615 lines
36 KiB
HTML
615 lines
36 KiB
HTML
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
|
|
lang="en" dir="ltr">
|
|
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title></title>
|
|
<!-- metadata -->
|
|
<meta name="generator" content="Offline" />
|
|
<meta name="version" content="Offline 0.1" />
|
|
<!-- style sheet links -->
|
|
<link rel="stylesheet" media="all" type="text/css" href="../../../css/all.css" />
|
|
<link rel="stylesheet" media="screen" type="text/css" href="../../../css/screen.css" />
|
|
<link rel="stylesheet" media="print" type="text/css" href="../../../css/print.css" />
|
|
|
|
</head>
|
|
<body>
|
|
<div class="dokuwiki export">
|
|
|
|
|
|
<h1 class="sectionedit1" id="documentation_for_lemonldapng_19">Documentation for LemonLDAP::NG 1.9</h1>
|
|
<div class="level1">
|
|
|
|
</div>
|
|
<!-- EDIT1 SECTION "Documentation for LemonLDAP::NG 1.9" [1-51] -->
|
|
<h2 class="sectionedit2" id="main_changes">Main changes</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
Version 1.9 of <abbr title="LemonLDAP::NG">LL::NG</abbr> brings the following main changes:
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> OpenID Connect support</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Nginx support</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> New manager interface</div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
<p><div class="noteimportant">You must read <a href="../../documentation/1.9/upgrade.html" class="wikilink1" title="documentation:1.9:upgrade">upgrade from 1.4 to 1.9</a> documentation page before installing it.
|
|
</div></p>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT2 SECTION "Main changes" [52-340] -->
|
|
<h2 class="sectionedit3" id="installation">Installation</h2>
|
|
<div class="level2">
|
|
|
|
</div>
|
|
<!-- EDIT3 SECTION "Installation" [341-366] -->
|
|
<h3 class="sectionedit4" id="before_installation">Before installation</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<img src="../../../media/icons/kthememgr.png" class="media" alt="" />
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/prereq.html" class="wikilink1" title="documentation:2.0:prereq">Prerequisites and dependencies</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/upgrade.html" class="wikilink1" title="documentation:2.0:upgrade">Upgrade notes</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT4 SECTION "Before installation" [367-631] -->
|
|
<h3 class="sectionedit5" id="installation1">Installation</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<img src="../../../media/icons/warehause.png" class="media" alt="" />
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/installtarball.html" class="wikilink1" title="documentation:2.0:installtarball">Installation from the tarball</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/installdeb.html" class="wikilink1" title="documentation:2.0:installdeb">Installation on Debian/Ubuntu with packages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/installrpm.html" class="wikilink1" title="documentation:2.0:installrpm">Installation on RHEL/CentOS with packages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/docker.html" class="wikilink1" title="documentation:2.0:docker">Run in LemonLDAP::NG in Docker</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT5 SECTION "Installation" [632-1036] -->
|
|
<h3 class="sectionedit6" id="after_installation">After installation</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<img src="../../../media/icons/clean.png" class="media" alt="" />
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/configapache.html" class="wikilink1" title="documentation:2.0:configapache">Deploy Apache configuration</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/confignginx.html" class="wikilink1" title="documentation:2.0:confignginx">Deploy Nginx configuration</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT6 SECTION "After installation" [1037-1316] -->
|
|
<h2 class="sectionedit7" id="configuration">Configuration</h2>
|
|
<div class="level2">
|
|
|
|
</div>
|
|
<!-- EDIT7 SECTION "Configuration" [1317-1343] -->
|
|
<h3 class="sectionedit8" id="first_steps">First steps</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/lists.png?id=documentation%3A2.0%3Astart" class="media" title="icons:lists.png"><img src="../../../media/icons/lists.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/configlocation.html" class="wikilink1" title="documentation:2.0:configlocation">Configuration overview</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/ssocookie.html" class="wikilink1" title="documentation:2.0:ssocookie">Configure Single Sign On cookie and portal URL</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/redirections.html" class="wikilink1" title="documentation:2.0:redirections">Parameter redirections</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/exportedvars.html" class="wikilink1" title="documentation:2.0:exportedvars">Set exported variables</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/configvhost.html" class="wikilink1" title="documentation:2.0:configvhost">Manage virtual hosts</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/sessions.html" class="wikilink1" title="documentation:2.0:sessions">Configure sessions specificities</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT8 SECTION "First steps" [1344-1803] -->
|
|
