Compare commits
1 Commits
0f0e822069
...
2.8.0/mast
| Author | SHA1 | Date | |
|---|---|---|---|
| 74fb92fb55 |
4
.gitignore
vendored
4
.gitignore
vendored
@ -1,4 +0,0 @@
|
|||||||
# Backup and swap files
|
|
||||||
*~
|
|
||||||
*#
|
|
||||||
*.swp
|
|
||||||
6
Makefile
6
Makefile
@ -3,9 +3,9 @@
|
|||||||
################################
|
################################
|
||||||
|
|
||||||
SOURCE=eole-lemonldap
|
SOURCE=eole-lemonldap
|
||||||
VERSION=0.1
|
VERSION=2.8.0
|
||||||
EOLE_VERSION=2.7
|
EOLE_VERSION=2.8
|
||||||
EOLE_RELEASE=2.7.2
|
EOLE_RELEASE=2.8.0
|
||||||
PKGAPPS=non
|
PKGAPPS=non
|
||||||
#FLASK_MODULE=<APPLICATION>
|
#FLASK_MODULE=<APPLICATION>
|
||||||
|
|
||||||
|
|||||||
21
README.md
21
README.md
@ -4,27 +4,6 @@ LemonLDAP::NG EOLE integration
|
|||||||
|
|
||||||
## Howto
|
## Howto
|
||||||
|
|
||||||
### Repository configuration
|
|
||||||
|
|
||||||
* Add the lemonldap-ng deb respository we need the last version of LemonLDAP.
|
|
||||||
|
|
||||||
GenConfig -> Mode Expert -> Dépôts tiers -> Libellé du dépôt
|
|
||||||
|
|
||||||
#### LemonLDAP::NG repository (if you use EOLE 2.7.2 this is not needed anymore)
|
|
||||||
|
|
||||||
* deb https://lemonldap-ng.org/deb stable main
|
|
||||||
* deb-src https://lemonldap-ng.org/deb stable main
|
|
||||||
* Key URL : https://lemonldap-ng.org/_media/rpm-gpg-key-ow2
|
|
||||||
|
|
||||||
#### Cadoles Repository
|
|
||||||
* deb [ arch=all ] https://vulcain.cadoles.com 2.7.2-dev main
|
|
||||||
* Key URL : https://vulcain.cadoles.com/cadoles.gpg
|
|
||||||
|
|
||||||
### Install packages
|
|
||||||
|
|
||||||
apt update
|
|
||||||
apt install eole-lemonldap
|
|
||||||
|
|
||||||
### Configure LemonLDAP in GenConfig
|
### Configure LemonLDAP in GenConfig
|
||||||
|
|
||||||
* Enable lemonldap in "Services" tab
|
* Enable lemonldap in "Services" tab
|
||||||
|
|||||||
@ -31,7 +31,7 @@ def getSSOFilters():
|
|||||||
""" Convert former eole-sso filters to LemonLDAP filters
|
""" Convert former eole-sso filters to LemonLDAP filters
|
||||||
"""
|
"""
|
||||||
import glob
|
import glob
|
||||||
from ConfigParser import ConfigParser
|
from configparser import ConfigParser
|
||||||
|
|
||||||
try:
|
try:
|
||||||
filters = { 'uid': "uid", "mail": "mail" }
|
filters = { 'uid': "uid", "mail": "mail" }
|
||||||
|
|||||||
@ -2,6 +2,7 @@
|
|||||||
<creole>
|
<creole>
|
||||||
|
|
||||||
<files>
|
<files>
|
||||||
|
|
||||||
<file filelist='lemonldap' name='/etc/lemonldap-ng/lemonldap-ng.ini' mkdir='True' rm='True'/>
|
<file filelist='lemonldap' name='/etc/lemonldap-ng/lemonldap-ng.ini' mkdir='True' rm='True'/>
|
||||||
<file filelist='lemonldap' name='/var/lib/lemonldap-ng/conf/lmConf-1.json' mkdir='True' rm='True'/>
|
<file filelist='lemonldap' name='/var/lib/lemonldap-ng/conf/lmConf-1.json' mkdir='True' rm='True'/>
|
||||||
<file filelist='lemonldap' name='/etc/default/lemonldap-ng-fastcgi-server' mkdir='True' rm='True'/>
|
<file filelist='lemonldap' name='/etc/default/lemonldap-ng-fastcgi-server' mkdir='True' rm='True'/>
