From 9b901066e06019385efd726ae3e79db809343dcc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cl=C3=A9ment=20Oudot?= Date: Wed, 22 Jan 2014 16:28:39 +0000 Subject: [PATCH] Documentation update --- doc/index/alphabetical.html | 2 +- doc/pages/contact.html | 13 +- doc/pages/default_sidebar.html | 4 - doc/pages/documentation/1.4/applications.html | 4 +- .../1.4/applications/cornerstone.html | 158 ++++++++++++++++++ doc/pages/documentation/1.4/idpsaml.html | 4 +- .../documentation/1.4/installtarball.html | 25 ++- doc/pages/documentation/1.4/performances.html | 36 ++-- doc/pages/documentation/1.4/prereq.html | 38 +++-- doc/pages/documentation/conferences.html | 25 ++- doc/pages/download.html | 16 +- doc/pages/references.html | 54 ++++-- doc/pages/start.html | 32 ++-- 13 files changed, 331 insertions(+), 80 deletions(-) create mode 100644 doc/pages/documentation/1.4/applications/cornerstone.html diff --git a/doc/index/alphabetical.html b/doc/index/alphabetical.html index 26a464b30..40b781c06 100644 --- a/doc/index/alphabetical.html +++ b/doc/index/alphabetical.html @@ -16,4 +16,4 @@ -

Alphabetical Index

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 

Back to main index

A

activedirectoryminihowto
applications
authad
authapache
authbasic
authbrowserid
authcas
authchoice
authdbi
authdemo
authfacebook
authgoogle
authldap
authmulti
authnull
authopenid
authproxy
authradius
authremote
authsaml
authslave
authssl
authtwitter
authwebid
authyubikey

B

browseablesessionbackend
bugzilla

C

cda
changeconfbackend
conferences
configlocation
configvhost
contact
customfunctions

D

default_sidebar
django
documentation
dokuwiki
download
drupal

E

error
exportedvars
extendedfunctions

F

fastcgi
features
federationproxy
fileconfbackend
filesessionbackend
formreplay

G

googleapps

H

handlerauthbasic
header_remote_user_conversion
highavailability

I

idpcas
idpopenid
idpsaml
installdeb
installrpm
installtarball
internalproxy

J

jsonfileconfbackend

L

ldapconfbackend
ldapminihowto
ldapsessionbackend
liferay
limesurvey
loginhistory
logoutforward
logs

M

managerprotection
mediawiki
memcachedsessionbackend
menu1
mrtg
mysqlminihowto

N

nosqlsessionbackend
notifications

O

obm

P

parameterlist
passwordstore
performances
phpldapadmin
playground
portal
portalcustom
portalmenu
prereq
presentation
press

Q

quickstart

R

rbac
redirections
references
resetpassword

S

safejail
samlservice
screenshots
securetoken
security
selfmadeapplication
sessions
soapconfbackend
soapminihowto
soapservices
soapsessionbackend
spring
sqlconfbackend
sqlsessionbackend
ssocookie
start
status
sympa
syntax

T

tomcat
translations

U

upgrade

V

variables

W

writingrulesand_headers

Z

zimbra


Back to main index

\ No newline at end of file +

Alphabetical Index

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 

Back to main index

A

activedirectoryminihowto
applications
authad
authapache
authbasic
authbrowserid
authcas
authchoice
authdbi
authdemo
authfacebook
authgoogle
authldap
authmulti
authnull
authopenid
authproxy
authradius
authremote
authsaml
authslave
authssl
authtwitter
authwebid
authyubikey

B

browseablesessionbackend
bugzilla

C

cda
changeconfbackend
conferences
configlocation
configvhost
contact
cornerstone
customfunctions

D

default_sidebar
django
documentation
dokuwiki
download
drupal

E

error
exportedvars
extendedfunctions

F

fastcgi
features
federationproxy
fileconfbackend
filesessionbackend
formreplay

G

googleapps

H

handlerauthbasic
header_remote_user_conversion
highavailability

I

idpcas
idpopenid
idpsaml
installdeb
installrpm
installtarball
internalproxy

J

jsonfileconfbackend

L

ldapconfbackend
ldapminihowto
ldapsessionbackend
liferay
limesurvey
loginhistory
logoutforward
logs

