b4ef..f55fba6eb 100644
--- a/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
+++ b/lemonldap-ng-manager/site/htdocs/static/languages/zh.json
@@ -143,10 +143,10 @@
 "categoryName":"分类名称",
 "cda":"Multiple domains",
 "certificateMailContent":"Certificate mail content",
-"certificateResetByMailManagement":"Certifcate reset management",
+"certificateResetByMailManagement":"Certificate reset management",
 "certificateResetByMailURL":"Reset page URL",
-"certificateResetByMailCeaAttribute":"Certificate attibute name",
-"certificateResetByMailCertificateAttribute":"certificate attribute name",
+"certificateResetByMailCeaAttribute":"Certificate CEA attibute",
+"certificateResetByMailCertificateAttribute":"Certificate attribute name",
 "certificateResetByMailSender":"Mail sender",
 "certificateResetByMailReplyTo":"Reply address",
 "certificateResetByMailStep1Subject":"Certificate reset mail subject",
@@ -154,7 +154,7 @@
 "certificateResetByMailStep2Subject":"Confirmation mail subject",
 "certificateResetByMailStep2Body":"Confirmation mail content",
 "certificateResetByMailValidityDelay":"Minimum duration before expiration",
-"portalDisplayCertificateResetByMail":"Reset your Certificate",
+"portalDisplayCertificateResetByMail":"Reset your certificate",
 "contentSecurityPolicy":"Content security policy",
 "contextSwitching":"Switch context another user",
 "contextSwitchingHiddenAttributes":"Hidden attributes",
diff --git a/lemonldap-ng-manager/site/htdocs/static/struct.json b/lemonldap-ng-manager/site/htdocs/static/struct.json
index 5d0fad336..3385a0f4b 100644
--- a/lemonldap-ng-manager/site/htdocs/static/struct.json
+++ b/lemonldap-ng-manager/site/htdocs/static/struct.json
@@ -1 +1 @@
-[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"compactConf","title":"compactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"id":"certificateResetByMailManagement","title":"certificateResetByMailManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
+[{"_nodes":[{"_nodes":[{"default":"http://auth.example.com/","id":"portal","title":"portal"},{"_nodes":[{"_nodes":[{"default":1,"id":"portalDisplayLogout","title":"portalDisplayLogout","type":"boolOrExpr"},{"default":"$_auth =~ /^(LDAP|DBI|Demo)$/","id":"portalDisplayChangePassword","title":"portalDisplayChangePassword","type":"boolOrExpr"},{"default":1,"id":"portalDisplayAppslist","title":"portalDisplayAppslist","type":"boolOrExpr"},{"default":1,"id":"portalDisplayLoginHistory","title":"portalDisplayLoginHistory","type":"boolOrExpr"},{"default":"$_oidcConnectedRP","id":"portalDisplayOidcConsents","title":"portalDisplayOidcConsents","type":"boolOrExpr"}],"id":"portalModules","title":"portalModules","type":"simpleInputContainer"},{"cnodes":"applicationList","default":[{"data":{"catname":"Default category","type":"category"},"id":"applicationList/default","title":"default","type":"catAndAppList"}],"help":"portalmenu.html#categories_and_applications","id":"applicationList","title":"applicationList","type":"catAndAppList"}],"help":"portalmenu.html","id":"portalMenu","title":"portalMenu"},{"_nodes":[{"default":"common/logos/logo_llng_400px.png","id":"portalMainLogo","title":"portalMainLogo"},{"default":1,"id":"showLanguages","title":"showLanguages","type":"bool"},{"default":"bootstrap","id":"portalSkin","select":[{"k":"bootstrap","v":"Bootstrap"}],"title":"portalSkin","type":"portalskin"},{"id":"portalSkinBackground","select":[{"k":"","v":"None"},{"k":"1280px-Anse_Source_d'Argent_2-La_Digue.jpg","v":"Anse"},{"k":"1280px-Autumn-clear-water-waterfall-landscape_-_Virginia_-_ForestWander.jpg","v":"Waterfall"},{"k":"1280px-BrockenSnowedTrees.jpg","v":"Snowed Trees"},{"k":"1280px-Cedar_Breaks_National_Monument_partially.jpg","v":"National Monument"},{"k":"1280px-Parry_Peak_from_Winter_Park.jpg","v":"Winter"},{"k":"Aletschgletscher_mit_Pinus_cembra1.jpg","v":"Pinus"}],"title":"portalSkinBackground","type":"portalskinbackground"},{"cnodes":"portalSkinRules","help":"portalcustom.html","id":"portalSkinRules","title":"portalSkinRules","type":"keyTextContainer"},{"_nodes":[{"default":1,"id":"portalCheckLogins","title":"portalCheckLogins","type":"bool"},{"default":0,"id":"portalDisplayResetPassword","title":"portalDisplayResetPassword","type":"bool"},{"default":3,"id":"passwordResetAllowedRetries","title":"passwordResetAllowedRetries","type":"int"},{"default":1,"id":"portalDisplayRegister","title":"portalDisplayRegister","type":"bool"},{"default":0,"id":"portalDisplayCertificateResetByMail","title":"portalDisplayCertificateResetByMail","type":"boolOrExpr"}],"help":"portalcustom.html#buttons","id":"portalButtons","title":"portalButtons","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"portalRequireOldPassword","title":"portalRequireOldPassword","type":"bool"},{"default":0,"id":"hideOldPassword","title":"hideOldPassword","type":"bool"},{"default":0,"id":"mailOnPasswordChange","title":"mailOnPasswordChange","type":"bool"},{"default":0,"id":"passwordPolicyMinSize","title":"passwordPolicyMinSize","type":"int"},{"default":0,"id":"passwordPolicyMinLower","title":"passwordPolicyMinLower","type":"int"},{"default":0,"id":"passwordPolicyMinUpper","title":"passwordPolicyMinUpper","type":"int"},{"default":0,"id":"passwordPolicyMinDigit","title":"passwordPolicyMinDigit","type":"int"},{"default":0,"id":"portalDisplayPasswordPolicy","title":"portalDisplayPasswordPolicy","type":"bool"}],"help":"portalcustom.html#password_management","id":"passwordManagement","title":"passwordManagement","type":"simpleInputContainer"},{"_nodes":[{"default":"_user","id":"portalUserAttr","title":"portalUserAttr"},{"default":0,"id":"portalOpenLinkInNewWindow","title":"portalOpenLinkInNewWindow","type":"bool"},{"default":1,"id":"portalAntiFrame","title":"portalAntiFrame","type":"bool"},{"default":60000,"id":"portalPingInterval","title":"portalPingInterval","type":"int"},{"default":1,"id":"portalErrorOnExpiredSession","title":"portalErrorOnExpiredSession","type":"bool"},{"default":0,"id":"portalErrorOnMailNotFound","title":"portalErrorOnMailNotFound","type":"bool"}],"help":"portalcustom.html#other_parameters","id":"portalOther","title":"portalOther","type":"simpleInputContainer"}],"help":"portalcustom.html","id":"portalCustomization","title":"portalCustomization"},{"_nodes":[{"default":0,"id":"captcha_login_enabled","title":"captcha_login_enabled","type":"bool"},{"default":1,"id":"captcha_mail_enabled","title":"captcha_mail_enabled","type":"bool"},{"default":1,"id":"captcha_register_enabled","title":"captcha_register_enabled","type":"bool"},{"default":6,"id":"captcha_size","title":"captcha_size","type":"int"}],"help":"captcha.html","id":"portalCaptcha","title":"portalCaptcha","type":"simpleInputContainer"}],"help":"portal.html","id":"portalParams","title":"portalParams"},{"_nodes":[{"default":"Demo","id":"authentication","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"Choice","v":"authChoice"},{"k":"Combination","v":"combineMods"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"authentication","type":"select"},{"default":"Same","id":"userDB","select":[{"k":"Same","v":"Same"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"userDB","type":"select"},{"default":"Demo","id":"passwordDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Choice","v":"authChoice"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"passwordDB","type":"select"},{"default":"Null","id":"registerDB","select":[{"k":"AD","v":"Active Directory"},{"k":"Demo","v":"Demonstration"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"registerDB","type":"select"}],"_nodes_cond":[{"_nodes":[{"default":0,"id":"ADPwdMaxAge","title":"ADPwdMaxAge","type":"int"},{"default":0,"id":"ADPwdExpireWarning","title":"ADPwdExpireWarning","type":"int"}],"help":"authad.html","id":"adParams","show":false,"title":"adParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lmAuth","id":"authChoiceParam","title":"authChoiceParam"},{"cnodes":"authChoiceModules","id":"authChoiceModules","select":[[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"Facebook","v":"Facebook"},{"k":"LDAP","v":"LDAP"},{"k":"Null","v":"None"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"Proxy","v":"Proxy"},{"k":"REST","v":"REST"},{"k":"Remote","v":"Remote"},{"k":"SAML","v":"SAML v2"},{"k":"Slave","v":"Slave"},{"k":"WebID","v":"WebID"},{"k":"Custom","v":"customModule"}],[{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Demo","v":"Demo"},{"k":"LDAP","v":"LDAP"},{"k":"REST","v":"REST"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}]],"title":"authChoiceModules","type":"authChoiceContainer"},{"id":"authChoiceAuthBasic","title":"authChoiceAuthBasic"}],"help":"authchoice.html","id":"choiceParams","show":false,"title":"choiceParams"},{"_nodes":[{"default":4,"id":"apacheAuthnLevel","title":"apacheAuthnLevel","type":"int"}],"help":"authapache.html","id":"apacheParams","show":false,"title":"apacheParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"casAuthnLevel","title":"casAuthnLevel","type":"int"}],"help":"authcas.html","id":"casParams","show":false,"title":"casParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"dbiAuthnLevel","title":"dbiAuthnLevel","type":"int"},{"cnodes":"dbiExportedVars","default":[],"id":"dbiExportedVars","title":"dbiExportedVars","type":"keyTextContainer"},{"_nodes":[{"_nodes":[{"id":"dbiAuthChain","title":"dbiAuthChain"},{"id":"dbiAuthUser","title":"dbiAuthUser"},{"id":"dbiAuthPassword","title":"dbiAuthPassword","type":"password"}],"id":"dbiConnectionAuth","title":"dbiConnectionAuth","type":"simpleInputContainer"},{"_nodes":[{"id":"dbiUserChain","title":"dbiUserChain"},{"id":"dbiUserUser","title":"dbiUserUser"},{"id":"dbiUserPassword","title":"dbiUserPassword","type":"password"}],"id":"dbiConnectionUser","title":"dbiConnectionUser","type":"simpleInputContainer"}],"help":"authdbi.html#connection","id":"dbiConnection","title":"dbiConnection"},{"_nodes":[{"id":"dbiAuthTable","title":"dbiAuthTable"},{"id":"dbiUserTable","title":"dbiUserTable"},{"id":"dbiAuthLoginCol","title":"dbiAuthLoginCol"},{"id":"dbiAuthPasswordCol","title":"dbiAuthPasswordCol"},{"id":"dbiPasswordMailCol","title":"dbiPasswordMailCol"},{"id":"userPivot","title":"userPivot"}],"help":"authdbi.html#schema","id":"dbiSchema","title":"dbiSchema","type":"simpleInputContainer"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiAuthPasswordHash","title":"dbiAuthPasswordHash"},{"_nodes":[{"help":"authdbi.html#password","id":"dbiDynamicHashEnabled","title":"dbiDynamicHashEnabled","type":"bool"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSchemes","title":"dbiDynamicHashValidSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashValidSaltedSchemes","title":"dbiDynamicHashValidSaltedSchemes"},{"help":"authdbi.html#password","id":"dbiDynamicHashNewPasswordScheme","title":"dbiDynamicHashNewPasswordScheme"}],"help":"authdbi.html#password","id":"dbiDynamicHash","title":"dbiDynamicHash","type":"simpleInputContainer"}],"help":"authdbi.html#password","id":"dbiPassword","title":"dbiPassword"}],"help":"authdbi.html","id":"dbiParams","show":false,"title":"dbiParams"},{"_nodes":[{"cnodes":"demoExportedVars","default":[{"data":"cn","id":"demoExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"demoExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"demoExportedVars/uid","title":"uid","type":"keyText"}],"id":"demoExportedVars","title":"demoExportedVars","type":"keyTextContainer"}],"help":"authdemo.html","id":"demoParams","show":false,"title":"demoParams"},{"_nodes":[{"default":1,"id":"facebookAuthnLevel","title":"facebookAuthnLevel","type":"int"},{"cnodes":"facebookExportedVars","default":[],"id":"facebookExportedVars","title":"facebookExportedVars","type":"keyTextContainer"},{"id":"facebookAppId","title":"facebookAppId"},{"id":"facebookAppSecret","title":"facebookAppSecret"},{"default":"id","id":"facebookUserField","title":"facebookUserField"}],"help":"authfacebook.html","id":"facebookParams","show":false,"title":"facebookParams"},{"_nodes":[{"default":3,"id":"krbAuthnLevel","title":"krbAuthnLevel","type":"int"},{"id":"krbKeytab","title":"krbKeytab"},{"default":0,"id":"krbByJs","title":"krbByJs","type":"bool"},{"default":1,"id":"krbRemoveDomain","title":"krbRemoveDomain","type":"bool"}],"help":"authkerberos.html","id":"kerberosParams","show":false,"title":"kerberosParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"ldapAuthnLevel","title":"ldapAuthnLevel","type":"int"},{"cnodes":"ldapExportedVars","default":[{"data":"cn","id":"ldapExportedVars/cn","title":"cn","type":"keyText"},{"data":"mail","id":"ldapExportedVars/mail","title":"mail","type":"keyText"},{"data":"uid","id":"ldapExportedVars/uid","title":"uid","type":"keyText"}],"id":"ldapExportedVars","title":"ldapExportedVars","type":"keyTextContainer"},{"_nodes":[{"default":"ldap://localhost","id":"ldapServer","title":"ldapServer"},{"default":389,"id":"ldapPort","title":"ldapPort","type":"int"},{"default":"dc=example,dc=com","id":"ldapBase","title":"ldapBase"},{"default":"","id":"managerDn","title":"managerDn"},{"default":"","id":"managerPassword","title":"managerPassword","type":"password"},{"default":120,"id":"ldapTimeout","title":"ldapTimeout","type":"int"},{"default":3,"id":"ldapVersion","title":"ldapVersion","type":"int"},{"id":"ldapRaw","title":"ldapRaw"}],"help":"authldap.html#connection","id":"ldapConnection","title":"ldapConnection","type":"simpleInputContainer"},{"_nodes":[{"id":"LDAPFilter","title":"LDAPFilter"},{"id":"AuthLDAPFilter","title":"AuthLDAPFilter"},{"id":"mailLDAPFilter","title":"mailLDAPFilter"},{"default":"find","id":"ldapSearchDeref","select":[{"k":"never","v":"never"},{"k":"search","v":"search"},{"k":"find","v":"find"},{"k":"always","v":"always"}],"title":"ldapSearchDeref","type":"select"}],"help":"authldap.html#filters","id":"ldapFilters","title":"ldapFilters","type":"simpleInputContainer"},{"_nodes":[{"id":"ldapGroupBase","title":"ldapGroupBase"},{"default":"groupOfNames","id":"ldapGroupObjectClass","title":"ldapGroupObjectClass"},{"default":"member","id":"ldapGroupAttributeName","title":"ldapGroupAttributeName"},{"default":"dn","id":"ldapGroupAttributeNameUser","title":"ldapGroupAttributeNameUser"},{"default":"cn","id":"ldapGroupAttributeNameSearch","title":"ldapGroupAttributeNameSearch"},{"default":0,"id":"ldapGroupDecodeSearchedValue","title":"ldapGroupDecodeSearchedValue","type":"bool"},{"default":0,"id":"ldapGroupRecursive","title":"ldapGroupRecursive","type":"bool"},{"default":"dn","id":"ldapGroupAttributeNameGroup","title":"ldapGroupAttributeNameGroup"}],"help":"authldap.html#groups","id":"ldapGroups","title":"ldapGroups","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ldapPpolicyControl","title":"ldapPpolicyControl","type":"bool"},{"default":0,"id":"ldapSetPassword","title":"ldapSetPassword","type":"bool"},{"default":0,"id":"ldapChangePasswordAsUser","title":"ldapChangePasswordAsUser","type":"bool"},{"default":"utf-8","id":"ldapPwdEnc","title":"ldapPwdEnc"},{"default":1,"id":"ldapUsePasswordResetAttribute","title":"ldapUsePasswordResetAttribute","type":"bool"},{"default":"pwdReset","id":"ldapPasswordResetAttribute","title":"ldapPasswordResetAttribute"},{"default":"TRUE","id":"ldapPasswordResetAttributeValue","title":"ldapPasswordResetAttributeValue"},{"default":0,"id":"ldapAllowResetExpiredPassword","title":"ldapAllowResetExpiredPassword","type":"bool"},{"default":0,"id":"ldapITDS","title":"ldapITDS","type":"bool"}],"help":"authldap.html#password","id":"ldapPassword","title":"ldapPassword","type":"simpleInputContainer"}],"help":"authldap.html","id":"ldapParams","show":false,"title":"ldapParams"},{"_nodes":[{"default":1,"id":"linkedInAuthnLevel","title":"linkedInAuthnLevel","type":"int"},{"id":"linkedInClientID","title":"linkedInClientID"},{"id":"linkedInClientSecret","title":"linkedInClientSecret","type":"password"},{"default":"id,first-name,last-name,email-address","id":"linkedInFields","title":"linkedInFields"},{"default":"emailAddress","id":"linkedInUserField","title":"linkedInUserField"},{"default":"r_liteprofile r_emailaddress","id":"linkedInScope","title":"linkedInScope"}],"help":"authlinkedin.html","id":"linkedinParams","show":false,"title":"linkedinParams","type":"simpleInputContainer"},{"_nodes":[{"id":"combination","title":"combination"},{"cnodes":"combModules","id":"combModules","select":[{"k":"Apache","v":"Apache"},{"k":"AD","v":"Active Directory"},{"k":"DBI","v":"Database (DBI)"},{"k":"Facebook","v":"Facebook"},{"k":"GPG","v":"GPG"},{"k":"Kerberos","v":"Kerberos"},{"k":"LDAP","v":"LDAP"},{"k":"LinkedIn","v":"LinkedIn"},{"k":"PAM","v":"PAM"},{"k":"Radius","v":"Radius"},{"k":"REST","v":"REST"},{"k":"SSL","v":"SSL"},{"k":"Twitter","v":"Twitter"},{"k":"WebID","v":"WebID"},{"k":"Demo","v":"Demonstration"},{"k":"CAS","v":"Central Authentication Service (CAS)"},{"k":"OpenID","v":"OpenID"},{"k":"OpenIDConnect","v":"OpenID Connect"},{"k":"SAML","v":"SAML v2"},{"k":"Proxy","v":"Proxy"},{"k":"Remote","v":"Remote"},{"k":"Slave","v":"Slave"},{"k":"Null","v":"None"},{"k":"Custom","v":"customModule"}],"title":"combModules","type":"cmbModuleContainer"}],"help":"authcombination.html","id":"combinationParams","show":false,"title":"combinationParams"},{"_nodes":[{"default":0,"id":"nullAuthnLevel","title":"nullAuthnLevel","type":"int"}],"help":"authnull.html","id":"nullParams","show":false,"title":"nullParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"openIdAuthnLevel","title":"openIdAuthnLevel","type":"int"},{"cnodes":"openIdExportedVars","default":[],"id":"openIdExportedVars","title":"openIdExportedVars","type":"keyTextContainer"},{"id":"openIdSecret","title":"openIdSecret"},{"default":"0;","id":"openIdIDPList","title":"openIdIDPList","type":"blackWhiteList"}],"help":"authopenid.html","id":"openidParams","show":false,"title":"openidParams"},{"_nodes":[{"default":1,"id":"oidcAuthnLevel","title":"oidcAuthnLevel","type":"int"},{"default":"openidconnectcallback","id":"oidcRPCallbackGetParam","title":"oidcRPCallbackGetParam"},{"default":600,"id":"oidcRPStateTimeout","title":"oidcRPStateTimeout","type":"int"}],"help":"authopenidconnect.html","id":"oidcParams","show":false,"title":"oidcParams","type":"simpleInputContainer"},{"_nodes":[{"default":5,"id":"gpgAuthnLevel","title":"gpgAuthnLevel","type":"int"},{"default":"","id":"gpgDb","title":"gpgDb"}],"help":"authgpg.html","id":"gpgParams","show":false,"title":"gpgParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"proxyAuthnLevel","title":"proxyAuthnLevel","type":"int"},{"id":"proxyAuthService","title":"proxyAuthService"},{"id":"proxySessionService","title":"proxySessionService"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":0,"id":"proxyUseSoap","title":"proxyUseSoap","type":"bool"}],"help":"authproxy.html","id":"proxyParams","show":false,"title":"proxyParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"pamAuthnLevel","title":"pamAuthnLevel","type":"int"},{"default":"login","id":"pamService","title":"pamService"}],"help":"authpam.html","id":"pamParams","show":false,"title":"pamParams","type":"simpleInputContainer"},{"_nodes":[{"default":3,"id":"radiusAuthnLevel","title":"radiusAuthnLevel","type":"int"},{"id":"radiusSecret","title":"radiusSecret"},{"id":"radiusServer","title":"radiusServer"}],"help":"authradius.html","id":"radiusParams","show":false,"title":"radiusParams","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"restAuthnLevel","title":"restAuthnLevel","type":"int"},{"id":"restAuthUrl","title":"restAuthUrl"},{"id":"restUserDBUrl","title":"restUserDBUrl"},{"id":"restPwdConfirmUrl","title":"restPwdConfirmUrl"},{"id":"restPwdModifyUrl","title":"restPwdModifyUrl"}],"help":"authrest.html","id":"restParams","show":false,"title":"restParams","type":"simpleInputContainer"},{"_nodes":[{"id":"remotePortal","title":"remotePortal"},{"id":"remoteCookieName","title":"remoteCookieName"},{"default":"Lemonldap::NG::Common::Apache::Session::SOAP","id":"remoteGlobalStorage","title":"remoteGlobalStorage"},{"cnodes":"remoteGlobalStorageOptions","default":[{"data":"http://auth.example.com/Lemonldap/NG/Common/PSGI/SOAPService","id":"remoteGlobalStorageOptions/ns","title":"ns","type":"keyText"},{"data":"http://auth.example.com/sessions","id":"remoteGlobalStorageOptions/proxy","title":"proxy","type":"keyText"}],"id":"remoteGlobalStorageOptions","title":"remoteGlobalStorageOptions","type":"keyTextContainer"}],"help":"authremote.html","id":"remoteParams","show":false,"title":"remoteParams"},{"_nodes":[{"default":2,"id":"slaveAuthnLevel","title":"slaveAuthnLevel","type":"int"},{"id":"slaveUserHeader","title":"slaveUserHeader"},{"id":"slaveMasterIP","title":"slaveMasterIP"},{"id":"slaveHeaderName","title":"slaveHeaderName"},{"id":"slaveHeaderContent","title":"slaveHeaderContent"},{"default":0,"id":"slaveDisplayLogo","title":"slaveDisplayLogo","type":"bool"},{"cnodes":"slaveExportedVars","default":[],"id":"slaveExportedVars","title":"slaveExportedVars","type":"keyTextContainer"}],"help":"authslave.html","id":"slaveParams","show":false,"title":"slaveParams"},{"_nodes":[{"default":5,"id":"SSLAuthnLevel","title":"SSLAuthnLevel","type":"int"},{"default":"SSL_CLIENT_S_DN_Email","id":"SSLVar","title":"SSLVar"},{"cnodes":"SSLVarIf","default":[],"id":"SSLVarIf","title":"SSLVarIf","type":"keyTextContainer"},{"default":0,"id":"sslByAjax","title":"sslByAjax","type":"bool"},{"id":"sslHost","title":"sslHost"}],"help":"authssl.html","id":"sslParams","show":false,"title":"sslParams"},{"_nodes":[{"default":1,"id":"twitterAuthnLevel","title":"twitterAuthnLevel","type":"int"},{"id":"twitterKey","title":"twitterKey"},{"id":"twitterSecret","title":"twitterSecret"},{"id":"twitterAppName","title":"twitterAppName"},{"default":"screen_name","id":"twitterUserField","title":"twitterUserField"}],"help":"authtwitter.html","id":"twitterParams","show":false,"title":"twitterParams","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"webIDAuthnLevel","title":"webIDAuthnLevel","type":"int"},{"cnodes":"webIDExportedVars","default":[],"id":"webIDExportedVars","title":"webIDExportedVars","type":"keyTextContainer"},{"id":"webIDWhitelist","title":"webIDWhitelist"}],"help":"authwebid.html","id":"webidParams","show":false,"title":"webidParams"},{"_nodes":[{"id":"customAuth","title":"customAuth"},{"id":"customUserDB","title":"customUserDB"},{"id":"customPassword","title":"customPassword"},{"id":"customRegister","title":"customRegister"},{"cnodes":"customAddParams","id":"customAddParams","title":"customAddParams","type":"keyTextContainer"}],"help":"authcustom.html","id":"customParams","show":false,"title":"customParams"}],"_nodes_filter":"authParams","help":"start.html#authentication_users_and_password_databases","id":"authParams","title":"authParams","type":"authParams"},{"_nodes":[{"_nodes":[{"default":0,"id":"issuerDBSAMLActivation","title":"issuerDBSAMLActivation","type":"bool"},{"default":"^/saml/","id":"issuerDBSAMLPath","title":"issuerDBSAMLPath"},{"default":1,"id":"issuerDBSAMLRule","title":"issuerDBSAMLRule","type":"boolOrExpr"}],"help":"idpsaml.html","id":"issuerDBSAML","title":"issuerDBSAML","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBCASActivation","title":"issuerDBCASActivation","type":"bool"},{"default":"^/cas/","id":"issuerDBCASPath","title":"issuerDBCASPath"},{"default":1,"id":"issuerDBCASRule","title":"issuerDBCASRule","type":"boolOrExpr"}],"help":"idpcas.html#enabling_cas","id":"issuerDBCAS","title":"issuerDBCAS","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDActivation","title":"issuerDBOpenIDActivation","type":"bool"},{"default":"^/openidserver/","id":"issuerDBOpenIDPath","title":"issuerDBOpenIDPath"},{"default":1,"id":"issuerDBOpenIDRule","title":"issuerDBOpenIDRule","type":"boolOrExpr"},{"_nodes":[{"id":"openIdIssuerSecret","title":"openIdIssuerSecret"},{"id":"openIdAttr","title":"openIdAttr"},{"default":"0;","id":"openIdSPList","title":"openIdSPList","type":"blackWhiteList"},{"_nodes":[{"default":"cn","id":"openIdSreg_fullname","title":"openIdSreg_fullname"},{"default":"uid","id":"openIdSreg_nickname","title":"openIdSreg_nickname"},{"id":"openIdSreg_language","title":"openIdSreg_language"},{"id":"openIdSreg_postcode","title":"openIdSreg_postcode"},{"default":"_timezone","id":"openIdSreg_timezone","title":"openIdSreg_timezone"},{"id":"openIdSreg_country","title":"openIdSreg_country"},{"id":"openIdSreg_gender","title":"openIdSreg_gender"},{"default":"mail","id":"openIdSreg_email","title":"openIdSreg_email"},{"id":"openIdSreg_dob","title":"openIdSreg_dob"}],"id":"openIdSreg","title":"openIdSreg","type":"simpleInputContainer"}],"id":"issuerDBOpenIDOptions","title":"issuerDBOpenIDOptions"}],"help":"idpopenid.html","id":"issuerDBOpenID","title":"issuerDBOpenID"},{"_nodes":[{"default":0,"id":"issuerDBOpenIDConnectActivation","title":"issuerDBOpenIDConnectActivation","type":"bool"},{"default":"^/oauth2/","id":"issuerDBOpenIDConnectPath","title":"issuerDBOpenIDConnectPath"},{"default":1,"id":"issuerDBOpenIDConnectRule","title":"issuerDBOpenIDConnectRule","type":"boolOrExpr"}],"help":"idpopenidconnect.html","id":"issuerDBOpenIDConnect","title":"issuerDBOpenIDConnect","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"issuerDBGetActivation","title":"issuerDBGetActivation","type":"bool"},{"default":"^/get/","id":"issuerDBGetPath","title":"issuerDBGetPath"},{"default":1,"id":"issuerDBGetRule","title":"issuerDBGetRule","type":"boolOrExpr"},{"default":[],"id":"issuerDBGetParameters","title":"issuerDBGetParameters","type":"doubleHash"}],"help":"issuerdbget.html","id":"issuerDBGet","title":"issuerDBGet"},{"_nodes":[{"default":120,"id":"issuersTimeout","title":"issuersTimeout","type":"int"}],"help":"start.html#options","id":"issuerOptions","title":"issuerOptions","type":"simpleInputContainer"}],"help":"start.html#identity_provider","id":"issuerParams","title":"issuerParams"},{"_nodes":[{"default":"uid","id":"whatToTrace","title":"whatToTrace"},{"id":"customToTrace","title":"customToTrace"},{"default":"_password _2fDevices","id":"hiddenAttributes","title":"hiddenAttributes"}],"help":"logs.html","id":"logParams","title":"logParams","type":"simpleInputContainer"},{"_nodes":[{"default":"lemonldap","id":"cookieName","title":"cookieName"},{"default":"example.com","id":"domain","title":"domain"},{"default":0,"id":"cda","title":"cda","type":"bool"},{"default":0,"id":"securedCookie","select":[{"k":"0","v":"unsecuredCookie"},{"k":"1","v":"securedCookie"},{"k":"2","v":"doubleCookie"},{"k":"3","v":"doubleCookieForSingleSession"}],"title":"securedCookie","type":"select"},{"default":1,"id":"httpOnly","title":"httpOnly","type":"bool"},{"id":"cookieExpiration","title":"cookieExpiration","type":"int"}],"help":"ssocookie.html","id":"cookieParams","title":"cookieParams","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"storePassword","title":"storePassword","type":"bool"},{"default":72000,"id":"timeout","title":"timeout","type":"int"},{"default":0,"id":"timeoutActivity","title":"timeoutActivity","type":"int"},{"default":60,"id":"timeoutActivityInterval","title":"timeoutActivityInterval","type":"int"},{"cnodes":"grantSessionRules","default":[],"id":"grantSessionRules","title":"grantSessionRules","type":"grantContainer"},{"_nodes":[{"default":"Apache::Session::File","id":"globalStorage","title":"globalStorage"},{"cnodes":"globalStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/sessions/","id":"globalStorageOptions/Directory","title":"Directory","type":"keyText"},{"data":"/var/lib/lemonldap-ng/sessions/lock/","id":"globalStorageOptions/LockDirectory","title":"LockDirectory","type":"keyText"},{"data":"Lemonldap::NG::Common::Apache::Session::Generate::SHA256","id":"globalStorageOptions/generateModule","title":"generateModule","type":"keyText"}],"id":"globalStorageOptions","title":"globalStorageOptions","type":"keyTextContainer"},{"default":"Cache::FileCache","id":"localSessionStorage","title":"localSessionStorage"},{"cnodes":"localSessionStorageOptions","default":[{"data":3,"id":"localSessionStorageOptions/cache_depth","title":"cache_depth","type":"keyText"},{"data":"/tmp","id":"localSessionStorageOptions/cache_root","title":"cache_root","type":"keyText"},{"data":600,"id":"localSessionStorageOptions/default_expires_in","title":"default_expires_in","type":"keyText"},{"data":"007","id":"localSessionStorageOptions/directory_umask","title":"directory_umask","type":"keyText"},{"data":"lemonldap-ng-sessions","id":"localSessionStorageOptions/namespace","title":"namespace","type":"keyText"}],"id":"localSessionStorageOptions","title":"localSessionStorageOptions","type":"keyTextContainer"}],"help":"start.html#sessions_database","id":"sessionStorage","title":"sessionStorage"},{"_nodes":[{"default":0,"id":"singleSession","title":"singleSession","type":"bool"},{"default":0,"id":"singleIP","title":"singleIP","type":"bool"},{"default":0,"id":"singleUserByIP","title":"singleUserByIP","type":"bool"},{"default":0,"id":"singleSessionUserByIP","title":"singleSessionUserByIP","type":"bool"},{"default":1,"id":"notifyDeleted","title":"notifyDeleted","type":"bool"},{"default":0,"id":"notifyOther","title":"notifyOther","type":"bool"}],"id":"multipleSessions","title":"multipleSessions","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"disablePersistentStorage","title":"disablePersistentStorage","type":"bool"},{"id":"persistentStorage","title":"persistentStorage"},{"cnodes":"persistentStorageOptions","id":"persistentStorageOptions","title":"persistentStorageOptions","type":"keyTextContainer"}],"id":"persistentSessions","title":"persistentSessions"}],"help":"sessions.html","id":"sessionParams","title":"sessionParams"},{"_nodes":[{"cnodes":"reloadUrls","help":"configlocation.html#configuration_reload","id":"reloadUrls","title":"reloadUrls","type":"keyTextContainer"},{"default":5,"id":"reloadTimeout","title":"reloadTimeout","type":"int"},{"default":0,"id":"compactConf","title":"compactConf","type":"bool"}],"help":"configlocation.html#configuration_reload","id":"reloadParams","title":"reloadParams"},{"_nodes":[{"default":0,"id":"stayConnected","title":"stayConnected","type":"bool"},{"default":0,"help":"status.html","id":"portalStatus","title":"portalStatus","type":"bool"},{"default":1,"id":"upgradeSession","title":"upgradeSession","type":"bool"},{"id":"refreshSessions","title":"refreshSessions","type":"bool"},{"_nodes":[{"default":0,"id":"wsdlServer","title":"wsdlServer","type":"bool"},{"default":0,"id":"restSessionServer","title":"restSessionServer","type":"bool"},{"default":0,"id":"restExportSecretKeys","title":"restExportSecretKeys","type":"bool"},{"default":15,"id":"restClockTolerance","title":"restClockTolerance","type":"int"},{"default":0,"id":"restConfigServer","title":"restConfigServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapSessionServer","title":"soapSessionServer","type":"bool"},{"default":0,"help":"soapservices.html","id":"soapConfigServer","title":"soapConfigServer","type":"bool"},{"id":"exportedAttr","title":"exportedAttr"}],"help":"portalservers.html","id":"portalServers","title":"portalServers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"loginHistoryEnabled","title":"loginHistoryEnabled","type":"bool"},{"default":5,"id":"successLoginNumber","title":"successLoginNumber","type":"int"},{"default":5,"id":"failedLoginNumber","title":"failedLoginNumber","type":"int"},{"cnodes":"sessionDataToRemember","id":"sessionDataToRemember","title":"sessionDataToRemember","type":"keyTextContainer"}],"help":"loginhistory.html","id":"loginHistory","title":"loginHistory"},{"_nodes":[{"default":0,"id":"notification","title":"notification","type":"bool"},{"default":0,"id":"oldNotifFormat","title":"oldNotifFormat","type":"bool"},{"default":"File","id":"notificationStorage","title":"notificationStorage"},{"cnodes":"notificationStorageOptions","default":[{"data":"/var/lib/lemonldap-ng/notifications","id":"notificationStorageOptions/dirName","title":"dirName","type":"keyText"}],"id":"notificationStorageOptions","title":"notificationStorageOptions","type":"keyTextContainer"},{"default":"allusers","id":"notificationWildcard","title":"notificationWildcard"},{"id":"notificationXSLTfile","title":"notificationXSLTfile"},{"_nodes":[{"default":0,"id":"notificationServer","title":"notificationServer","type":"bool"},{"default":"","id":"notificationDefaultCond","title":"notificationDefaultCond"},{"default":"uid reference date title subtitle text check","id":"notificationServerSentAttributes","title":"notificationServerSentAttributes"},{"_nodes":[{"default":1,"id":"notificationServerPOST","title":"notificationServerPOST","type":"bool"},{"default":0,"id":"notificationServerGET","title":"notificationServerGET","type":"bool"},{"default":0,"id":"notificationServerDELETE","title":"notificationServerDELETE","type":"bool"}],"id":"notificationServerMethods","title":"notificationServerMethods","type":"simpleInputContainer"}],"help":"notifications.html#server","id":"serverNotification","title":"serverNotification"}],"help":"notifications.html","id":"notifications","title":"notifications"},{"_nodes":[{"_nodes":[{"id":"mailSubject","title":"mailSubject"},{"id":"mailBody","title":"mailBody","type":"longtext"},{"id":"mailConfirmSubject","title":"mailConfirmSubject"},{"id":"mailConfirmBody","title":"mailConfirmBody","type":"longtext"}],"id":"mailContent","title":"mailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/resetpwd","id":"mailUrl","title":"mailUrl"},{"default":0,"id":"mailTimeout","title":"mailTimeout","type":"int"},{"default":1,"id":"portalDisplayGeneratePassword","title":"portalDisplayGeneratePassword","type":"bool"},{"default":"[A-Z]{3}[a-z]{5}.