|
||||||
@ -14,7 +15,7 @@
|
|||||||
<file filelist='lemonldap-apache' name='/etc/lemonldap-ng/handler-apache2.X.conf' mkdir='True' rm='True'/>
|
<file filelist='lemonldap-apache' name='/etc/lemonldap-ng/handler-apache2.X.conf' mkdir='True' rm='True'/>
|
||||||
<file filelist='lemonldap-apache' name='/etc/lemonldap-ng/portal-apache2.X.conf' mkdir='True' rm='True'/>
|
<file filelist='lemonldap-apache' name='/etc/lemonldap-ng/portal-apache2.X.conf' mkdir='True' rm='True'/>
|
||||||
|
|
||||||
<service servicelist="sllemon">lemonldap-ng-fastcgi-server</service>
|
<service>lemonldap-ng-fastcgi-server</service>
|
||||||
|
|
||||||
<service method='apache' servicelist='lemonldap-apache'>manager-apache2</service>
|
<service method='apache' servicelist='lemonldap-apache'>manager-apache2</service>
|
||||||
<service method='apache' servicelist='lemonldap-apache'>portal-apache2</service>
|
<service method='apache' servicelist='lemonldap-apache'>portal-apache2</service>
|
||||||
@ -120,6 +121,7 @@
|
|||||||
<check name="valid_enum" target="llRegisterDB">
|
<check name="valid_enum" target="llRegisterDB">
|
||||||
<param>['LDAP','Demo','Custom']</param>
|
<param>['LDAP','Demo','Custom']</param>
|
||||||
</check>
|
</check>
|
||||||
|
|
||||||
<group master="casAttribute">
|
<group master="casAttribute">
|
||||||
<slave>casLDAPAttribute</slave>
|
<slave>casLDAPAttribute</slave>
|
||||||
</group>
|
</group>
|
||||||
@ -130,7 +132,6 @@
|
|||||||
<target type='filelist'>lemonldap-nginx</target>
|
<target type='filelist'>lemonldap-nginx</target>
|
||||||
<target type='filelist'>lemonldap-apache</target>
|
<target type='filelist'>lemonldap-apache</target>
|
||||||
<target type='servicelist'>lemonldap-apache</target>
|
<target type='servicelist'>lemonldap-apache</target>
|
||||||
<target type='servicelist'>sllemon</target>
|
|
||||||
<target type='family'>LemonLDAP</target>
|
<target type='family'>LemonLDAP</target>
|
||||||
<target type='service_accesslist'>saLemon</target>
|
<target type='service_accesslist'>saLemon</target>
|
||||||
</condition>
|
</condition>
|
||||||
|
|||||||
@ -7,6 +7,7 @@
|
|||||||
|
|
||||||
<family name='eole sso'>
|
<family name='eole sso'>
|
||||||
<variable name='eolesso_adresse' description="Nom de domaine du serveur d'authentification SSO" redefine="True" exists='True' />
|
<variable name='eolesso_adresse' description="Nom de domaine du serveur d'authentification SSO" redefine="True" exists='True' />
|
||||||
|
<variable name='ldap_tls' redefine="True" exists='True' />
|
||||||
<variable name='eolesso_cas_folder' redefine="True" exists='True'>
|
<variable name='eolesso_cas_folder' redefine="True" exists='True'>
|
||||||
<value>cas</value>
|
<value>cas</value>
|
||||||
</variable>
|
</variable>
|
||||||
|
|||||||
@ -1,12 +1,6 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
|
[ "$(CreoleGet activerLemon non)" = 'oui' ] || exit 0
|
||||||
[[ $(CreoleGet activerLemon non) == "non" ]] && exit 0