<h3 class="sectionedit9" id="portal">Portal</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/colors.png?id=documentation%3A2.0%3Astart" class="media" title="icons:colors.png"><img src="../../../media/icons/colors.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/portal.html" class="wikilink1" title="documentation:2.0:portal">Presentation</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/portalcustom.html" class="wikilink1" title="documentation:2.0:portalcustom">Portal customization</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/portalmenu.html" class="wikilink1" title="documentation:2.0:portalmenu">Portal menu</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/captcha.html" class="wikilink1" title="documentation:2.0:captcha">Captcha</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT9 SECTION "Portal" [1804-2094] -->
|
|
<h3 class="sectionedit10" id="authentication_users_and_password_databases">Authentication, users and password databases</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/gpg.png?id=documentation%3A2.0%3Astart" class="media" title="icons:gpg.png"><img src="../../../media/icons/gpg.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<div class="table sectionedit11"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0"> Official Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authad.html" class="wikilink1" title="documentation:2.0:authad">Active Directory</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authapache.html" class="wikilink1" title="documentation:2.0:authapache">Apache (Kerberos, NTLM, OTP, ...)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authbrowserid.html" class="wikilink1" title="documentation:2.0:authbrowserid">BrowserID (Mozilla Persona)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authcas.html" class="wikilink1" title="documentation:2.0:authcas">CAS</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authdbi.html" class="wikilink1" title="documentation:2.0:authdbi">Databases (DBI)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row6 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authdemo.html" class="wikilink1" title="documentation:2.0:authdemo">Demonstration</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row7 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authfacebook.html" class="wikilink1" title="documentation:2.0:authfacebook">Facebook</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row8 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authldap.html" class="wikilink1" title="documentation:2.0:authldap">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row9 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authnull.html" class="wikilink1" title="documentation:2.0:authnull">Null</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row10 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authopenidconnect.html" class="wikilink1" title="documentation:2.0:authopenidconnect">OpenID Connect</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row11 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authproxy.html" class="wikilink1" title="documentation:2.0:authproxy">Proxy LL::NG</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row12 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authradius.html" class="wikilink1" title="documentation:2.0:authradius">Radius</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row13 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authsaml.html" class="wikilink1" title="documentation:2.0:authsaml">SAML 2.0 / Shibboleth</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row14 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authslave.html" class="wikilink1" title="documentation:2.0:authslave">Slave</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row15 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authssl.html" class="wikilink1" title="documentation:2.0:authssl">SSL</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row16 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authtwitter.html" class="wikilink1" title="documentation:2.0:authtwitter">Twitter</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row17 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authwebid.html" class="wikilink1" title="documentation:2.0:authwebid">WebID</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row18 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authyubikey.html" class="wikilink1" title="documentation:2.0:authyubikey">Yubikey</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row19 rowodd">
|
|
<th class="col0"> Combo Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
<tr class="row20 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authchoice.html" class="wikilink1" title="documentation:2.0:authchoice">Choice by users</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row21 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authmulti.html" class="wikilink1" title="documentation:2.0:authmulti">Multiple backends stack</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row22 roweven">
|
|
<th class="col0"> Obsolete Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
<tr class="row23 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authgoogle.html" class="wikilink1" title="documentation:2.0:authgoogle">Google</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row24 roweven">
|
|
<td class="col0"> <a href="../../documentation/2.0/authopenid.html" class="wikilink1" title="documentation:2.0:authopenid">OpenID</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row25 rowodd">
|
|
<td class="col0"> <a href="../../documentation/2.0/authremote.html" class="wikilink1" title="documentation:2.0:authremote">Remote LL::NG</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT11 TABLE [2268-3644] -->
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT10 SECTION "Authentication, users and password databases" [2095-3672] -->
|
|