\\d{2}","id":"randomPasswordRegexp","title":"randomPasswordRegexp"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetpassword.html","id":"passwordManagement","title":"passwordManagement"},{"_nodes":[{"_nodes":[{"default":"noreply@example.com","id":"certificateResetByMailSender","title":"certificateResetByMailSender"},{"default":"noreply@example.com","id":"certificateResetByMailReplyTo","title":"certificateResetByMailReplyTo"},{"id":"certificateResetByMailStep1Subject","title":"certificateResetByMailStep1Subject"},{"id":"certificateResetByMailStep1Body","title":"certificateResetByMailStep1Body","type":"longtext"},{"id":"certificateResetByMailStep2Subject","title":"certificateResetByMailStep2Subject"},{"id":"certificateResetByMailStep2Body","title":"certificateResetByMailStep2Body","type":"longtext"}],"id":"certificateMailContent","title":"certificateMailContent","type":"simpleInputContainer"},{"_nodes":[{"default":"http://auth.example.com/certificateReset","id":"certificateResetByMailURL","title":"certificateResetByMailURL"},{"default":"description","id":"certificateResetByMailCeaAttribute","title":"certificateResetByMailCeaAttribute"},{"default":"userCertificate;binary","id":"certificateResetByMailCertificateAttribute","title":"certificateResetByMailCertificateAttribute"},{"default":0,"id":"certificateResetByMailValidityDelay","title":"certificateResetByMailValidityDelay","type":"int"}],"id":"mailOther","title":"mailOther","type":"simpleInputContainer"}],"help":"resetcertificate.html","id":"certificateResetByMailManagement","title":"certificateResetByMailManagement"},{"_nodes":[{"default":"http://auth.example.com/register","id":"registerUrl","title":"registerUrl"},{"default":0,"id":"registerTimeout","title":"registerTimeout","type":"int"},{"id":"registerConfirmSubject","title":"registerConfirmSubject"},{"id":"registerDoneSubject","title":"registerDoneSubject"}],"help":"register.html","id":"register","title":"register","type":"simpleInputContainer"},{"_nodes":[{"cnodes":"autoSigninRules","id":"autoSigninRules","title":"autoSigninRules","type":"keyTextContainer"}],"help":"autosignin.html","id":"autoSignin","title":"autoSignin"},{"_nodes":[{"default":0,"id":"globalLogoutRule","title":"globalLogoutRule","type":"boolOrExpr"},{"default":1,"id":"globalLogoutTimer","title":"globalLogoutTimer","type":"bool"}],"help":"globallogout.html","id":"globalLogout","title":"globalLogout","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkState","title":"checkState","type":"bool"},{"id":"checkStateSecret","title":"checkStateSecret"}],"help":"checkstate.html","id":"stateCheck","title":"stateCheck","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"checkUser","title":"checkUser","type":"bool"},{"default":1,"id":"checkUserIdRule","title":"checkUserIdRule"},{"default":"_loginHistory _session_id hGroups","id":"checkUserHiddenAttributes","title":"checkUserHiddenAttributes"},{"id":"checkUserSearchAttributes","title":"checkUserSearchAttributes"},{"default":0,"id":"checkUserDisplayPersistentInfo","title":"checkUserDisplayPersistentInfo","type":"bool"},{"default":0,"id":"checkUserDisplayEmptyValues","title":"checkUserDisplayEmptyValues","type":"bool"}],"help":"checkuser.html","id":"checkUsers","title":"checkUsers","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"impersonationRule","title":"impersonationRule","type":"boolOrExpr"},{"default":1,"id":"impersonationIdRule","title":"impersonationIdRule"},{"default":"_2fDevices _loginHistory","id":"impersonationHiddenAttributes","title":"impersonationHiddenAttributes"},{"default":1,"id":"impersonationSkipEmptyValues","title":"impersonationSkipEmptyValues","type":"bool"},{"default":0,"id":"impersonationMergeSSOgroups","title":"impersonationMergeSSOgroups","type":"boolOrExpr"}],"help":"impersonation.html","id":"impersonation","title":"impersonation","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"contextSwitchingRule","title":"contextSwitchingRule","type":"boolOrExpr"},{"default":1,"id":"contextSwitchingIdRule","title":"contextSwitchingIdRule"},{"default":1,"id":"contextSwitchingStopWithLogout","title":"contextSwitchingStopWithLogout","type":"bool"}],"help":"contextswitching.html","id":"contextSwitching","title":"contextSwitching","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"decryptValueRule","title":"decryptValueRule","type":"boolOrExpr"},{"id":"decryptValueFunctions","title":"decryptValueFunctions"}],"help":"decryptvalue.html","id":"decryptValue","title":"decryptValue","type":"simpleInputContainer"},{"_nodes":[{"id":"customPlugins","title":"customPlugins"},{"cnodes":"customPluginsParams","id":"customPluginsParams","title":"customPluginsParams","type":"keyTextContainer"}],"help":"plugincustom.html","id":"customPluginsNode","title":"customPluginsNode"}],"help":"start.html#plugins","id":"plugins","title":"plugins"},{"_nodes":[{"_nodes":[{"default":0,"id":"utotp2fActivation","title":"utotp2fActivation","type":"boolOrExpr"},{"id":"utotp2fAuthnLevel","title":"utotp2fAuthnLevel","type":"int"},{"id":"utotp2fLabel","title":"utotp2fLabel"},{"id":"utotp2fLogo","title":"utotp2fLogo"}],"help":"utotp2f.html","id":"utotp2f","title":"utotp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"totp2fActivation","title":"totp2fActivation","type":"boolOrExpr"},{"default":0,"id":"totp2fSelfRegistration","title":"totp2fSelfRegistration","type":"boolOrExpr"},{"id":"totp2fIssuer","title":"totp2fIssuer"},{"default":30,"id":"totp2fInterval","title":"totp2fInterval","type":"int"},{"default":1,"id":"totp2fRange","title":"totp2fRange","type":"int"},{"default":6,"id":"totp2fDigits","title":"totp2fDigits","type":"int"},{"default":0,"id":"totp2fDisplayExistingSecret","title":"totp2fDisplayExistingSecret","type":"bool"},{"default":0,"id":"totp2fUserCanChangeKey","title":"totp2fUserCanChangeKey","type":"bool"},{"default":1,"id":"totp2fUserCanRemoveKey","title":"totp2fUserCanRemoveKey","type":"bool"},{"id":"totp2fTTL","title":"totp2fTTL","type":"int"},{"id":"totp2fAuthnLevel","title":"totp2fAuthnLevel","type":"int"},{"id":"totp2fLabel","title":"totp2fLabel"},{"id":"totp2fLogo","title":"totp2fLogo"}],"help":"totp2f.html","id":"totp2f","title":"totp2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"u2fActivation","title":"u2fActivation","type":"boolOrExpr"},{"default":0,"id":"u2fSelfRegistration","title":"u2fSelfRegistration","type":"boolOrExpr"},{"default":1,"id":"u2fUserCanRemoveKey","title":"u2fUserCanRemoveKey","type":"bool"},{"id":"u2fTTL","title":"u2fTTL","type":"int"},{"id":"u2fAuthnLevel","title":"u2fAuthnLevel","type":"int"},{"id":"u2fLabel","title":"u2fLabel"},{"id":"u2fLogo","title":"u2fLogo"}],"help":"u2f.html","id":"u2f","title":"u2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"mail2fActivation","title":"mail2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"mail2fCodeRegex","title":"mail2fCodeRegex"},{"id":"mail2fTimeout","title":"mail2fTimeout","type":"int"},{"id":"mail2fSubject","title":"mail2fSubject"},{"id":"mail2fBody","title":"mail2fBody","type":"longtext"},{"id":"mail2fAuthnLevel","title":"mail2fAuthnLevel","type":"int"},{"id":"mail2fLabel","title":"mail2fLabel"},{"id":"mail2fLogo","title":"mail2fLogo"}],"help":"mail2f.html","id":"mail2f","title":"mail2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"ext2fActivation","title":"ext2fActivation","type":"boolOrExpr"},{"default":"\\d{6}","id":"ext2fCodeActivation","title":"ext2fCodeActivation"},{"id":"ext2FSendCommand","title":"ext2FSendCommand"},{"id":"ext2FValidateCommand","title":"ext2FValidateCommand"},{"id":"ext2fAuthnLevel","title":"ext2fAuthnLevel","type":"int"},{"id":"ext2fLabel","title":"ext2fLabel"},{"id":"ext2fLogo","title":"ext2fLogo"}],"help":"external2f.html","id":"ext2f","title":"ext2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"radius2fActivation","title":"radius2fActivation","type":"boolOrExpr"},{"id":"radius2fServer","title":"radius2fServer"},{"id":"radius2fSecret","title":"radius2fSecret"},{"id":"radius2fUsernameSessionKey","title":"radius2fUsernameSessionKey"},{"default":20,"id":"radius2fTimeout","title":"radius2fTimeout","type":"int"},{"id":"radius2fAuthnLevel","title":"radius2fAuthnLevel","type":"int"},{"id":"radius2fLogo","title":"radius2fLogo"},{"id":"radius2fLabel","title":"radius2fLabel"}],"help":"radius2f.html","id":"radius2f","title":"radius2f","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"rest2fActivation","title":"rest2fActivation","type":"boolOrExpr"},{"id":"rest2fInitUrl","title":"rest2fInitUrl"},{"cnodes":"rest2fInitArgs","id":"rest2fInitArgs","title":"rest2fInitArgs","type":"keyTextContainer"},{"id":"rest2fVerifyUrl","title":"rest2fVerifyUrl"},{"cnodes":"rest2fVerifyArgs","id":"rest2fVerifyArgs","title":"rest2fVerifyArgs","type":"keyTextContainer"},{"id":"rest2fAuthnLevel","title":"rest2fAuthnLevel","type":"int"},{"id":"rest2fLabel","title":"rest2fLabel"},{"id":"rest2fLogo","title":"rest2fLogo"}],"help":"rest2f.html","id":"rest2f","title":"rest2f"},{"_nodes":[{"default":0,"id":"yubikey2fActivation","title":"yubikey2fActivation","type":"boolOrExpr"},{"default":0,"id":"yubikey2fSelfRegistration","title":"yubikey2fSelfRegistration","type":"boolOrExpr"},{"id":"yubikey2fClientID","title":"yubikey2fClientID"},{"id":"yubikey2fSecretKey","title":"yubikey2fSecretKey"},{"id":"yubikey2fNonce","title":"yubikey2fNonce"},{"id":"yubikey2fUrl","title":"yubikey2fUrl"},{"default":12,"id":"yubikey2fPublicIDSize","title":"yubikey2fPublicIDSize","type":"int"},{"default":1,"id":"yubikey2fUserCanRemoveKey","title":"yubikey2fUserCanRemoveKey","type":"bool"},{"id":"yubikey2fTTL","title":"yubikey2fTTL","type":"int"},{"id":"yubikey2fAuthnLevel","title":"yubikey2fAuthnLevel","type":"int"},{"id":"yubikey2fLabel","title":"yubikey2fLabel"},{"id":"yubikey2fLogo","title":"yubikey2fLogo"}],"help":"yubikey2f.html","id":"yubikey2f","title":"yubikey2f","type":"simpleInputContainer"},{"cnodes":"sfExtra","id":"sfExtra","select":[{"k":"Mail2F","v":"E-Mail"},{"k":"REST","v":"REST"},{"k":"Ext2F","v":"External"},{"k":"Radius","v":"Radius"}],"title":"sfExtra","type":"sfExtraContainer"},{"_nodes":[{"default":0,"help":"secondfactor.html","id":"sfRemovedMsgRule","title":"sfRemovedMsgRule","type":"boolOrExpr"},{"default":0,"id":"sfRemovedUseNotif","title":"sfRemovedUseNotif","type":"bool"},{"default":"RemoveSF","help":"secondfactor.html","id":"sfRemovedNotifRef","title":"sfRemovedNotifRef"},{"default":"Second factor notification","help":"secondfactor.html","id":"sfRemovedNotifTitle","title":"sfRemovedNotifTitle"},{"default":"_removedSF_ expired second factor(s) has/have been removed!","help":"secondfactor.html","id":"sfRemovedNotifMsg","title":"sfRemovedNotifMsg"}],"help":"secondfactor.html","id":"sfRemovedNotification","title":"sfRemovedNotification","type":"simpleInputContainer"},{"default":0,"help":"secondfactor.html","id":"sfRequired","title":"sfRequired","type":"boolOrExpr"}],"help":"secondfactor.html","id":"secondFactors","title":"secondFactors"},{"_nodes":[{"help":"customfunctions.html","id":"customFunctions","title":"customFunctions"},{"default":"; ","id":"multiValuesSeparator","title":"multiValuesSeparator","type":"authParamsText"},{"_nodes":[{"default":"mail","id":"mailSessionKey","title":"mailSessionKey"},{"default":"","id":"SMTPServer","title":"SMTPServer"},{"id":"SMTPPort","title":"SMTPPort","type":"int"},{"id":"SMTPAuthUser","title":"SMTPAuthUser"},{"id":"SMTPAuthPass","title":"SMTPAuthPass","type":"password"},{"default":"","id":"SMTPTLS","select":[{"k":"","v":"none"},{"k":"starttls","v":"SMTP + STARTTLS"},{"k":"ssl","v":"SMTPS"}],"title":"SMTPTLS","type":"select"},{"cnodes":"SMTPTLSOpts","id":"SMTPTLSOpts","title":"SMTPTLSOpts","type":"keyTextContainer"},{"_nodes":[{"default":"noreply@example.com","id":"mailFrom","title":"mailFrom"},{"id":"mailReplyTo","title":"mailReplyTo"},{"default":"utf-8","id":"mailCharset","title":"mailCharset"}],"id":"mailHeaders","title":"mailHeaders","type":"simpleInputContainer"}],"help":"smtp.html","id":"SMTP","title":"SMTP"},{"_nodes":[{"default":"^[\\w\\.\\-@]+$","id":"userControl","title":"userControl"},{"default":0,"id":"browsersDontStorePassword","title":"browsersDontStorePassword","type":"bool"},{"default":0,"help":"forcereauthn.html","id":"portalForceAuthn","title":"portalForceAuthn","type":"bool"},{"default":5,"id":"portalForceAuthnInterval","title":"portalForceAuthnInterval","type":"int"},{"id":"key","title":"key","type":"password"},{"id":"trustedDomains","title":"trustedDomains"},{"default":1,"help":"safejail.html","id":"useSafeJail","title":"useSafeJail","type":"bool"},{"default":1,"id":"checkXSS","title":"checkXSS","type":"bool"},{"default":0,"help":"bruteforceprotection.html","id":"bruteForceProtection","title":"bruteForceProtection","type":"bool"},{"default":1,"id":"requireToken","title":"requireToken","type":"boolOrExpr"},{"default":120,"id":"formTimeout","title":"formTimeout","type":"int"},{"default":0,"id":"tokenUseGlobalStorage","title":"tokenUseGlobalStorage","type":"bool"},{"cnodes":"lwpOpts","id":"lwpOpts","title":"lwpOpts","type":"keyTextContainer"},{"cnodes":"lwpSslOpts","id":"lwpSslOpts","title":"lwpSslOpts","type":"keyTextContainer"},{"_nodes":[{"default":"'self'","id":"cspDefault","title":"cspDefault"},{"default":"'self' data:","id":"cspImg","title":"cspImg"},{"default":"'self'","id":"cspScript","title":"cspScript"},{"default":"'self'","id":"cspStyle","title":"cspStyle"},{"default":"'self'","id":"cspFont","title":"cspFont"},{"default":"*","id":"cspFormAction","title":"cspFormAction"},{"default":"'self'","id":"cspConnect","title":"cspConnect"}],"help":"security.html#portal","id":"contentSecurityPolicy","title":"contentSecurityPolicy","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"corsEnabled","title":"corsEnabled","type":"bool"},{"default":true,"id":"corsAllow_Credentials","title":"corsAllow_Credentials"},{"default":"*","id":"corsAllow_Headers","title":"corsAllow_Headers"},{"default":"POST,GET","id":"corsAllow_Methods","title":"corsAllow_Methods"},{"default":"*","id":"corsAllow_Origin","title":"corsAllow_Origin"},{"default":"*","id":"corsExpose_Headers","title":"corsExpose_Headers"},{"default":"86400","id":"corsMax_Age","title":"corsMax_Age"}],"help":"security.html#portal","id":"crossOrigineResourceSharing","title":"crossOrigineResourceSharing","type":"simpleInputContainer"}],"help":"security.html#configure_security_settings","id":"security","title":"security"},{"_nodes":[{"default":-1,"id":"https","title":"https","type":"trool"},{"default":-1,"id":"port","title":"port","type":"int"},{"default":0,"id":"useRedirectOnForbidden","title":"useRedirectOnForbidden","type":"bool"},{"default":1,"id":"useRedirectOnError","title":"useRedirectOnError","type":"bool"},{"default":0,"id":"maintenance","title":"maintenance","type":"bool"}],"help":"redirections.html","id":"redirection","title":"redirection","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"jsRedirect","title":"jsRedirect","type":"boolOrExpr"},{"default":0,"id":"noAjaxHook","title":"noAjaxHook","type":"bool"},{"default":0,"id":"skipRenewConfirmation","title":"skipRenewConfirmation","type":"bool"}],"help":"redirections.html#portal_redirections","id":"portalRedirection","title":"portalRedirection","type":"simpleInputContainer"},{"cnodes":"nginxCustomHandlers","help":"handlerarch.html","id":"nginxCustomHandlers","title":"nginxCustomHandlers","type":"keyTextContainer"},{"cnodes":"logoutServices","default":[],"help":"logoutforward.html","id":"logoutServices","title":"logoutServices","type":"keyTextContainer"},{"_nodes":[{"default":"get","id":"infoFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"infoFormMethod","type":"select"},{"default":"post","id":"confirmFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"confirmFormMethod","type":"select"},{"default":"get","id":"redirectFormMethod","select":[{"k":"get","v":"GET"},{"k":"post","v":"POST"}],"title":"redirectFormMethod","type":"select"},{"default":1,"id":"activeTimer","title":"activeTimer","type":"bool"}],"id":"forms","title":"forms","type":"simpleInputContainer"}],"help":"start.html#advanced_features","id":"advancedParams","title":"advancedParams"}],"id":"generalParameters","title":"generalParameters"},{"_nodes":[{"cnodes":"exportedVars","default":[{"data":"HTTP_USER_AGENT","id":"exportedVars/UA","title":"UA","type":"keyText"}],"help":"exportedvars.html","id":"exportedVars","title":"exportedVars","type":"keyTextContainer"},{"cnodes":"macros","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"macros","title":"macros","type":"keyTextContainer"},{"cnodes":"groups","default":[],"help":"exportedvars.html#extend_variables_using_macros_and_groups","id":"groups","title":"groups","type":"keyTextContainer"}],"help":"variables.html","id":"variables","title":"variables"},{"cnodes":"virtualHosts","help":"configvhost.html","id":"virtualHosts","template":"virtualHost","title":"virtualHosts","type":"virtualHostContainer"},{"_nodes":[{"default":"#PORTAL#/saml/metadata","id":"samlEntityID","title":"samlEntityID"},{"_nodes":[{"get":["samlServicePrivateKeySig","samlServicePrivateKeySigPwd","samlServicePublicKeySig"],"id":"samlServiceSecuritySig","title":"samlServiceSecuritySig","type":"RSAKey"},{"get":["samlServicePrivateKeyEnc","samlServicePrivateKeyEncPwd","samlServicePublicKeyEnc"],"id":"samlServiceSecurityEnc","title":"samlServiceSecurityEnc","type":"RSAKey"},{"default":0,"id":"samlServiceUseCertificateInResponse","title":"samlServiceUseCertificateInResponse","type":"bool"},{"default":"RSA_SHA1","id":"samlServiceSignatureMethod","select":[{"k":"RSA_SHA1","v":"RSA SHA1"},{"k":"RSA_SHA256","v":"RSA SHA256"}],"title":"samlServiceSignatureMethod","type":"select"}],"help":"samlservice.html#security_parameters","id":"samlServiceSecurity","title":"samlServiceSecurity"},{"_nodes":[{"default":"mail","id":"samlNameIDFormatMapEmail","title":"samlNameIDFormatMapEmail"},{"default":"mail","id":"samlNameIDFormatMapX509","title":"samlNameIDFormatMapX509"},{"default":"uid","id":"samlNameIDFormatMapWindows","title":"samlNameIDFormatMapWindows"},{"default":"uid","id":"samlNameIDFormatMapKerberos","title":"samlNameIDFormatMapKerberos"}],"help":"samlservice.html#nameid_formats","id":"samlNameIDFormatMap","title":"samlNameIDFormatMap","type":"simpleInputContainer"},{"_nodes":[{"default":2,"id":"samlAuthnContextMapPassword","title":"samlAuthnContextMapPassword","type":"int"},{"default":3,"id":"samlAuthnContextMapPasswordProtectedTransport","title":"samlAuthnContextMapPasswordProtectedTransport","type":"int"},{"default":5,"id":"samlAuthnContextMapTLSClient","title":"samlAuthnContextMapTLSClient","type":"int"},{"default":4,"id":"samlAuthnContextMapKerberos","title":"samlAuthnContextMapKerberos","type":"int"}],"help":"samlservice.html#authentication_contexts","id":"samlAuthnContextMap","title":"samlAuthnContextMap","type":"simpleInputContainer"},{"_nodes":[{"default":"Example","id":"samlOrganizationDisplayName","title":"samlOrganizationDisplayName"},{"default":"Example","id":"samlOrganizationName","title":"samlOrganizationName"},{"default":"http://www.example.com","id":"samlOrganizationURL","title":"samlOrganizationURL"}],"help":"samlservice.html#organization","id":"samlOrganization","title":"samlOrganization","type":"simpleInputContainer"},{"_nodes":[{"default":1,"id":"samlSPSSODescriptorAuthnRequestsSigned","title":"samlSPSSODescriptorAuthnRequestsSigned","type":"bool"},{"default":1,"id":"samlSPSSODescriptorWantAssertionsSigned","title":"samlSPSSODescriptorWantAssertionsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn","id":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlSPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;","id":"samlSPSSODescriptorSingleLogoutServiceSOAP","title":"samlSPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlSPSSODescriptorSingleLogoutService","title":"samlSPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact","type":"samlAssertion"},{"default":"0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost","id":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","title":"samlSPSSODescriptorAssertionConsumerServiceHTTPPost","type":"samlAssertion"}],"id":"samlSPSSODescriptorAssertionConsumerService","title":"samlSPSSODescriptorAssertionConsumerService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlSPSSODescriptorArtifactResolutionServiceArtifact","title":"samlSPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlSPSSODescriptorArtifactResolutionService","title":"samlSPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#service_provider","id":"samlSPSSODescriptor","title":"samlSPSSODescriptor"},{"_nodes":[{"default":1,"id":"samlIDPSSODescriptorWantAuthnRequestsSigned","title":"samlIDPSSODescriptorWantAuthnRequestsSigned","type":"bool"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;","id":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","title":"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact","type":"samlService"}],"id":"samlIDPSSODescriptorSingleSignOnService","title":"samlIDPSSODescriptorSingleSignOnService"},{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn","id":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","title":"samlIDPSSODescriptorSingleLogoutServiceHTTPPost","type":"samlService"},{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;","id":"samlIDPSSODescriptorSingleLogoutServiceSOAP","title":"samlIDPSSODescriptorSingleLogoutServiceSOAP","type":"samlService"}],"id":"samlIDPSSODescriptorSingleLogoutService","title":"samlIDPSSODescriptorSingleLogoutService"},{"_nodes":[{"default":"1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact","id":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","title":"samlIDPSSODescriptorArtifactResolutionServiceArtifact","type":"samlAssertion"}],"id":"samlIDPSSODescriptorArtifactResolutionService","title":"samlIDPSSODescriptorArtifactResolutionService"}],"help":"samlservice.html#identity_provider","id":"samlIDPSSODescriptor","title":"samlIDPSSODescriptor"},{"_nodes":[{"_nodes":[{"default":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;","id":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","title":"samlAttributeAuthorityDescriptorAttributeServiceSOAP","type":"samlService"}],"id":"samlAttributeAuthorityDescriptorAttributeService","title":"samlAttributeAuthorityDescriptorAttributeService"}],"help":"samlservice.html#attribute_authority","id":"samlAttributeAuthorityDescriptor","title":"samlAttributeAuthorityDescriptor"},{"_nodes":[{"default":1,"id":"samlMetadataForceUTF8","title":"samlMetadataForceUTF8","type":"bool"},{"id":"samlStorage","title":"samlStorage"},{"cnodes":"samlStorageOptions","id":"samlStorageOptions","title":"samlStorageOptions","type":"keyTextContainer"},{"default":600,"id":"samlRelayStateTimeout","title":"samlRelayStateTimeout","type":"int"},{"default":0,"id":"samlUseQueryStringSpecific","title":"samlUseQueryStringSpecific","type":"bool"},{"_nodes":[{"default":0,"id":"samlCommonDomainCookieActivation","title":"samlCommonDomainCookieActivation","type":"bool"},{"id":"samlCommonDomainCookieDomain","title":"samlCommonDomainCookieDomain"},{"id":"samlCommonDomainCookieReader","title":"samlCommonDomainCookieReader"},{"id":"samlCommonDomainCookieWriter","title":"samlCommonDomainCookieWriter"}],"id":"samlCommonDomainCookie","title":"samlCommonDomainCookie","type":"simpleInputContainer"},{"_nodes":[{"default":0,"id":"samlDiscoveryProtocolActivation","title":"samlDiscoveryProtocolActivation","type":"bool"},{"id":"samlDiscoveryProtocolURL","title":"samlDiscoveryProtocolURL"},{"id":"samlDiscoveryProtocolPolicy","title":"samlDiscoveryProtocolPolicy"},{"default":0,"id":"samlDiscoveryProtocolIsPassive","title":"samlDiscoveryProtocolIsPassive","type":"bool"}],"id":"samlDiscoveryProtocol","title":"samlDiscoveryProtocol","type":"simpleInputContainer"},{"default":"","id":"samlOverrideIDPEntityID","title":"samlOverrideIDPEntityID"}],"help":"samlservice.html#advanced","id":"samlAdvanced","title":"samlAdvanced"}],"help":"samlservice.html","id":"samlServiceMetaData","title":"samlServiceMetaData"},{"cnodes":"samlIDPMetaDataNodes","help":"authsaml.html","id":"samlIDPMetaDataNodes","template":"samlIDPMetaDataNode","title":"samlIDPMetaDataNodes","type":"samlIDPMetaDataNodeContainer"},{"cnodes":"samlSPMetaDataNodes","help":"idpsaml.html","id":"samlSPMetaDataNodes","template":"samlSPMetaDataNode","title":"samlSPMetaDataNodes","type":"samlSPMetaDataNodeContainer"},{"_nodes":[{"id":"oidcServiceMetaDataIssuer","title":"oidcServiceMetaDataIssuer"},{"_nodes":[{"default":"authorize","id":"oidcServiceMetaDataAuthorizeURI","title":"oidcServiceMetaDataAuthorizeURI"},{"default":"token","id":"oidcServiceMetaDataTokenURI","title":"oidcServiceMetaDataTokenURI"},{"default":"userinfo","id":"oidcServiceMetaDataUserInfoURI","title":"oidcServiceMetaDataUserInfoURI"},{"default":"jwks","id":"oidcServiceMetaDataJWKSURI","title":"oidcServiceMetaDataJWKSURI"},{"default":"register","id":"oidcServiceMetaDataRegistrationURI","title":"oidcServiceMetaDataRegistrationURI"},{"default":"introspect","id":"oidcServiceMetaDataIntrospectionURI","title":"oidcServiceMetaDataIntrospectionURI"},{"default":"logout","id":"oidcServiceMetaDataEndSessionURI","title":"oidcServiceMetaDataEndSessionURI"},{"default":"checksession.html","id":"oidcServiceMetaDataCheckSessionURI","title":"oidcServiceMetaDataCheckSessionURI"},{"default":"flogout","id":"oidcServiceMetaDataFrontChannelURI","title":"oidcServiceMetaDataFrontChannelURI"},{"default":"blogout","id":"oidcServiceMetaDataBackChannelURI","title":"oidcServiceMetaDataBackChannelURI"}],"id":"oidcServiceMetaDataEndPoints","title":"oidcServiceMetaDataEndPoints","type":"simpleInputContainer"},{"cnodes":"oidcServiceMetaDataAuthnContext","default":[{"data":1,"id":"oidcServiceMetaDataAuthnContext/loa-1","title":"loa-1","type":"keyText"},{"data":2,"id":"oidcServiceMetaDataAuthnContext/loa-2","title":"loa-2","type":"keyText"},{"data":3,"id":"oidcServiceMetaDataAuthnContext/loa-3","title":"loa-3","type":"keyText"},{"data":4,"id":"oidcServiceMetaDataAuthnContext/loa-4","title":"loa-4","type":"keyText"},{"data":5,"id":"oidcServiceMetaDataAuthnContext/loa-5","title":"loa-5","type":"keyText"}],"id":"oidcServiceMetaDataAuthnContext","title":"oidcServiceMetaDataAuthnContext","type":"keyTextContainer"},{"_nodes":[{"get":["oidcServicePrivateKeySig","oidcServicePublicKeySig"],"id":"oidcServiceMetaDataKeys","title":"oidcServiceMetaDataKeys","type":"RSAKeyNoPassword"},{"id":"oidcServiceKeyIdSig","title":"oidcServiceKeyIdSig"},{"default":0,"id":"oidcServiceAllowDynamicRegistration","title":"oidcServiceAllowDynamicRegistration","type":"bool"},{"default":1,"id":"oidcServiceAllowAuthorizationCodeFlow","title":"oidcServiceAllowAuthorizationCodeFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowImplicitFlow","title":"oidcServiceAllowImplicitFlow","type":"bool"},{"default":0,"id":"oidcServiceAllowHybridFlow","title":"oidcServiceAllowHybridFlow","type":"bool"},{"default":60,"id":"oidcServiceAuthorizationCodeExpiration","title":"oidcServiceAuthorizationCodeExpiration","type":"int"},{"default":3600,"id":"oidcServiceAccessTokenExpiration","title":"oidcServiceAccessTokenExpiration","type":"int"},{"default":3600,"id":"oidcServiceIDTokenExpiration","title":"oidcServiceIDTokenExpiration","type":"int"},{"default":2592000,"id":"oidcServiceOfflineSessionExpiration","title":"oidcServiceOfflineSessionExpiration","type":"int"}],"id":"oidcServiceMetaDataSecurity","title":"oidcServiceMetaDataSecurity"},{"_nodes":[{"id":"oidcStorage","title":"oidcStorage"},{"cnodes":"oidcStorageOptions","id":"oidcStorageOptions","title":"oidcStorageOptions","type":"keyTextContainer"}],"id":"oidcServiceMetaDataSessions","title":"oidcServiceMetaDataSessions"},{"cnodes":"oidcServiceDynamicRegistrationExportedVars","id":"oidcServiceDynamicRegistrationExportedVars","title":"oidcServiceDynamicRegistrationExportedVars","type":"keyTextContainer"},{"cnodes":"oidcServiceDynamicRegistrationExtraClaims","id":"oidcServiceDynamicRegistrationExtraClaims","title":"oidcServiceDynamicRegistrationExtraClaims","type":"keyTextContainer"}],"help":"openidconnectservice.html#service_configuration","id":"oidcServiceMetaData","title":"oidcServiceMetaData"},{"cnodes":"oidcOPMetaDataNodes","help":"authopenidconnect.html#declare_the_openid_connect_provider_in_llng","id":"oidcOPMetaDataNodes","title":"oidcOPMetaDataNodes","type":"oidcOPMetaDataNodeContainer"},{"cnodes":"oidcRPMetaDataNodes","help":"idpopenidconnect.html#configuration_of_relying_party_in_llng","id":"oidcRPMetaDataNodes","title":"oidcRPMetaDataNodes","type":"oidcRPMetaDataNodeContainer"},{"_nodes":[{"id":"casAttr","title":"casAttr"},{"default":"none","id":"casAccessControlPolicy","select":[{"k":"none","v":"None"},{"k":"error","v":"Display error on portal"},{"k":"faketicket","v":"Send a fake service ticket"}],"title":"casAccessControlPolicy","type":"select"},{"id":"casStorage","title":"casStorage"},{"cnodes":"casStorageOptions","id":"casStorageOptions","title":"casStorageOptions","type":"keyTextContainer"},{"cnodes":"casAttributes","id":"casAttributes","title":"casAttributes","type":"keyTextContainer"}],"help":"idpcas.html#configuring_the_cas_service","id":"casServiceMetadata","title":"casServiceMetadata"},{"cnodes":"casSrvMetaDataNodes","help":"authcas.html","id":"casSrvMetaDataNodes","template":"casSrvMetaDataNode","title":"casSrvMetaDataNodes","type":"casSrvMetaDataNodeContainer"},{"cnodes":"casAppMetaDataNodes","help":"idpcas.html#configuring_cas_applications","id":"casAppMetaDataNodes","template":"casAppMetaDataNode","title":"casAppMetaDataNodes","type":"casAppMetaDataNodeContainer"}]
\ No newline at end of file
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
index 27c3afede..10290a18f 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
@@ -11,7 +11,7 @@ use Lemonldap::NG::Portal::Main::Constants qw(
 
