Update documentation

This commit is contained in:
Clément Oudot 2013-07-21 16:37:21 +00:00
parent 06527a4b9a
commit 42c5e86271
11 changed files with 169 additions and 67 deletions

File diff suppressed because one or more lines are too long

View File

@ -143,16 +143,14 @@ We use <a href="http://jira.ow2.org" class="urlextern" title="http://jira.ow2.or
</li>
<li class="level1"><div class="li"> <strong>Xavier GUIMARD</strong>: historic project leader, developer, Debian packager, administrator of big Lemonldap::NG instances</div>
</li>
<li class="level1"><div class="li"> <strong>Thomas CHEMINEAU</strong>: developer, graphics</div>
</li>
<li class="level1"><div class="li"> <strong>François-Xavier DELTOMBE</strong>: developer, tester</div>
</li>
<li class="level1"><div class="li"> <strong>Sandro CAZZANIGA</strong>: developer, Mageia packager</div>
<li class="level1"><div class="li"> <strong>Sandro CAZZANIGA</strong>: developer, tester</div>
</li>
</ul>
</div>
<!-- SECTION "Core team" [2320-2831] -->
<!-- SECTION "Core team" [2320-2776] -->
<h2><a name="past_and_present_contributors" id="past_and_present_contributors">Past and present contributors</a></h2>
<div class="level2">
@ -178,6 +176,8 @@ By alphabetical order:
</li>
<li class="level1"><div class="li"> Jean-Thomas CHECCO</div>
</li>
<li class="level1"><div class="li"> Thomas CHEMINEAU</div>
</li>
<li class="level1"><div class="li"> Sebastien DIAZ</div>
</li>
<li class="level1"><div class="li"> Gaultier HUBERT</div>
@ -197,4 +197,4 @@ By alphabetical order:
</ul>
</div>
<!-- SECTION "Past and present contributors" [2832-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "Past and present contributors" [2777-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -280,13 +280,85 @@ Modify the portal virtual host:
&nbsp;
&lt;/<span class="kw3">VirtualHost</span>&gt;</pre>
</div>
<!-- SECTION "Configuration of Apache virtual host" [3990-4634] -->
<h3><a name="use_kerberos_with_multiple_authentication_backend" id="use_kerberos_with_multiple_authentication_backend">Use Kerberos with Multiple authentication backend</a></h3>
<div class="level3">
<p>
<p><div class="notetip">Do no set <code>require valid-user</code> if you want to be able to fail back to another authentication backend for users without Kerberos ticket.
</div></p>
You may want to use the <a href="../../documentation/1.3/authmulti.html" class="wikilink1" title="documentation:1.3:authmulti">Mutliple authentication backend</a> to fail back to another authentication for user without Kerberos ticket.
</p>
<p>
This needs some hacking because the Apache Kerberos authentication module do not work if <code>require valid-user</code> is not set.
</p>
<p>
To achieve this, follow these steps:
</p>
<ul>
<li class="level1"><div class="li"> Create a symlink on portal/index.pl to define the kerberos authentication end point:</div>
</li>
</ul>
<pre class="code">
ln -s /var/lib/lemonldap-ng/portal/index.pl /var/lib/lemonldap-ng/portal/kerberos.pl
</pre>
<ul>
<li class="level1"><div class="li"> Create a redirection script, called login.pl:</div>
</li>
</ul>
<pre class="code">
vi /var/lib/lemonldap-ng/portal/login.pl
</pre>
<pre class="code file perl"><span class="co1">#!/usr/bin/perl</span>
<span class="kw2">use</span> CGI <span class="st_h">':cgi-lib'</span><span class="sy0">;</span>
<span class="kw2">use</span> strict<span class="sy0">;</span>
<span class="kw2">use</span> MIME<span class="sy0">::</span><span class="me2">Base64</span><span class="sy0">;</span>
<span class="kw2">use</span> CGI<span class="sy0">::</span><span class="me2">Carp</span> <span class="st_h">'fatalsToBrowser'</span><span class="sy0">;</span>