|
|
||||||
|
|
||||||
# Updating Configuration cache
|
|
||||||
|
|
||||||
cmd="/usr/share/lemonldap-ng/bin/lemonldap-ng-cli update-cache"
|
|
||||||
opt="update-cache"
|
|
||||||
|
|
||||||
# Updating Configuration cache
|
# Updating Configuration cache
|
||||||
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli update-cache 2>&1
|
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli update-cache 2>&1
|
||||||
|
|||||||
443
tmpl/lmConf-1.js
443
tmpl/lmConf-1.js
@ -1,443 +0,0 @@
|
|||||||
%set %%ssoFilters = %%getSSOFilters
|
|
||||||
{
|
|
||||||
"ldapGroupAttributeNameUser": "dn",
|
|
||||||
"cfgAuthorIP": "172.16.0.1",
|
|
||||||
"samlSPMetaDataXML": null,
|
|
||||||
"facebookAuthnLevel": 1,
|
|
||||||
"mailConfirmSubject": "[LemonLDAP::NG] Password reset confirmation",
|
|
||||||
"secureTokenAttribute": "uid",
|
|
||||||
"singleSession": 0,
|
|
||||||
"registerConfirmSubject": "[LemonLDAP::NG] Account register confirmation",
|
|
||||||
"CAS_pgtFile": "/tmp/pgt.txt",
|
|
||||||
"cookieName": "lemonldap",
|
|
||||||
"slaveExportedVars": {},
|
|
||||||
"whatToTrace": "_whatToTrace",
|
|
||||||
"oidcRPMetaDataOptions": {},
|
|
||||||
"notifyDeleted": 1,
|
|
||||||
"useRedirectOnError": 1,
|
|
||||||
"samlSPMetaDataExportedAttributes": null,
|
|
||||||
"ldapPwdEnc": "utf-8",
|
|
||||||
"openIdSPList": "0;",
|
|
||||||
"samlNameIDFormatMapEmail": "mail",
|
|
||||||
"samlSPMetaDataOptions": null,
|
|
||||||
"issuerDBOpenIDRule": 1,
|
|
||||||
"casStorageOptions": {},
|
|
||||||
"mailFrom": "noreply@%%nom_domaine_local",
|
|
||||||
"timeoutActivity": 0,
|
|
||||||
"oidcRPMetaDataExportedVars": {},
|
|
||||||
"issuerDBSAMLActivation": 0,
|
|
||||||
"issuerDBCASPath": "^/%%casFolder/",
|
|
||||||
"randomPasswordRegexp": "[A-Z]{3}[a-z]{5}.\\d{2}",
|
|
||||||
"samlIDPSSODescriptorSingleSignOnServiceSOAP": "urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleSignOnSOAP;",
|
|
||||||
"samlSPSSODescriptorSingleLogoutServiceHTTPPost": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn",
|
|
||||||
"exportedHeaders": {
|
|
||||||
"test1.%%nom_domaine_local": {
|
|
||||||
"Auth-User": "$uid"
|
|
||||||
},
|
|
||||||
"test2.%%nom_domaine_local": {
|
|
||||||
"Auth-User": "$uid"
|
|
||||||
},
|
|
||||||
"%%managerWebName": {}
|
|
||||||
},
|
|
||||||
"vhostOptions": {
|
|
||||||
"%%managerWebName": {
|
|
||||||
"vhostHttps" : "1"
|
|
||||||
},
|
|
||||||
"test1.%%nom_domaine_local": {},
|
|
||||||
"test2.%%nom_domaine_local": {}
|
|
||||||
},
|
|
||||||
"radiusAuthnLevel": 3,
|
|
||||||
"dbiAuthnLevel": 2,
|
|
||||||
"ldapPasswordResetAttribute": "pwdReset",
|
|
||||||
"ldapGroupObjectClass": "groupOfNames",
|
|
||||||
"apacheAuthnLevel": 4,
|
|
||||||
"samlNameIDFormatMapKerberos": "uid",
|
|
||||||
"groups": {},
|
|
||||||
"securedCookie": 0,
|
|
||||||
"httpOnly": 1,
|
|
||||||
"yubikeyAuthnLevel": 3,
|
|
||||||
"ADPwdMaxAge": 0,
|
|
||||||
"samlUseQueryStringSpecific": 0,
|
|
||||||
"loginHistoryEnabled": 1,
|
|
||||||