 extends 'Lemonldap::NG::Portal::Lib::LDAP';
 
-our $VERSION = '2.1.0';
+our $VERSION = '2.0.7';
 
 # RUNNING METHODS
 
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
index b8ef82be2..a2e467507 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
@@ -10,6 +10,7 @@ use MIME::Base64;
 use POSIX qw(strftime);
 use Lemonldap::NG::Common::FormEncode;
 use Lemonldap::NG::Portal::Main::Constants qw(
+  PE_OK
   PE_BADCREDENTIALS
   PE_BADMAILTOKEN
   PE_CAPTCHAEMPTY
@@ -23,10 +24,6 @@ use Lemonldap::NG::Portal::Main::Constants qw(
   PE_MAILOK
   PE_MALFORMEDUSER
   PE_NOTOKEN
-  PE_OK
-  PE_PASSWORDFIRSTACCESS
-  PE_PASSWORDFORMEMPTY
-  PE_PASSWORD_OK
   PE_TOKENEXPIRED
   PE_USERNOTFOUND
   PE_RESETCERTIFICATE_INVALID
@@ -34,10 +31,13 @@ use Lemonldap::NG::Portal::Main::Constants qw(
   PE_RESETCERTIFICATE_FIRSTACCESS
 );
 
-our $VERSION = '2.1.0';
+our $VERSION = '2.0.7';
 
-extends 'Lemonldap::NG::Portal::Main::Plugin',
-  'Lemonldap::NG::Portal::Lib::SMTP', 'Lemonldap::NG::Portal::Lib::_tokenRule';
+extends qw(
+  Lemonldap::NG::Portal::Main::Plugin
+  Lemonldap::NG::Portal::Lib::SMTP
+  Lemonldap::NG::Portal::Lib::_tokenRule
+);
 
 # PROPERTIES
 
@@ -107,6 +107,7 @@ sub init {
             '::CertificateResetByMail::' . $self->conf->{registerDB}
         )
     ) or return 0;
+
     return 1;
 }
 
@@ -536,7 +537,6 @@ sub modifyCertificate {
     $self->{user} = undef;
 
     # Mail token can be used only one time, delete the session if all is ok
-    #
     return $result unless ( $result == PE_OK );
 
     # Send mail to notify the certificate reset sucessfully
@@ -690,13 +690,12 @@ sub display {
     return 'certificateReset', \%tplPrm;
 }
 
-#tring getCertifResetSession (string mail)
+#string getCertifResetSession (string mail)
 # Check if a certificate reset session exists
 # @param mail the value of the mail key in session
 # @return the first session id found or nothing if no session
 sub getCertificateSession {
     my ( $self, $user ) = @_;
-
     my $moduleOptions = $self->conf->{globalStorageOptions} || {};
     $moduleOptions->{backend} = $self->conf->{globalStorage};
     my $module = "Lemonldap::NG::Common::Apache::Session";
@@ -721,7 +720,6 @@ sub getCertificateSession {
 # Use Certificate Update parameter to send mail
 
 sub sendmail {
-
     my ( $self, $mail, $subject, $body, $html ) = @_;
 
     $self->{mailFrom}    = $self->conf->{certificateResetByMailSender};
@@ -731,13 +729,10 @@ sub sendmail {
 }
 
 sub checkCertificateValidity {
-
     my ( $self, $notAfter, $delay ) = @_;
     my $dtNow;    # now in format DateTime
     my $days;     # difference between NotAfter and now
-
-    my $f = DateTime::Format::RFC3339->new();
-
+    my $f          = DateTime::Format::RFC3339->new();
     my $dtNotAfter = $f->parse_datetime($notAfter);
     $self->userLogger->debug("Not After Date: $dtNotAfter");
 
@@ -761,7 +756,6 @@ sub checkCertificateValidity {
 }
 
 sub certificateHash {
-
     my ( $self, $file ) = @_;
     my $cert;
 

From 6f3bdfd9de9dc965263bee7edabf9b2adde070c4 Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Mon, 30 Dec 2019 14:49:29 +0100
Subject: [PATCH 52/60] More security in handler in-memory session

---
 .../lib/Lemonldap/NG/Handler/Main/Run.pm          | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
index 885a344a0..fa77f2c74 100644
--- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
+++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm
@@ -481,6 +481,9 @@ sub retrieveSession {
         $class->logger->debug("Get session $id from Handler internal cache");
         return $class->data;
     }
+    else {
+        $class->data( {} );
+    }
 
     # 2. Get the session from cache or backend
     my $session = $req->data->{session} = (
@@ -763,15 +766,11 @@ sub abort {
 sub localUnlog {
     my ( $class, $req, $id ) = @_;
     $class->logger->debug('Local handler logout');
-    if ( $id //= $class->fetchId($req) ) {
 
-        # Delete thread data
-        if (    $class->data->{_session_id}
-            and $id eq $class->data->{_session_id} )
-        {
-            $class->data( {} );
-        }
-        delete $req->data->{session};
+    # Delete thread data
+    delete $req->data->{session};
+    $class->data( {} );
+    if ( $id //= $class->fetchId($req) ) {
 
         # Delete local cache
         if (    $class->tsv->{refLocalStorage}

From 1988983c9038f72090db07a0ac5fe816138ac535 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Tue, 31 Dec 2019 17:14:44 +0100
Subject: [PATCH 53/60] Typo

---
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/CAS.pm  | 4 ++--
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/Get.pm  | 2 +-
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/SAML.pm | 4 ++--
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm    | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/CAS.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/CAS.pm
index d0fd85656..527a268c6 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/CAS.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/CAS.pm
@@ -129,7 +129,7 @@ sub run {
     my $url = $req->uri();
 
     # Session ID
-    my $session_id = $req->{sessionInfo}->{_session_id} || $req->{id};
+    my $session_id = $req->{sessionInfo}->{_session_id} || $req->id;
 
     # Session creation timestamp
     my $time = $req->{sessionInfo}->{_utime} || time();
@@ -400,7 +400,7 @@ sub logout {
     my ( $self, $req ) = @_;
 
     # Session ID
-    my $session_id = $req->{sessionInfo}->{_session_id} || $req->{id};
+    my $session_id = $req->{sessionInfo}->{_session_id} || $req->id;
 
     # Delete linked CAS sessions
     $self->deleteCasSecondarySessions($session_id) if ($session_id);
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/Get.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/Get.pm
index a827c87c3..4141f2135 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/Get.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/Get.pm
@@ -44,7 +44,7 @@ sub run {
     }
 
     # Session ID
-    my $session_id = $req->{sessionInfo}->{_session_id} || $self->{id};
+    my $session_id = $req->{sessionInfo}->{_session_id} || $req->id;
 
     # Session creation timestamp
     my $time = $req->{sessionInfo}->{_utime} || time();
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/SAML.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/SAML.pm
index 8662cf314..0607b18fc 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/SAML.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/SAML.pm
@@ -211,7 +211,7 @@ sub run {
     }
 