<span class="kw1">my</span> <span class="re0">$uri</span> <span class="sy0">=</span> <span class="re0">$ENV</span><span class="br0">&#123;</span><span class="st0">&quot;REDIRECT_QUERY_STRING&quot;</span><span class="br0">&#125;</span><span class="sy0">;</span>
<a href="http://perldoc.perl.org/functions/print.html"><span class="kw3">print</span></a> CGI<span class="sy0">::</span><span class="me2">header</span><span class="br0">&#40;</span><span class="sy0">-</span>Refresh <span class="sy0">=&gt;</span> <span class="st_h">'0; URL=http://auth.example.com/?'</span><span class="sy0">.</span><span class="re0">$uri</span><span class="br0">&#41;</span><span class="sy0">;</span>
<a href="http://perldoc.perl.org/functions/exit.html"><span class="kw3">exit</span></a><span class="br0">&#40;</span>0<span class="br0">&#41;</span><span class="sy0">;</span></pre>
<ul>
<li class="level1"><div class="li"> Modify the Apache virtual host to separate the Kerberos Authentication module:</div>
</li>
</ul>
<pre class="code file apache">&lt;<span class="kw3">VirtualHost</span> *&gt;
<span class="kw1">ServerName</span> auth.example.com
&nbsp;
<span class="kw1">DocumentRoot</span> /var/lib/lemonldap-ng/portal/
&nbsp;
&lt;<span class="kw3">Directory</span> /var/lib/lemonldap-ng/portal/&gt;
<span class="kw1">Order</span> <span class="kw1">allow</span>,<span class="kw1">deny</span>
<span class="kw1">Allow</span> from <span class="kw2">all</span>
<span class="kw1">Options</span> +ExecCGI +<span class="kw2">FollowSymLinks</span>
&lt;/<span class="kw3">Directory</span>&gt;
&nbsp;
<span class="kw1">ErrorDocument</span> 401 /login.pl
&lt;<span class="kw3">Location</span> /kerberos.pl&gt;
&lt;<span class="kw3">IfModule</span> auth_kerb_module&gt;
<span class="kw1">AuthType</span> Kerberos
KrbMethodNegotiate <span class="kw2">On</span>
KrbMethodK5Passwd <span class="kw2">Off</span>
KrbAuthRealms EXAMPLE.COM
Krb5KeyTab /etc/lemonldap-ng/auth.keytab
KrbVerifyKDC <span class="kw2">Off</span>
KrbServiceName HTTP/auth.example.com
&lt;/<span class="kw3">IfModule</span>&gt;
&lt;/<span class="kw3">Location</span>&gt;
&nbsp;
&lt;/<span class="kw3">VirtualHost</span>&gt;</pre>
<ul>
<li class="level1"><div class="li"> Modify LemonLDAP::NG Portal <acronym title="Uniform Resource Locator">URL</acronym> trough Manager to: <a href="http://auth.example.com/kerberos.pl" class="urlextern" title="http://auth.example.com/kerberos.pl" rel="nofollow">http://auth.example.com/kerberos.pl</a></div>
</li>
<li class="level1"><div class="li"> Configure Multiple authentication backend (for example: Apache;<acronym title="Lightweight Directory Access Protocol">LDAP</acronym>)</div>
</li>
<li class="level1"><div class="li"> Restart Apache</div>
</li>
</ul>
</div>
<!-- SECTION "Configuration of Apache virtual host" [3990-4790] -->
<!-- SECTION "Use Kerberos with Multiple authentication backend" [4635-6422] -->
<h3><a name="time_to_test" id="time_to_test">Time to test</a></h3>
<div class="level3">
@ -297,4 +369,4 @@ Configure <acronym title="Internet Explorer">IE</acronym> or Firefox to trust <c
</p>
</div>
<!-- SECTION "Time to test" [4791-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "Time to test" [6423-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -160,11 +160,15 @@ multi <span class="sy0">=&gt;</span> <span class="br0">&#123;</span>
<p>
When using this module, <acronym title="LemonLDAP::NG">LL::NG</acronym> portal will be called only if Apache does not return “401 Authentication required”, but this is not the Apache behaviour: if the auth module fails, Apache returns 401. We&#039;re studying a future solution for this…
When using this module, <acronym title="LemonLDAP::NG">LL::NG</acronym> portal will be called only if Apache does not return “401 Authentication required”, but this is not the Apache behaviour: if the auth module fails, Apache returns 401.
