95 lines
4.3 KiB
HTML
95 lines
4.3 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="fr" dir="ltr">
|
||
<head>
|
||
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
|
||
<meta charset="utf-8" />
|
||
<title>documentation:2.0:external2f</title><!-- //if:usedebianlibs
|
||
<link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
|
||
//elsif:useexternallibs
|
||
<link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
|
||
//elsif:cssminified
|
||
<link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
|
||
//else --><!-- //endif -->
|
||
<meta name="generator" content="DokuWiki"/>
|
||
<meta name="robots" content="index,follow"/>
|
||
<meta name="keywords" content="documentation,2.0,external2f"/>
|
||
<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
|
||
<link rel="start" href="external2f.html"/>
|
||
<link rel="contents" href="external2f.html" title="Sitemap"/>
|
||
<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
|
||
|
||
<link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
|
||
|
||
<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:external2f","namespace":"documentation:2.0"};
|
||
/*!]]>*/</script>
|
||
<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script><!-- //if:usedebianlibs
|
||
<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
|
||
//elsif:useexternallibs
|
||
<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
|
||
//elsif:jsminified
|
||
<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
|
||
//else -->
|
||
|
||
<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script><!-- //endif --><!-- //if:usedebianlibs
|
||
<script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
|
||
//elsif:useexternallibs
|
||
<script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
|
||
//elsif:jsminified
|
||
<script type="text/javascript" src="/lib/scripts/jquery-ui.min.js"></script>
|
||
//else -->
|
||
|
||
|
||
<script type="text/javascript" src="/lib/scripts/jquery-ui.js"></script><!-- //endif -->
|
||
|
||
</head>
|
||
<body>
|
||
<div class="dokuwiki export container">
|
||
|
||
<h1 class="sectionedit1" id="external_second_factor">External Second Factor</h1>
|
||
<div class="level1">
|
||
|
||
<p>
|
||
|
||
This simple plugin can be used to add a second factor for authentication (SMS, OTP,…). It uses external commands to send and validate the second factor. You can use any language to call your 2nd factor system.
|
||
|
||
</p>
|
||
|
||
</div><!-- EDIT1 SECTION "External Second Factor" [1-251] -->
|
||
|
||
<h2 class="sectionedit2" id="commands">Commands</h2>
|
||
<div class="level2">
|
||
|
||
<p>
|
||
|
||
Commands received arguments on the command line and must return a 0 code if succeed, another else. <strong>Nothing must be written to STDOUT</strong>, STDERR is reported in logs <em>(but may be lost with FastCGI server)</em>.
|
||
|
||
</p>
|
||
|
||
</div><!-- EDIT2 SECTION "Commands" [252-483] -->
|
||
|
||
<h3 class="sectionedit3" id="configuration">Configuration</h3>
|
||
<div class="level3">
|
||
|
||
<p>
|
||
|
||
All parameters are configured in “General Parameters » Portal Parameters » Extensions » External 2nd Factor”.
|
||
|
||
</p>
|
||
<ul>
|
||
<li class="level1"><div class="li"> <strong>Activation</strong></div>
|
||
</li>
|
||
<li class="level1"><div class="li"> <strong>Send command</strong>: define your command using <em>$attribute</em> like in rules. Example: <code>/usr/local/bin/sendOtp –uid $uid</code></div>
|
||
</li>
|
||
<li class="level1"><div class="li"> <strong>Validation command</strong>: you must also use <em>$code</em> which is the value entered by user; Example: <code>/usr/local/bin/verify –uid $uid –code $code</code></div>
|
||
</li>
|
||
<li class="level1"><div class="li"> <strong>Authentication Level</strong>: if you want to overwrite the value sent by your authentication module, you can define here the new authentication level. Example: 5</div>
|
||
</li>
|
||
</ul>
|
||
<div class="noteimportant">The command line is split in an array and launch with exec(). So you don't need to enclose arguments in “” and this protects your system against shell injection. However, you can not use any space except to separate arguments.
|
||
|
||
</div>
|
||
</div><!-- EDIT3 SECTION "Configuration" [484-] -->
|
||
</div>
|
||
</body>
|
||
</html>
|