     # Session ID
-    my $session_id = $req->{sessionInfo}->{_session_id} || $req->{id};
+    my $session_id = $req->{sessionInfo}->{_session_id} || $req->id;
 
     # Session creation timestamp
     my $time = $req->{sessionInfo}->{_utime} || time();
@@ -1268,7 +1268,7 @@ sub logout {
     return PE_OK if ( $req->data->{samlSLOCalled} );
 
     # Session ID
-    my $session_id = $req->{sessionInfo}->{_session_id} || $req->{id};
+    my $session_id = $req->{sessionInfo}->{_session_id} || $req->id;
 
     # Close SAML sessions
     unless ( $self->deleteSAMLSecondarySessions($session_id) ) {
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
index e55ec13b7..8850b5acf 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
@@ -514,7 +514,7 @@ sub updateSession {
     return () unless ( ref $infos eq 'HASH' and %$infos );
 
     # Recover session ID unless given
-    $id ||= $req->{id} || $req->userData->{_session_id};
+    $id ||= $req->id || $req->userData->{_session_id};
 
     if ($id) {
 

From f8046dd716f512326486e4b8b41ccb1d3bd67261 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 3 Jan 2020 12:36:35 +0100
Subject: [PATCH 54/60] Update sessionInfo during auth process & Improve unit
 tests

---
 .../lib/Lemonldap/NG/Portal/Main/Process.pm   | 26 +++++++++----------
 .../t/68-Impersonation-with-doubleCookies.t   |  2 +-
 lemonldap-ng-portal/t/68-Impersonation.t      |  6 +++--
 lemonldap-ng-portal/t/78-2F-Upgrade.t         | 18 +++----------
 4 files changed, 20 insertions(+), 32 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
index 624eed834..0b1c8c2c8 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
@@ -52,7 +52,7 @@ sub process {
 sub restoreArgs {
     my ( $self, $req ) = @_;
     $req->mustRedirect(1);
-    return PE_OK;
+    PE_OK;
 }
 
 sub importHandlerData {
@@ -143,7 +143,6 @@ sub controlUrl {
         $req->data->{_url}  = $url;
         $req->pdata->{_url} = $url;
     }
-
     PE_OK;
 }
 
@@ -266,7 +265,6 @@ sub checkXSSAttack {
             "XSS attack detected (param: $name | value: $value)");
         return $self->conf->{checkXSS};
     }
-
     return 0;
 }
 
@@ -327,7 +325,6 @@ sub authenticate {
     # Ignore result, process will end at least with PE_BADCREDENTIALS
     my $tmp = $self->process($req);
     $ret = $tmp if ( $tmp == PE_WAIT );
-
     return $ret;
 }
 
@@ -349,7 +346,7 @@ sub setSessionInfo {
     my ( $self, $req ) = @_;
 
     # Set _user
-    $req->{sessionInfo}->{_user} //= $req->{user};
+    $req->{sessionInfo}->{_user} //= $req->user;
 
     # Get the current user module
     $req->{sessionInfo}->{_auth}   = $self->getModule( $req, "auth" );
@@ -382,7 +379,6 @@ sub setSessionInfo {
 
     # Call UserDB setSessionInfo
     return $self->_userDB->setSessionInfo($req);
-
     PE_OK;
 }
 
@@ -404,7 +400,7 @@ sub setPersistentSessionInfo {
     my ( $self, $req ) = @_;
 
     # Do not restore infos if session already opened
-    unless ( $req->{id} ) {
+    unless ( $req->id ) {
         my $key = $req->{sessionInfo}->{ $self->conf->{whatToTrace} };
 
         return PE_OK unless ( $key and length($key) );
@@ -450,7 +446,7 @@ sub store {
     $req->userData( $req->sessionInfo );
 
     # Create second session for unsecure cookie
-    if ( $self->conf->{securedCookie} == 2 and !$req->refresh() ) {
+    if ( $self->conf->{securedCookie} == 2 and !$req->refresh ) {
         my %infos = %{ $req->{sessionInfo} };
         $infos{_updateTime} = strftime( "%Y%m%d%H%M%S", localtime() );
         $self->logger->debug("Set _updateTime with $infos{_updateTime}");
@@ -479,22 +475,24 @@ sub store {
 
     # Main session
     my $session = $self->getApacheSession(
-        $req->{id},
+        $req->id,
         force => $req->{force},
         info  => $infos
     );
     return PE_APACHESESSIONERROR unless ($session);
-    $req->id( $session->{id} );
+
+    # Update current request
+    $req->id( $session->id );
+    $req->{sessionInfo}->{_session_id} = $session->{id};
 
     # Compute unsecured cookie value if needed
-    if ( $self->conf->{securedCookie} == 3 and !$req->refresh() ) {
+    if ( $self->conf->{securedCookie} == 3 and !$req->refresh ) {
         $req->{sessionInfo}->{_httpSession} =
-          $self->conf->{cipher}->encryptHex( $req->{id}, "http" );
+          $self->conf->{cipher}->encryptHex( $req->id, "http" );
         $self->logger->debug( " -> Compute unsecured cookie value : "
               . $req->{sessionInfo}->{_httpSession} );
     }
     $req->refresh(0);
-
     PE_OK;
 }
 
@@ -504,7 +502,7 @@ sub buildCookie {
         $req->addCookie(
             $self->cookie(
                 name   => $self->conf->{cookieName},
-                value  => $req->{id},
+                value  => $req->id,
                 domain => $self->conf->{domain},
                 secure => $self->conf->{securedCookie},
             )
diff --git a/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t b/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
index dc8e06c9c..01de2e3bc 100644
--- a/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
+++ b/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
@@ -26,7 +26,7 @@ my $client = LLNG::Manager::Test->new( {
             checkUserDisplayPersistentInfo => 0,
             checkUserDisplayEmptyValues    => 0,
             impersonationMergeSSOgroups    => 0,
-            checkUserHiddenAttributes      => '_loginHistory hGroups',
+            checkUserHiddenAttributes      => '_loginHistory hGroups _session_id',
             macros                         => {
                 test_impersonation => '"$testPrefix__user/$_user"',
                 _whatToTrace =>
diff --git a/lemonldap-ng-portal/t/68-Impersonation.t b/lemonldap-ng-portal/t/68-Impersonation.t
index 5866cdf00..abb4149ef 100644
--- a/lemonldap-ng-portal/t/68-Impersonation.t
+++ b/lemonldap-ng-portal/t/68-Impersonation.t
@@ -319,10 +319,12 @@ ok( $res->[2]->[0] =~ m%<td scope="row">test_impersonation</td>%,
   or explain( $res->[2]->[0], 'test_impersonation' );
 ok( $res->[2]->[0] =~ m%<td scope="row">rtyler/dwho</td>%, 'Found rtyler/dwo' )
   or explain( $res->[2]->[0], 'Found rtyler/dwo' );
-count(16);
+ok( $res->[2]->[0] =~ m%<td scope="row">_session_id</td>%, 'Found _session_id' )
+  or explain( $res->[2]->[0], 'Found _session_id' );
+count(17);
 
 my %attributes = map /<td scope="row">(.+)?<\/td>/g, $res->[2]->[0];
-ok( keys %attributes == 33, 'Found 33 attributes' )
+ok( keys %attributes == 34, 'Found 34 attributes' )
   or print STDERR "Missing attributes -> " . scalar %attributes;
 ok( $attributes{'_auth'} eq 'Demo', '_auth' )
   or print STDERR Dumper( \%attributes );
diff --git a/lemonldap-ng-portal/t/78-2F-Upgrade.t b/lemonldap-ng-portal/t/78-2F-Upgrade.t
index efbc70e81..c0f1001ae 100644
--- a/lemonldap-ng-portal/t/78-2F-Upgrade.t
+++ b/lemonldap-ng-portal/t/78-2F-Upgrade.t
@@ -140,25 +140,13 @@ ok(
     'Post code'
 );
 count(1);
-
-$pdata = expectCookie( $res, 'lemonldappdata' );
+expectRedirection( $res, 'http://test1.example.com' );
 $id    = expectCookie($res);
 
-expectRedirection( $res, 'http://test1.example.com' );
-
-# Make pdata was cleared and we aren't being redirected
-ok(
-    $res = $client->_get(
-        '/',
-        accept => 'text/html',
-        cookie => "lemonldap=$id;lemonldappdata=$pdata",
-    ),
-    'Post login'
-);
+my $cookies = getCookies($res);
+ok( !defined( $cookies->{lemonldappdata} ), " Make sure no pdata is returned" );
 count(1);
 
-expectOK($res);
-
 clean_sessions();
 
 done_testing( count() );

From d94f9748316033374b1173e31cf333c2bd0158cc Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 3 Jan 2020 13:28:31 +0100
Subject: [PATCH 55/60] Enable debug

---
 lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t b/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
index 250b8c156..df56988b2 100644
--- a/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
+++ b/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
@@ -11,7 +11,7 @@ count(1);
 
 my $client = LLNG::Manager::Test->new( {
         ini => {
-            logLevel              => 'error',
+            logLevel              => 'debug',
             mail2fActivation      => 1,
             mail2fCodeRegex       => '\d{4}',
             authentication        => 'Demo',

From 0f591496b40fdfa07215dde5d80b1dd86357b1b5 Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 3 Jan 2020 20:04:33 +0100
Subject: [PATCH 56/60] Update sessionInfo during auth process to improve
 handler in-memory sessions security & Improve unit tests

---
 lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm | 1 +
 lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t | 2 +-
 lemonldap-ng-portal/t/68-Impersonation.t                    | 6 ++++--
 .../{70-2F-TOTP-8.t => 70-2F-TOTP-8-with-global-storage.t}  | 1 +
 lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t      | 2 +-
 5 files changed, 8 insertions(+), 4 deletions(-)
 rename lemonldap-ng-portal/t/{70-2F-TOTP-8.t => 70-2F-TOTP-8-with-global-storage.t} (99%)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
index 0b1c8c2c8..8ca879a3f 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
@@ -484,6 +484,7 @@ sub store {
     # Update current request
     $req->id( $session->id );
     $req->{sessionInfo}->{_session_id} = $session->{id};
+    $req->{sessionInfo}->{_session_kind} = $session->{kind};
 
     # Compute unsecured cookie value if needed
     if ( $self->conf->{securedCookie} == 3 and !$req->refresh ) {
diff --git a/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t b/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
index 01de2e3bc..ec78df73e 100644
--- a/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
+++ b/lemonldap-ng-portal/t/68-Impersonation-with-doubleCookies.t
@@ -26,7 +26,7 @@ my $client = LLNG::Manager::Test->new( {
             checkUserDisplayPersistentInfo => 0,
             checkUserDisplayEmptyValues    => 0,
             impersonationMergeSSOgroups    => 0,
-            checkUserHiddenAttributes      => '_loginHistory hGroups _session_id',
+            checkUserHiddenAttributes      => '_loginHistory hGroups _session_id _session_kind',
             macros                         => {
                 test_impersonation => '"$testPrefix__user/$_user"',
                 _whatToTrace =>
diff --git a/lemonldap-ng-portal/t/68-Impersonation.t b/lemonldap-ng-portal/t/68-Impersonation.t
index abb4149ef..49423eae2 100644
--- a/lemonldap-ng-portal/t/68-Impersonation.t
+++ b/lemonldap-ng-portal/t/68-Impersonation.t
@@ -321,10 +321,12 @@ ok( $res->[2]->[0] =~ m%<td scope="row">rtyler/dwho</td>%, 'Found rtyler/dwo' )
   or explain( $res->[2]->[0], 'Found rtyler/dwo' );
 ok( $res->[2]->[0] =~ m%<td scope="row">_session_id</td>%, 'Found _session_id' )
   or explain( $res->[2]->[0], 'Found _session_id' );
-count(17);
+ok( $res->[2]->[0] =~ m%<td scope="row">_session_kind</td>%, 'Found _session_id' )
+  or explain( $res->[2]->[0], 'Found _session_kind' );
+count(18);
 
 my %attributes = map /<td scope="row">(.+)?<\/td>/g, $res->[2]->[0];
-ok( keys %attributes == 34, 'Found 34 attributes' )
+ok( keys %attributes == 35, 'Found 35 attributes' )
   or print STDERR "Missing attributes -> " . scalar %attributes;
 ok( $attributes{'_auth'} eq 'Demo', '_auth' )
   or print STDERR Dumper( \%attributes );
diff --git a/lemonldap-ng-portal/t/70-2F-TOTP-8.t b/lemonldap-ng-portal/t/70-2F-TOTP-8-with-global-storage.t
similarity index 99%
rename from lemonldap-ng-portal/t/70-2F-TOTP-8.t
rename to lemonldap-ng-portal/t/70-2F-TOTP-8-with-global-storage.t
index e0928e2cc..2e15c0b25 100644
--- a/lemonldap-ng-portal/t/70-2F-TOTP-8.t
+++ b/lemonldap-ng-portal/t/70-2F-TOTP-8-with-global-storage.t
@@ -25,6 +25,7 @@ SKIP: {
                 totp2fTTL              => -1,
                 formTimeout            => 120,
                 requireToken           => 1,
+                tokenUseGlobalStorage  => 1,
             }
         }
     );
diff --git a/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t b/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
index df56988b2..250b8c156 100644
--- a/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
+++ b/lemonldap-ng-portal/t/77-2F-Mail-with-global-storage.t
@@ -11,7 +11,7 @@ count(1);
 
 my $client = LLNG::Manager::Test->new( {
         ini => {
-            logLevel              => 'debug',
+            logLevel              => 'error',
             mail2fActivation      => 1,
             mail2fCodeRegex       => '\d{4}',
             authentication        => 'Demo',

From a48daee305224e18c059fa7672c7d128ebe142fe Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Fri, 3 Jan 2020 23:39:57 +0100
Subject: [PATCH 57/60] Update sessionInfo during auth process

---
 lemonldap-ng-portal/MANIFEST                  |  9 +++++--
 .../Lemonldap/NG/Portal/2F/Engines/Default.pm | 26 ++++++++++++-------
 .../lib/Lemonldap/NG/Portal/Main/Process.pm   |  9 ++++---
 ...orage.t => 41-Token-with-global-storage.t} |  0
 lemonldap-ng-portal/t/78-2F-Upgrade.t         |  2 +-
 5 files changed, 30 insertions(+), 16 deletions(-)
 rename lemonldap-ng-portal/t/{41-Token-Global-Storage.t => 41-Token-with-global-storage.t} (100%)

diff --git a/lemonldap-ng-portal/MANIFEST b/lemonldap-ng-portal/MANIFEST
index efdc1bef1..d74f0a430 100644
--- a/lemonldap-ng-portal/MANIFEST
+++ b/lemonldap-ng-portal/MANIFEST
@@ -47,6 +47,7 @@ lib/Lemonldap/NG/Portal/Auth/SSL.pm
 lib/Lemonldap/NG/Portal/Auth/Twitter.pm
 lib/Lemonldap/NG/Portal/Auth/WebID.pm
 lib/Lemonldap/NG/Portal/CDC.pm
+lib/Lemonldap/NG/Portal/CertificateResetByMail/LDAP.pm
 lib/Lemonldap/NG/Portal/Issuer/CAS.pm
 lib/Lemonldap/NG/Portal/Issuer/Get.pm
 lib/Lemonldap/NG/Portal/Issuer/OpenID.pm
@@ -101,6 +102,7 @@ lib/Lemonldap/NG/Portal/Password/REST.pm
 lib/Lemonldap/NG/Portal/Plugins/AutoSignin.pm
 lib/Lemonldap/NG/Portal/Plugins/BruteForceProtection.pm
 lib/Lemonldap/NG/Portal/Plugins/CDA.pm
+lib/Lemonldap/NG/Portal/Plugins/CertificateResetByMail.pm
 lib/Lemonldap/NG/Portal/Plugins/CheckState.pm
 lib/Lemonldap/NG/Portal/Plugins/CheckUser.pm
 lib/Lemonldap/NG/Portal/Plugins/ContextSwitching.pm
@@ -370,6 +372,7 @@ site/templates/bootstrap/2fchoice.tpl
 site/templates/bootstrap/2fregisters.tpl
 site/templates/bootstrap/captcha.tpl
 site/templates/bootstrap/casBack2Url.tpl
+site/templates/bootstrap/certificateReset.tpl
 site/templates/bootstrap/checklogins.tpl
 site/templates/bootstrap/checkuser.tpl
 site/templates/bootstrap/confirm.tpl
@@ -439,6 +442,7 @@ site/templates/common/mail/tr.json
 site/templates/common/mail/vi.json
 site/templates/common/mail/zh_CN.json
 site/templates/common/mail_2fcode.tpl
+site/templates/common/mail_certificatReset.tpl
 site/templates/common/mail_confirm.tpl
 site/templates/common/mail_footer.tpl
 site/templates/common/mail_header.tpl
@@ -565,7 +569,7 @@ t/40-Notifications-XML-DBI.t
 t/40-Notifications-XML-File.t
 t/40-Notifications-XML-Server.t
 t/41-Captcha.t
-t/41-Token-Global-Storage.t
+t/41-Token-with-global-storage.t
 t/41-Token.t
 t/42-Register-Demo-with-captcha.t
 t/42-Register-Demo-with-token.t
@@ -579,6 +583,7 @@ t/43-MailPasswordReset-LDAP.t
 t/43-MailPasswordReset-with-captcha.t
 t/43-MailPasswordReset-with-token.t
 t/43-MailPasswordReset.t
+t/44-CertificateResetByMail-LDAP.t
 t/50-IssuerGet.t
 t/57-GlobalLogout-without-Timer.t
 t/57-GlobalLogout.t
@@ -618,7 +623,7 @@ t/68-Impersonation-with-History.t
 t/68-Impersonation-with-merge.t
 t/68-Impersonation-with-TOTP.t
 t/68-Impersonation.t
-t/70-2F-TOTP-8.t
+t/70-2F-TOTP-8-with-global-storage.t
 t/70-2F-TOTP-with-History.t
 t/70-2F-TOTP-with-TTL-and-JSON.t
 t/70-2F-TOTP-with-TTL-and-XML.t
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
index e89fb2938..cffcf663c 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
@@ -21,7 +21,7 @@ use Lemonldap::NG::Portal::Main::Constants qw(
   PE_TOKENEXPIRED
 );
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.8';
 
 extends 'Lemonldap::NG::Portal::Main::Plugin';
 with 'Lemonldap::NG::Portal::Lib::OverConf';
@@ -266,15 +266,7 @@ sub run {
     }
 
     # Search for authorized modules for this user
-    my @am;
-    foreach my $m ( @{ $self->sfModules } ) {
-        $self->logger->debug(
-            'Looking if ' . $m->{m}->prefix . '2F is available' );
-        if ( $m->{r}->( $req, $req->sessionInfo ) ) {
-            $self->logger->debug(' -> OK');
-            push @am, $m->{m};
-        }
-    }
+    my @am = $self->searchForAuthorized2Fmodules($req);
 
     # If no 2F module is authorized, skipping 2F
     # Note that a rule may forbid access after (GrantSession plugin)
@@ -546,4 +538,18 @@ sub restoreSession {
       : $self->_displayRegister( $req, @path );
 }
 
+sub searchForAuthorized2Fmodules {
+    my ( $self, $req ) = @_;
+    my @am;
+    foreach my $m ( @{ $self->sfModules } ) {
+        $self->logger->debug(
+            'Looking if ' . $m->{m}->prefix . '2F is available' );
+        if ( $m->{r}->( $req, $req->sessionInfo ) ) {
+            $self->logger->debug(' -> OK');
+            push @am, $m->{m};
+        }
+    }
+    return @am;
+}
+
 1;
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
index 8ca879a3f..780428bf5 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
@@ -1,6 +1,6 @@
 package Lemonldap::NG::Portal::Main::Process;
 
-our $VERSION = '2.0.7';
+our $VERSION = '2.0.8';
 
 package Lemonldap::NG::Portal::Main;
 
@@ -483,8 +483,11 @@ sub store {
 
     # Update current request
     $req->id( $session->id );
-    $req->{sessionInfo}->{_session_id} = $session->{id};
-    $req->{sessionInfo}->{_session_kind} = $session->{kind};
+    unless ( $self->_sfEngine->searchForAuthorized2Fmodules($req) ) {
+        $self->logger->debug("No 2F module authorized -> Update current request");
+        $req->{sessionInfo}->{_session_id}   = $session->{id};
+        $req->{sessionInfo}->{_session_kind} = $session->{kind};
+    }
 
     # Compute unsecured cookie value if needed
     if ( $self->conf->{securedCookie} == 3 and !$req->refresh ) {
diff --git a/lemonldap-ng-portal/t/41-Token-Global-Storage.t b/lemonldap-ng-portal/t/41-Token-with-global-storage.t
similarity index 100%
rename from lemonldap-ng-portal/t/41-Token-Global-Storage.t
rename to lemonldap-ng-portal/t/41-Token-with-global-storage.t
diff --git a/lemonldap-ng-portal/t/78-2F-Upgrade.t b/lemonldap-ng-portal/t/78-2F-Upgrade.t
index c0f1001ae..07cf03830 100644
--- a/lemonldap-ng-portal/t/78-2F-Upgrade.t
+++ b/lemonldap-ng-portal/t/78-2F-Upgrade.t
@@ -144,7 +144,7 @@ expectRedirection( $res, 'http://test1.example.com' );
 $id    = expectCookie($res);
 
 my $cookies = getCookies($res);
-ok( !defined( $cookies->{lemonldappdata} ), " Make sure no pdata is returned" );
+ok( !$cookies->{lemonldappdata}, " Make sure no pdata is returned" );
 count(1);
 
 clean_sessions();

From 43245bbf36b93ff98f5ae49fe239d3dbf1b04532 Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Sat, 4 Jan 2020 08:21:38 +0100
Subject: [PATCH 58/60] Fix warnings

---
 .../lib/Lemonldap/NG/Portal/Main/Process.pm      | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
index 780428bf5..62560d2cd 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
@@ -318,7 +318,7 @@ sub authenticate {
     $req->steps( [
             'setSessionInfo',           'setMacros',
             'setPersistentSessionInfo', 'storeHistory',
-            @{ $self->afterData }, sub { PE_BADCREDENTIALS }
+            @{ $self->afterData },      sub { PE_BADCREDENTIALS }
         ]
     );
 
@@ -484,7 +484,8 @@ sub store {
     # Update current request
     $req->id( $session->id );
     unless ( $self->_sfEngine->searchForAuthorized2Fmodules($req) ) {
-        $self->logger->debug("No 2F module authorized -> Update current request");
+        $self->logger->debug(
+            "No 2F module authorized -> Update current request");
         $req->{sessionInfo}->{_session_id}   = $session->{id};
         $req->{sessionInfo}->{_session_kind} = $session->{kind};
     }
@@ -522,9 +523,14 @@ sub buildCookie {
             );
         }
     }
-    my $user_log = $req->{userData}->{ $self->conf->{whatToTrace} };
-    $self->userLogger->notice(
-"User $user_log successfully authenticated at level $req->{userData}->{authenticationLevel}"
+    my $ref = (
+        %{ $req->{sessionInfo} }
+        ? $req->{sessionInfo}
+        : $req->{userData}
+    );
+    $self->userLogger->notice( 'User '
+          . $ref->{ $self->conf->{whatToTrace} }
+          . " successfully authenticated at level $ref->{authenticationLevel}"
     );
     PE_OK;
 }

From 778ade2636d238eecbc75b7bef08c6993d074b58 Mon Sep 17 00:00:00 2001
From: Xavier Guimard <yadd@debian.org>
Date: Sat, 4 Jan 2020 08:40:20 +0100
Subject: [PATCH 59/60] Update prove states

