484 lines
31 KiB
HTML
484 lines
31 KiB
HTML
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
|
|
lang="en" dir="ltr">
|
|
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title></title>
|
|
<!-- metadata -->
|
|
<meta name="generator" content="Offline" />
|
|
<meta name="version" content="Offline 0.1" />
|
|
<!-- style sheet links -->
|
|
<link rel="stylesheet" media="all" type="text/css" href="../../../css/all.css" />
|
|
<link rel="stylesheet" media="screen" type="text/css" href="../../../css/screen.css" />
|
|
<link rel="stylesheet" media="print" type="text/css" href="../../../css/print.css" />
|
|
|
|
</head>
|
|
<body>
|
|
<div class="dokuwiki export">
|
|
|
|
|
|
<h1 class="sectionedit1" id="documentation_for_lemonldapng_19">Documentation for LemonLDAP::NG 1.9</h1>
|
|
<div class="level1">
|
|
|
|
</div>
|
|
<!-- EDIT1 SECTION "Documentation for LemonLDAP::NG 1.9" [1-51] -->
|
|
<h2 class="sectionedit2" id="installation">Installation</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/warehause.png?id=documentation%3A1.9%3Astart" class="media" title="icons:warehause.png"><img src="../../../media/icons/warehause.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/prereq.html" class="wikilink1" title="documentation:1.9:prereq">Prerequisites and dependencies</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/installtarball.html" class="wikilink1" title="documentation:1.9:installtarball">Installation from the tarball</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/installdeb.html" class="wikilink1" title="documentation:1.9:installdeb">Installation on Debian/Ubuntu with packages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/installrpm.html" class="wikilink1" title="documentation:1.9:installrpm">Installation on RHEL/CentOS with packages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/docker.html" class="wikilink1" title="documentation:1.9:docker">Run in LemonLDAP::NG in Docker</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/upgrade.html" class="wikilink1" title="documentation:1.9:upgrade">Upgrade from 1.4</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT2 SECTION "Installation" [52-530] -->
|
|
<h2 class="sectionedit3" id="configuration">Configuration</h2>
|
|
<div class="level2">
|
|
|
|
</div>
|
|
<!-- EDIT3 SECTION "Configuration" [531-557] -->
|
|
<h3 class="sectionedit4" id="first_steps">First steps</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/lists.png?id=documentation%3A1.9%3Astart" class="media" title="icons:lists.png"><img src="../../../media/icons/lists.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/configlocation.html" class="wikilink1" title="documentation:1.9:configlocation">Access to configuration</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/ssocookie.html" class="wikilink1" title="documentation:1.9:ssocookie">Configure Single Sign On cookie and portal URL</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/redirections.html" class="wikilink1" title="documentation:1.9:redirections">Parameter redirections</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/exportedvars.html" class="wikilink1" title="documentation:1.9:exportedvars">Set exported variables</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/configvhost.html" class="wikilink1" title="documentation:1.9:configvhost">Manage virtual hosts</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/sessions.html" class="wikilink1" title="documentation:1.9:sessions">Configure sessions specificities</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT4 SECTION "First steps" [558-1018] -->
|
|
<h3 class="sectionedit5" id="portal">Portal</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/colors.png?id=documentation%3A1.9%3Astart" class="media" title="icons:colors.png"><img src="../../../media/icons/colors.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/portal.html" class="wikilink1" title="documentation:1.9:portal">Presentation</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/portalcustom.html" class="wikilink1" title="documentation:1.9:portalcustom">Portal customization</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/portalmenu.html" class="wikilink1" title="documentation:1.9:portalmenu">Portal menu</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/captcha.html" class="wikilink1" title="documentation:1.9:captcha">Captcha</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT5 SECTION "Portal" [1019-1309] -->
|
|
<h3 class="sectionedit6" id="authentication_users_and_password_databases">Authentication, users and password databases</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/gpg.png?id=documentation%3A1.9%3Astart" class="media" title="icons:gpg.png"><img src="../../../media/icons/gpg.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<div class="table sectionedit7"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0"> Official Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authad.html" class="wikilink1" title="documentation:1.9:authad">Active Directory</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authapache.html" class="wikilink1" title="documentation:1.9:authapache">Apache (Kerberos, NTLM, OTP, ...)