<h3 class="sectionedit12" id="configuration_database">Configuration database</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/utilities.png?id=documentation%3A2.0%3Astart" class="media" title="icons:utilities.png"><img src="../../../media/icons/utilities.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
|
|
<p>
|
|
<abbr title="LemonLDAP::NG">LL::NG</abbr> needs a storage system to store its own configuration (managed by the manager). Choose one of the following:
|
|
</p>
|
|
<div class="table sectionedit13"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0 centeralign"> Backend </th><th class="col1 centeralign"> Shareable </th><th class="col2 centeralign"> Comment </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/fileconfbackend.html" class="wikilink1" title="documentation:2.0:fileconfbackend">File (JSON)</a> </td><td class="col1"> </td><td class="col2 leftalign">Not shareable between servers except if used in conjunction with <a href="../../documentation/2.0/soapconfbackend.html" class="wikilink1" title="documentation:2.0:soapconfbackend">SOAP</a> or with a shared file system (NFS,…). Selected by default during installation. </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/sqlconfbackend.html" class="wikilink1" title="documentation:2.0:sqlconfbackend">SQL (RDBI/CDBI)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/ldapconfbackend.html" class="wikilink1" title="documentation:2.0:ldapconfbackend">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/mongodbconfbackend.html" class="wikilink1" title="documentation:2.0:mongodbconfbackend">MongoDB</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/soapconfbackend.html" class="wikilink1" title="documentation:2.0:soapconfbackend">SOAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> Proxy backend to be used in conjunction with another configuration backend. <br/><strong>Can be used to secure another backend</strong> for remote servers. </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT13 TABLE [3947-4536] -->
|
|
<p>
|
|
<p><div class="notetip">You can not start with an empty configuration, so read <a href="../../documentation/2.0/changeconfbackend.html" class="wikilink1" title="documentation:2.0:changeconfbackend">how to change configuration backend</a> to convert your existing configuration into another one.
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT12 SECTION "Configuration database" [3673-4752] -->
|
|
<h3 class="sectionedit14" id="sessions_database">Sessions database</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/kmultiple.png?id=documentation%3A2.0%3Astart" class="media" title="icons:kmultiple.png"><img src="../../../media/icons/kmultiple.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
|
|
<p>
|
|
Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Session" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session" rel="nofollow">Apache::Session</a> modules family. All <a href="http://search.cpan.org/perldoc?Apache::Session" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session" rel="nofollow">Apache::Session</a> style modules are useable except for some features.
|
|
</p>
|
|
<div class="table sectionedit15"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0 centeralign"> Backend </th><th class="col1 centeralign"> Shareable </th><th class="col2 centeralign"> <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">Session explorer</a> </th><th class="col3 centeralign"> <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">Session restrictions</a> </th><th class="col4 centeralign"> Session expiration </th><th class="col5 centeralign"> Comment </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/filesessionbackend.html" class="wikilink1" title="documentation:2.0:filesessionbackend">File</a> </td><td class="col1"> </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign">Not shareable between servers except if used in conjunction with <a href="../../documentation/2.0/soapsessionbackend.html" class="wikilink1" title="documentation:2.0:soapsessionbackend">SOAP session backend</a> or with a shared file system (NFS,…). Selected by default during installation. </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/sqlsessionbackend.html" class="wikilink1" title="documentation:2.0:sqlsessionbackend">SQL</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign" rowspan="2"> Unoptimized for <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">session explorer</a> and <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">single session</a> features. </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/ldapsessionbackend.html" class="wikilink1" title="documentation:2.0:ldapsessionbackend">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/nosqlsessionbackend.html" class="wikilink1" title="documentation:2.0:nosqlsessionbackend">Redis</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> The faster. Must be secured by network access control. </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/mongodbsessionbackend.html" class="wikilink1" title="documentation:2.0:mongodbsessionbackend">MongoDB</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> Must be secured by network access control. </td>
|
|
</tr>
|
|
<tr class="row6 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/browseablesessionbackend.html" class="wikilink1" title="documentation:2.0:browseablesessionbackend">Browseable (SQL, Redis or LDAP)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> <strong>Optimized</strong> for <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">session explorer</a> and <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">single session</a> features. </td>