---
 lemonldap-ng-common/.prove |  152 +-
 lemonldap-ng-portal/.prove | 2715 +++++++++++++++++++-----------------
 2 files changed, 1502 insertions(+), 1365 deletions(-)

diff --git a/lemonldap-ng-common/.prove b/lemonldap-ng-common/.prove
index a3b4eae1e..1e45b888f 100644
--- a/lemonldap-ng-common/.prove
+++ b/lemonldap-ng-common/.prove
@@ -1,116 +1,116 @@
 ---
-generation: 3
-last_run_time: 1568228253.60673
+generation: 4
+last_run_time: 1578123129.50232
 tests:
   t/01-Common-Conf.t:
-    elapsed: 0.0860559940338135
-    gen: 3
-    last_pass_time: 1568228253.51096
+    elapsed: 0.0778188705444336
+    gen: 4
+    last_pass_time: 1578123128.45887
     last_result: 0
-    last_run_time: 1568228253.51096
+    last_run_time: 1578123128.45887
     last_todo: 0
-    mtime: 1566161618
-    seq: 14
-    total_passes: 2
+    mtime: 1569964806
+    seq: 23
+    total_passes: 3
   t/02-Common-Conf-File.t:
-    elapsed: 0.0139250755310059
-    gen: 3
-    last_pass_time: 1568228253.60618
+    elapsed: 0.100058794021606
+    gen: 4
+    last_pass_time: 1578123128.56113
     last_result: 0
-    last_run_time: 1568228253.60618
+    last_run_time: 1578123128.56113
     last_todo: 0
     mtime: 1566161618
-    seq: 22
-    total_passes: 2
+    seq: 24
+    total_passes: 3
   t/03-Common-Conf-CDBI.t:
-    elapsed: 0.166121959686279
-    gen: 3
-    last_pass_time: 1568228253.58678
+    elapsed: 0.137683868408203
+    gen: 4
+    last_pass_time: 1578123128.70288
     last_result: 0
-    last_run_time: 1568228253.58678
+    last_run_time: 1578123128.70288
     last_todo: 0
-    mtime: 1567458069
-    seq: 19
-    total_passes: 2
+    mtime: 1569964806
+    seq: 25
+    total_passes: 3
   t/03-Common-Conf-RDBI.t:
-    elapsed: 0.187541961669922
-    gen: 3
-    last_pass_time: 1568228253.60138
+    elapsed: 0.177071094512939
+    gen: 4
+    last_pass_time: 1578123128.88517
     last_result: 0
-    last_run_time: 1568228253.60138
+    last_run_time: 1578123128.88517
     last_todo: 0
-    mtime: 1567458069
-    seq: 21
-    total_passes: 2
+    mtime: 1569964806
+    seq: 26
+    total_passes: 3
   t/05-Common-Conf-LDAP.t:
-    elapsed: 0.157251119613647
-    gen: 3
-    last_pass_time: 1568228253.57577
+    elapsed: 0.149403095245361
+    gen: 4
+    last_pass_time: 1578123129.0415
     last_result: 0
-    last_run_time: 1568228253.57577
+    last_run_time: 1578123129.0415
     last_todo: 0
-    mtime: 1566161616
-    seq: 16
-    total_passes: 2
+    mtime: 1569964806
+    seq: 27
+    total_passes: 3
   t/30-Common-Safelib.t:
-    elapsed: 0.0150928497314453
-    gen: 3
-    last_pass_time: 1568228253.58625
+    elapsed: 0.0528419017791748
+    gen: 4
+    last_pass_time: 1578123129.09654
     last_result: 0
-    last_run_time: 1568228253.58625
+    last_run_time: 1578123129.09654
     last_todo: 0
     mtime: 1566161617
-    seq: 18
-    total_passes: 2
+    seq: 28
+    total_passes: 3
   t/35-Common-Crypto.t:
-    elapsed: 0.0329771041870117
-    gen: 3
-    last_pass_time: 1568228253.46102
+    elapsed: 0.0592200756072998
+    gen: 4
+    last_pass_time: 1578123129.15818
     last_result: 0
-    last_run_time: 1568228253.46102
+    last_run_time: 1578123129.15818
     last_todo: 0
-    mtime: 1567541253
-    seq: 12
-    total_passes: 2
+    mtime: 1569964806
+    seq: 29
+    total_passes: 3
   t/36-Common-Regexp.t:
-    elapsed: 0.00531005859375
-    gen: 3
-    last_pass_time: 1568228253.59092
+    elapsed: 0.0458948612213135
+    gen: 4
+    last_pass_time: 1578123129.20648
     last_result: 0
-    last_run_time: 1568228253.59092
+    last_run_time: 1578123129.20648
     last_todo: 0
-    mtime: 1566161618
-    seq: 20
-    total_passes: 2
+    mtime: 1569964806
+    seq: 30
+    total_passes: 3
   t/40-Common-Session.t:
-    elapsed: 0.0833292007446289
-    gen: 3
-    last_pass_time: 1568228253.51475
+    elapsed: 0.0870401859283447
+    gen: 4
+    last_pass_time: 1578123129.29591
     last_result: 0
-    last_run_time: 1568228253.51475
+    last_run_time: 1578123129.29591
     last_todo: 0
-    mtime: 1566161618
-    seq: 15
-    total_passes: 2
+    mtime: 1569964806
+    seq: 31
+    total_passes: 3
   t/50-Combination-Parser.t:
-    elapsed: 0.0678761005401611
-    gen: 3
-    last_pass_time: 1568228253.50556
+    elapsed: 0.07663893699646
+    gen: 4
+    last_pass_time: 1578123129.37738
     last_result: 0
-    last_run_time: 1568228253.50556
+    last_run_time: 1578123129.37738
     last_todo: 0
-    mtime: 1566161617
-    seq: 13
-    total_passes: 2
+    mtime: 1569964806
+    seq: 32
+    total_passes: 3
   t/99-pod.t:
-    elapsed: 0.100279092788696
-    gen: 3
-    last_pass_time: 1568228253.57739
+    elapsed: 0.122200965881348
+    gen: 4
+    last_pass_time: 1578123129.50186
     last_result: 0
-    last_run_time: 1568228253.57739
+    last_run_time: 1578123129.50186
     last_todo: 0
     mtime: 1566161617
-    seq: 17
-    total_passes: 2
+    seq: 33
+    total_passes: 3
 version: 1
 ...
diff --git a/lemonldap-ng-portal/.prove b/lemonldap-ng-portal/.prove
index b6b866d84..63171a41f 100644
--- a/lemonldap-ng-portal/.prove
+++ b/lemonldap-ng-portal/.prove
@@ -1,1811 +1,1948 @@
 ---
-generation: 5
-last_run_time: 1568228183.2634
+generation: 6
+last_run_time: 1578123065.09077
 tests:
   t/01-AuthDemo.t:
-    elapsed: 0.201483964920044
-    gen: 5
-    last_pass_time: 1568228173.42789
+    elapsed: 0.271634101867676
+    gen: 6
+    last_pass_time: 1578122994.50867
     last_result: 0
-    last_run_time: 1568228173.42789
+    last_run_time: 1578122994.50867
     last_todo: 0
-    mtime: 1566945189
-    seq: 834
-    total_passes: 5
+    mtime: 1569964806
+    seq: 886
+    total_passes: 6
   t/01-CSP-and-CORS-headers.t:
-    elapsed: 0.14281702041626
-    gen: 5
-    last_pass_time: 1568228174.48656
+    elapsed: 0.262470006942749
+    gen: 6
+    last_pass_time: 1578122994.77351
     last_result: 0
-    last_run_time: 1568228174.48656
+    last_run_time: 1578122994.77351
     last_todo: 0
-    mtime: 1566882553
-    seq: 850
-    total_passes: 5
+    mtime: 1569964806
+    seq: 887
+    total_passes: 6
   t/01-pdata.t:
-    elapsed: 0.0861058235168457
-    gen: 5
-    last_pass_time: 1568228166.74587
+    elapsed: 0.215835094451904
+    gen: 6
+    last_pass_time: 1578122994.99172
     last_result: 0
-    last_run_time: 1568228166.74587
+    last_run_time: 1578122994.99172
     last_todo: 0
-    mtime: 1566161705
-    seq: 752
-    total_passes: 5
+    mtime: 1569964806
+    seq: 888
+    total_passes: 6
   t/02-Password-Demo-Local-Ppolicy.t:
-    elapsed: 7.13115000724792
-    gen: 5
-    last_pass_time: 1568228183.26112
+    elapsed: 0.239126920700073
+    gen: 6
+    last_pass_time: 1578122995.23335
     last_result: 0
-    last_run_time: 1568228183.26112
+    last_run_time: 1578122995.23335
     last_todo: 0
-    seq: 883
-    total_passes: 1
+    mtime: 1569964806
+    seq: 889
+    total_passes: 2
   t/02-Password-Demo.t:
-    elapsed: 0.154594898223877
-    gen: 5
-    last_pass_time: 1568228174.12381
+    elapsed: 0.250504970550537
+    gen: 6
+    last_pass_time: 1578122995.48645
     last_result: 0
-    last_run_time: 1568228174.12381
+    last_run_time: 1578122995.48645
     last_todo: 0
-    mtime: 1566161694
-    seq: 844
-    total_passes: 5
+    mtime: 1569964806
+    seq: 890
+    total_passes: 6
   t/03-ConfTimeout.t:
-    elapsed: 7.06811094284058
-    gen: 5
-    last_pass_time: 1568228183.2567
+    elapsed: 2.17188096046448
+    gen: 6
+    last_pass_time: 1578122997.66078
     last_result: 0
-    last_run_time: 1568228183.2567
+    last_run_time: 1578122997.66078
     last_todo: 0
-    seq: 881
-    total_passes: 1
+    mtime: 1576734087
+    seq: 891
+    total_passes: 2
   t/03-SessionTimeout.t:
-    elapsed: 6.05857610702515
-    gen: 5
-    last_pass_time: 1568228183.26182
+    elapsed: 7.2115159034729
+    gen: 6
+    last_pass_time: 1578123004.87466
     last_result: 0
-    last_run_time: 1568228183.26182
+    last_run_time: 1578123004.87466
     last_todo: 0
-    seq: 884
-    total_passes: 1
+    mtime: 1569964806
+    seq: 892
+    total_passes: 2
   t/03-XSS-protection.t:
-    elapsed: 0.176295042037964
-    gen: 5
-    last_pass_time: 1568228173.67167
+    elapsed: 0.287785053253174
+    gen: 6
+    last_pass_time: 1578123005.16541
     last_result: 0
-    last_run_time: 1568228173.67167
+    last_run_time: 1578123005.16541
     last_todo: 0
-    mtime: 1566326760
-    seq: 837
-    total_passes: 5
+    mtime: 1569964806
+    seq: 893
+    total_passes: 6
   t/04-language-selection.t:
-    elapsed: 0.156617164611816
-    gen: 5
-    last_pass_time: 1568228175.08393
+    elapsed: 0.252213954925537
+    gen: 6
+    last_pass_time: 1578123005.42016
     last_result: 0
-    last_run_time: 1568228175.08393
+    last_run_time: 1578123005.42016
     last_todo: 0
-    mtime: 1566161676
-    seq: 860
-    total_passes: 5
+    mtime: 1569964806
+    seq: 894
+    total_passes: 6
   t/19-Auth-Null.t:
-    elapsed: 1.07969284057617
-    gen: 5
-    last_pass_time: 1568228177.20487
+    elapsed: 0.225163221359253
+    gen: 6
+    last_pass_time: 1578123005.64773
     last_result: 0
-    last_run_time: 1568228177.20487
+    last_run_time: 1578123005.64773
     last_todo: 0
-    mtime: 1566161699
-    seq: 879
-    total_passes: 5
+    mtime: 1569964806
+    seq: 895
+    total_passes: 6
   t/20-Auth-DBI-utf8.t:
-    elapsed: 0.128947973251343
-    gen: 5
-    last_pass_time: 1568228174.92249
+    elapsed: 0.252760887145996
+    gen: 6
+    last_pass_time: 1578123006.54723
     last_result: 0
-    last_run_time: 1568228174.92249
+    last_run_time: 1578123006.54723
     last_todo: 0
-    mtime: 1567458069
-    seq: 858
-    total_passes: 5
+    mtime: 1574978407
+    seq: 898
+    total_passes: 6
   t/20-Auth-and-password-DBI-dynamic-hash.t:
-    elapsed: 0.251380920410156
-    gen: 5
-    last_pass_time: 1568228172.91653
+    elapsed: 0.343638896942139
+    gen: 6
+    last_pass_time: 1578123005.99386
     last_result: 0
-    last_run_time: 1568228172.91653
+    last_run_time: 1578123005.99386
     last_todo: 0
-    mtime: 1567458069
-    seq: 827
-    total_passes: 5
+    mtime: 1569964806
+    seq: 896
+    total_passes: 6
   t/20-Auth-and-password-DBI.t:
-    elapsed: 0.194665908813477
-    gen: 5
-    last_pass_time: 1568228173.80602
+    elapsed: 0.29577112197876
+    gen: 6
+    last_pass_time: 1578123006.29205
     last_result: 0
-    last_run_time: 1568228173.80602
+    last_run_time: 1578123006.29205
     last_todo: 0
-    mtime: 1567458069
-    seq: 840
-    total_passes: 5
+    mtime: 1569964806
+    seq: 897
+    total_passes: 6
   t/21-Auth-LDAP-Policy.t:
-    elapsed: 0.0210421085357666
-    gen: 5
-    last_pass_time: 1568228175.70071
+    elapsed: 0.164458990097046
+    gen: 6
+    last_pass_time: 1578123006.8797
     last_result: 0
-    last_run_time: 1568228175.70071
+    last_run_time: 1578123006.8797
     last_todo: 0
-    mtime: 1566161698
-    seq: 870
-    total_passes: 5
+    mtime: 1569964806
+    seq: 900
+    total_passes: 6
   t/21-Auth-LDAP-utf8.t:
-    elapsed: 0.0184540748596191
-    gen: 5
-    last_pass_time: 1568228175.81121
+    elapsed: 0.162216901779175
+    gen: 6
+    last_pass_time: 1578123007.04413
     last_result: 0
-    last_run_time: 1568228175.81121
+    last_run_time: 1578123007.04413
     last_todo: 0
-    mtime: 1566161697
-    seq: 873
-    total_passes: 5
+    mtime: 1569964806
+    seq: 901
+    total_passes: 6
   t/21-Auth-and-password-LDAP.t:
-    elapsed: 0.016232967376709
-    gen: 5
-    last_pass_time: 1568228175.88832
+    elapsed: 0.163347005844116
+    gen: 6
+    last_pass_time: 1578123006.71305
     last_result: 0
-    last_run_time: 1568228175.88832
+    last_run_time: 1578123006.71305
     last_todo: 0
-    mtime: 1566161703
-    seq: 875
-    total_passes: 5
+    mtime: 1576045451
+    seq: 899
+    total_passes: 6
   t/22-Auth-and-password-AD.t:
-    elapsed: 0.0121150016784668
-    gen: 5
-    last_pass_time: 1568228175.76885
+    elapsed: 0.161330938339233
+    gen: 6
+    last_pass_time: 1578123007.20767
     last_result: 0
-    last_run_time: 1568228175.76885
+    last_run_time: 1578123007.20767
     last_todo: 0
-    mtime: 1566161686
-    seq: 871
-    total_passes: 5
+    mtime: 1569964806
+    seq: 902
+    total_passes: 6
   t/23-Auth-and-password-REST.t:
-    elapsed: 0.145652055740356
-    gen: 5
-    last_pass_time: 1568228173.27053
+    elapsed: 0.267560005187988
+    gen: 6
+    last_pass_time: 1578123007.47744
     last_result: 0
-    last_run_time: 1568228173.27053
+    last_run_time: 1578123007.47744
     last_todo: 0
-    mtime: 1566161697
-    seq: 831
-    total_passes: 5
+    mtime: 1569964806
+    seq: 903
+    total_passes: 6
   t/24-AuthApache.t:
-    elapsed: 0.0806031227111816
-    gen: 5
-    last_pass_time: 1568228175.45563
+    elapsed: 0.213379144668579
+    gen: 6
+    last_pass_time: 1578123007.69324
     last_result: 0
-    last_run_time: 1568228175.45563
+    last_run_time: 1578123007.69324
     last_todo: 0
-    mtime: 1566161679
-    seq: 867
-    total_passes: 5
+    mtime: 1569964806
+    seq: 904
+    total_passes: 6
   t/24-AuthKerberos.t:
-    elapsed: 0.138118028640747
-    gen: 5
-    last_pass_time: 1568228155.91663
+    elapsed: 0.245916843414307
+    gen: 6
+    last_pass_time: 1578123007.94172
     last_result: 0
-    last_run_time: 1568228155.91663
+    last_run_time: 1578123007.94172
     last_todo: 0
-    mtime: 1566161710
-    seq: 724
-    total_passes: 5
-  t/25-AuthSlave.t:
-    elapsed: 0.0728468894958496
-    gen: 5
-    last_pass_time: 1568228167.12953
+    mtime: 1569964806
+    seq: 905
+    total_passes: 6
+  t/25-AuthSlave-with-Choice.t:
+    elapsed: 0.221746921539307
+    gen: 6
+    last_pass_time: 1578123008.16588
     last_result: 0
-    last_run_time: 1568228167.12953
+    last_run_time: 1578123008.16588
     last_todo: 0
-    mtime: 1566161682
-    seq: 758
-    total_passes: 5
+    seq: 906
+    total_passes: 1
+  t/25-AuthSlave-with-Credentials.t:
+    elapsed: 0.213104963302612
+    gen: 6
+    last_pass_time: 1578123008.38148
+    last_result: 0
+    last_run_time: 1578123008.38148
+    last_todo: 0
+    seq: 907
+    total_passes: 1
   t/26-AuthRemote.t:
-    elapsed: 0.0801920890808105
-    gen: 5
-    last_pass_time: 1568228167.17573
+    elapsed: 0.221351861953735
+    gen: 6
+    last_pass_time: 1578123008.60534
     last_result: 0
-    last_run_time: 1568228167.17573
+    last_run_time: 1578123008.60534
     last_todo: 0
-    mtime: 1566161695
-    seq: 759
-    total_passes: 5
+    mtime: 1569964806
+    seq: 908
+    total_passes: 6
   t/27-AuthProxy.t:
-    elapsed: 0.0125830173492432
-    gen: 5
-    last_pass_time: 1568228176.0389
+    elapsed: 0.166851997375488
+    gen: 6
+    last_pass_time: 1578123008.77554
     last_result: 0
-    last_run_time: 1568228176.0389
+    last_run_time: 1578123008.77554
     last_todo: 0
-    mtime: 1566161694
-    seq: 876
-    total_passes: 5
+    mtime: 1569964806
+    seq: 909
+    total_passes: 6
   t/28-AuthChoice-and-password.t:
-    elapsed: 0.0377869606018066
-    gen: 5
-    last_pass_time: 1568228176.12092
+    elapsed: 0.172008991241455
+    gen: 6
+    last_pass_time: 1578123008.94975
     last_result: 0
-    last_run_time: 1568228176.12092
+    last_run_time: 1578123008.94975
     last_todo: 0
-    mtime: 1567545352
-    seq: 877
-    total_passes: 5
+    mtime: 1576734087
+    seq: 910
+    total_passes: 6
   t/28-AuthChoice-with-captcha.t:
-    elapsed: 0.528061866760254
-    gen: 5
-    last_pass_time: 1568228170.4657
+    elapsed: 0.419918060302734
+    gen: 6
+    last_pass_time: 1578123009.37433
     last_result: 0
-    last_run_time: 1568228170.4657
+    last_run_time: 1578123009.37433
     last_todo: 0
-    mtime: 1567545352
-    seq: 795
-    total_passes: 5
+    mtime: 1577635709
+    seq: 911
+    total_passes: 6
+  t/28-AuthChoice-with-over.t:
+    elapsed: 0.258544921875
+    gen: 6
+    last_pass_time: 1578123009.63529
+    last_result: 0
+    last_run_time: 1578123009.63529
+    last_todo: 0
+    seq: 912
+    total_passes: 1
   t/28-AuthChoice-with-rules.t:
-    elapsed: 0.222440958023071
-    gen: 5
-    last_pass_time: 1568228173.31791
+    elapsed: 0.290940999984741
+    gen: 6
+    last_pass_time: 1578123009.92869
     last_result: 0
-    last_run_time: 1568228173.31791
+    last_run_time: 1578123009.92869
     last_todo: 0
-    mtime: 1567458069
-    seq: 833
-    total_passes: 5
+    mtime: 1577275903
+    seq: 913
+    total_passes: 6
   t/28-AuthChoice-with-token.t:
-    elapsed: 0.166407108306885
-    gen: 5
-    last_pass_time: 1568228173.9086
+    elapsed: 0.262848138809204
+    gen: 6
+    last_pass_time: 1578123010.19406
     last_result: 0
-    last_run_time: 1568228173.9086
+    last_run_time: 1578123010.19406
     last_todo: 0
-    mtime: 1567545352
-    seq: 841
-    total_passes: 5
+    mtime: 1576734087
+    seq: 914
+    total_passes: 6
   t/29-AuthGPG.t:
-    elapsed: 0.204419136047363
-    gen: 5
-    last_pass_time: 1568228173.29355
+    elapsed: 0.286309957504272
+    gen: 6
+    last_pass_time: 1578123010.48277
     last_result: 0
-    last_run_time: 1568228173.29355
+    last_run_time: 1578123010.48277
     last_todo: 0
-    mtime: 1566161680
-    seq: 832
-    total_passes: 5
+    mtime: 1569964806
+    seq: 915
+    total_passes: 6
   t/29-AuthSSL.t:
-    elapsed: 0.123324871063232
-    gen: 5
-    last_pass_time: 1568228155.94014
+    elapsed: 0.231581926345825
+    gen: 6
+    last_pass_time: 1578123010.71687
     last_result: 0
-    last_run_time: 1568228155.94014
+    last_run_time: 1578123010.71687
     last_todo: 0
-    mtime: 1567458069
-    seq: 725
-    total_passes: 5
+    mtime: 1569964806
+    seq: 916
+    total_passes: 6
   t/30-Auth-SAML-with-choice.t:
-    elapsed: 0.27305793762207
-    gen: 5
-    last_pass_time: 1568228169.23296
+    elapsed: 0.357311010360718
+    gen: 6
+    last_pass_time: 1578123014.86296
     last_result: 0
-    last_run_time: 1568228169.23296
+    last_run_time: 1578123014.86296
     last_todo: 0
-    mtime: 1566161688
-    seq: 781
-    total_passes: 5
+    mtime: 1576045451
+    seq: 927
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Artifact-with-SOAP-SLO-IdP-initiated.t:
-    elapsed: 0.360746145248413
-    gen: 5
-    last_pass_time: 1568228169.79075
+    elapsed: 0.379491806030273
+    gen: 6
+    last_pass_time: 1578123011.09889
     last_result: 0
-    last_run_time: 1568228169.79075
+    last_run_time: 1578123011.09889
     last_todo: 0
-    mtime: 1566161699
-    seq: 786
-    total_passes: 5
+    mtime: 1576045451
+    seq: 917
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Artifact-with-SOAP-SLO.t:
-    elapsed: 3.39385390281677
-    gen: 5
-    last_pass_time: 1568228159.19119
+    elapsed: 0.383852005004883
+    gen: 6
+    last_pass_time: 1578123011.48539
     last_result: 0
-    last_run_time: 1568228159.19119
+    last_run_time: 1578123011.48539
     last_todo: 0
-    mtime: 1566161705
-    seq: 727
-    total_passes: 5
+    mtime: 1576045451
+    seq: 918
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Metadata.t:
-    elapsed: 0.135477066040039
-    gen: 5
-    last_pass_time: 1568228172.83023
+    elapsed: 0.255299091339111
+    gen: 6
+    last_pass_time: 1578123011.74322
     last_result: 0
-    last_run_time: 1568228172.83023
+    last_run_time: 1578123011.74322
     last_todo: 0
-    mtime: 1566326739
-    seq: 826
-    total_passes: 5
+    mtime: 1569964806
+    seq: 919
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-POST-IdP-initiated.t:
-    elapsed: 0.360734939575195
-    gen: 5
-    last_pass_time: 1568228169.19232
+    elapsed: 0.368577003479004
+    gen: 6
+    last_pass_time: 1578123012.11422
     last_result: 0
-    last_run_time: 1568228169.19232
+    last_run_time: 1578123012.11422
     last_todo: 0
-    mtime: 1566161687
-    seq: 780
-    total_passes: 5
+    mtime: 1576045451
+    seq: 920
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-POST-Missing-SLO.t:
-    elapsed: 0.482270002365112
-    gen: 5
-    last_pass_time: 1568228168.42655
+    elapsed: 0.39254903793335
+    gen: 6
+    last_pass_time: 1578123012.50929
     last_result: 0
-    last_run_time: 1568228168.42655
+    last_run_time: 1578123012.50929
     last_todo: 0
-    mtime: 1567545352
-    seq: 770
-    total_passes: 5
+    mtime: 1576734087
+    seq: 921
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-POST.t:
-    elapsed: 0.471312046051025
-    gen: 5
-    last_pass_time: 1568228167.95509
+    elapsed: 0.387660980224609
+    gen: 6
+    last_pass_time: 1578123012.89949
     last_result: 0
-    last_run_time: 1568228167.95509
+    last_run_time: 1578123012.89949
     last_todo: 0
-    mtime: 1566161677
-    seq: 767
-    total_passes: 5
+    mtime: 1576045451
+    seq: 922
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Redirect-IdP-initiated.t:
-    elapsed: 0.336291074752808
-    gen: 5
-    last_pass_time: 1568228169.82952
+    elapsed: 0.350157022476196
+    gen: 6
+    last_pass_time: 1578123013.25211
     last_result: 0
-    last_run_time: 1568228169.82952
+    last_run_time: 1578123013.25211
     last_todo: 0
-    mtime: 1566161687
-    seq: 787
-    total_passes: 5
+    mtime: 1576045451
+    seq: 923
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Redirect-MultipleSP-Missing-SLO.t:
-    elapsed: 0.518467903137207
-    gen: 5
-    last_pass_time: 1568228167.62165
+    elapsed: 0.414432048797607
+    gen: 6
+    last_pass_time: 1578123013.6691
     last_result: 0
-    last_run_time: 1568228167.62165
+    last_run_time: 1578123013.6691
     last_todo: 0
-    mtime: 1567545352
-    seq: 762
-    total_passes: 5
+    mtime: 1576734087
+    seq: 924
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Redirect-MultipleSP.t:
-    elapsed: 0.300488948822021
-    gen: 5
-    last_pass_time: 1568228166.32106
+    elapsed: 0.436593055725098
+    gen: 6
+    last_pass_time: 1578123014.10825
     last_result: 0
-    last_run_time: 1568228166.32106
+    last_run_time: 1578123014.10825
     last_todo: 0
-    mtime: 1566161708
-    seq: 749
-    total_passes: 5
+    mtime: 1576045451
+    seq: 925
+    total_passes: 6
   t/30-Auth-and-issuer-SAML-Redirect.t:
-    elapsed: 0.445698976516724
-    gen: 5
-    last_pass_time: 1568228168.8275
+    elapsed: 0.392395973205566
+    gen: 6
+    last_pass_time: 1578123014.50316
     last_result: 0
-    last_run_time: 1568228168.8275
+    last_run_time: 1578123014.50316
     last_todo: 0
-    mtime: 1566161676
-    seq: 776
-    total_passes: 5
+    mtime: 1576045451
+    seq: 926
+    total_passes: 6
   t/30-CDC.t:
-    elapsed: 0.41904091835022
-    gen: 5
-    last_pass_time: 1568228168.68878
+    elapsed: 0.379366159439087
+    gen: 6
+    last_pass_time: 1578123015.24485
     last_result: 0
-    last_run_time: 1568228168.68878
+    last_run_time: 1578123015.24485
     last_todo: 0
-    mtime: 1566161684
-    seq: 775
-    total_passes: 5
+    mtime: 1574978407
+    seq: 928
+    total_passes: 6
   t/30-SAML-Head-to-Tail-POST.t:
-    elapsed: 0.462500810623169
-    gen: 5
-    last_pass_time: 1568228168.47812
+    elapsed: 0.393574953079224
+    gen: 6
+    last_pass_time: 1578123015.64095
     last_result: 0
-    last_run_time: 1568228168.47812
+    last_run_time: 1578123015.64095
     last_todo: 0
-    mtime: 1566161715
-    seq: 772
-    total_passes: 5
+    mtime: 1576045451
+    seq: 929
+    total_passes: 6
+  t/30-SAML-Macros.t:
+    elapsed: 0.295362949371338
+    gen: 6
+    last_pass_time: 1578123015.93885
+    last_result: 0
+    last_run_time: 1578123015.93885
+    last_todo: 0
+    seq: 930
+    total_passes: 1
   t/30-SAML-POST-Logout-when-expired.t:
-    elapsed: 8.17513680458069
-    gen: 5
-    last_pass_time: 1568228155.51217
+    elapsed: 0.399522066116333
+    gen: 6
+    last_pass_time: 1578123016.34091
     last_result: 0
-    last_run_time: 1568228155.51217
+    last_run_time: 1578123016.34091
     last_todo: 0
-    mtime: 1566161690
-    seq: 720
-    total_passes: 5
+    mtime: 1576045451
+    seq: 931
+    total_passes: 6
+  t/30-SAML-POST-with-2F-and-Notification.t:
+    elapsed: 0.4684898853302
+    gen: 6
+    last_pass_time: 1578123016.81194
+    last_result: 0
+    last_run_time: 1578123016.81194
+    last_todo: 0
+    seq: 932
+    total_passes: 1
   t/30-SAML-POST-with-Notification.t:
-    elapsed: 0.455055952072144
-    gen: 5
-    last_pass_time: 1568228167.89022
+    elapsed: 0.397378921508789
+    gen: 6
+    last_pass_time: 1578123017.21189
     last_result: 0
-    last_run_time: 1568228167.89022
+    last_run_time: 1578123017.21189
     last_todo: 0
-    mtime: 1567458069
-    seq: 766
-    total_passes: 5
+    mtime: 1576045451
+    seq: 933
+    total_passes: 6
   t/30-SAML-ReAuth-with-choice.t:
-    elapsed: 3.44073390960693
-    gen: 5
-    last_pass_time: 1568228175.22471
+    elapsed: 0.40729022026062
+    gen: 6
+    last_pass_time: 1578123017.98179
     last_result: 0
-    last_run_time: 1568228175.22471
+    last_run_time: 1578123017.98179
     last_todo: 0
-    mtime: 1567458069
-    seq: 863
-    total_passes: 5
+    mtime: 1576045451
+    seq: 935
+    total_passes: 6
   t/30-SAML-ReAuth.t:
-    elapsed: 0.362184047698975
-    gen: 5
-    last_pass_time: 1568228159.55012
+    elapsed: 0.357448816299438
+    gen: 6
+    last_pass_time: 1578123017.5719
     last_result: 0
-    last_run_time: 1568228159.55012
+    last_run_time: 1578123017.5719
     last_todo: 0
-    mtime: 1566161708
-    seq: 734
-    total_passes: 5
+    mtime: 1576045451
+    seq: 934
+    total_passes: 6
   t/30-SAML-SP-rule.t:
-    elapsed: 11.1243231296539
-    gen: 5
-    last_pass_time: 1568228147.03872
+    elapsed: 0.335637092590332
+    gen: 6
+    last_pass_time: 1578123018.31998
     last_result: 0
-    last_run_time: 1568228147.03872
+    last_run_time: 1578123018.31998
     last_todo: 0
-    mtime: 1566161696
-    seq: 707
-    total_passes: 5
+    mtime: 1574978407
+    seq: 936
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-Logout-20.t:
-    elapsed: 8.13948917388916
-    gen: 5
-    last_pass_time: 1568228155.49557
+    elapsed: 0.32501482963562
+    gen: 6
+    last_pass_time: 1578123020.20119
     last_result: 0
-    last_run_time: 1568228155.49557
+    last_run_time: 1578123020.20119
     last_todo: 0
-    mtime: 1566161678
-    seq: 717
-    total_passes: 5
+    mtime: 1569964806
+    seq: 942
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-Logout-30.t:
-    elapsed: 0.302481889724731
-    gen: 5
-    last_pass_time: 1568228171.70109
+    elapsed: 0.325326919555664
+    gen: 6
+    last_pass_time: 1578123020.52903
     last_result: 0
-    last_run_time: 1568228171.70109
+    last_run_time: 1578123020.52903
     last_todo: 0
-    mtime: 1566161702
-    seq: 810
-    total_passes: 5
+    mtime: 1569964806
+    seq: 943
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-XSS-on-logout.t:
-    elapsed: 0.288188934326172
-    gen: 5
-    last_pass_time: 1568228166.87455
+    elapsed: 0.325803995132446
+    gen: 6
+    last_pass_time: 1578123021.92729
     last_result: 0
-    last_run_time: 1568228166.87455
+    last_run_time: 1578123021.92729
     last_todo: 0
-    mtime: 1566161684
-    seq: 756
-    total_passes: 5
+    mtime: 1569964806
+    seq: 947
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-declared-app-userattr.t:
-    elapsed: 0.367727041244507
-    gen: 5
-    last_pass_time: 1568228171.34585
+    elapsed: 0.339231967926025
+    gen: 6
+    last_pass_time: 1578123019.27911
     last_result: 0
-    last_run_time: 1568228171.34585
+    last_run_time: 1578123019.27911
     last_todo: 0
-    mtime: 1566161683
-    seq: 804
-    total_passes: 5
+    mtime: 1569964806
+    seq: 939
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-declared-app.t:
-    elapsed: 0.366064071655273
-    gen: 5
-    last_pass_time: 1568228171.07004
+    elapsed: 0.336956024169922
+    gen: 6
+    last_pass_time: 1578123018.93739
     last_result: 0
-    last_run_time: 1568228171.07004
+    last_run_time: 1578123018.93739
     last_todo: 0
-    mtime: 1566161684
-    seq: 802
-    total_passes: 5
+    mtime: 1569964806
+    seq: 938
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-declared-apps.t:
-    elapsed: 11.1181359291077
-    gen: 5
-    last_pass_time: 1568228147.03145
+    elapsed: 0.275471210479736
+    gen: 6
+    last_pass_time: 1578123018.59794
     last_result: 0
-    last_run_time: 1568228147.03145
+    last_run_time: 1578123018.59794
     last_todo: 0
-    mtime: 1566161713
-    seq: 705
-    total_passes: 5
+    mtime: 1577275903
+    seq: 937