</p>
<p>
To bypass this, follow the documentation of <a href="../../documentation/1.3/authapache.html#use_kerberos_with_multiple_authentication_backend" class="wikilink1" title="documentation:1.3:authapache">AuthApache module</a>
</p>
</div>
<!-- SECTION "AuthApache authentication" [2481-2762] -->
<!-- SECTION "AuthApache authentication" [2481-2845] -->
<h3><a name="ssl_authentication" id="ssl_authentication">SSL authentication</a></h3>
<div class="level3">
@ -175,4 +179,4 @@ To chain <acronym title="Secure Sockets Layer">SSL</acronym>, you have to set
</p>
</div>
<!-- SECTION "SSL authentication" [2763-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "SSL authentication" [2846-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -35,20 +35,20 @@ If you use features like <acronym title="Security Assertion Markup Language">SAM
</p>
<p>
The following table list fields to index depending on the feature you want to use:
The following table list fields to index depending on the feature you want to increase performance:
</p>
<table class="inline">
<tr class="row0 roweven">
<th class="col0 centeralign"> Feature </th><th class="col1 centeralign"> Fields to index </th>
</tr>
<tr class="row1 rowodd">
<td class="col0 centeralign"> Session explorer </td><td class="col1 centeralign"> ipAddr <em>WHATTOTRACE</em> </td>
<td class="col0"> Session explorer </td><td class="col1 centeralign"> ipAddr <em>WHATTOTRACE</em> _httpSessionType ipAddr </td>
</tr>
<tr class="row2 roweven">
<td class="col0 rightalign"> Session restrictions </td><td class="col1 centeralign"> ipAddr <em>WHATTOTRACE</em> </td>
<td class="col0"> Session restrictions </td><td class="col1 centeralign"> ipAddr <em>WHATTOTRACE</em> </td>
</tr>
<tr class="row3 rowodd">
<td class="col0 rightalign"> <acronym title="Security Assertion Markup Language">SAML</acronym> authentication and issuer </td><td class="col1 centeralign"> _saml_id ProxyID _nameID _assert_id _art_id </td>
<td class="col0 rightalign"> <acronym title="Security Assertion Markup Language">SAML</acronym> authentication and issuer </td><td class="col1 centeralign"> _saml_id ProxyID _nameID _assert_id _art_id _session_id </td>
</tr>
<tr class="row4 roweven">
<td class="col0 centeralign"> <acronym title="Central Authentication Service">CAS</acronym> issuer </td><td class="col1 centeralign"> _cas_id </td>
@ -75,12 +75,12 @@ The following table list fields to index depending on the feature you want to us
</p>
</div>
<!-- SECTION "Browseable session backend" [1-1329] -->
<!-- SECTION "Browseable session backend" [1-1379] -->
<h2><a name="setup" id="setup">Setup</a></h2>
<div class="level2">
</div>
<!-- SECTION "Setup" [1330-1348] -->
<!-- SECTION "Setup" [1380-1398] -->
<h3><a name="prepare_database" id="prepare_database">Prepare database</a></h3>
<div class="level3">
@ -106,7 +106,7 @@ Database must be prepared exactly like in <a href="../../documentation/1.3/sqlse
<span class="br0">&#41;</span>;</pre>
</div>
<!-- SECTION "Prepare database" [1349-1896] -->
<!-- SECTION "Prepare database" [1399-1946] -->
<h3><a name="manager" id="manager">Manager</a></h3>
<div class="level3">
@ -171,7 +171,7 @@ For databases like PostgreSQL, don&#039;t forget to add “Commit” with a valu
</p>
</div>
<!-- SECTION "Manager" [1897-3074] -->
<!-- SECTION "Manager" [1947-3124] -->
<h2><a name="security" id="security">Security</a></h2>
<div class="level2">
@ -185,4 +185,4 @@ You can also use different user/password for your servers by overriding paramete
</p>
</div>
<!-- SECTION "Security" [3075-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "Security" [3125-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -105,6 +105,14 @@ admin <span class="sy0">-&gt;</span> <span class="re0">$uid</span> <span class="
<span class="co1"># Use a group in a rule</span>
<span class="sy0">^/</span>admin <span class="sy0">-&gt;</span> <span class="re0">$groups</span> <span class="sy0">=~</span> <span class="sy0">/</span><span class="re0">\badmin</span><span class="re0">\b</span><span class="sy0">/</span></pre>
<p>
Note that groups are computed after macros, so a group rule may involve a macro value.
