166 lines
8.3 KiB
HTML
166 lines
8.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="fr" dir="ltr">
|
|
<head>
|
|
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
|
|
<meta charset="utf-8" />
|
|
<title>documentation:2.0:authcas</title><!-- //if:usedebianlibs
|
|
<link rel="stylesheet" type="text/css" href="/javascript/bootstrap/css/bootstrap.min.css" />
|
|
//elsif:useexternallibs
|
|
<link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"></script>
|
|
//elsif:cssminified
|
|
<link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.min.css" />
|
|
//else --><!-- //endif -->
|
|
<meta name="generator" content="DokuWiki"/>
|
|
<meta name="robots" content="index,follow"/>
|
|
<meta name="keywords" content="documentation,2.0,authcas"/>
|
|
<link rel="search" type="application/opensearchdescription+xml" href="lib/exe/opensearch.html" title="LemonLDAP::NG"/>
|
|
<link rel="start" href="authcas.html"/>
|
|
<link rel="contents" href="authcas.html" title="Sitemap"/>
|
|
<link rel="stylesheet" type="text/css" href="lib/exe/css.php.t.bootstrap3.css"/>
|
|
|
|
<link rel="stylesheet" type="text/css" href="/static/bwr/bootstrap/dist/css/bootstrap.css" />
|
|
|
|
<script type="text/javascript">/*<![CDATA[*/var NS='documentation:2.0';var JSINFO = {"id":"documentation:2.0:authcas","namespace":"documentation:2.0"};
|
|
/*!]]>*/</script>
|
|
<script type="text/javascript" charset="utf-8" src="lib/exe/js.php.t.bootstrap3.js"></script><!-- //if:usedebianlibs
|
|
<script type="text/javascript" src="/javascript/jquery/jquery.min.js"></script>
|
|
//elsif:useexternallibs
|
|
<script type="text/javascript" src="http://code.jquery.com/jquery-2.2.0.min.js"></script>
|
|
//elsif:jsminified
|
|
<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.min.js"></script>
|
|
//else -->
|
|
|
|
<script type="text/javascript" src="/static/bwr/jquery/dist/jquery.js"></script><!-- //endif --><!-- //if:usedebianlibs
|
|
<script type="text/javascript" src="/javascript/jquery-ui/jquery-ui.min.js"></script>
|
|
//elsif:useexternallibs
|
|
<script type="text/javascript" src="http://code.jquery.com/ui/1.10.4/jquery-ui.min.js"></script>
|
|
//elsif:jsminified
|
|
<script type="text/javascript" src="/lib/scripts/jquery-ui.min.js"></script>
|
|
//else -->
|
|
|
|
|
|
<script type="text/javascript" src="/lib/scripts/jquery-ui.js"></script><!-- //endif -->
|
|
|
|
</head>
|
|
<body>
|
|
<div class="dokuwiki export container"><!-- TOC START -->
|
|
|
|
<div id="dw__toc">
|
|
<h3 class="toggle">Table of Contents</h3>
|
|
<div>
|
|
|
|
<ul class="toc">
|
|
<li class="level1"><div class="li"><a href="#presentation">Présentation</a></div></li>
|
|
<li class="level1"><div class="li"><a href="#perl-cas_module_installation">Installation du module Perl-CAS</a></div></li>
|
|
<li class="level1"><div class="li"><a href="#configuration">Configuration</a></div></li>
|
|
</ul>
|
|
</div>
|
|
</div><!-- TOC END -->
|
|
|
|
|
|
<h1 class="sectionedit1" id="cas">CAS</h1>
|
|
<div class="level1">
|
|
<div class="table sectionedit2"><table class="inline table table-bordered table-striped">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0">Authentification </th><th class="col1"> Utilisateurs </th><th class="col2"> Mot-de-passe </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0 centeralign"> ✔ </td><td class="col1"> </td><td class="col2"> </td>
|
|
</tr>
|
|
</table></div><!-- EDIT2 TABLE [19-69] -->
|
|
|
|
</div><!-- EDIT1 SECTION "CAS" [1-70] -->
|
|
|
|
<h2 class="sectionedit3" id="presentation">Présentation</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<abbr title="LemonLDAP::NG">LL::NG</abbr> peut déléguer l'authentification à un serveur <abbr title="Central Authentication Service">CAS</abbr>. Ceci nécessite un <a href="http://sourcesup.cru.fr/projects/perlcas/" class="urlextern" title="http://sourcesup.cru.fr/projects/perlcas/" rel="nofollow">module Perl CAS</a>.
|
|
</p>
|
|
<div class="notetip"><abbr title="LemonLDAP::NG">LL::NG</abbr> can also act as <a href="idpcas.html" class="wikilink1" title="documentation:2.0:idpcas">CAS server</a>, that allows one to interconnect two <abbr title="LemonLDAP::NG">LL::NG</abbr> systems.