"samlSPSSODescriptorSingleLogoutServiceSOAP": "urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/proxySingleLogoutSOAP;",
|
|
||||||
"failedLoginNumber": 5,
|
|
||||||
"samlServicePrivateKeyEncPwd": "",
|
|
||||||
"portalForceAuthnInterval": 0,
|
|
||||||
"cfgLog": "",
|
|
||||||
"samlIDPSSODescriptorSingleLogoutServiceHTTPRedirect": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn",
|
|
||||||
"exportedVars": {
|
|
||||||
"UA": "HTTP_USER_AGENT",
|
|
||||||
%for att in %%casAttribute
|
|
||||||
"%%att": "%%att",
|
|
||||||
%end for
|
|
||||||
%set %%idx = 0
|
|
||||||
%set %%size = %%len(%%ssoFilters) - 1
|
|
||||||
%for key,value in %%ssoFilters
|
|
||||||
%if %%idx == %%size
|
|
||||||
"%%key": "%%value"
|
|
||||||
%else
|
|
||||||
"%%key": "%%value",
|
|
||||||
%end if
|
|
||||||
%set %%idx += 1
|
|
||||||
%end for
|
|
||||||
},
|
|
||||||
"notificationStorage": "File",
|
|
||||||
"applicationList": {
|
|
||||||
"1sample": {
|
|
||||||
"test2": {
|
|
||||||
"options": {
|
|
||||||
"name": "Application Test 2",
|
|
||||||
"logo": "thumbnail.png",
|
|
||||||
"uri": "https://test2.%%nom_domaine_local/",
|
|
||||||
"display": "auto",
|
|
||||||
"description": "The same simple application displaying authenticated user"
|
|
||||||
},
|
|
||||||
"type": "application"
|
|
||||||
},
|
|
||||||
"type": "category",
|
|
||||||
"catname": "Sample applications",
|
|
||||||
"test1": {
|
|
||||||
"type": "application",
|
|
||||||
"options": {
|
|
||||||
"description": "A simple application displaying authenticated user",
|
|
||||||
"uri": "https://test1.%%nom_domaine_local/",
|
|
||||||
"logo": "demo.png",
|
|
||||||
"display": "auto",
|
|
||||||
"name": "Application Test 1"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"2administration": {
|
|
||||||
"notifications": {
|
|
||||||
"options": {
|
|
||||||
"name": "Notifications explorer",
|
|
||||||
"display": "auto",
|
|
||||||
"description": "Explore WebSSO notifications",
|
|
||||||
"uri": "https://%%managerWebName/notifications.pl",
|
|
||||||
"logo": "database.png"
|
|
||||||
},
|
|
||||||
"type": "application"
|
|
||||||
},
|
|
||||||
"manager": {
|
|
||||||
"options": {
|
|
||||||
"uri": "https://%%managerWebName/",
|
|
||||||
"display": "auto",
|
|
||||||
"description": "Configure LemonLDAP::NG WebSSO",
|
|
||||||
"logo": "configure.png",
|
|
||||||
"name": "WebSSO Manager"
|
|
||||||
},
|
|
||||||
"type": "application"
|
|
||||||
},
|
|
||||||
"type": "category",
|
|
||||||
"sessions": {
|
|
||||||
"type": "application",
|
|
||||||
"options": {
|
|
||||||
"description": "Explore WebSSO sessions",
|
|
||||||
"uri": "https://%%managerWebName/sessions.pl",
|
|
||||||
"logo": "database.png",
|
|
||||||
"display": "auto",
|
|
||||||
"name": "Sessions explorer"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"catname": "Administration"
|
|
||||||
},
|
|
||||||
"3documentation": {
|
|
||||||
"catname": "Documentation",
|
|
||||||
"officialwebsite": {
|
|
||||||
"type": "application",
|
|
||||||