M

managerprotection
mediawiki
memcachedsessionbackend
menu1
mrtg
mysqlminihowto

N

nosqlsessionbackend
notifications

O

obm

P

parameterlist
passwordstore
performances
phpldapadmin
playground
portal
portalcustom
portalmenu
prereq
presentation
press

Q

quickstart

R

rbac
redirections
references
resetpassword

S

safejail
samlservice
screenshots
securetoken
security
selfmadeapplication
sessions
soapconfbackend
soapminihowto
soapservices
soapsessionbackend
spring
sqlconfbackend
sqlsessionbackend
ssocookie
start
status
sympa
syntax

T

tomcat
translations

U

upgrade

V

variables

W

writingrulesand_headers

Z

zimbra


Back to main index

\ No newline at end of file diff --git a/doc/pages/contact.html b/doc/pages/contact.html index 30f5e65d9..c71bc9a5c 100644 --- a/doc/pages/contact.html +++ b/doc/pages/contact.html @@ -73,7 +73,6 @@ No IRC client?
@@ -98,10 +97,12 @@ No IRC client?
Google+
+
  • Open Source Guide
    +
    • - +

    Reporting a bug

    @@ -122,12 +123,12 @@ We use +

    The team

    - +

    Core team

    @@ -152,7 +153,7 @@ We use +

    Past and present contributors

    @@ -199,4 +200,4 @@ By alphabetical order:
    -
    \ No newline at end of file +
    \ No newline at end of file diff --git a/doc/pages/default_sidebar.html b/doc/pages/default_sidebar.html index 8961218c3..406028948 100644 --- a/doc/pages/default_sidebar.html +++ b/doc/pages/default_sidebar.html @@ -21,10 +21,6 @@
    -

    - -

    -

    Sponsored by

    diff --git a/doc/pages/documentation/1.4/applications.html b/doc/pages/documentation/1.4/applications.html index 1628d29b0..b2b044a76 100644 --- a/doc/pages/documentation/1.4/applications.html +++ b/doc/pages/documentation/1.4/applications.html @@ -158,10 +158,10 @@ Applications listed bellow are known to be easy to integrate in - Google Apps Zimbra SAP + Google Apps Zimbra SAP Cornerstone - SAP + SAP diff --git a/doc/pages/documentation/1.4/applications/cornerstone.html b/doc/pages/documentation/1.4/applications/cornerstone.html new file mode 100644 index 000000000..eaa02c7d4 --- /dev/null +++ b/doc/pages/documentation/1.4/applications/cornerstone.html @@ -0,0 +1,158 @@ + + + + + + + + + + + + + + + + + +

    + + + + +

    Cornerstone On Demand

    +
    + +

    + + +

    + +
    + +

    Presentation

    +
    + +

    + +CornerStone On Demand (CSOD) allows to use SAML to authenticate users. It works by default with IDP intiated mechanism, but can works with the standard SP initiated cinematic. +

    + +

    +To work with LL::NG it requires: +

    +
      +
    • An enterprise account
      +
      • +
    • LL::NG configured as SAML Identity Provider
      +
      • +
    • Registered users on CSOD with the same email than those used by LL::NG (email will be the NameID exchanged between CSOD and LL::NG)
      +
      • +
    + +
    + +

    Configuration

    +
    + +
    + +

    New Service Provider

    +
    + +

    + +You should have configured LL::NG as an SAML Identity Provider, +

    + +

    +Now we will add CSOD as a new SAML Service Provider: +

    +
      +
    1. In Manager, click on SAML service providers and the button New service provider.
      +
      2. +
    2. Set csod as Service Provider name.
      +
      3. +
    3. Set Email in Options » Authentication Response » Default NameID format
      +
      4. +
    4. Select Metadata, and unprotect the field to paste the following value:
      +
      5. +
    +
    <md:EntityDescriptor entityID="mycompanyid.csod.com" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
+  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+	 <ds:X509Data>
+	  <ds:X509Certificate>
+Base64 encoded CSOD certificate
+	    </ds:X509Certificate>
+	  </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mycompanyid.csod.com/samldefault.aspx" index="1" />
+    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
+  </SPSSODescriptor>
+</md:EntityDescriptor>
    + +

    +

    Change mycompanyid (in AssertionConsumerService markup, parameter Location) into your CSOD company ID and put the certificate value inside the ds:X509Certificate markup +