</p>
<p>
Besides, macros and groups are computed in alphanumeric order, that is, in the order they are displayed in the manager. For example, macro “macro1” will be computed before macro “macro2”: so, expression of macro2 may involve value of macro1. As same for groups: a group rule may involve another, previously computed group.
</p>
</div>
</div>
<div class="level2">

View File

@ -579,12 +579,18 @@ The attribute key name can be used directly in <code>lemonldap-ng.ini</code> or
<tr class="row178 roweven">
<td class="col0"> Maintenance mode </td><td class="col1"> maintenance </td><td class="col2"> </td><td class="col3 centeralign"></td><td class="col4"> </td>
</tr>
<tr class="row179 rowodd">
<td class="col0"> Persistent Session backend </td><td class="col1"> persistentStorage </td><td class="col2 centeralign"></td><td class="col3"> </td><td class="col4"> </td>
</tr>
<tr class="row180 roweven">
<td class="col0"> Persistent Session backend options </td><td class="col1"> persistentStorageOptions </td><td class="col2 centeralign"></td><td class="col3"> </td><td class="col4"> </td>
</tr>
</table>
</div>
</p>
</div>
<!-- SECTION "Main parameters" [264-10648] -->
<!-- SECTION "Main parameters" [264-10789] -->
<h2><a name="configuration_backend_parameters" id="configuration_backend_parameters">Configuration backend parameters</a></h2>
<div class="level2">
<table class="inline">
@ -636,4 +642,4 @@ The attribute key name can be used directly in <code>lemonldap-ng.ini</code> or
</table>
</div>
<!-- SECTION "Configuration backend parameters" [10649-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "Configuration backend parameters" [10790-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -38,10 +38,11 @@ Lemonldap::NG is designed to be very performant. In particular, it use Apache2 t
<p>
Handlers check rights and calculate headers for each <acronym title="Hyper Text Transfer Protocol">HTTP</acronym> hit. So to improve performances, avoid too complex rules by using the macro or the groups or local macros.
</p>
</div>
<!-- SECTION "Handler performance" [255-453] -->
<!-- SECTION "Handler performance" [255-452] -->
<h3><a name="macros_and_groups" id="macros_and_groups">Macros and groups</a></h3>
<div class="level3">
@ -81,8 +82,16 @@ admin <span class="sy0">-&gt;</span> <span class="re0">$uid</span> <span class="
<span class="co1"># Use a group in a rule</span>
<span class="sy0">^/</span>admin <span class="sy0">-&gt;</span> <span class="re0">$groups</span> <span class="sy0">=~</span> <span class="sy0">/</span><span class="re0">\badmin</span><span class="re0">\b</span><span class="sy0">/</span></pre>
<p>
Note that groups are computed after macros, so a group rule may involve a macro value.
</p>
<p>
Besides, macros and groups are computed in alphanumeric order, that is, in the order they are displayed in the manager. For example, macro “macro1” will be computed before macro “macro2”: so, expression of macro2 may involve value of macro1. As same for groups: a group rule may involve another, previously computed group.