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-default.t:
-    elapsed: 0.311614036560059
-    gen: 5
-    last_pass_time: 1568228171.79113
+    elapsed: 0.326534032821655
+    gen: 6
+    last_pass_time: 1578123019.60815
     last_result: 0
-    last_run_time: 1568228171.79113
+    last_run_time: 1578123019.60815
     last_todo: 0
-    mtime: 1566161711
-    seq: 811
-    total_passes: 5
+    mtime: 1569964806
+    seq: 940
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-gateway.t:
-    elapsed: 0.175447940826416
-    gen: 5
-    last_pass_time: 1568228173.79617
+    elapsed: 0.263005018234253
+    gen: 6
+    last_pass_time: 1578123019.87368
     last_result: 0
-    last_run_time: 1568228173.79617
+    last_run_time: 1578123019.87368
     last_todo: 0
-    mtime: 1566161679
-    seq: 839
-    total_passes: 5
+    mtime: 1569964806
+    seq: 941
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-proxied.t:
-    elapsed: 0.319927930831909
-    gen: 5
-    last_pass_time: 1568228171.46193
+    elapsed: 0.355028867721558
+    gen: 6
+    last_pass_time: 1578123020.88657
     last_result: 0
-    last_run_time: 1568228171.46193
+    last_run_time: 1578123020.88657
     last_todo: 0
-    mtime: 1566161676
-    seq: 805
-    total_passes: 5
+    mtime: 1569964806
+    seq: 944
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-with-choice-and-cancel.t:
-    elapsed: 0.264619827270508
-    gen: 5
-    last_pass_time: 1568228172.26761
+    elapsed: 0.311284065246582
+    gen: 6
+    last_pass_time: 1578123021.20036
     last_result: 0
-    last_run_time: 1568228172.26761
+    last_run_time: 1578123021.20036
     last_todo: 0
-    mtime: 1567458069
-    seq: 817
-    total_passes: 5
+    mtime: 1569964806
+    seq: 945
+    total_passes: 6
   t/31-Auth-and-issuer-CAS-with-choice.t:
-    elapsed: 0.380188941955566
-    gen: 5
-    last_pass_time: 1568228169.61647
+    elapsed: 0.396142959594727
+    gen: 6
+    last_pass_time: 1578123021.59896
     last_result: 0
-    last_run_time: 1568228169.61647
+    last_run_time: 1578123021.59896
     last_todo: 0
-    mtime: 1567458069
-    seq: 783
-    total_passes: 5
+    mtime: 1569964806
+    seq: 946
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-authorization_code-OP-logout.t:
-    elapsed: 0.305024862289429
-    gen: 5
-    last_pass_time: 1568228167.33387
+    elapsed: 0.318739891052246
+    gen: 6
+    last_pass_time: 1578123022.24855
     last_result: 0
-    last_run_time: 1568228167.33387
+    last_run_time: 1578123022.24855
     last_todo: 0
-    mtime: 1566161685
-    seq: 761
-    total_passes: 5
+    mtime: 1576734098
+    seq: 948
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-authorization_code-public_client.t:
-    elapsed: 0.320050001144409
-    gen: 5
-    last_pass_time: 1568228170.804
+    elapsed: 0.347721099853516
+    gen: 6
+    last_pass_time: 1578123022.59883
     last_result: 0
-    last_run_time: 1568228170.804
+    last_run_time: 1578123022.59883
     last_todo: 0
-    mtime: 1566161690
-    seq: 798
-    total_passes: 5
+    mtime: 1576734098
+    seq: 949
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-authorization_code-with-authchoice.t:
-    elapsed: 0.331650972366333
-    gen: 5
-    last_pass_time: 1568228170.79031
+    elapsed: 0.364073038101196
+    gen: 6
+    last_pass_time: 1578123023.30737
     last_result: 0
-    last_run_time: 1568228170.79031
+    last_run_time: 1578123023.30737
     last_todo: 0
-    mtime: 1567458069
-    seq: 797
-    total_passes: 5
+    mtime: 1576734098
+    seq: 951
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-authorization_code-with-none-alg.t:
-    elapsed: 0.398397207260132
-    gen: 5
-    last_pass_time: 1568228171.16525
+    elapsed: 0.339215040206909
+    gen: 6
+    last_pass_time: 1578123023.64914
     last_result: 0
-    last_run_time: 1568228171.16525
+    last_run_time: 1578123023.64914
     last_todo: 0
-    mtime: 1566161710
-    seq: 803
-    total_passes: 5
+    mtime: 1576734098
+    seq: 952
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-authorization_code.t:
-    elapsed: 0.334026098251343
-    gen: 5
-    last_pass_time: 1568228170.9456
+    elapsed: 0.339339971542358
+    gen: 6
+    last_pass_time: 1578123022.94074
     last_result: 0
-    last_run_time: 1568228170.9456
+    last_run_time: 1578123022.94074
     last_todo: 0
-    mtime: 1566161712
-    seq: 800
-    total_passes: 5
+    mtime: 1576734098
+    seq: 950
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-hybrid.t:
-    elapsed: 0.306451797485352
-    gen: 5
-    last_pass_time: 1568228175.80321
+    elapsed: 0.325355052947998
+    gen: 6
+    last_pass_time: 1578123023.97703
     last_result: 0
-    last_run_time: 1568228175.80321
+    last_run_time: 1578123023.97703
     last_todo: 0
-    mtime: 1566326739
-    seq: 872
-    total_passes: 5
+    mtime: 1576734098
+    seq: 953
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-implicit-no-token.t:
-    elapsed: 0.321050882339478
-    gen: 5
-    last_pass_time: 1568228171.61383
+    elapsed: 0.33293604850769
+    gen: 6
+    last_pass_time: 1578123024.3125
     last_result: 0
-    last_run_time: 1568228171.61383
+    last_run_time: 1578123024.3125
     last_todo: 0
-    mtime: 1566326739
-    seq: 807
-    total_passes: 5
+    mtime: 1576734098
+    seq: 954
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-implicit.t:
-    elapsed: 0.329270124435425
-    gen: 5
-    last_pass_time: 1568228171.68525
+    elapsed: 0.334964990615845
+    gen: 6
+    last_pass_time: 1578123024.64994
     last_result: 0
-    last_run_time: 1568228171.68525
+    last_run_time: 1578123024.64994
     last_todo: 0
-    mtime: 1566326739
-    seq: 809
-    total_passes: 5
+    mtime: 1576734098
+    seq: 955
+    total_passes: 6
   t/32-Auth-and-issuer-OIDC-sorted.t:
-    elapsed: 0.177098989486694
-    gen: 5
-    last_pass_time: 1568228174.17296
+    elapsed: 0.267220020294189
+    gen: 6
+    last_pass_time: 1578123024.91963
     last_result: 0
-    last_run_time: 1568228174.17296
+    last_run_time: 1578123024.91963
     last_todo: 0
-    mtime: 1566161679
-    seq: 845
-    total_passes: 5
+    mtime: 1576734098
+    seq: 956
+    total_passes: 6
   t/32-CAS-10.t:
-    elapsed: 0.131625175476074
-    gen: 5
-    last_pass_time: 1568228173.5524
+    elapsed: 0.252785921096802
+    gen: 6
+    last_pass_time: 1578123025.17495
     last_result: 0
-    last_run_time: 1568228173.5524
+    last_run_time: 1578123025.17495
     last_todo: 0
-    mtime: 1566161691
-    seq: 835
-    total_passes: 5
+    mtime: 1569964806
+    seq: 957
+    total_passes: 6
+  t/32-CAS-Macros.t:
+    elapsed: 0.241799116134644
+    gen: 6
+    last_pass_time: 1578123025.41927
+    last_result: 0
+    last_run_time: 1578123025.41927
+    last_todo: 0
+    seq: 958
+    total_passes: 1
+  t/32-OIDC-Macro.t:
+    elapsed: 0.257303953170776
+    gen: 6
+    last_pass_time: 1578123025.67909
+    last_result: 0
+    last_run_time: 1578123025.67909
+    last_todo: 0
+    seq: 959
+    total_passes: 1
+  t/32-OIDC-Offline-Session.t:
+    elapsed: 0.266321182250977
+    gen: 6
+    last_pass_time: 1578123025.94789
+    last_result: 0
+    last_run_time: 1578123025.94789
+    last_todo: 0
+    seq: 960
+    total_passes: 1
   t/32-OIDC-RP-rule.t:
-    elapsed: 0.210129022598267
-    gen: 5
-    last_pass_time: 1568228172.76508
+    elapsed: 0.282886028289795
+    gen: 6
+    last_pass_time: 1578123026.73694
     last_result: 0
-    last_run_time: 1568228172.76508
+    last_run_time: 1578123026.73694
     last_todo: 0
-    mtime: 1566161711
-    seq: 822
-    total_passes: 5
+    mtime: 1576734098
+    seq: 963
+    total_passes: 6
+  t/32-OIDC-Refresh-Token.t:
+    elapsed: 0.268184900283813
+    gen: 6
+    last_pass_time: 1578123026.21863
+    last_result: 0
+    last_run_time: 1578123026.21863
+    last_todo: 0
+    seq: 961
+    total_passes: 1
+  t/32-OIDC-Register.t:
+    elapsed: 0.230379104614258
+    gen: 6
+    last_pass_time: 1578123026.4515
+    last_result: 0
+    last_run_time: 1578123026.4515
+    last_todo: 0
+    seq: 962
+    total_passes: 1
   t/32-OIDC-Token-Introspection.t:
-    elapsed: 6.0573251247406
-    gen: 5
-    last_pass_time: 1568228183.25993
+    elapsed: 0.242898941040039
+    gen: 6
+    last_pass_time: 1578123026.98231
     last_result: 0
-    last_run_time: 1568228183.25993
+    last_run_time: 1578123026.98231
     last_todo: 0
-    seq: 882
-    total_passes: 1
+    mtime: 1576734098
+    seq: 964
+    total_passes: 2
   t/32-OIDC-Token-Security.t:
-    elapsed: 2.13347506523132
-    gen: 5
-    last_pass_time: 1568228170.91085
+    elapsed: 0.244245052337646
+    gen: 6
+    last_pass_time: 1578123027.22906
     last_result: 0
-    last_run_time: 1568228170.91085
+    last_run_time: 1578123027.22906
     last_todo: 0
-    mtime: 1567710312
-    seq: 799
-    total_passes: 2
+    mtime: 1576734098
+    seq: 965
+    total_passes: 3
   t/33-Auth-and-issuer-OpenID2.t:
-    elapsed: 0.443145990371704
-    gen: 5
-    last_pass_time: 1568228168.4624
+    elapsed: 0.397281885147095
+    gen: 6
+    last_pass_time: 1578123027.62887
     last_result: 0
-    last_run_time: 1568228168.4624
+    last_run_time: 1578123027.62887
     last_todo: 0
-    mtime: 1566161681
-    seq: 771
-    total_passes: 5
+    mtime: 1569964806
+    seq: 966
+    total_passes: 6
   t/34-Auth-Proxy-and-REST-Server.t:
-    elapsed: 0.309317111968994
-    gen: 5
-    last_pass_time: 1568228171.62654
+    elapsed: 0.313448190689087
+    gen: 6
+    last_pass_time: 1578123027.94485
     last_result: 0
-    last_run_time: 1568228171.62654
+    last_run_time: 1578123027.94485
     last_todo: 0
-    mtime: 1566326739
-    seq: 808
-    total_passes: 5
+    mtime: 1569964806
+    seq: 967
+    total_passes: 6
   t/34-Auth-Proxy-and-SOAP-Server.t:
-    elapsed: 0.329507827758789
-    gen: 5
-    last_pass_time: 1568228166.92085
+    elapsed: 0.341868877410889
+    gen: 6
+    last_pass_time: 1578123028.28919
     last_result: 0
-    last_run_time: 1568228166.92085
+    last_run_time: 1578123028.28919
     last_todo: 0
-    mtime: 1566161702
-    seq: 757
-    total_passes: 5
+    mtime: 1569964806
+    seq: 968
+    total_passes: 6
   t/35-My-session.t:
-    elapsed: 0.113296031951904
-    gen: 5
-    last_pass_time: 1568228171.9974
+    elapsed: 0.231766939163208
+    gen: 6
+    last_pass_time: 1578123028.52346
     last_result: 0
-    last_run_time: 1568228171.9974
+    last_run_time: 1578123028.52346
     last_todo: 0
-    mtime: 1566161715
-    seq: 813
-    total_passes: 5
+    mtime: 1569964806
+    seq: 969
+    total_passes: 6
   t/35-REST-config-backend.t:
-    elapsed: 0.242370128631592
-    gen: 5
-    last_pass_time: 1568228172.24809
+    elapsed: 0.302253007888794
+    gen: 6
+    last_pass_time: 1578123028.82823
     last_result: 0
-    last_run_time: 1568228172.24809
+    last_run_time: 1578123028.82823
     last_todo: 0
-    mtime: 1566330470
-    seq: 816
-    total_passes: 5
+    mtime: 1569964806
+    seq: 970
+    total_passes: 6
   t/35-REST-export-password.t:
-    elapsed: 0.206042051315308
-    gen: 5
-    last_pass_time: 1568228172.7688
+    elapsed: 0.290185928344727
+    gen: 6
+    last_pass_time: 1578123029.1209
     last_result: 0
-    last_run_time: 1568228172.7688
+    last_run_time: 1578123029.1209
     last_todo: 0
-    mtime: 1566161714
-    seq: 823
-    total_passes: 5
+    mtime: 1569964806
+    seq: 971
+    total_passes: 6
   t/35-REST-sessions-with-AuthBasic-handler.t:
-    elapsed: 0.14748215675354
-    gen: 5
-    last_pass_time: 1568228175.18237
+    elapsed: 0.255604982376099
+    gen: 6
+    last_pass_time: 1578123029.37904
     last_result: 0
-    last_run_time: 1568228175.18237
+    last_run_time: 1578123029.37904
     last_todo: 0
-    mtime: 1567458069
-    seq: 862
-    total_passes: 5
+    mtime: 1569964806
+    seq: 972
+    total_passes: 6
   t/35-REST-sessions-with-REST-server.t:
-    elapsed: 0.250331878662109
-    gen: 5
-    last_pass_time: 1568228172.35272
+    elapsed: 0.30440878868103
+    gen: 6
+    last_pass_time: 1578123029.68601
     last_result: 0
-    last_run_time: 1568228172.35272
+    last_run_time: 1578123029.68601
     last_todo: 0
-    mtime: 1566161714
-    seq: 818
-    total_passes: 5
+    mtime: 1569964806
+    seq: 973
+    total_passes: 6
   t/35-SOAP-config-backend.t:
-    elapsed: 0.343286991119385
-    gen: 5
-    last_pass_time: 1568228170.32268
+    elapsed: 0.368796110153198
+    gen: 6
+    last_pass_time: 1578123030.05729
     last_result: 0
-    last_run_time: 1568228170.32268
+    last_run_time: 1578123030.05729
     last_todo: 0
-    mtime: 1566326739
-    seq: 792
-    total_passes: 5
+    mtime: 1569964806
+    seq: 974
+    total_passes: 6
   t/35-SOAP-sessions-with-SOAP-server.t:
-    elapsed: 3.21282911300659
-    gen: 5
-    last_pass_time: 1568228162.73156
+    elapsed: 0.346342086791992
+    gen: 6
+    last_pass_time: 1578123030.40627
     last_result: 0
-    last_run_time: 1568228162.73156
+    last_run_time: 1578123030.40627
     last_todo: 0
-    mtime: 1566161692
-    seq: 738
-    total_passes: 5
+    mtime: 1569964806
+    seq: 975
+    total_passes: 6
   t/36-Combination-Kerberos-or-Demo.t:
-    elapsed: 0.0910859107971191
-    gen: 5
-    last_pass_time: 1568228175.54146
+    elapsed: 0.217070817947388
+    gen: 6
+    last_pass_time: 1578123030.62587
     last_result: 0
-    last_run_time: 1568228175.54146
+    last_run_time: 1578123030.62587
     last_todo: 0
-    mtime: 1567545352
-    seq: 868
-    total_passes: 5
+    mtime: 1576734087
+    seq: 976
+    total_passes: 6
   t/36-Combination-with-Choice.t:
-    elapsed: 0.372189998626709
-    gen: 5
-    last_pass_time: 1568228171.54513
+    elapsed: 0.365689992904663
+    gen: 6
+    last_pass_time: 1578123031.33623
     last_result: 0
-    last_run_time: 1568228171.54513
+    last_run_time: 1578123031.33623
     last_todo: 0
-    mtime: 1567458069
-    seq: 806
-    total_passes: 5
+    mtime: 1569964806
+    seq: 978
+    total_passes: 6
   t/36-Combination-with-TOTP.t:
-    elapsed: 3.24833297729492
-    gen: 5
-    last_pass_time: 1568228162.72114
+    elapsed: 0.293755054473877
+    gen: 6
+    last_pass_time: 1578123032.33233
     last_result: 0
-    last_run_time: 1568228162.72114
+    last_run_time: 1578123032.33233
     last_todo: 0
-    mtime: 1566882553
-    seq: 736
-    total_passes: 5
+    mtime: 1576045451
+    seq: 981
+    total_passes: 6
   t/36-Combination-with-over.t:
-    elapsed: 0.134244918823242
-    gen: 5
-    last_pass_time: 1568228174.85634
+    elapsed: 0.270731925964355
+    gen: 6
+    last_pass_time: 1578123031.60943
     last_result: 0
-    last_run_time: 1568228174.85634
+    last_run_time: 1578123031.60943
     last_todo: 0
-    mtime: 1567458069
-    seq: 856
-    total_passes: 5
+    mtime: 1569964806
+    seq: 979
+    total_passes: 6
   t/36-Combination-with-token.t:
-    elapsed: 0.296674966812134
-    gen: 5
-    last_pass_time: 1568228166.31759
+    elapsed: 0.42386794090271
+    gen: 6
+    last_pass_time: 1578123032.03581
     last_result: 0
-    last_run_time: 1568228166.31759
+    last_run_time: 1578123032.03581
     last_todo: 0
-    mtime: 1567458069
-    seq: 748
-    total_passes: 5
+    mtime: 1569964806
+    seq: 980
+    total_passes: 6
   t/36-Combination.t:
-    elapsed: 0.194222927093506
-    gen: 5
-    last_pass_time: 1568228172.46914
+    elapsed: 0.33951997756958
+    gen: 6
+    last_pass_time: 1578123030.968
     last_result: 0
-    last_run_time: 1568228172.46914
+    last_run_time: 1578123030.968
     last_todo: 0
-    mtime: 1567458069
-    seq: 820
-    total_passes: 5
+    mtime: 1569964806
+    seq: 977
+    total_passes: 6
   t/37-CAS-App-to-SAML-IdP-POST-with-WAYF.t:
-    elapsed: 0.389986991882324
-    gen: 5
-    last_pass_time: 1568228169.17448
+    elapsed: 0.386538028717041
+    gen: 6
+    last_pass_time: 1578123033.10328
     last_result: 0
-    last_run_time: 1568228169.17448
+    last_run_time: 1578123033.10328
     last_todo: 0
-    mtime: 1566161693
-    seq: 779
-    total_passes: 5
+    mtime: 1574978407
+    seq: 983
+    total_passes: 6
   t/37-CAS-App-to-SAML-IdP-POST.t:
-    elapsed: 0.388776063919067
-    gen: 5
-    last_pass_time: 1568228169.13402
+    elapsed: 0.379412889480591
+    gen: 6
+    last_pass_time: 1578123032.71416
     last_result: 0
-    last_run_time: 1568228169.13402
+    last_run_time: 1578123032.71416
     last_todo: 0
-    mtime: 1566161713
-    seq: 778
-    total_passes: 5
+    mtime: 1574978407
+    seq: 982
+    total_passes: 6
   t/37-Logout-from-OIDC-RP-to-SAML-SP.t:
-    elapsed: 0.549050092697144
-    gen: 5
-    last_pass_time: 1568228167.78179
+    elapsed: 0.432024002075195
+    gen: 6
+    last_pass_time: 1578123033.53802
     last_result: 0
-    last_run_time: 1568228167.78179
+    last_run_time: 1578123033.53802
     last_todo: 0
-    mtime: 1566161678
-    seq: 765
-    total_passes: 5
+    mtime: 1576734098
+    seq: 984
+    total_passes: 6
   t/37-OIDC-RP-to-SAML-IdP-GET-with-WAYF.t:
-    elapsed: 1.54474711418152
-    gen: 5
-    last_pass_time: 1568228177.19983
+    elapsed: 0.422128915786743
+    gen: 6
+    last_pass_time: 1578123034.38572
     last_result: 0
-    last_run_time: 1568228177.19983
+    last_run_time: 1578123034.38572
     last_todo: 0
-    mtime: 1566161681
-    seq: 878
-    total_passes: 5
+    mtime: 1576734098
+    seq: 986
+    total_passes: 6
   t/37-OIDC-RP-to-SAML-IdP-GET.t:
-    elapsed: 0.289746046066284
-    gen: 5
-    last_pass_time: 1568228166.30985
+    elapsed: 0.420414924621582
+    gen: 6
+    last_pass_time: 1578123033.96101
     last_result: 0
-    last_run_time: 1568228166.30985
+    last_run_time: 1578123033.96101
     last_todo: 0
-    mtime: 1566161702
-    seq: 747
-    total_passes: 5
+    mtime: 1576734098
+    seq: 985
+    total_passes: 6
   t/37-OIDC-RP-to-SAML-IdP-POST.t:
-    elapsed: 0.500457048416138
-    gen: 5
-    last_pass_time: 1568228167.70532
+    elapsed: 0.418213844299316
+    gen: 6
+    last_pass_time: 1578123034.8065
     last_result: 0
-    last_run_time: 1568228167.70532
+    last_run_time: 1578123034.8065
     last_todo: 0
-    mtime: 1566161715
-    seq: 764
-    total_passes: 5
+    mtime: 1576734098
+    seq: 987
+    total_passes: 6
   t/37-SAML-SP-GET-to-OIDC-OP.t:
-    elapsed: 0.512121915817261
-    gen: 5
-    last_pass_time: 1568228168.0658
+    elapsed: 0.427850008010864
+    gen: 6
+    last_pass_time: 1578123035.23688
     last_result: 0
-    last_run_time: 1568228168.0658
+    last_run_time: 1578123035.23688
     last_todo: 0
-    mtime: 1566161678
-    seq: 768
-    total_passes: 5
+    mtime: 1576734098
+    seq: 988
+    total_passes: 6
   t/37-SAML-SP-POST-to-CAS-server-with-Choice.t:
-    elapsed: 0.423893928527832
-    gen: 5
-    last_pass_time: 1568228168.51999
+    elapsed: 0.387664794921875
+    gen: 6
+    last_pass_time: 1578123036.00968
     last_result: 0
-    last_run_time: 1568228168.51999
+    last_run_time: 1578123036.00968
     last_todo: 0
-    mtime: 1566161698
-    seq: 773
-    total_passes: 5
+    mtime: 1574978407
+    seq: 990
+    total_passes: 6
   t/37-SAML-SP-POST-to-CAS-server.t:
-    elapsed: 0.357296943664551
-    gen: 5
-    last_pass_time: 1568228169.48683
+    elapsed: 0.380016088485718
+    gen: 6
+    last_pass_time: 1578123035.61942
     last_result: 0
-    last_run_time: 1568228169.48683
+    last_run_time: 1578123035.61942
     last_todo: 0
-    mtime: 1566161694
-    seq: 782
-    total_passes: 5
+    mtime: 1574978407
+    seq: 989
+    total_passes: 6
   t/37-SAML-SP-POST-to-OIDC-OP.t:
-    elapsed: 0.513651132583618
-    gen: 5
-    last_pass_time: 1568228168.16452
+    elapsed: 0.415299892425537
+    gen: 6
+    last_pass_time: 1578123036.42759
     last_result: 0
-    last_run_time: 1568228168.16452
+    last_run_time: 1578123036.42759
     last_todo: 0
-    mtime: 1566161709
-    seq: 769
-    total_passes: 5
+    mtime: 1576734098
+    seq: 991
+    total_passes: 6
   t/38-No-persistent-session.t:
-    elapsed: 7.27217411994934
-    gen: 5
-    last_pass_time: 1568228183.26285
+    elapsed: 0.323966026306152
+    gen: 6
+    last_pass_time: 1578123036.75417
     last_result: 0
-    last_run_time: 1568228183.26285
+    last_run_time: 1578123036.75417
     last_todo: 0
-    mtime: 1566161696
-    seq: 885
-    total_passes: 5
+    mtime: 1569964806
+    seq: 992
+    total_passes: 6
   t/40-Notifications-JSON-DBI.t:
-    elapsed: 0.155227899551392
-    gen: 5
-    last_pass_time: 1568228174.63418
+    elapsed: 0.350934982299805
+    gen: 6
+    last_pass_time: 1578123037.10756
     last_result: 0
-    last_run_time: 1568228174.63418
+    last_run_time: 1578123037.10756
     last_todo: 0
-    mtime: 1567458069
-    seq: 853
-    total_passes: 5
+    mtime: 1576045451
+    seq: 993
+    total_passes: 6
   t/40-Notifications-JSON-File-with-token.t:
-    elapsed: 0.135103940963745
-    gen: 5
-    last_pass_time: 1568228174.91861
+    elapsed: 0.245291948318481
+    gen: 6
+    last_pass_time: 1578123037.60954
     last_result: 0
-    last_run_time: 1568228174.91861
+    last_run_time: 1578123037.60954
     last_todo: 0
-    mtime: 1567458069
-    seq: 857
-    total_passes: 5
+    mtime: 1569964806
+    seq: 995
+    total_passes: 6
   t/40-Notifications-JSON-File.t:
-    elapsed: 0.139895915985107
-    gen: 5
-    last_pass_time: 1568228174.6303
+    elapsed: 0.251673936843872
+    gen: 6
+    last_pass_time: 1578123037.36178
     last_result: 0
-    last_run_time: 1568228174.6303
+    last_run_time: 1578123037.36178
     last_todo: 0
-    mtime: 1567458069
-    seq: 852
-    total_passes: 5
+    mtime: 1569964806
+    seq: 994
+    total_passes: 6
   t/40-Notifications-JSON-Server.t:
-    elapsed: 0.110454082489014
-    gen: 5
-    last_pass_time: 1568228175.33951
+    elapsed: 0.281574010848999
+    gen: 6
+    last_pass_time: 1578123037.89362
     last_result: 0
-    last_run_time: 1568228175.33951
+    last_run_time: 1578123037.89362
     last_todo: 0
-    mtime: 1567458069
-    seq: 864
-    total_passes: 5
+    mtime: 1577275903
+    seq: 996
+    total_passes: 6
   t/40-Notifications-XML-DBI.t:
-    elapsed: 0.151570796966553
-    gen: 5
-    last_pass_time: 1568228174.01993
+    elapsed: 0.365219116210938
+    gen: 6
+    last_pass_time: 1578123038.26129
     last_result: 0
-    last_run_time: 1568228174.01993
+    last_run_time: 1578123038.26129
     last_todo: 0
-    mtime: 1567458069
-    seq: 842
-    total_passes: 5
+    mtime: 1576045451
+    seq: 997
+    total_passes: 6
   t/40-Notifications-XML-File.t:
-    elapsed: 0.12536096572876
-    gen: 5
-    last_pass_time: 1568228173.62481
+    elapsed: 0.270434856414795
+    gen: 6
+    last_pass_time: 1578123038.5342
     last_result: 0
-    last_run_time: 1568228173.62481
+    last_run_time: 1578123038.5342
     last_todo: 0
-    mtime: 1567458069
-    seq: 836
-    total_passes: 5
+    mtime: 1569964806
+    seq: 998
+    total_passes: 6
   t/40-Notifications-XML-Server.t:
-    elapsed: 0.25491189956665
-    gen: 5
-    last_pass_time: 1568228172.18736
+    elapsed: 0.350883960723877
+    gen: 6
+    last_pass_time: 1578123038.88762
     last_result: 0
-    last_run_time: 1568228172.18736
+    last_run_time: 1578123038.88762
     last_todo: 0
-    mtime: 1567458069
-    seq: 814
-    total_passes: 5
+    mtime: 1576734098
+    seq: 999
+    total_passes: 6
   t/41-Captcha.t:
-    elapsed: 0.669528007507324
-    gen: 5
-    last_pass_time: 1568228169.67036
+    elapsed: 0.557894945144653
+    gen: 6
+    last_pass_time: 1578123039.44805
     last_result: 0
-    last_run_time: 1568228169.67036
+    last_run_time: 1578123039.44805
     last_todo: 0
-    mtime: 1568178612
-    seq: 784
-    total_passes: 5
-  t/41-Token-Global-Storage.t:
-    elapsed: 0.14008092880249
-    gen: 5
-    last_pass_time: 1568228174.72858
+    mtime: 1577635709
+    seq: 1000
+    total_passes: 6
+  t/41-Token-with-global-storage.t:
+    elapsed: 0.243690967559814
+    gen: 6
+    last_pass_time: 1578123039.93547
     last_result: 0
-    last_run_time: 1568228174.72858
+    last_run_time: 1578123039.93547
     last_todo: 0
-    mtime: 1566161683
-    seq: 855
-    total_passes: 5
-  t/41-Token.t:
-    elapsed: 0.152389049530029
-    gen: 5
-    last_pass_time: 1568228175.34245
-    last_result: 0
-    last_run_time: 1568228175.34245
-    last_todo: 0
-    mtime: 1568178612
-    seq: 865
-    total_passes: 5
-  t/42-Register-Demo-with-captcha.t:
-    elapsed: 0.246177196502686
-    gen: 5
-    last_pass_time: 1568228166.26737
-    last_result: 0
-    last_run_time: 1568228166.26737
-    last_todo: 0
-    mtime: 1566161713
-    seq: 743
-    total_passes: 5
-  t/42-Register-Demo-with-token.t:
-    elapsed: 0.352511882781982
-    gen: 5
-    last_pass_time: 1568228169.83261
-    last_result: 0
-    last_run_time: 1568228169.83261
-    last_todo: 0
-    mtime: 1566161702
-    seq: 788
-    total_passes: 5
-  t/42-Register-Demo.t:
-    elapsed: 0.325651884078979
-    gen: 5
-    last_pass_time: 1568228171.02567
-    last_result: 0
-    last_run_time: 1568228171.02567
-    last_todo: 0
-    mtime: 1566161680
-    seq: 801
-    total_passes: 5
-  t/42-Register-LDAP.t:
-    elapsed: 0.197420120239258
-    gen: 5
-    last_pass_time: 1568228172.69101
-    last_result: 0
-    last_run_time: 1568228172.69101
-    last_todo: 0
-    mtime: 1566161675
-    seq: 821
-    total_passes: 5
-  t/42-Register-Security.t:
-    elapsed: 0.288436889648438
-    gen: 5
-    last_pass_time: 1568228170.41053
-    last_result: 0
-    last_run_time: 1568228170.41053
-    last_todo: 0
-    mtime: 1566161675
-    seq: 794
-    total_passes: 5
-  t/43-MailPasswordReset-Choice.t:
-    elapsed: 0.596246004104614
-    gen: 5
-    last_pass_time: 1568228167.68902
-    last_result: 0
-    last_run_time: 1568228167.68902
-    last_todo: 0
-    mtime: 1567458069
-    seq: 763
-    total_passes: 5
-  t/43-MailPasswordReset-Combination-LDAP.t:
-    elapsed: 6.05373096466064
-    gen: 5
-    last_pass_time: 1568228183.25289
-    last_result: 0
-    last_run_time: 1568228183.25289
-    last_todo: 0
-    seq: 880
+    seq: 1002
     total_passes: 1
+  t/41-Token.t:
+    elapsed: 0.238693237304688
+    gen: 6
+    last_pass_time: 1578123039.68927
+    last_result: 0
+    last_run_time: 1578123039.68927
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1001
+    total_passes: 6
+  t/42-Register-Demo-with-captcha.t:
+    elapsed: 0.49410605430603
+    gen: 6
+    last_pass_time: 1578123040.76351
+    last_result: 0
+    last_run_time: 1578123040.76351
+    last_todo: 0
+    mtime: 1577635709
+    seq: 1004
+    total_passes: 6
+  t/42-Register-Demo-with-token.t:
+    elapsed: 0.367373943328857
+    gen: 6
+    last_pass_time: 1578123041.13344
+    last_result: 0
+    last_run_time: 1578123041.13344
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1005
+    total_passes: 6
+  t/42-Register-Demo.t:
+    elapsed: 0.328927993774414
+    gen: 6
+    last_pass_time: 1578123040.26687
+    last_result: 0
+    last_run_time: 1578123040.26687
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1003
+    total_passes: 6
+  t/42-Register-LDAP.t:
+    elapsed: 0.268527030944824
+    gen: 6
+    last_pass_time: 1578123041.40453
+    last_result: 0
+    last_run_time: 1578123041.40453
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1006
+    total_passes: 6
+  t/42-Register-Security.t:
+    elapsed: 0.319261074066162
+    gen: 6
+    last_pass_time: 1578123041.72628
+    last_result: 0
+    last_run_time: 1578123041.72628
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1007
+    total_passes: 6
+  t/43-MailPasswordReset-Choice.t:
+    elapsed: 0.491440057754517
+    gen: 6
+    last_pass_time: 1578123042.22028
+    last_result: 0
+    last_run_time: 1578123042.22028
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1008
+    total_passes: 6
+  t/43-MailPasswordReset-Combination-LDAP.t:
+    elapsed: 0.279649972915649
+    gen: 6
+    last_pass_time: 1578123042.50256
+    last_result: 0
+    last_run_time: 1578123042.50256
+    last_todo: 0
+    mtime: 1569964806
+    seq: 1009
+    total_passes: 2
   t/43-MailPasswordReset-DBI.t:
-    elapsed: 0.464865922927856
-    gen: 5
-    last_pass_time: 1568228168.67705
+    elapsed: 0.412544965744019
+    gen: 6
+    last_pass_time: 1578123042.91761
     last_result: 0
-    last_run_time: 1568228168.67705
+    last_run_time: 1578123042.91761
     last_todo: 0
-    mtime: 1567458069
-    seq: 774
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1010
+    total_passes: 6
   t/43-MailPasswordReset-LDAP.t:
-    elapsed: 0.230448007583618
-    gen: 5
