eole-lemonldap/README.md

74 lines
2.6 KiB
Markdown
Raw Normal View History

2018-03-02 09:12:54 +01:00
# eole-lemonldap
2018-03-16 10:35:13 +01:00
LemonLDAP::NG EOLE integration
2018-03-02 15:44:00 +01:00
## Howto
2018-03-16 10:35:13 +01:00
### Repository configuration
2018-03-02 15:44:00 +01:00
* Add the lemonldap-ng deb respository we need the last version of LemonLDAP.
2018-03-16 10:35:13 +01:00
GenConfig -> Mode Expert -> Dépôts tiers -> Libellé du dépôt
2018-03-02 15:44:00 +01:00
2020-11-20 11:16:29 +01:00
#### LemonLDAP::NG repository (if you use EOLE 2.7.2 this is not needed anymore)
2018-03-06 10:39:29 +01:00
2019-07-11 09:44:49 +02:00
* deb https://lemonldap-ng.org/deb 1.9 main
* deb-src https://lemonldap-ng.org/deb 1.9 main
2018-03-06 10:39:29 +01:00
* Key URL : https://lemonldap-ng.org/_media/rpm-gpg-key-ow2
2018-03-02 15:44:00 +01:00
2018-03-16 10:35:13 +01:00
#### Cadoles Repository
2020-09-03 16:44:25 +02:00
* deb [ arch=all ] https://vulcain.cadoles.com 2.7.2-dev main
2018-03-16 10:35:13 +01:00
* Key URL : https://vulcain.cadoles.com/cadoles.gpg
### Install packages
apt update
apt install eole-lemonldap
### Configure LemonLDAP in GenConfig
* Enable lemonldap in "Services" tab
Gen_Config -> Services -> Activer LemonLDAP::NG -> "Oui"
* Fill LemonLDAP configuration
#### Nginx Web case
By default NGINX is configured to serve "web" application, in this case the lemonLDAP::NG application will
not be served properly, so we need to disable this function
GenConfig -> Services -> Activer la publication dapplications web par Nginx -> "Non'
2018-03-16 10:35:13 +01:00
#### Configuration DNS
2018-03-16 10:37:12 +01:00
* GenConfig -> Lemonldap -> Nom DNS du manager LemonLDAP-NG
* GenConfig -> Lemonldap -> Nom DNS du service d'authentification LemonLDAP-NG
2018-03-16 10:35:13 +01:00
#### Configuration LDAP
2018-03-16 10:37:12 +01:00
* GenConfig -> Lemonldap -> Protocole LDAP à utiliser
* GenConfig -> Lemonldap -> Adresse du Serveur LDAP utilisé par LemonLDAP::NG
* GenConfig -> Lemonldap -> Port d'écoute du LDAP utilisé par LemonLDAP::NG
* GenConfig -> Lemonldap -> Base DN des utilisateurs dans l'annuaire
* GenConfig -> Lemonldap -> Utilisateur de connection à l'annuaire (DN ex: cn=reader,o=gouv,c=fr)
* GenConfig -> Lemonldap -> Mot de passe de l'utilisateur de connection à l'annuaire (file like /root/.reader or the clear password)
2018-03-16 10:35:13 +01:00
#### Configuration CAS
Add your CAS attributes mapping ( uid = uid and mail = mail are created by default)
2018-03-16 10:35:13 +01:00
2018-03-16 10:37:12 +01:00
* GenConfig -> Lemonldap -> Nom de l'attribut CAS
* GenConfig -> Lemonldap -> Attribut LDAP équivalent
2018-03-16 10:35:13 +01:00
### SSL issues
If you use "autosign" certificates you need to add the "manager" and "auth" service names to the alternative names.
You also need to include "reload" service name (available in GenConfig -> Mode Expert -> Lemonldap -> Nom DNS du service Reload de LemonLDAP-NG)
2018-03-16 10:37:12 +01:00
* GenConfig -> Mode Expert -> Certificats ssl -> Nom Alternatif de la machine (SubjectAltName)
2018-03-16 10:35:13 +01:00
If you use "manual" certificates make sure this names are covered by your SSL Certificate
If you use "letsencrypt" mode you also need to add this names to the let'sencrypt request:
2018-03-16 10:37:12 +01:00
* GenConfig -> Mode Expert -> Certificat ssl -> Nom de domaines supplémentaires