</p>
</div>
<!-- SECTION "Macros and groups" [454-1308] -->
<!-- SECTION "Macros and groups" [453-1719] -->
<h3><a name="local_macros" id="local_macros">Local macros</a></h3>
<div class="level3">
@ -101,12 +110,12 @@ Display<span class="sy0">-</span>Name <span class="sy0">-&gt;</span> <span class
</p>
</div>
<!-- SECTION "Local macros" [1309-1966] -->
<!-- SECTION "Local macros" [1720-2377] -->
<h2><a name="portal_performances" id="portal_performances">Portal performances</a></h2>
<div class="level2">
</div>
<!-- SECTION "Portal performances" [1967-1999] -->
<!-- SECTION "Portal performances" [2378-2410] -->
<h3><a name="general_performances" id="general_performances">General performances</a></h3>
<div class="level3">
@ -121,7 +130,7 @@ The portal is the biggest component of Lemonldap::NG. It is recommended to use M
&lt;/<span class="kw3">Files</span>&gt;</pre>
</div>
<!-- SECTION "General performances" [2000-2343] -->
<!-- SECTION "General performances" [2411-2754] -->
<h3><a name="starting_performances" id="starting_performances">Starting performances</a></h3>
<div class="level3">
@ -141,7 +150,7 @@ To make the portal start faster when the server is relaunched, add those lines i
&lt;/Perl&gt;</pre>
</div>
<!-- SECTION "Starting performances" [2344-2919] -->
<!-- SECTION "Starting performances" [2755-3330] -->
<h3><a name="apachesession_performances" id="apachesession_performances">Apache::Session performances</a></h3>
<div class="level3">
@ -150,7 +159,7 @@ To make the portal start faster when the server is relaunched, add those lines i
Lemonldap::NG handlers use a local cache to store sessions (for 10 minutes). So Apache::Session module is not a problem for handlers. It can be a brake for the portal:
</p>
<ol>
<li class="level1"><div class="li"> When you use the multiple sessions restriction parameters, sessions are parsed for each authentication unless you use an <a href="http://search.cpan.org/perldoc?Apache::Session::Browseable" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session::Browseable" rel="nofollow">Apache::Session::Browseable</a> module.</div>
<li class="level1"><div class="li"> When you use the multiple sessions restriction parameters, sessions are parsed for each authentication unless you use an <a href="https://metacpan.org/module/Apache::Session::Browseable" class="urlextern" title="https://metacpan.org/module/Apache::Session::Browseable" rel="nofollow">Apache::Session::Browseable</a> module.</div>
</li>
<li class="level1"><div class="li"> Since MySQL does not have always transaction feature, Apache::Session::MySQL has been designed to use MySQL locks. Since MySQL performances are very bad using this, if you want to store sessions in a MySQL database, prefer one of the following</div>
</li>
@ -163,7 +172,7 @@ Lemonldap::NG handlers use a local cache to store sessions (for 10 minutes). So
<p>
In “Apache::Session module” field, set ”<a href="http://search.cpan.org/perldoc?Apache::Session::Flex" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session::Flex" rel="nofollow">Apache::Session::Flex</a>” and use the following parameters:
In “Apache::Session module” field, set ”<a href="https://metacpan.org/module/Apache::Session::Flex" class="urlextern" title="https://metacpan.org/module/Apache::Session::Flex" rel="nofollow">Apache::Session::Flex</a>” and use the following parameters:
</p>
<pre class="code">
@ -188,7 +197,7 @@ Password -&gt; ...
<p>
<a href="http://search.cpan.org/perldoc?Apache::Session::Browseable" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session::Browseable" rel="nofollow">Apache::Session::Browseable</a> is a wrapper for other Apache::Session modules that add the capability to manage indexes. To use it (with MySQL for example), choose “Apache::Session::Browseable::MySQL” as “Apache::Session module” and use the following parameters:
<a href="https://metacpan.org/module/Apache::Session::Browseable" class="urlextern" title="https://metacpan.org/module/Apache::Session::Browseable" rel="nofollow">Apache::Session::Browseable</a> is a wrapper for other Apache::Session modules that add the capability to manage indexes. To use it (with MySQL for example), choose “Apache::Session::Browseable::MySQL” as “Apache::Session module” and use the following parameters:
</p>
<pre class="code">
@ -203,7 +212,7 @@ Note that Apache::Session::Browseable::MySQL doesn&#039;t use MySQL locks.
</p>
<p>
<p><div class="notetip">A <a href="http://search.cpan.org/perldoc?Apache::Session::Browseable::Redis" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session::Browseable::Redis" rel="nofollow">Apache::Session::Browseable::Redis</a> has been created, it is the faster
<p><div class="notetip">A <a href="https://metacpan.org/module/Apache::Session::Browseable::Redis" class="urlextern" title="https://metacpan.org/module/Apache::Session::Browseable::Redis" rel="nofollow">Apache::Session::Browseable::Redis</a> has been created, it is the faster (except for session explorer, defeated by Apache::Session::Browseable::<a href="https://metacpan.org/module/Apache::Session::Browseable" class="urlextern" title="https://metacpan.org/module/Apache::Session::Browseable" rel="nofollow">DBI</a>/<a href="https://metacpan.org/module/Apache::Session::Browseable::LDAP" class="urlextern" title="https://metacpan.org/module/Apache::Session::Browseable::LDAP" rel="nofollow">LDAP</a> &gt;= 1.0)
</div></p>
</p>
@ -213,7 +222,7 @@ Note that Apache::Session::Browseable::MySQL doesn&#039;t use MySQL locks.