-    last_pass_time: 1568228172.38666
+    elapsed: 0.282418966293335
+    gen: 6
+    last_pass_time: 1578123043.20259
     last_result: 0
-    last_run_time: 1568228172.38666
+    last_run_time: 1578123043.20259
     last_todo: 0
-    mtime: 1566161714
-    seq: 819
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1011
+    total_passes: 6
   t/43-MailPasswordReset-with-captcha.t:
-    elapsed: 3.36256098747253
-    gen: 5
-    last_pass_time: 1568228159.1967
+    elapsed: 0.456592082977295
+    gen: 6
+    last_pass_time: 1578123044.01458
     last_result: 0
-    last_run_time: 1568228159.1967
+    last_run_time: 1578123044.01458
     last_todo: 0
-    mtime: 1566161700
-    seq: 728
-    total_passes: 5
+    mtime: 1577635709
+    seq: 1013
+    total_passes: 6
   t/43-MailPasswordReset-with-token.t:
-    elapsed: 3.1455659866333
-    gen: 5
-    last_pass_time: 1568228162.68178
+    elapsed: 0.353721141815186
+    gen: 6
+    last_pass_time: 1578123044.37085
     last_result: 0
-    last_run_time: 1568228162.68178
+    last_run_time: 1578123044.37085
     last_todo: 0
-    mtime: 1566161695
-    seq: 735
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1014
+    total_passes: 6
   t/43-MailPasswordReset.t:
-    elapsed: 0.365800142288208
-    gen: 5
-    last_pass_time: 1568228170.15199
+    elapsed: 0.350366115570068
+    gen: 6
+    last_pass_time: 1578123043.55546
     last_result: 0
-    last_run_time: 1568228170.15199
+    last_run_time: 1578123043.55546
     last_todo: 0
-    mtime: 1566941543
-    seq: 789
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1012
+    total_passes: 6
+  t/44-CertificateResetByMail-LDAP.t:
+    elapsed: 0.28028392791748
+    gen: 6
+    last_pass_time: 1578123044.65369
+    last_result: 0
+    last_run_time: 1578123044.65369
+    last_todo: 0
+    seq: 1015
+    total_passes: 1
   t/50-IssuerGet.t:
-    elapsed: 0.102422952651978
-    gen: 5
-    last_pass_time: 1568228174.32877
+    elapsed: 0.238299131393433
+    gen: 6
+    last_pass_time: 1578123044.89447
     last_result: 0
-    last_run_time: 1568228174.32877
+    last_run_time: 1578123044.89447
     last_todo: 0
-    mtime: 1566161715
-    seq: 848
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1016
+    total_passes: 6
+  t/57-GlobalLogout-without-Timer.t:
+    elapsed: 0.263209104537964
+    gen: 6
+    last_pass_time: 1578123045.45904
+    last_result: 0
+    last_run_time: 1578123045.45904
+    last_todo: 0
+    seq: 1018
+    total_passes: 1
+  t/57-GlobalLogout.t:
+    elapsed: 0.296432018280029
+    gen: 6
+    last_pass_time: 1578123045.19343
+    last_result: 0
+    last_run_time: 1578123045.19343
+    last_todo: 0
+    seq: 1017
+    total_passes: 1
+  t/58-DecryptValue-with-custom-function.t:
+    elapsed: 0.250503063201904
+    gen: 6
+    last_pass_time: 1578123045.71201
+    last_result: 0
+    last_run_time: 1578123045.71201
+    last_todo: 0
+    seq: 1019
+    total_passes: 1
+  t/58-DecryptValue-with-internal-function.t:
+    elapsed: 0.289312124252319
+    gen: 6
+    last_pass_time: 1578123046.0038
+    last_result: 0
+    last_run_time: 1578123046.0038
+    last_todo: 0
+    seq: 1020
+    total_passes: 1
   t/59-Double-cookies-Refresh-and-Logout.t:
-    elapsed: 3.35325980186462
-    gen: 5
-    last_pass_time: 1568228166.29784
+    elapsed: 0.2725670337677
+    gen: 6
+    last_pass_time: 1578123046.76534
     last_result: 0
-    last_run_time: 1568228166.29784
+    last_run_time: 1578123046.76534
     last_todo: 0
-    mtime: 1567545352
-    seq: 745
-    total_passes: 5
+    mtime: 1576734087
+    seq: 1023
+    total_passes: 6
   t/59-Double-cookies-for-Double-sessions.t:
-    elapsed: 0.0803351402282715
-    gen: 5
-    last_pass_time: 1568228173.1125
+    elapsed: 0.244628190994263
+    gen: 6
+    last_pass_time: 1578123046.49026
     last_result: 0
-    last_run_time: 1568228173.1125
+    last_run_time: 1578123046.49026
     last_todo: 0
-    mtime: 1566161696
-    seq: 828
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1022
+    total_passes: 6
   t/59-Double-cookies-for-a-Single-session.t:
-    elapsed: 0.128086805343628
-    gen: 5
-    last_pass_time: 1568228174.40957
+    elapsed: 0.23691201210022
+    gen: 6
+    last_pass_time: 1578123046.24316
     last_result: 0
-    last_run_time: 1568228174.40957
+    last_run_time: 1578123046.24316
     last_todo: 0
-    mtime: 1566161704
-    seq: 849
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1021
+    total_passes: 6
   t/59-Secured-cookie-Refresh-and-Logout.t:
-    elapsed: 0.161150932312012
-    gen: 5
-    last_pass_time: 1568228166.78555
+    elapsed: 0.247748136520386
+    gen: 6
+    last_pass_time: 1578123047.0155
     last_result: 0
-    last_run_time: 1568228166.78555
+    last_run_time: 1578123047.0155
     last_todo: 0
-    mtime: 1567545352
-    seq: 753
-    total_passes: 5
+    mtime: 1576734098
+    seq: 1024
+    total_passes: 6
   t/60-Status.t:
-    elapsed: 0.101425170898438
-    gen: 5
-    last_pass_time: 1568228166.71434
+    elapsed: 0.238331079483032
+    gen: 6
+    last_pass_time: 1578123047.25629
     last_result: 0
-    last_run_time: 1568228166.71434
+    last_run_time: 1578123047.25629
     last_todo: 0
-    mtime: 1566161694
-    seq: 751
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1025
+    total_passes: 6
   t/61-BruteForceProtection.t:
-    elapsed: 7.08599305152893
-    gen: 5
-    last_pass_time: 1568228155.51687
+    elapsed: 0.333351135253906
+    gen: 6
+    last_pass_time: 1578123047.59242
     last_result: 0
-    last_run_time: 1568228155.51687
+    last_run_time: 1578123047.59242
     last_todo: 0
-    mtime: 1566161697
-    seq: 721
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1026
+    total_passes: 6
   t/61-ForceAuthn.t:
-    elapsed: 11.1099808216095
-    gen: 5
-    last_pass_time: 1568228147.03549
+    elapsed: 0.237651109695435
+    gen: 6
+    last_pass_time: 1578123047.83249
     last_result: 0
-    last_run_time: 1568228147.03549
+    last_run_time: 1578123047.83249
     last_todo: 0
-    mtime: 1566161700
-    seq: 706
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1027
+    total_passes: 6
   t/61-GrantSession.t:
-    elapsed: 11.1296651363373
-    gen: 5
-    last_pass_time: 1568228147.04255
+    elapsed: 0.274355888366699
+    gen: 6
+    last_pass_time: 1578123048.10939
     last_result: 0
-    last_run_time: 1568228147.04255
+    last_run_time: 1578123048.10939
     last_todo: 0
-    mtime: 1566161695
-    seq: 708
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1028
+    total_passes: 6
   t/61-Session-ActivityTimeout.t:
-    elapsed: 8.1432101726532
-    gen: 5
-    last_pass_time: 1568228155.50076
+    elapsed: 0.254975080490112
+    gen: 6
+    last_pass_time: 1578123048.36683
     last_result: 0
-    last_run_time: 1568228155.50076
+    last_run_time: 1578123048.36683
     last_todo: 0
-    mtime: 1566161690
-    seq: 718
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1029
+    total_passes: 6
   t/61-Session-Timeout.t:
-    elapsed: 11.147509098053
-    gen: 5
-    last_pass_time: 1568228147.05214
+    elapsed: 0.243348121643066
+    gen: 6
+    last_pass_time: 1578123048.61272
     last_result: 0
-    last_run_time: 1568228147.05214
+    last_run_time: 1578123048.61272
     last_todo: 0
-    mtime: 1566161686
-    seq: 710
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1030
+    total_passes: 6
+  t/62-Refresh-plugin.t:
+    elapsed: 0.246065855026245
+    gen: 6
+    last_pass_time: 1578123048.86128
+    last_result: 0
+    last_run_time: 1578123048.86128
+    last_todo: 0
+    seq: 1031
+    total_passes: 1
   t/62-SingleSession.t:
-    elapsed: 8.1383650302887
-    gen: 5
-    last_pass_time: 1568228155.4791
+    elapsed: 0.221413135528564
+    gen: 6
+    last_pass_time: 1578123049.08519
     last_result: 0
-    last_run_time: 1568228155.4791
+    last_run_time: 1578123049.08519
     last_todo: 0
-    mtime: 1566161709
-    seq: 714
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1032
+    total_passes: 6
   t/62-UpgradeSession.t:
-    elapsed: 8.15283107757568
-    gen: 5
-    last_pass_time: 1568228155.48593
+    elapsed: 0.348144054412842
+    gen: 6
+    last_pass_time: 1578123049.43585
     last_result: 0
-    last_run_time: 1568228155.48593
+    last_run_time: 1578123049.43585
     last_todo: 0
-    mtime: 1566326760
-    seq: 715
-    total_passes: 5
+    mtime: 1574978407
+    seq: 1033
+    total_passes: 6
   t/63-History.t:
-    elapsed: 0.192178010940552
-    gen: 5
-    last_pass_time: 1568228173.1862
+    elapsed: 0.267871141433716
+    gen: 6
+    last_pass_time: 1578123049.70623
     last_result: 0
-    last_run_time: 1568228173.1862
+    last_run_time: 1578123049.70623
     last_todo: 0
-    mtime: 1566161677
-    seq: 829
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1034
+    total_passes: 6
   t/64-StayConnected.t:
-    elapsed: 0.12476921081543
-    gen: 5
-    last_pass_time: 1568228174.25574
+    elapsed: 0.268374919891357
+    gen: 6
+    last_pass_time: 1578123049.97701
     last_result: 0
-    last_run_time: 1568228174.25574
+    last_run_time: 1578123049.97701
     last_todo: 0
-    mtime: 1566161711
-    seq: 846
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1035
+    total_passes: 6
   t/65-AutoSignin.t:
-    elapsed: 0.0881481170654297
-    gen: 5
-    last_pass_time: 1568228175.64631
+    elapsed: 0.214384078979492
+    gen: 6
+    last_pass_time: 1578123050.19374
     last_result: 0
-    last_run_time: 1568228175.64631
+    last_run_time: 1578123050.19374
     last_todo: 0
-    mtime: 1566161678
-    seq: 869
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1036
+    total_passes: 6
   t/66-CDA-PSGI-Try.t:
-    elapsed: 0.119501113891602
-    gen: 5
-    last_pass_time: 1568228155.90546
+    elapsed: 0.234914779663086
+    gen: 6
+    last_pass_time: 1578123050.66055
     last_result: 0
-    last_run_time: 1568228155.90546
+    last_run_time: 1578123050.66055
     last_todo: 0
-    mtime: 1566326739
-    seq: 723
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1038
+    total_passes: 6
   t/66-CDA-already-auth.t:
-    elapsed: 0.105471134185791
-    gen: 5
-    last_pass_time: 1568228175.12849
+    elapsed: 0.226717948913574
+    gen: 6
+    last_pass_time: 1578123050.42304
     last_result: 0
-    last_run_time: 1568228175.12849
+    last_run_time: 1578123050.42304
     last_todo: 0
-    mtime: 1566161687
-    seq: 861
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1037
+    total_passes: 6
   t/66-CDA-with-REST.t:
-    elapsed: 0.196497917175293
-    gen: 5
-    last_pass_time: 1568228172.78429
+    elapsed: 0.284666061401367
+    gen: 6
+    last_pass_time: 1578123051.18564
     last_result: 0
-    last_run_time: 1568228172.78429
+    last_run_time: 1578123051.18564
     last_todo: 0
-    mtime: 1566161696
-    seq: 824
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1040
+    total_passes: 6
   t/66-CDA-with-SOAP.t:
-    elapsed: 0.289077043533325
-    gen: 5
-    last_pass_time: 1568228156.0859
+    elapsed: 0.318894147872925
+    gen: 6
+    last_pass_time: 1578123051.50709
     last_result: 0
-    last_run_time: 1568228156.0859
+    last_run_time: 1578123051.50709
     last_todo: 0
-    mtime: 1566161710
-    seq: 726
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1041
+    total_passes: 6
   t/66-CDA.t:
-    elapsed: 0.119533061981201
-    gen: 5
-    last_pass_time: 1568228155.89724
+    elapsed: 0.235138893127441
+    gen: 6
+    last_pass_time: 1578123050.89826
     last_result: 0
-    last_run_time: 1568228155.89724
+    last_run_time: 1578123050.89826
     last_todo: 0
-    mtime: 1566161685
-    seq: 722
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1039
+    total_passes: 6
   t/67-CheckUser-with-Global-token.t:
-    elapsed: 3.35982704162598
-    gen: 5
-    last_pass_time: 1568228166.30407
+    elapsed: 0.267443895339966
+    gen: 6
+    last_pass_time: 1578123052.14349
     last_result: 0
-    last_run_time: 1568228166.30407
+    last_run_time: 1578123052.14349
     last_todo: 0
-    mtime: 1566326760
-    seq: 746
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1043
+    total_passes: 6
   t/67-CheckUser-with-Impersonation-and-whatToTrace.t:
-    elapsed: 0.205716133117676
-    gen: 5
-    last_pass_time: 1568228175.44591
+    elapsed: 0.266218900680542
+    gen: 6
+    last_pass_time: 1578123052.41224
     last_result: 0
-    last_run_time: 1568228175.44591
+    last_run_time: 1578123052.41224
     last_todo: 0
-    mtime: 1566941543
-    seq: 866
-    total_passes: 2
+    mtime: 1576045451
+    seq: 1044
+    total_passes: 3
   t/67-CheckUser-with-issuer-SAML-POST.t:
-    elapsed: 0.616914033889771
-    gen: 5
-    last_pass_time: 1568228167.24291
+    elapsed: 0.445279836654663
+    gen: 6
+    last_pass_time: 1578123052.85996
     last_result: 0
-    last_run_time: 1568228167.24291
+    last_run_time: 1578123052.85996
     last_todo: 0
-    mtime: 1566941543
-    seq: 760
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1045
+    total_passes: 6
   t/67-CheckUser-with-token.t:
-    elapsed: 0.33227801322937
-    gen: 5
-    last_pass_time: 1568228166.35377
+    elapsed: 0.264358997344971
+    gen: 6
+    last_pass_time: 1578123053.12692
     last_result: 0
-    last_run_time: 1568228166.35377
+    last_run_time: 1578123053.12692
     last_todo: 0
-    mtime: 1566326760
-    seq: 750
-    total_passes: 5
+    mtime: 1577635709
+    seq: 1046
+    total_passes: 6
   t/67-CheckUser.t:
-    elapsed: 3.42336797714233
-    gen: 5
-    last_pass_time: 1568228162.95249
+    elapsed: 0.363959074020386
+    gen: 6
+    last_pass_time: 1578123051.87361
     last_result: 0
-    last_run_time: 1568228162.95249
+    last_run_time: 1578123051.87361
     last_todo: 0
-    mtime: 1566941543
-    seq: 741
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1042
+    total_passes: 6
   t/68-ContextSwitching-with-Logout.t:
-    elapsed: 0.14247989654541
-    gen: 5
-    last_pass_time: 1568228173.70928
+    elapsed: 0.274541854858398
+    gen: 6
+    last_pass_time: 1578123053.74404
     last_result: 0
-    last_run_time: 1568228173.70928
+    last_run_time: 1578123053.74404
     last_todo: 0
-    mtime: 1567545352
-    seq: 838
-    total_passes: 5
+    mtime: 1576734087
+    seq: 1048
+    total_passes: 6
   t/68-ContextSwitching.t:
-    elapsed: 0.04007887840271
-    gen: 5
-    last_pass_time: 1568228159.22825
+    elapsed: 0.337692022323608
+    gen: 6
+    last_pass_time: 1578123053.46715
     last_result: 0
-    last_run_time: 1568228159.22825
+    last_run_time: 1578123053.46715
     last_todo: 0
-    mtime: 1567545352
-    seq: 733
-    total_passes: 5
+    mtime: 1576734087
+    seq: 1047
+    total_passes: 6
   t/68-Impersonation-with-History.t:
-    elapsed: 8.16546607017517
-    gen: 5
-    last_pass_time: 1568228155.50485
+    elapsed: 0.295783996582031
+    gen: 6
+    last_pass_time: 1578123055.12427
     last_result: 0
-    last_run_time: 1568228155.50485
+    last_run_time: 1578123055.12427
     last_todo: 0
-    mtime: 1566161705
-    seq: 719
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1052
+    total_passes: 6
   t/68-Impersonation-with-TOTP.t:
-    elapsed: 0.267183065414429
-    gen: 5
-    last_pass_time: 1568228172.24446
+    elapsed: 0.305692195892334
+    gen: 6
+    last_pass_time: 1578123055.70623
     last_result: 0
-    last_run_time: 1568228172.24446
+    last_run_time: 1578123055.70623
     last_todo: 0
-    mtime: 1566161689
-    seq: 815
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1054
+    total_passes: 6
   t/68-Impersonation-with-doubleCookies.t:
-    elapsed: 0.482410907745361
-    gen: 5
-    last_pass_time: 1568228175.8846
+    elapsed: 0.404490947723389
+    gen: 6
+    last_pass_time: 1578123054.54409
     last_result: 0
-    last_run_time: 1568228175.8846
+    last_run_time: 1578123054.54409
     last_todo: 0
-    mtime: 1566161699
-    seq: 874
-    total_passes: 5
+    mtime: 1578121398
+    seq: 1050
+    total_passes: 6
   t/68-Impersonation-with-filtered-merge.t:
-    elapsed: 0.189421892166138
-    gen: 5
-    last_pass_time: 1568228166.78971
+    elapsed: 0.279520034790039
+    gen: 6
+    last_pass_time: 1578123054.82601
     last_result: 0
-    last_run_time: 1568228166.78971
+    last_run_time: 1578123054.82601
     last_todo: 0
-    mtime: 1566161712
-    seq: 754
-    total_passes: 5
+    mtime: 1577635709
+    seq: 1051
+    total_passes: 6
   t/68-Impersonation-with-merge.t:
-    elapsed: 0.189289093017578
-    gen: 5
-    last_pass_time: 1568228166.79529
+    elapsed: 0.271297931671143
+    gen: 6
+    last_pass_time: 1578123055.39808
     last_result: 0
-    last_run_time: 1568228166.79529
+    last_run_time: 1578123055.39808
     last_todo: 0
-    mtime: 1566161684
-    seq: 755
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1053
+    total_passes: 6
   t/68-Impersonation.t:
-    elapsed: 0.454932928085327
-    gen: 5
-    last_pass_time: 1568228168.92488
+    elapsed: 0.390563011169434
+    gen: 6
+    last_pass_time: 1578123054.13706
     last_result: 0
-    last_run_time: 1568228168.92488
+    last_run_time: 1578123054.13706
     last_todo: 0
-    mtime: 1566161703
-    seq: 777
-    total_passes: 5
-  t/70-2F-TOTP-8.t:
-    elapsed: 3.40962195396423
-    gen: 5
-    last_pass_time: 1568228159.2241
+    mtime: 1578121398
+    seq: 1049
+    total_passes: 6
+  t/70-2F-TOTP-8-with-global-storage.t:
+    elapsed: 0.379889965057373
+    gen: 6
+    last_pass_time: 1578123056.08856
     last_result: 0
-    last_run_time: 1568228159.2241
+    last_run_time: 1578123056.08856
     last_todo: 0
-    mtime: 1566326760
-    seq: 732
-    total_passes: 5
+    seq: 1055
+    total_passes: 1
   t/70-2F-TOTP-with-History.t:
-    elapsed: 0.179828882217407
-    gen: 5
-    last_pass_time: 1568228174.28599
+    elapsed: 0.265434980392456
+    gen: 6
+    last_pass_time: 1578123056.35658
     last_result: 0
-    last_run_time: 1568228174.28599
+    last_run_time: 1578123056.35658
     last_todo: 0
-    mtime: 1566161680
-    seq: 847
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1056
+    total_passes: 6
   t/70-2F-TOTP-with-TTL-and-JSON.t:
-    elapsed: 0.313700914382935
-    gen: 5
-    last_pass_time: 1568228162.98872
+    elapsed: 0.286616086959839
+    gen: 6
+    last_pass_time: 1578123056.64576
     last_result: 0
-    last_run_time: 1568228162.98872
+    last_run_time: 1578123056.64576
     last_todo: 0
-    mtime: 1566161696
-    seq: 742
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1057
+    total_passes: 6
   t/70-2F-TOTP-with-TTL-and-XML.t:
-    elapsed: 3.44065690040588
-    gen: 5
-    last_pass_time: 1568228162.94595
+    elapsed: 0.301239013671875
+    gen: 6
+    last_pass_time: 1578123056.94954
     last_result: 0
-    last_run_time: 1568228162.94595
+    last_run_time: 1578123056.94954
     last_todo: 0
-    mtime: 1566161692
-    seq: 740
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1058
+    total_passes: 6
   t/70-2F-TOTP-with-TTL.t:
-    elapsed: 3.33930015563965
-    gen: 5
-    last_pass_time: 1568228166.28432
+    elapsed: 0.269069194793701
+    gen: 6
+    last_pass_time: 1578123057.22123
     last_result: 0
-    last_run_time: 1568228166.28432
+    last_run_time: 1578123057.22123
     last_todo: 0
-    mtime: 1566161691
-    seq: 744
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1059
+    total_passes: 6
   t/71-2F-U2F-with-History.t:
-    elapsed: 3.240238904953
-    gen: 5
-    last_pass_time: 1568228162.72559
+    elapsed: 0.504844903945923
+    gen: 6
+    last_pass_time: 1578123058.21575
     last_result: 0
-    last_run_time: 1568228162.72559
+    last_run_time: 1578123058.21575
     last_todo: 0
-    mtime: 1566161686
-    seq: 737
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1061
+    total_passes: 6
   t/71-2F-U2F-with-TTL-and-msg.t:
-    elapsed: 11.170264005661
-    gen: 5
-    last_pass_time: 1568228147.05669
+    elapsed: 0.519258975982666
+    gen: 6
+    last_pass_time: 1578123058.73767
     last_result: 0
-    last_run_time: 1568228147.05669
+    last_run_time: 1578123058.73767
     last_todo: 0
-    mtime: 1566161701
-    seq: 711
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1062
+    total_passes: 6
   t/71-2F-U2F-with-TTL.t:
-    elapsed: 11.174901008606
-    gen: 5
-    last_pass_time: 1568228147.06065
+    elapsed: 0.521687030792236
+    gen: 6
+    last_pass_time: 1578123059.26201
     last_result: 0
-    last_run_time: 1568228147.06065
+    last_run_time: 1578123059.26201
     last_todo: 0
-    mtime: 1566161679
-    seq: 712
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1063
+    total_passes: 6
   t/71-2F-U2F.t:
-    elapsed: 0.0157241821289062
-    gen: 5
-    last_pass_time: 1568228159.20331
+    elapsed: 0.484652996063232
+    gen: 6
+    last_pass_time: 1578123057.70831
     last_result: 0
-    last_run_time: 1568228159.20331
+    last_run_time: 1578123057.70831
     last_todo: 0
-    mtime: 1566161693
-    seq: 729
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1060
+    total_passes: 6
   t/72-2F-REST-with-History.t:
-    elapsed: 0.175204992294312
-    gen: 5
-    last_pass_time: 1568228173.25927
+    elapsed: 0.280995845794678
+    gen: 6
+    last_pass_time: 1578123059.54557
     last_result: 0
-    last_run_time: 1568228173.25927
+    last_run_time: 1578123059.54557
     last_todo: 0
-    mtime: 1567545080
-    seq: 830
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1064
+    total_passes: 6
   t/73-2F-UTOTP-TOTP-and-U2F-with-History.t:
-    elapsed: 0.0330901145935059
-    gen: 5
-    last_pass_time: 1568228159.22043
+    elapsed: 0.54288387298584
+    gen: 6
+    last_pass_time: 1578123060.65588
     last_result: 0
-    last_run_time: 1568228159.22043
+    last_run_time: 1578123060.65588
     last_todo: 0
-    mtime: 1566161708
-    seq: 731
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1066
+    total_passes: 6
   t/73-2F-UTOTP-TOTP-and-U2F.t:
-    elapsed: 3.33038902282715
-    gen: 5
-    last_pass_time: 1568228162.73898
+    elapsed: 0.562212944030762
+    gen: 6
+    last_pass_time: 1578123060.11034
     last_result: 0
-    last_run_time: 1568228162.73898
+    last_run_time: 1578123060.11034
     last_todo: 0
-    mtime: 1566161686
-    seq: 739
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1065
+    total_passes: 6
   t/73-2F-UTOTP-TOTP-only-with-History.t:
-    elapsed: 8.11429405212402
-    gen: 5
-    last_pass_time: 1568228155.49131
+    elapsed: 0.280945777893066
+    gen: 6
+    last_pass_time: 1578123061.21599
     last_result: 0
-    last_run_time: 1568228155.49131
+    last_run_time: 1578123061.21599
     last_todo: 0
-    mtime: 1566161705
-    seq: 716
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1068
+    total_passes: 6
   t/73-2F-UTOTP-TOTP-only.t:
-    elapsed: 0.172497034072876
-    gen: 5
-    last_pass_time: 1568228174.0308
+    elapsed: 0.273998975753784
+    gen: 6
+    last_pass_time: 1578123060.93252
     last_result: 0
-    last_run_time: 1568228174.0308
+    last_run_time: 1578123060.93252
     last_todo: 0
-    mtime: 1566161692
-    seq: 843
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1067
+    total_passes: 6
   t/74-2F-Required.t:
-    elapsed: 0.128525972366333
-    gen: 5
-    last_pass_time: 1568228172.80738
+    elapsed: 0.249631881713867
+    gen: 6
+    last_pass_time: 1578123061.46811
     last_result: 0
-    last_run_time: 1568228172.80738
+    last_run_time: 1578123061.46811
     last_todo: 0
-    mtime: 1566161698
-    seq: 825
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1069
+    total_passes: 6
   t/75-2F-Registers.t:
-    elapsed: 0.0269069671630859
-    gen: 5
-    last_pass_time: 1568228159.21378
+    elapsed: 0.498811006546021
+    gen: 6
+    last_pass_time: 1578123061.9694
     last_result: 0
-    last_run_time: 1568228159.21378
+    last_run_time: 1578123061.9694
     last_todo: 0
-    mtime: 1566161688
-    seq: 730
-    total_passes: 5
+    mtime: 1576045451
+    seq: 1070
+    total_passes: 6
   t/76-2F-Ext-with-BruteForce.t:
-    elapsed: 11.1470317840576
-    gen: 5
-    last_pass_time: 1568228147.04722
+    elapsed: 0.308319807052612
+    gen: 6
+    last_pass_time: 1578123062.28033
     last_result: 0
-    last_run_time: 1568228147.04722
+    last_run_time: 1578123062.28033
     last_todo: 0
-    mtime: 1567545080
-    seq: 709
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1071
+    total_passes: 6
   t/76-2F-Ext-with-CodeActivation.t:
-    elapsed: 0.118151903152466
-    gen: 5
-    last_pass_time: 1568228174.71704
+    elapsed: 0.294604063034058
+    gen: 6
+    last_pass_time: 1578123062.57781
     last_result: 0
-    last_run_time: 1568228174.71704
+    last_run_time: 1578123062.57781
     last_todo: 0
-    mtime: 1567545080
-    seq: 854
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1072
+    total_passes: 6
   t/76-2F-Ext-with-GrantSession.t:
-    elapsed: 0.119552135467529
-    gen: 5
-    last_pass_time: 1568228175.0556
+    elapsed: 0.239151954650879
+    gen: 6
+    last_pass_time: 1578123062.81947
     last_result: 0
-    last_run_time: 1568228175.0556
+    last_run_time: 1578123062.81947
     last_todo: 0
-    mtime: 1567545080
-    seq: 859
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1073
+    total_passes: 6
   t/76-2F-Ext-with-History.t:
-    elapsed: 0.15120792388916
-    gen: 5
-    last_pass_time: 1568228174.58343
+    elapsed: 0.275405883789062
+    gen: 6
+    last_pass_time: 1578123063.09766
     last_result: 0
-    last_run_time: 1568228174.58343
+    last_run_time: 1578123063.09766
     last_todo: 0
-    mtime: 1567545080
-    seq: 851
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1074
+    total_passes: 6
   t/77-2F-Extra.t:
-    elapsed: 0.24836802482605
-    gen: 5
-    last_pass_time: 1568228169.68073
+    elapsed: 0.35393500328064
+    gen: 6
+    last_pass_time: 1578123063.45418
     last_result: 0
-    last_run_time: 1568228169.68073
+    last_run_time: 1578123063.45418
     last_todo: 0
-    mtime: 1567545080
-    seq: 785
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1075
+    total_passes: 6
   t/77-2F-Mail-with-global-storage.t:
-    elapsed: 0.315623998641968
-    gen: 5
-    last_pass_time: 1568228170.40461
+    elapsed: 0.350372076034546
+    gen: 6
+    last_pass_time: 1578123064.13957
     last_result: 0
-    last_run_time: 1568228170.40461
+    last_run_time: 1578123064.13957
     last_todo: 0
-    mtime: 1567545080
-    seq: 793
-    total_passes: 5
+    mtime: 1578122054
+    seq: 1077
+    total_passes: 6
   t/77-2F-Mail.t:
-    elapsed: 0.209239959716797
-    gen: 5
-    last_pass_time: 1568228170.69004
+    elapsed: 0.329925060272217
+    gen: 6
+    last_pass_time: 1578123063.78665
     last_result: 0
-    last_run_time: 1568228170.69004
+    last_run_time: 1578123063.78665
     last_todo: 0
-    mtime: 1567545080
-    seq: 796
-    total_passes: 5
+    mtime: 1576257051
+    seq: 1076
+    total_passes: 6
   t/78-2F-Upgrade.t:
-    elapsed: 0.343040943145752
-    gen: 5
-    last_pass_time: 1568228170.26303
+    elapsed: 0.342027187347412
+    gen: 6
+    last_pass_time: 1578123064.48415
     last_result: 0
-    last_run_time: 1568228170.26303
+    last_run_time: 1578123064.48415
     last_todo: 0
-    mtime: 1567545080
-    seq: 791
-    total_passes: 5
+    mtime: 1578121398
+    seq: 1078
+    total_passes: 6
   t/90-Translations.t:
-    elapsed: 0.0319240093231201
-    gen: 5
-    last_pass_time: 1568228147.17856
+    elapsed: 0.0712189674377441
+    gen: 6
+    last_pass_time: 1578123064.55798
     last_result: 0
-    last_run_time: 1568228147.17856
+    last_run_time: 1578123064.55798
     last_todo: 0
-    mtime: 1566161682
-    seq: 713
-    total_passes: 5
+    mtime: 1569964806
+    seq: 1079
+    total_passes: 6
   t/99-Dont-load-Dumper.t:
-    elapsed: 0.323445081710815
-    gen: 5
-    last_pass_time: 1568228170.20878
+    elapsed: 0.293112993240356
+    gen: 6
+    last_pass_time: 1578123064.85352
     last_result: 0
-    last_run_time: 1568228170.20878
+    last_run_time: 1578123064.85352
     last_todo: 0
-    mtime: 1567545352
-    seq: 790
-    total_passes: 2
+    mtime: 1576734087
+    seq: 1080
+    total_passes: 3
   t/99-pod.t:
-    elapsed: 0.374809980392456
-    gen: 5
-    last_pass_time: 1568228171.84529
+    elapsed: 0.23412299156189
+    gen: 6
+    last_pass_time: 1578123065.0902
     last_result: 0
-    last_run_time: 1568228171.84529
+    last_run_time: 1578123065.0902
     last_todo: 0
     mtime: 1566161693
-    seq: 812
-    total_passes: 5
+    seq: 1081
+    total_passes: 6
 version: 1
 ...