    +

    + +
    + +

    CSOD control panel

    +
    + +

    + +CSOD needs two things to configure LL::NG as an IDP: +* Certificate +* SAML assertion +

    + +
    + +

    Certificate

    +
    + +

    + +For the certificate, you can build it from the signing private key registered in Manager. Select the key, and export it (button Download this file): +

    + +

    + +

    + +

    +After choosing the file name (for example lemonldapn-ng-priv.key), download the key on your disk. +

    + +

    +Then use openssl to generate an auto-signed certificate: + +

    +
    +openssl req -new -key lemonldap-ng-priv.key -out cert.csr
+openssl x509 -req -days 3650 -in cert.csr -signkey lemonldap-ng-priv.key -out cert.pem
+
    + +
    + +

    SAML assertion

    +
    + +

    + +You need to use the IDP initiated feature of LL::NG. Just call this URL: + +

    +
    +https://auth.example.com/saml/singleSignOn?IDPInitiated=1&sp=mycompanyid.csod.com
+
    + +
    +
    \ No newline at end of file diff --git a/doc/pages/documentation/1.4/idpsaml.html b/doc/pages/documentation/1.4/idpsaml.html index c50809d68..a3034350a 100644 --- a/doc/pages/documentation/1.4/idpsaml.html +++ b/doc/pages/documentation/1.4/idpsaml.html @@ -51,10 +51,10 @@

    - + - +
    Google Apps Zimbra SAP Google Apps Zimbra SAP Cornerstone
    SAP SAP
    diff --git a/doc/pages/documentation/1.4/installtarball.html b/doc/pages/documentation/1.4/installtarball.html index 931cc228e..d818cb215 100644 --- a/doc/pages/documentation/1.4/installtarball.html +++ b/doc/pages/documentation/1.4/installtarball.html @@ -105,6 +105,23 @@ make test sudo make install +

    +

    +You can also build and install french documentation : + +

    +
    +make fr-doc
+make install_fr_doc_site
+
    + +

    + +Note that you need to have the OmegaT tool to generate the doc. + +

    +

    +

    You can modify location of default storage configuration file in configure target: @@ -219,7 +236,7 @@ See also - +

    Link Apache configuration

    @@ -260,7 +277,7 @@ a2ensite test-apache2.conf

    - +

    Install cron jobs

    @@ -284,7 +301,7 @@ sudo ln -s /usr/local/lemonldap-ng/etc/cron.d/* /etc/cron.d/
    - +

    DNS

    @@ -312,4 +329,4 @@ Follow the
    \ No newline at end of file + \ No newline at end of file diff --git a/doc/pages/documentation/1.4/performances.html b/doc/pages/documentation/1.4/performances.html index b63b9ced0..e5677558c 100644 --- a/doc/pages/documentation/1.4/performances.html +++ b/doc/pages/documentation/1.4/performances.html @@ -27,11 +27,27 @@

    -Lemonldap::NG is designed to be very performant. In particular, it use Apache2 threads capabilities so to optimize performances, prefer using mpm-worker. +LemonLDAP::NG is designed to be very performant. In particular, it use Apache2 threads capabilities so to optimize performances, prefer using mpm-worker.

    +

    Global performance

    +
    + +

    + +On linux, by default, there is no DNS cache and LemonLDAP::NG portal request DNS at every connexions on LDAP or DB. Under heavy loads, that can generated hundred of DNS queries and many errors on LDAP connexions (timed out) from IO::Socket. +

    + +

    +To bypass this, you can: +* Use IP in configuration to avoid DNS resolution +* Install a DNS cache like nscd, netmask or bind +

    + +
    +

    Handler performance

    @@ -42,7 +58,7 @@ Handlers check rights and calculate headers for each +

    Macros and groups

    @@ -91,7 +107,7 @@ Besides, macros and groups are computed in alphanumeric order, that is, in the o

    - +

    Local macros

    @@ -110,12 +126,12 @@ Display-Name ->
    - +

    Portal performances

    - +

    General performances

    @@ -134,7 +150,7 @@ You can also use a FastCGI server using index.fcgi given in portal examples.