</p>
</div>
<!-- SECTION "Apache::Session performances" [2920-4987] -->
<!-- SECTION "Apache::Session performances" [3331-5600] -->
<h3><a name="ldap_performances" id="ldap_performances">LDAP performances</a></h3>
<div class="level3">
@ -263,4 +272,4 @@ ldapgroups -&gt; memberOf
</p>
</div>
<!-- SECTION "LDAP performances" [4988-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "LDAP performances" [5601-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -126,54 +126,57 @@
<td class="col0"> <a href="../../documentation/1.3/authchoice.html" class="wikilink1" title="documentation:1.3:authchoice">Backend choice by users</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
</tr>
<tr class="row3 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authcas.html" class="wikilink1" title="documentation:1.3:authcas">CAS</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authbrowserid.html" class="wikilink1" title="documentation:1.3:authbrowserid">BrowserID (Mozilla Persona)</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row4 roweven">
<td class="col0"> <a href="../../documentation/1.3/authdbi.html" class="wikilink1" title="documentation:1.3:authdbi">Databases (DBI)</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 centeralign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authcas.html" class="wikilink1" title="documentation:1.3:authcas">CAS</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row5 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authdemo.html" class="wikilink1" title="documentation:1.3:authdemo">Demonstration</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
<td class="col0"> <a href="../../documentation/1.3/authdbi.html" class="wikilink1" title="documentation:1.3:authdbi">Databases (DBI)</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
</tr>
<tr class="row6 roweven">
<td class="col0"> <a href="../../documentation/1.3/authldap.html" class="wikilink1" title="documentation:1.3:authldap">LDAP</a> (including <a href="#mini_howtos" title="documentation:1.3:start &crarr;" class="wikilink1">Active Directory)</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
<td class="col0"> <a href="../../documentation/1.3/authdemo.html" class="wikilink1" title="documentation:1.3:authdemo">Demonstration</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
</tr>
<tr class="row7 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authnull.html" class="wikilink1" title="documentation:1.3:authnull">Null</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
<td class="col0"> <a href="../../documentation/1.3/authldap.html" class="wikilink1" title="documentation:1.3:authldap">LDAP</a> (including <a href="#mini_howtos" title="documentation:1.3:start &crarr;" class="wikilink1">Active Directory)</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"></td>
</tr>
<tr class="row8 roweven">
<td class="col0"> <a href="../../documentation/1.3/authopenid.html" class="wikilink1" title="documentation:1.3:authopenid">OpenID</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authnull.html" class="wikilink1" title="documentation:1.3:authnull">Null</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 centeralign"> </td>
</tr>
<tr class="row9 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authproxy.html" class="wikilink1" title="documentation:1.3:authproxy">Proxy LL::NG</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authopenid.html" class="wikilink1" title="documentation:1.3:authopenid">OpenID</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
</tr>
<tr class="row10 roweven">
<td class="col0"> <a href="../../documentation/1.3/authradius.html" class="wikilink1" title="documentation:1.3:authradius">Radius</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authproxy.html" class="wikilink1" title="documentation:1.3:authproxy">Proxy LL::NG</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row11 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authremote.html" class="wikilink1" title="documentation:1.3:authremote">Remote LL::NG</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authradius.html" class="wikilink1" title="documentation:1.3:authradius">Radius</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row12 roweven">
<td class="col0"> <a href="../../documentation/1.3/authsaml.html" class="wikilink1" title="documentation:1.3:authsaml">SAML 2.0 / Shibboleth</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authremote.html" class="wikilink1" title="documentation:1.3:authremote">Remote LL::NG</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
</tr>
<tr class="row13 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authslave.html" class="wikilink1" title="documentation:1.3:authslave">Slave</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authsaml.html" class="wikilink1" title="documentation:1.3:authsaml">SAML 2.0 / Shibboleth</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"></td><td class="col3 leftalign"> </td>