From f37c2399b1319f76a0ec88e78453de79ba5e7e8b Mon Sep 17 00:00:00 2001
From: Christophe Maudoux <chrmdx@gmail.com>
Date: Sat, 4 Jan 2020 13:34:50 +0100
Subject: [PATCH 60/60] Update sessionInfo during auth process with 2FA

---
 .../Lemonldap/NG/Portal/2F/Engines/Default.pm  |  6 ++++--
 .../Lemonldap/NG/Portal/Main/SecondFactor.pm   | 18 +++++++++---------
 2 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
index cffcf663c..33da5c9fa 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Engines/Default.pm
@@ -299,8 +299,10 @@ sub run {
     $req->sessionInfo->{_2fRealSession} = $req->id;
     $req->sessionInfo->{_2fUrldc}       = $req->urldc;
     $req->sessionInfo->{_2fUtime}       = $req->{sessionInfo}->{_utime};
-    $req->sessionInfo->{_impSpoofId}    = $spoofId;
-    $req->sessionInfo->{_impUser}       = $req->user;
+    if ( $self->conf->{impersonationRule} ) {
+        $req->sessionInfo->{_impSpoofId} = $spoofId;
+        $req->sessionInfo->{_impUser}    = $req->user;
+    }
     my $token = $self->ott->createToken( $req->sessionInfo );
     delete $req->{authResult};
 
diff --git a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/SecondFactor.pm b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/SecondFactor.pm
index 7cd747cc8..c04b14069 100644
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/SecondFactor.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/SecondFactor.pm
@@ -10,7 +10,7 @@ use Lemonldap::NG::Portal::Main::Constants qw(
   PE_BADCREDENTIALS
 );
 
-our $VERSION = '2.0.6';
+our $VERSION = '2.0.8';
 
 extends qw(
   Lemonldap::NG::Portal::Main::Plugin
@@ -101,23 +101,23 @@ sub _verify {
     # Launch second factor verification
     my $res = $self->verify( $req, $session );
 
+    # Update sessionInfo
+    delete $session->{$_}
+      foreach (qw(tokenSessionStartTimestamp tokenTimeoutTimestamp _type));
+    $req->sessionInfo($session);
+    $req->id( delete $req->sessionInfo->{_2fRealSession} );
+    $req->urldc( delete $req->sessionInfo->{_2fUrldc} );
+    $req->{sessionInfo}->{_utime} = delete $req->{sessionInfo}->{_2fUtime};
+
     # Case error
     if ($res) {
         $req->noLoginDisplay(1);
-        $req->sessionInfo($session);
-        $req->id( delete $req->sessionInfo->{_2fRealSession} );
-        $req->urldc( delete $req->sessionInfo->{_2fUrldc} );
-        $req->{sessionInfo}->{_utime} = delete $req->{sessionInfo}->{_2fUtime};
         $req->authResult(PE_BADCREDENTIALS);
         return $self->p->do( $req,
             [ sub { $self->p->storeHistory(@_) }, sub { $res } ] );
     }
 
     # Else restore session
-    $req->sessionInfo($session);
-    $req->id( delete $req->sessionInfo->{_2fRealSession} );
-    $req->urldc( delete $req->sessionInfo->{_2fUrldc} );
-    $req->{sessionInfo}->{_utime} = delete $req->{sessionInfo}->{_2fUtime};
     $req->mustRedirect(1);
     $self->userLogger->notice( $self->prefix
           . '2F verification for '