|
|
</tr>
|
|
<tr class="row7 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/2.0/soapsessionbackend.html" class="wikilink1" title="documentation:2.0:soapsessionbackend">SOAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> Proxy backend to be used in conjunction with another session backend. <br/>
|
|
<strong>Can be used to secure another backend</strong> for remote servers. </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT15 TABLE [5138-6592] -->
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT14 SECTION "Sessions database" [4753-6620] -->
|
|
<h3 class="sectionedit16" id="identity_provider">Identity provider</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<p><div class="notetip">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> All identity provider protocols can be used simultaneously</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/federationproxy.html" class="wikilink1" title="documentation:2.0:federationproxy">LemonLDAP::NG can be used as a proxy between those protocols</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/personal.png?id=documentation%3A2.0%3Astart" class="media" title="icons:personal.png"><img src="../../../media/icons/personal.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/idpcas.html" class="wikilink1" title="documentation:2.0:idpcas">CAS 1.0 / 2.0 / 3.0 </a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/idpsaml.html" class="wikilink1" title="documentation:2.0:idpsaml">SAML 2.0 / Shibboleth</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/idpopenid.html" class="wikilink1" title="documentation:2.0:idpopenid">OpenID 2.0 (obsolete)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/idpopenidconnect.html" class="wikilink1" title="documentation:2.0:idpopenidconnect">OpenID Connect</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT16 SECTION "Identity provider" [6621-7121] -->
|
|
<h2 class="sectionedit17" id="applications_protection">Applications protection</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/access.png?id=documentation%3A2.0%3Astart" class="media" title="icons:access.png"><img src="../../../media/icons/access.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/writingrulesand_headers.html" class="wikilink1" title="documentation:2.0:writingrulesand_headers">Writing rules and headers</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/variables.html" class="wikilink1" title="documentation:2.0:variables">Variables that can be used in rules and headers</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/applications.html" class="wikilink1" title="documentation:2.0:applications">Integrate vendor applications</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/selfmadeapplication.html" class="wikilink1" title="documentation:2.0:selfmadeapplication">Integrate self-made applications</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/formreplay.html" class="wikilink1" title="documentation:2.0:formreplay">Form replay</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT17 SECTION "Applications protection" [7122-7573] -->
|
|
<h3 class="sectionedit18" id="well_known_compatible_applications">Well known compatible applications</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<p><div class="noteclassic">Here is a list of well known applications that are compatible with <abbr title="LemonLDAP::NG">LL::NG</abbr>. A full list is available on <a href="../../documentation/2.0/applications.html" class="wikilink1" title="documentation:2.0:applications">vendor applications page</a>.
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="row">
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/alfresco.html" class="media" title="documentation:2.0:applications:alfresco"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Alfresco" alt="Alfresco" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/bugzilla.html" class="media" title="documentation:2.0:applications:bugzilla"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Bugzilla" alt="Bugzilla" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/dokuwiki.html" class="media" title="documentation:2.0:applications:dokuwiki"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Dokuwiki" alt="Dokuwiki" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/drupal.html" class="media" title="documentation:2.0:applications:drupal"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Drupal" alt="Drupal" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/glpi.html" class="media" title="documentation:2.0:applications:glpi"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="GLPI" alt="GLPI" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/liferay.html" class="media" title="documentation:2.0:applications:liferay"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Liferay" alt="Liferay" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/mediawiki.html" class="media" title="documentation:2.0:applications:mediawiki"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Mediawiki" alt="Mediawiki" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="col-sm-3">
|
|
<a href="../../documentation/2.0/applications/zimbra.html" class="media" title="documentation:2.0:applications:zimbra"><img src="../../../media/icons/kmultiple.png" class="mediacenter" title="Zimbra" alt="Zimbra" /></a>
|
|
</div>
|
|
</p>
|
|
|
|
<p>
|
|
</div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT18 SECTION "Well known compatible applications" [7574-8919] -->
|
|