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authbrowserid.html" class="wikilink1" title="documentation:1.9:authbrowserid">BrowserID (Mozilla Persona)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authcas.html" class="wikilink1" title="documentation:1.9:authcas">CAS</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authdbi.html" class="wikilink1" title="documentation:1.9:authdbi">Databases (DBI)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row6 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authdemo.html" class="wikilink1" title="documentation:1.9:authdemo">Demonstration</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row7 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authfacebook.html" class="wikilink1" title="documentation:1.9:authfacebook">Facebook</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row8 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authldap.html" class="wikilink1" title="documentation:1.9:authldap">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row9 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authnull.html" class="wikilink1" title="documentation:1.9:authnull">Null</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row10 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authopenidconnect.html" class="wikilink1" title="documentation:1.9:authopenidconnect">OpenID Connect</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row11 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authproxy.html" class="wikilink1" title="documentation:1.9:authproxy">Proxy LL::NG</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row12 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authradius.html" class="wikilink1" title="documentation:1.9:authradius">Radius</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row13 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authsaml.html" class="wikilink1" title="documentation:1.9:authsaml">SAML 2.0 / Shibboleth</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row14 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authslave.html" class="wikilink1" title="documentation:1.9:authslave">Slave</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row15 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authssl.html" class="wikilink1" title="documentation:1.9:authssl">SSL</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row16 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authtwitter.html" class="wikilink1" title="documentation:1.9:authtwitter">Twitter</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row17 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authwebid.html" class="wikilink1" title="documentation:1.9:authwebid">WebID</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row18 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authyubikey.html" class="wikilink1" title="documentation:1.9:authyubikey">Yubikey</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row19 rowodd">
|
|
<th class="col0"> Combo Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
<tr class="row20 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authchoice.html" class="wikilink1" title="documentation:1.9:authchoice">Choice by users</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row21 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authmulti.html" class="wikilink1" title="documentation:1.9:authmulti">Multiple backends stack</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row22 roweven">
|
|
<th class="col0"> Obsolete Backends </th><th class="col1 centeralign"> Authentication </th><th class="col2 centeralign"> Users </th><th class="col3 centeralign"> Password </th>
|
|
</tr>
|
|
<tr class="row23 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authgoogle.html" class="wikilink1" title="documentation:1.9:authgoogle">Google</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row24 roweven">
|
|
<td class="col0"> <a href="../../documentation/1.9/authopenid.html" class="wikilink1" title="documentation:1.9:authopenid">OpenID</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
<tr class="row25 rowodd">
|
|
<td class="col0"> <a href="../../documentation/1.9/authremote.html" class="wikilink1" title="documentation:1.9:authremote">Remote LL::NG</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 leftalign"> </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT7 TABLE [1483-2859] -->
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT6 SECTION "Authentication, users and password databases" [1310-2887] -->
|
|
<h3 class="sectionedit8" id="configuration_database">Configuration database</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/utilities.png?id=documentation%3A1.9%3Astart" class="media" title="icons:utilities.png"><img src="../../../media/icons/utilities.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
|
|
<p>
|
|
<abbr title="LemonLDAP::NG">LL::NG</abbr> needs a storage system to store its own configuration (managed by the manager). Choose one of the following:
|
|
</p>
|
|
<div class="table sectionedit9"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0 centeralign"> Backend </th><th class="col1 centeralign"> Shareable </th><th class="col2 centeralign"> Comment </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/fileconfbackend.html" class="wikilink1" title="documentation:1.9:fileconfbackend">File (JSON)</a> </td><td class="col1"> </td><td class="col2 leftalign">Not shareable between servers except if used in conjunction with <a href="../../documentation/1.9/soapconfbackend.html" class="wikilink1" title="documentation:1.9:soapconfbackend">SOAP</a> or with a shared file system (NFS,…). Selected by default during installation. </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/sqlconfbackend.html" class="wikilink1" title="documentation:1.9:sqlconfbackend">SQL (RDBI/CDBI)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/ldapconfbackend.html" class="wikilink1" title="documentation:1.9:ldapconfbackend">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/mongodbconfbackend.html" class="wikilink1" title="documentation:1.9:mongodbconfbackend">MongoDB</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2"> </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/soapconfbackend.html" class="wikilink1" title="documentation:1.9:soapconfbackend">SOAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 leftalign"> Proxy backend to be used in conjunction with another configuration backend. <br/><strong>Can be used to secure another backend</strong> for remote servers. </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT9 TABLE [3162-3751] -->
|
|
<p>
|
|
<p><div class="notetip">You can not start with an empty configuration, so read <a href="../../documentation/1.9/changeconfbackend.html" class="wikilink1" title="documentation:1.9:changeconfbackend">how to change configuration backend</a> to convert your existing configuration into another one.