</tr>
<tr class="row14 roweven">
<td class="col0"> <a href="../../documentation/1.3/authssl.html" class="wikilink1" title="documentation:1.3:authssl">SSL</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authslave.html" class="wikilink1" title="documentation:1.3:authslave">Slave</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row15 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authmulti.html" class="wikilink1" title="documentation:1.3:authmulti">Stack multiple backends</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authssl.html" class="wikilink1" title="documentation:1.3:authssl">SSL</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row16 roweven">
<td class="col0"> <a href="../../documentation/1.3/authtwitter.html" class="wikilink1" title="documentation:1.3:authtwitter">Twitter</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
<td class="col0"> <a href="../../documentation/1.3/authmulti.html" class="wikilink1" title="documentation:1.3:authmulti">Stack multiple backends</a> </td><td class="col1 centeralign"></td><td class="col2 centeralign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row17 rowodd">
<td class="col0"> <a href="../../documentation/1.3/authtwitter.html" class="wikilink1" title="documentation:1.3:authtwitter">Twitter</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
<tr class="row18 roweven">
<td class="col0"> <a href="../../documentation/1.3/authyubikey.html" class="wikilink1" title="documentation:1.3:authyubikey">Yubikey</a> </td><td class="col1 centeralign"></td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
</tr>
</table>
</div>
<!-- SECTION "Authentication, users and password databases" [1122-2249] -->
<!-- SECTION "Authentication, users and password databases" [1122-2317] -->
<h3><a name="configuration_database" id="configuration_database">Configuration database</a></h3>
<div class="level3">
@ -213,7 +216,7 @@
</p>
</div>
<!-- SECTION "Configuration database" [2250-3356] -->
<!-- SECTION "Configuration database" [2318-3424] -->
<h3><a name="sessions_database" id="sessions_database">Sessions database</a></h3>
<div class="level3">
@ -256,7 +259,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</table>
</div>
<!-- SECTION "Sessions database" [3357-5194] -->
<!-- SECTION "Sessions database" [3425-5262] -->
<h3><a name="identity_provider" id="identity_provider">Identity provider</a></h3>
<div class="level3">
@ -293,7 +296,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</p>
</div>
<!-- SECTION "Identity provider" [5195-5633] -->
<!-- SECTION "Identity provider" [5263-5701] -->
<h2><a name="applications_protection" id="applications_protection">Applications protection</a></h2>
<div class="level2">
@ -318,7 +321,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</ul>
</div>
<!-- SECTION "Applications protection" [5634-6046] -->
<!-- SECTION "Applications protection" [5702-6114] -->
<h2><a name="advanced_features" id="advanced_features">Advanced features</a></h2>
<div class="level2">
@ -361,7 +364,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</ul>
</div>
<!-- SECTION "Advanced features" [6047-6816] -->
<!-- SECTION "Advanced features" [6115-6884] -->
<h2><a name="mini_howtos" id="mini_howtos">Mini howtos</a></h2>
<div class="level2">
@ -390,7 +393,7 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</ul>
</div>
<!-- SECTION "Mini howtos" [6817-7447] -->
<!-- SECTION "Mini howtos" [6885-7515] -->
<h2><a name="exploitation" id="exploitation">Exploitation</a></h2>
<div class="level2">
@ -419,4 +422,4 @@ Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Sessio
</ul>
</div>
<!-- SECTION "Exploitation" [7448-] --></div><!-- closes <div class="dokuwiki export">-->
<!-- SECTION "Exploitation" [7516-] --></div><!-- closes <div class="dokuwiki export">-->

View File

@ -32,7 +32,7 @@
</div>
<!-- SECTION "Packages and archives" [25-59] -->
<h3><a name="stable_version_123" id="stable_version_123">Stable version (1.2.3)</a></h3>
<h3><a name="stable_version_124" id="stable_version_124">Stable version (1.2.4)</a></h3>
<div class="level3">
</div>
@ -40,7 +40,7 @@
<h4><a name="tarball" id="tarball">Tarball</a></h4>
<div class="level4">
<ul>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18910" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18910" rel="nofollow">Tarball</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19089" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19089" rel="nofollow">Tarball</a></div>
</li>
</ul>
@ -71,9 +71,9 @@ You can:
<h5><a name="rhelcentos_5" id="rhelcentos_5">RHEL/CentOS 5</a></h5>
<div class="level5">