<h2 class="sectionedit19" id="advanced_features">Advanced features</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/neotux.png?id=documentation%3A2.0%3Astart" class="media" title="icons:neotux.png"><img src="../../../media/icons/neotux.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/notifications.html" class="wikilink1" title="documentation:2.0:notifications">Notifications system</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/passwordstore.html" class="wikilink1" title="documentation:2.0:passwordstore">Store password in session</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/cda.html" class="wikilink1" title="documentation:2.0:cda">Cross Domain Authentication (CDA)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/rbac.html" class="wikilink1" title="documentation:2.0:rbac">Role Based Access Control (RBAC)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/customfunctions.html" class="wikilink1" title="documentation:2.0:customfunctions">Use custom functions</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/extendedfunctions.html" class="wikilink1" title="documentation:2.0:extendedfunctions">Use extended functions</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/resetpassword.html" class="wikilink1" title="documentation:2.0:resetpassword">Reset password by mail (self service)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/register.html" class="wikilink1" title="documentation:2.0:register">Create an account (self service)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/logoutforward.html" class="wikilink1" title="documentation:2.0:logoutforward">Forward logout to applications</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/securetoken.html" class="wikilink1" title="documentation:2.0:securetoken">Secure Token Handler</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/safejail.html" class="wikilink1" title="documentation:2.0:safejail">Safe jail</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/loginhistory.html" class="wikilink1" title="documentation:2.0:loginhistory">Login history</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/handlerauthbasic.html" class="wikilink1" title="documentation:2.0:handlerauthbasic">AuthBasic Handler</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/fastcgi.html" class="wikilink1" title="documentation:2.0:fastcgi">Fast CGI support</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/parameterlist.html" class="wikilink1" title="documentation:2.0:parameterlist">See full parameters list</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT19 SECTION "Advanced features" [8920-9764] -->
|
|
<h2 class="sectionedit20" id="mini_howtos">Mini howtos</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/jabber_protocol.png?id=documentation%3A2.0%3Astart" class="media" title="icons:jabber_protocol.png"><img src="../../../media/icons/jabber_protocol.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/managerprotection.html" class="wikilink1" title="documentation:2.0:managerprotection">Modify Manager protection</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/mysqlminihowto.html" class="wikilink1" title="documentation:2.0:mysqlminihowto">Configuration and sessions in MySQL</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/ldapminihowto.html" class="wikilink1" title="documentation:2.0:ldapminihowto">Configuration and sessions in LDAP</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/soapminihowto.html" class="wikilink1" title="documentation:2.0:soapminihowto">Configuration and sessions access by SOAP</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/activedirectoryminihowto.html" class="wikilink1" title="documentation:2.0:activedirectoryminihowto">Integration in Active Directory (LDAP and Kerberos)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/federationproxy.html" class="wikilink1" title="documentation:2.0:federationproxy">Create a protocol proxy</a> <em>(<abbr title="Security Assertion Markup Language">SAML</abbr> to OpenID, <abbr title="Central Authentication Service">CAS</abbr> to <abbr title="Security Assertion Markup Language">SAML</abbr> ,…)</em></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/header_remote_user_conversion.html" class="wikilink1" title="documentation:2.0:header_remote_user_conversion">Convert HTTP header into environment variable</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT20 SECTION "Mini howtos" [9765-10434] -->
|
|
<h2 class="sectionedit21" id="exploitation">Exploitation</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/xeyes.png?id=documentation%3A2.0%3Astart" class="media" title="icons:xeyes.png"><img src="../../../media/icons/xeyes.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/performances.html" class="wikilink1" title="documentation:2.0:performances">Performances</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/security.html" class="wikilink1" title="documentation:2.0:security">Security</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/selinux.html" class="wikilink1" title="documentation:2.0:selinux">SELinux</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/status.html" class="wikilink1" title="documentation:2.0:status">Handler status page</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/mrtg.html" class="wikilink1" title="documentation:2.0:mrtg">MRTG monitoring</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/logs.html" class="wikilink1" title="documentation:2.0:logs">Logs settings</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/error.html" class="wikilink1" title="documentation:2.0:error">Error messages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/2.0/highavailability.html" class="wikilink1" title="documentation:2.0:highavailability">High Availability</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
</div><!-- closes <div class="dokuwiki export">--> |