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT8 SECTION "Configuration database" [2888-3967] -->
|
|
<h3 class="sectionedit10" id="sessions_database">Sessions database</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/kmultiple.png?id=documentation%3A1.9%3Astart" class="media" title="icons:kmultiple.png"><img src="../../../media/icons/kmultiple.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
|
|
<p>
|
|
Sessions are stored using <a href="http://search.cpan.org/perldoc?Apache::Session" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session" rel="nofollow">Apache::Session</a> modules family. All <a href="http://search.cpan.org/perldoc?Apache::Session" class="urlextern" title="http://search.cpan.org/perldoc?Apache::Session" rel="nofollow">Apache::Session</a> style modules are useable except for some features.
|
|
</p>
|
|
<div class="table sectionedit11"><table class="inline">
|
|
<thead>
|
|
<tr class="row0 roweven">
|
|
<th class="col0 centeralign"> Backend </th><th class="col1 centeralign"> Shareable </th><th class="col2 centeralign"> <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">Session explorer</a> </th><th class="col3 centeralign"> <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">Session restrictions</a> </th><th class="col4 centeralign"> Session expiration </th><th class="col5 centeralign"> Comment </th>
|
|
</tr>
|
|
</thead>
|
|
<tr class="row1 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/filesessionbackend.html" class="wikilink1" title="documentation:1.9:filesessionbackend">File</a> </td><td class="col1"> </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign">Not shareable between servers except if used in conjunction with <a href="../../documentation/1.9/soapsessionbackend.html" class="wikilink1" title="documentation:1.9:soapsessionbackend">SOAP session backend</a> or with a shared file system (NFS,…). Selected by default during installation. </td>
|
|
</tr>
|
|
<tr class="row2 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/sqlsessionbackend.html" class="wikilink1" title="documentation:1.9:sqlsessionbackend">SQL</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign" rowspan="2"> Unoptimized for <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">session explorer</a> and <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">single session</a> features. </td>
|
|
</tr>
|
|
<tr class="row3 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/ldapsessionbackend.html" class="wikilink1" title="documentation:1.9:ldapsessionbackend">LDAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td>
|
|
</tr>
|
|
<tr class="row4 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/nosqlsessionbackend.html" class="wikilink1" title="documentation:1.9:nosqlsessionbackend">Redis</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> The faster. Must be secured by network access control. </td>
|
|
</tr>
|
|
<tr class="row5 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/mongodbsessionbackend.html" class="wikilink1" title="documentation:1.9:mongodbsessionbackend">MongoDB</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> Must be secured by network access control. </td>
|
|
</tr>
|
|
<tr class="row6 roweven">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/browseablesessionbackend.html" class="wikilink1" title="documentation:1.9:browseablesessionbackend">Browseable (SQL, Redis or LDAP)</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> <strong>Optimized</strong> for <a href="../../documentation/features.html#session_explorer" class="wikilink1" title="documentation:features">session explorer</a> and <a href="../../documentation/features.html#session_restrictions" class="wikilink1" title="documentation:features">single session</a> features. </td>
|
|
</tr>
|
|
<tr class="row7 rowodd">
|
|
<td class="col0 centeralign"> <a href="../../documentation/1.9/soapsessionbackend.html" class="wikilink1" title="documentation:1.9:soapsessionbackend">SOAP</a> </td><td class="col1 centeralign"> ✔ </td><td class="col2 centeralign"> ✔ </td><td class="col3 centeralign"> ✔ </td><td class="col4 centeralign"> ✔ </td><td class="col5 leftalign"> Proxy backend to be used in conjunction with another session backend. <br/>
|
|
<strong>Can be used to secure another backend</strong> for remote servers. </td>
|
|
</tr>
|
|
</table></div>
|
|
<!-- EDIT11 TABLE [4353-5807] -->
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT10 SECTION "Sessions database" [3968-5835] -->
|
|
<h3 class="sectionedit12" id="identity_provider">Identity provider</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<p><div class="notetip">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> All identity provider protocols can be used simultaneously</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/federationproxy.html" class="wikilink1" title="documentation:1.9:federationproxy">LemonLDAP::NG can be used as a proxy between those protocols</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/personal.png?id=documentation%3A1.9%3Astart" class="media" title="icons:personal.png"><img src="../../../media/icons/personal.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/idpcas.html" class="wikilink1" title="documentation:1.9:idpcas">CAS 1.0 / 2.0 / 3.0 </a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/idpsaml.html" class="wikilink1" title="documentation:1.9:idpsaml">SAML 2.0 / Shibboleth</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/idpopenid.html" class="wikilink1" title="documentation:1.9:idpopenid">OpenID 2.0 (obsolete)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/idpopenidconnect.html" class="wikilink1" title="documentation:1.9:idpopenidconnect">OpenID Connect</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT12 SECTION "Identity provider" [5836-6336] -->
|
|
<h2 class="sectionedit13" id="applications_protection">Applications protection</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/access.png?id=documentation%3A1.9%3Astart" class="media" title="icons:access.png"><img src="../../../media/icons/access.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/writingrulesand_headers.html" class="wikilink1" title="documentation:1.9:writingrulesand_headers">Writing rules and headers</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/variables.html" class="wikilink1" title="documentation:1.9:variables">Variables that can be used in rules and headers</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/formreplay.html" class="wikilink1" title="documentation:1.9:formreplay">Form replay</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/applications.html" class="wikilink1" title="documentation:1.9:applications">Integrate existing applications</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/selfmadeapplication.html" class="wikilink1" title="documentation:1.9:selfmadeapplication">Integrate your own application</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT13 SECTION "Applications protection" [6337-6788] -->