<ul>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18913" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18913" rel="nofollow">RPM bundle</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19093" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19093" rel="nofollow">RPM bundle</a></div>
</li>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18912" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18912" rel="nofollow">Source RPM</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19090" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19090" rel="nofollow">Source RPM</a></div>
</li>
</ul>
@ -82,9 +82,9 @@ You can:
<h5><a name="rhelcentos_6" id="rhelcentos_6">RHEL/CentOS 6</a></h5>
<div class="level5">
<ul>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18914" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18914" rel="nofollow">RPM bundle</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19094" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19094" rel="nofollow">RPM bundle</a></div>
</li>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18915" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18915" rel="nofollow">Source RPM</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19091" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19091" rel="nofollow">Source RPM</a></div>
</li>
</ul>
@ -113,12 +113,12 @@ You can:
</p>
<ul>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18911" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=18911" rel="nofollow">DEB bundle</a></div>
<li class="level1"><div class="li"> <a href="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19092" class="urlextern" title="http://forge.ow2.org/project/download.php?group_id=274&amp;file_id=19092" rel="nofollow">DEB bundle</a></div>
</li>
</ul>
</div>
<!-- SECTION "Stable version (1.2.3)" [60-1226] -->
<!-- SECTION "Stable version (1.2.4)" [60-1226] -->
<h3><a name="older_versions" id="older_versions">Older versions</a></h3>
<div class="level3">

View File

@ -285,6 +285,6 @@ LemonLDAP::NG is the first <acronym title="Single Sign On">SSO</acronym> softwar
<a href="/_detail/icons/clock.png?id=start" class="media" title="icons:clock.png"><img src="../media/icons/clock.png" class="media" alt="" /></a>
</div>
</p>
<ul class="rss"><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2823" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2823" rel="nofollow">Rev 2823 -- Propage some trunk changes to 1.2.4</a> by guimard (2013/04/22 11:44)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2822" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2822" rel="nofollow">Rev 2822 -- Add missing encoding directive in POD (#LEMONLDAP-592)</a> by clement_oudot (2013/04/19 13:39)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2821" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2821" rel="nofollow">Rev 2821 -- Backport r2811 and r2812 (#LEMONLDAP-594)</a> by clement_oudot (2013/04/19 10:47)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2820" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2820" rel="nofollow">Rev 2820 -- Fix getDisplayType call in Multi backend (#LEMONLDAP-593)</a> by clement_oudot (2013/04/19 10:27)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2819" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2819" rel="nofollow">Rev 2819 -- Do not stack messages when configuration load is OK (#LEMONLDAP-590)</a> by clement_oudot (2013/04/19 10:24)</div></li></ul>
<ul class="rss"><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2873" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2873" rel="nofollow">Rev 2873 -- Add missing translation for BrowserID Params node (#LEMONLDAP-584)</a> by clement_oudot (2013/07/21 17:59)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2872" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2872" rel="nofollow">Rev 2872 -- Configuration of BrowserID authentication module in Manager (#LEMONLDAP-584)</a> by clement_oudot (2013/07/21 17:44)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2871" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2871" rel="nofollow">Rev 2871 -- Possibility to customize BrowserID login window (#LEMONLDAP-584)</a> by clement_oudot (2013/07/20 11:07)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2870" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2870" rel="nofollow">Rev 2870 -- Move assertion resolution in extractFormInfo to pass found user to ...</a> by clement_oudot (2013/07/20 10:35)</div></li><li><div class="li"><a href="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2869" class="urlextern" title="http://websvn.ow2.org/revision.php?repname=lemonldap&amp;path=%2F&amp;isdir=1&amp;rev=2869" rel="nofollow">Rev 2869 -- Patch portal.js for compatibility with IE8 (#LEMONLDAP-603)</a> by clement_oudot (2013/07/18 13:04)</div></li></ul>
</div>
<!-- SECTION "SVN activity" [3372-] --></div><!-- closes <div class="dokuwiki export">-->