|
|
|
|
</div>
|
|
<p>
|
|
<abbr title="LemonLDAP::NG">LL::NG</abbr> peut également requérir des tickets de proxy pour les services qu'il protège. Les tickets de proxy seront collectés lors de la phase d'authentification et stockés dans la session utilisateur sous la forme :
|
|
</p>
|
|
|
|
<p>
|
|
<code>_casPT</code><strong>serviceID</strong> = <strong>Proxy ticket value</strong>
|
|
</p>
|
|
|
|
<p>
|
|
Ils peuvent être transférés aux applications via les <a href="writingrulesand_headers.html#headers" class="wikilink1" title="documentation:2.0:writingrulesand_headers">en-têtes HTTP</a>.
|
|
</p>
|
|
<div class="notetip">L'authentification <abbr title="Central Authentication Service">CAS</abbr> ajoute automatiquement une <a href="logoutforward.html" class="wikilink1" title="documentation:2.0:logoutforward">règle de renvoi après déconnexion</a> sur l'<abbr title="Uniform Resource Locator">URL</abbr> de déconnexion du serveur <abbr title="Central Authentication Service">CAS</abbr> afin de clore la session <abbr title="Central Authentication Service">CAS</abbr> lors de la déconnexion <abbr title="LemonLDAP::NG">LL::NG</abbr>.
|
|
</div>
|
|
</div><!-- EDIT3 SECTION "Presentation" [71-832] -->
|
|
|
|
<h2 class="sectionedit4" id="perl-cas_module_installation">Installation du module Perl-CAS</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
Télécharger la dernière version :
|
|
</p>
|
|
<pre class="code">wget https://sourcesup.cru.fr/frs/download.php/2476/AuthCAS-1.4.tar.gz</pre>
|
|
|
|
<p>
|
|
Extraire et compiler le module:
|
|
</p>
|
|
<pre class="code">tar zxvf AuthCAS-1.4.tar.gz
|
|
cd AuthCAS-1.4/
|
|
perl Makefile.PL
|
|
make
|
|
make test</pre>
|
|
|
|
<p>
|
|
Installer le module :
|
|
</p>
|
|
<pre class="code">sudo make install</pre>
|
|
|
|
</div><!-- EDIT4 SECTION "Perl-CAS module installation" [833-1166] -->
|
|
|
|
<h2 class="sectionedit5" id="configuration">Configuration</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
Dans le manager, aller dans <code>Paramètres généraux</code> > <code>Modules d'authentification</code> et choisir <abbr title="Central Authentication Service">CAS</abbr> pour l'authentification.
|
|
</p>
|
|
<div class="notetip">Vous pouvez ensuite choisir vos modules d'utilisateurs et de mots-de-passe.
|
|
</div>
|
|
<p>
|
|
Aller ensuite dans <code>Paramètres <abbr title="Central Authentication Service">CAS</abbr></code> :
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <strong>Niveau d'authentification</strong> : niveau d'authentification accordé à ce module.</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong><abbr title="Uniform Resource Locator">URL</abbr> du serveur</strong> : <abbr title="Uniform Resource Locator">URL</abbr> du serveur <abbr title="Central Authentication Service">CAS</abbr> (doit utiliser https://)</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Fichier CA</strong> : certificat de la CA utilisée pour valider le certificat du serveur <abbr title="Central Authentication Service">CAS</abbr></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Renouveler l'authentification</strong> : force le renouvellement de l'authentification sur le serveur <abbr title="Central Authentication Service">CAS</abbr></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Authentification des passerelles</strong> : force l'authentification transparente sur le serveur <abbr title="Central Authentication Service">CAS</abbr></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Fichier <abbr title="Proxy Granting Ticket">PGT</abbr></strong> : fichier temporaire où les tickets de proxy sont stockés (par défaut, <code>/tmp/pgt.txt</code>)</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Services Proxifiés</strong> : liste des services pour lesquels un ticket de proxy est requis :</div>
|
|
<ul>
|
|
<li class="level2"><div class="li"> <strong>Clef</strong> : Service ID</div>
|
|
</li>
|
|
<li class="level2"><div class="li"> <strong>Value</strong> Service <abbr title="Uniform Resource Locator">URL</abbr> (identifiant de service <abbr title="Central Authentication Service">CAS</abbr>)</div>
|
|
</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
<div class="notetip">Si aucun service proxifié n'est défini, l'authentification <abbr title="Central Authentication Service">CAS</abbr> n'activera pas le mode proxy <abbr title="Central Authentication Service">CAS</abbr>.
|
|
</div><div class="noteimportant">Si le mode proxy est activé, il faut créer le fichier <abbr title="Proxy Granting Ticket">PGT</abbr> sur le système, par exemple :
|
|
<pre class="code">touch /tmp/pgt.txt</pre>
|
|
|
|
</div>
|
|
</div><!-- EDIT5 SECTION "Configuration" [1167-] -->
|
|
</div>
|
|
</body>
|
|
</html>
|