|
|
<h2 class="sectionedit14" id="advanced_features">Advanced features</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/neotux.png?id=documentation%3A1.9%3Astart" class="media" title="icons:neotux.png"><img src="../../../media/icons/neotux.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/notifications.html" class="wikilink1" title="documentation:1.9:notifications">Notifications system</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/passwordstore.html" class="wikilink1" title="documentation:1.9:passwordstore">Store password in session</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/cda.html" class="wikilink1" title="documentation:1.9:cda">Cross Domain Authentication (CDA)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/rbac.html" class="wikilink1" title="documentation:1.9:rbac">Role Based Access Control (RBAC)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/customfunctions.html" class="wikilink1" title="documentation:1.9:customfunctions">Use custom functions</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/extendedfunctions.html" class="wikilink1" title="documentation:1.9:extendedfunctions">Use extended functions</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/resetpassword.html" class="wikilink1" title="documentation:1.9:resetpassword">Reset password by mail (self service)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/register.html" class="wikilink1" title="documentation:1.9:register">Create an account (self service)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/logoutforward.html" class="wikilink1" title="documentation:1.9:logoutforward">Forward logout to applications</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/securetoken.html" class="wikilink1" title="documentation:1.9:securetoken">Secure Token Handler</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/safejail.html" class="wikilink1" title="documentation:1.9:safejail">Safe jail</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/loginhistory.html" class="wikilink1" title="documentation:1.9:loginhistory">Login history</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/internalproxy.html" class="wikilink1" title="documentation:1.9:internalproxy">Internal Proxy (lmProxy)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/handlerauthbasic.html" class="wikilink1" title="documentation:1.9:handlerauthbasic">AuthBasic Handler</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/fastcgi.html" class="wikilink1" title="documentation:1.9:fastcgi">Fast CGI support</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/parameterlist.html" class="wikilink1" title="documentation:1.9:parameterlist">See full parameters list</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT14 SECTION "Advanced features" [6789-7680] -->
|
|
<h2 class="sectionedit15" id="mini_howtos">Mini howtos</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/jabber_protocol.png?id=documentation%3A1.9%3Astart" class="media" title="icons:jabber_protocol.png"><img src="../../../media/icons/jabber_protocol.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/managerprotection.html" class="wikilink1" title="documentation:1.9:managerprotection">Modify Manager protection</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/mysqlminihowto.html" class="wikilink1" title="documentation:1.9:mysqlminihowto">Configuration and sessions in MySQL</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/ldapminihowto.html" class="wikilink1" title="documentation:1.9:ldapminihowto">Configuration and sessions in LDAP</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/soapminihowto.html" class="wikilink1" title="documentation:1.9:soapminihowto">Configuration and sessions access by SOAP</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/activedirectoryminihowto.html" class="wikilink1" title="documentation:1.9:activedirectoryminihowto">Integration in Active Directory (LDAP and Kerberos)</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/federationproxy.html" class="wikilink1" title="documentation:1.9:federationproxy">Create a protocol proxy</a> <em>(<abbr title="Security Assertion Markup Language">SAML</abbr> to OpenID, <abbr title="Central Authentication Service">CAS</abbr> to <abbr title="Security Assertion Markup Language">SAML</abbr> ,…)</em></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/header_remote_user_conversion.html" class="wikilink1" title="documentation:1.9:header_remote_user_conversion">Convert HTTP header into environment variable</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
<!-- EDIT15 SECTION "Mini howtos" [7681-8350] -->
|
|
<h2 class="sectionedit16" id="exploitation">Exploitation</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<div class="row"><div class="col-md-1">
|
|
<a href="/_detail/icons/xeyes.png?id=documentation%3A1.9%3Astart" class="media" title="icons:xeyes.png"><img src="../../../media/icons/xeyes.png" class="media" alt="" /></a>
|
|
</div><div class="col-md-11">
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/performances.html" class="wikilink1" title="documentation:1.9:performances">Performances</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/security.html" class="wikilink1" title="documentation:1.9:security">Security</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/status.html" class="wikilink1" title="documentation:1.9:status">Handler status page</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/mrtg.html" class="wikilink1" title="documentation:1.9:mrtg">MRTG monitoring</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/logs.html" class="wikilink1" title="documentation:1.9:logs">Logs settings</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/error.html" class="wikilink1" title="documentation:1.9:error">Error messages</a></div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <a href="../../documentation/1.9/highavailability.html" class="wikilink1" title="documentation:1.9:highavailability">High Availability</a></div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</div></div>
|
|
</p>
|
|
|
|
</div>
|
|
</div><!-- closes <div class="dokuwiki export">--> |