    - +

    Configuration access

    @@ -144,7 +160,7 @@ If you set useLocalConf to 1 in lemonldap-ng.ini (section [Portal])

    - +

    Starting performances

    @@ -164,7 +180,7 @@ To make the portal start faster when the server is relaunched, add those lines i </Perl>
    - +

    Apache::Session performances

    @@ -236,7 +252,7 @@ Note that Apache::Session::Browseable::MySQL doesn't use MySQL locks.

    - +

    LDAP performances

    @@ -286,4 +302,4 @@ ldapgroups -> memberOf

    -
    \ No newline at end of file + \ No newline at end of file diff --git a/doc/pages/documentation/1.4/prereq.html b/doc/pages/documentation/1.4/prereq.html index aeeeeb0a2..b32ddb2a2 100644 --- a/doc/pages/documentation/1.4/prereq.html +++ b/doc/pages/documentation/1.4/prereq.html @@ -42,15 +42,15 @@ server compiled with mod-perl

    -For Apache2, you can use both mpm-worker and mpm-prefork. Mpm-worker works faster and LemonLDAP::NG use the thread system for best performance. If you have to use mpm-prefork (for example if you use PHP), LemonLDAP::NG will work anyway. +For Apache2, you can use all workers mpm-worker, mpm-prefork and mpm-event. Mpm-worker works faster and LemonLDAP::NG use the thread system for best performance. If you have to use mpm-prefork (for example if you use PHP), LemonLDAP::NG will work anyway.

    -You can use LemonLDAP::NG in an heterogeneous world: the authentication portal and the manager can work in any version of Apache even if mod_perl is not compiled, with ModPerl::Registry or not,… or behind any web server able to launch CGIs. Only the handler need mod_perl 2. +You can use LemonLDAP::NG in an heterogeneous world: the authentication portal and the manager can work in any version of Apache even if mod_perl is not compiled, with ModPerl::Registry or not,… or behind any web server able to launch CGIs. Only the handler needs mod_perl 2.

    - +

    Perl

    @@ -61,7 +61,7 @@ You can use LemonLDAP::NG in an heterogeneous world: the authentication portal a

    - +

    Core

    - +

    SAML2

    - +

    CAS (authentication module)

    - +

    OpenID

    - +

    Twitter

    - +

    POD unit tests

    - +

    SMTP / Reset password by mail

    - +

    Other

    - +

    Install dependencies on your system

    - +

    APT-GET

    -apt-get install apache2 libapache2-mod-perl2 libapache-session-perl libnet-ldap-perl libcache-cache-perl libdbi-perl perl-modules libwww-perl libcache-cache-perl libxml-simple-perl  libsoap-lite-perl libhtml-template-perl libregexp-assemble-perl libjs-jquery libxml-libxml-perl libcrypt-rijndael-perl libio-string-perl libxml-libxslt-perl libconfig-inifiles-perl libjson-perl libstring-random-perl libemail-date-format-perl libmime-lite-perl libcrypt-openssl-rsa-perl libdigest-hmac-perl libclone-perl libauthen-sasl-perl
+apt-get install apache2 libapache2-mod-perl2 libapache-session-perl libnet-ldap-perl libcache-cache-perl libdbi-perl perl-modules libwww-perl libcache-cache-perl libxml-simple-perl  libsoap-lite-perl libhtml-template-perl libregexp-assemble-perl libjs-jquery libxml-libxml-perl libcrypt-rijndael-perl libio-string-perl libxml-libxslt-perl libconfig-inifiles-perl libjson-perl libstring-random-perl libemail-date-format-perl libmime-lite-perl libcrypt-openssl-rsa-perl libdigest-hmac-perl libclone-perl libauthen-sasl-perl libnet-cidr-lite-perl libcrypt-openssl-x509-perl libauthcas-perl libtest-pod-perl libtest-mockobject-perl libauthen-captcha-perl libnet-openid-consumer-perl libnet-openid-server-perl libunicode-string-perl libconvert-pem-perl
    - +

    YUM

    @@ -231,4 +237,4 @@ yum install httpd mod_perl perl-Apache-Session perl-LDAP perl-XML-SAX perl-XML-N
    - \ No newline at end of file + \ No newline at end of file diff --git a/doc/pages/documentation/conferences.html b/doc/pages/documentation/conferences.html index f4d39fffa..e022dbb8c 100644 --- a/doc/pages/documentation/conferences.html +++ b/doc/pages/documentation/conferences.html @@ -27,6 +27,23 @@ +

