Multiple authentication backend

Presentation

This backend allows to chain authentication method, for example to failback to LDAP authentication if Remote authentication failed…

Configuration

You have to use "Multi" as authentication scheme. This scheme expect a parameter, which is the authentication chain.

For example:
authentication => 'Multi CAS;LDAP',


If CAS failed, LDAP will be used.

You can also add a condition. Example:
authentication => 'Multi Remote $ENV{REMOTE_ADDR}=~/^192/;LDAP $ENV{REMOTE_ADDR}!~/^192/'

Known problems

AuthApache authentication



When using this module, Lemonldap::NG portal will be called only if Apache does not return "401 Authentication required", but this is not the Apache behaviour: if the auth module fails, Apache returns 401. We're studying a future solutuion for this…

SSL authentication



To chain SSL, you have to set "SSLRequire optional" in Apache configuration, else users will be authenticated by SSL only.

See also