LimeSurvey

Presentation

LimeSurvey is a web survey software written in PHP. LimeSurvey has a webserver authentication mode that allows to integrate it directly into LemonLDAP::NG.

To have a stronger integration, we will configure LimeSurvey to autocreate unknown users and use HTTP headers to fill name, mail and roles. For example, we will use 3 roles:

User: can answer to surveys
Admin: can create surveys
Superadmin: no one can stop him!

Configuration

We suppose that LimeSurvey is installed in /var/www/html/limesurvey

LimeSurvey configuration

The configuration is done in config.php:

vi /var/www/html/limesurvey/config.php

//==================================
// WebSSO
//==================================
 
$useWebserverAuth = true;
$WebserverAuth_autocreateUser = true;
$WebserverAuth_autouserprofile = Array(
 'full_name' => $_SERVER['HTTP_AUTH_CN'],
 'email' => $_SERVER['HTTP_AUTH_MAIL'],
 'lang' => 'en',
 'htmleditormode' => 'inline',
 'templatelist' => 'default,basic,MyOrgTemplate',
 'create_survey' => $_SERVER['HTTP_AUTH_ADMIN'] || $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'create_user' =>  $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'delete_user' =>  $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'superadmin' => $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'configurator' =>  $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'manage_template' =>  $_SERVER['HTTP_AUTH_SUPERADMIN'],
 'manage_label' =>  $_SERVER['HTTP_AUTH_SUPERADMIN']
);

We directly use HTTP headers to fill default user profile.

LimeSurvey virtual host in Apache

Configure LimeSurvey virtual host like other protected virtual host.

<VirtualHost *:80>
       ServerName limesurvey.example.com
 
       PerlHeaderParserHandler Lemonldap::NG::Handler
 
      SetEnvIfNoCase Auth-User "(.*)" PHP_AUTH_USER=$1
 
      Alias /limesurvey /var/www/html/limesurvey
      DocumentRoot /var/www/html/limesurvey
 
</VirtualHost>

You need to set the PHP_AUTH_USER variable to have the Webserver authentication mode working.

LimeSurvey virtual host in Manager

Go to the Manager and create a new virtual host for LimeSurvey.

Headers

Header name	Description
Auth-User	user login
Auth-Cn	user full name
Auth-Mail	user email
Auth-Admin	1 if user is admin
Auth-SuperAdmin	1 if user is superadmin

You can manage roles with the RBAC model or by using groups.

Rules

Rule name	Expression	Description
Logout	action=logout$	Logout rule (for example logout_app_sso)
Admin	^/limesurvey/admin/	Allow only admin and superadmin roles
Default	default	Allow only users with a LimeSurvey role

You can set the default access to:

accept: all authenticated users will access surveys
unprotect: no authentication will be asked to access surveys