    2013

    +
    + + + + + + + + + + +
    Event Location Speaker Language Links
    JRES 2013 Montpellier Xavier Montagutelli Presentation
    OW2 Con Issy Les Moulineaux David COUTADEUR SlideShare
    + Dailymotion
    + +
    +

    2012

    @@ -50,7 +67,7 @@
    - +

    2011

    @@ -94,7 +111,7 @@
    - +

    2010

    @@ -114,7 +131,7 @@ Clément OUDOT
    +

    2009

    @@ -137,4 +154,4 @@ Clément OUDOT
    \ No newline at end of file + \ No newline at end of file diff --git a/doc/pages/download.html b/doc/pages/download.html index 589228488..4051fea1e 100644 --- a/doc/pages/download.html +++ b/doc/pages/download.html @@ -32,7 +32,7 @@ -

    Stable version (1.3.0)

    +

    Stable version (1.3.1)

    @@ -40,7 +40,7 @@

    Tarball

    @@ -71,9 +71,9 @@ You can:
    RHEL/CentOS 5
    @@ -82,9 +82,9 @@ You can:
    RHEL/CentOS 6
    @@ -113,12 +113,12 @@ You can:

    - +

    Older versions

    diff --git a/doc/pages/references.html b/doc/pages/references.html index f8b6feeb7..018fa1c35 100644 --- a/doc/pages/references.html +++ b/doc/pages/references.html @@ -78,6 +78,32 @@ They use LemonLDAP::NG!
    +

    CRDP de l'acadmie d'Aix-Marseille

    +
    + +

    + + +

    + +

    +LemonLDAP::NG used as SAML SP against multiple simpleSAMLphp IDP. + +

    + + + + + + + + + + +
    Nb users ~20000
    Nb protected applications ~100
    Protected applications CAS JASIG
    + +
    +

    Gendarmerie Nationale

    @@ -105,7 +131,7 @@ They use LemonLDAP::NG!

    - +

    LINAGORA

    @@ -130,13 +156,13 @@ They use LemonLDAP::NG!
    - +

    Ministère de la Justice

    - +

    @@ -156,10 +182,14 @@ LemonLDAP::NG is used to protect access to intranet.
    +
    + +
    +

    - +

    Région Basse-Normandie

    @@ -184,7 +214,7 @@ LemonLDAP::NG is used to protect access to intranet.
    - +

    SGS

    @@ -211,7 +241,7 @@ LemonLDAP::NG is used to protect access to intranet.

    - +

    South Bay Community Network

    @@ -237,13 +267,13 @@ Protected sites: - +

    UCANSS

    - +

    @@ -261,16 +291,18 @@ Protected sites:


    +
    +

    - +

    Université de Limoges

    - +

    @@ -294,4 +326,4 @@ LemonLDAP::NG used as CAS

    - \ No newline at end of file + \ No newline at end of file diff --git a/doc/pages/start.html b/doc/pages/start.html index 9e12eefc3..f71482846 100644 --- a/doc/pages/start.html +++ b/doc/pages/start.html @@ -115,13 +115,13 @@ LemonLDAP::NG is the first SSO softwar

    -

    +

      -
    • LDAP
      +
    • LDAP and Active Directory
    • Database
      • @@ -135,8 +135,16 @@ LemonLDAP::NG is the first SSO softwar
    • Twitter
      • +
    • Google
      +
      • +
    • Facebook
      +
    • CAS
      • +
    • BrowserID (Mozilla)
      +
      • +
    • WebID (W3C)
      +
    • Radius
    • Multiple and Choice (modules stacking)
      @@ -144,7 +152,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    LDAP integration

    @@ -169,7 +177,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    Identity provider

    @@ -190,7 +198,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    User interfaces

    @@ -211,7 +219,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    Administration

    @@ -238,7 +246,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    Security

    @@ -261,12 +269,12 @@ LemonLDAP::NG is the first SSO softwar
    - +

    Project activity

    - +

    Ohloh statistics

    @@ -275,7 +283,7 @@ LemonLDAP::NG is the first SSO softwar
    - +

    SVN activity

    @@ -285,6 +293,6 @@ LemonLDAP::NG is the first SSO softwar

    - + - \ No newline at end of file + \ No newline at end of file