You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
Go to file
Philippe Caseiro 3edf7dd774 Fix ldapVerify values 3 years ago
creolefuncs Python3 ConfigParser is in configparser module 3 years ago
diagnose Don't crash if LemonLDAP::NG is disabled 3 years ago
dicos set correct openldap conf 3 years ago
lemonldap-ng patch lemonldap pour corriger le problème des attributs avec la valeur 0 (ref #31384) 3 years ago
postservice parent d08c965ee8 3 years ago
posttemplate patch lemonldap pour corriger le problème des attributs avec la valeur 0 (ref #31384) 3 years ago
tmpl Fix ldapVerify values 3 years ago
.gitignore Prepare version 2.8.1 3 years ago
LICENSE Initial commit 6 years ago
Makefile Merge branch '2.8.0/master' 3 years ago
README.md Mise à jour de 'README.md' 3 years ago
apps.mk First commit 6 years ago
eole-lemonldap-ng.mk patch lemonldap pour corriger le problème des attributs avec la valeur 0 (ref #31384) 3 years ago
eole.mk First commit 6 years ago

README.md

eole-lemonldap

LemonLDAP::NG EOLE integration

Howto

Repository configuration

  • Add the lemonldap-ng deb respository we need the last version of LemonLDAP.

GenConfig -> Mode Expert -> Dépôts tiers -> Libellé du dépôt

LemonLDAP::NG repository (if you use EOLE 2.8.X this is not needed anymore)

Cadoles Repository

Install packages

apt update apt install eole-lemonldap

Configure LemonLDAP in GenConfig

  • Enable lemonldap in "Services" tab

Gen_Config -> Services -> Activer LemonLDAP::NG -> "Oui"

  • Fill LemonLDAP configuration

On Scribe

  • LemonLDAP::NG is configured to use the local LDAP service
  • We register the supplementary host names to the AD DNS
  • We add the supplementary host names to the ssl_subjectalt_names

Manual configuration

Nginx Web case

By default NGINX is configured to serve "web" application, in this case the lemonLDAP::NG application will not be served properly, so we need to disable this function

GenConfig -> Services -> Activer la publication dapplications web par Nginx -> "Non'

Configuration DNS
  • GenConfig -> Lemonldap -> Nom DNS du manager LemonLDAP-NG
  • GenConfig -> Lemonldap -> Nom DNS du service d'authentification LemonLDAP-NG
Configuration LDAP
  • GenConfig -> Lemonldap -> Protocole LDAP à utiliser
  • GenConfig -> Lemonldap -> Adresse du Serveur LDAP utilisé par LemonLDAP::NG
  • GenConfig -> Lemonldap -> Port d'écoute du LDAP utilisé par LemonLDAP::NG
  • GenConfig -> Lemonldap -> Base DN des utilisateurs dans l'annuaire
  • GenConfig -> Lemonldap -> Utilisateur de connection à l'annuaire (DN ex: cn=reader,o=gouv,c=fr)
  • GenConfig -> Lemonldap -> Mot de passe de l'utilisateur de connection à l'annuaire (file like /root/.reader or the clear password)
Configuration CAS

Add your CAS attributes mapping ( uid = uid and mail = mail are created by default)

  • GenConfig -> Lemonldap -> Nom de l'attribut CAS
  • GenConfig -> Lemonldap -> Attribut LDAP équivalent
SSL issues

If you use "autosign" certificates you need to add the "manager" and "auth" service names to the alternative names. You also need to include "reload" service name (available in GenConfig -> Mode Expert -> Lemonldap -> Nom DNS du service Reload de LemonLDAP-NG)

  • GenConfig -> Mode Expert -> Certificats ssl -> Nom Alternatif de la machine (SubjectAltName)

If you use "manual" certificates make sure this names are covered by your SSL Certificate

If you use "letsencrypt" mode you also need to add this names to the let'sencrypt request:

  • GenConfig -> Mode Expert -> Certificat ssl -> Nom de domaines supplémentaires