"options": {
|
|
||||||
"name": "Offical Website",
|
|
||||||
"description": "Official LemonLDAP::NG Website",
|
|
||||||
"logo": "network.png",
|
|
||||||
"display": "on",
|
|
||||||
"uri": "http://lemonldap-ng.org/"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"type": "category",
|
|
||||||
"localdoc": {
|
|
||||||
"options": {
|
|
||||||
"logo": "help.png",
|
|
||||||
"description": "Documentation supplied with LemonLDAP::NG",
|
|
||||||
"display": "on",
|
|
||||||
"uri": "https://%%managerWebName/doc/",
|
|
||||||
"name": "Local documentation"
|
|
||||||
},
|
|
||||||
"type": "application"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"userControl": "^[\\w\\.\\-@]+$",
|
|
||||||
"timeout": 72000,
|
|
||||||
"portalAntiFrame": 1,
|
|
||||||
"SMTPServer": "",
|
|
||||||
"ldapTimeout": 120,
|
|
||||||
"samlAuthnContextMapPasswordProtectedTransport": 3,
|
|
||||||
"ldapUsePasswordResetAttribute": 1,
|
|
||||||
"ldapPpolicyControl": 0,
|
|
||||||
"casAttributes": {
|
|
||||||
%for att in %%casAttribute
|
|
||||||
"%%att": "%%att.casLDAPAttribute",
|
|
||||||
%end for
|
|
||||||
%set %%idx = 0
|
|
||||||
%set %%size = %%len(%%ssoFilters) - 1
|
|
||||||
%for key,value in %%ssoFilters
|
|
||||||
%if %%idx == %%size
|
|
||||||
"%%key": "%%key"
|
|
||||||
%else
|
|
||||||
"%%key": "%%key",
|
|
||||||
%end if
|
|
||||||
%set %%idx += 1
|
|
||||||
%end for
|
|
||||||
},
|
|
||||||
"issuerDBSAMLPath": "^/saml/",
|
|
||||||
"samlAttributeAuthorityDescriptorAttributeServiceSOAP": "urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/AA/SOAP;",
|
|
||||||
"portalDisplayAppslist": 1,
|
|
||||||
"confirmFormMethod": "post",
|
|
||||||
"domain": "%%nom_domaine_local",
|
|
||||||
"cfgNum": "1",
|
|
||||||
"authentication": "LDAP",
|
|
||||||
"samlNameIDFormatMapWindows": "uid",
|
|
||||||
"authChoiceModules": {},
|
|
||||||
"ldapGroupAttributeName": "member",
|
|
||||||
"samlServicePrivateKeySigPwd": "",
|
|
||||||
"googleAuthnLevel": 1,
|
|
||||||
"successLoginNumber": 5,
|
|
||||||
"localSessionStorageOptions": {
|
|
||||||
"cache_root": "/tmp",
|
|
||||||
"namespace": "lemonldap-ng-sessions",
|
|
||||||
"default_expires_in": 600,
|
|
||||||
"directory_umask": "007",
|
|
||||||
"cache_depth": 3
|
|
||||||
},
|
|
||||||
"samlSPSSODescriptorArtifactResolutionServiceArtifact": "1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact",
|
|
||||||
"portalRequireOldPassword": 1,
|
|
||||||
"samlIDPSSODescriptorSingleSignOnServiceHTTPArtifact": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/singleSignOnArtifact;",
|
|
||||||
"ADPwdExpireWarning": 0,
|
|
||||||
"yubikeyPublicIDSize": 12,
|
|
||||||
"ldapGroupAttributeNameGroup": "dn",
|
|
||||||
"oidcRPMetaDataOptionsExtraClaims": null,
|
|
||||||
"ldapGroupRecursive": 0,
|
|
||||||
"mailSubject": "[LemonLDAP::NG] Your new password",
|
|
||||||
"nginxCustomHandlers": {},
|
|
||||||
"samlSPSSODescriptorAuthnRequestsSigned": 1,
|
|
||||||
%if %%llResetPassword == "oui"
|
|
||||||
"portalDisplayResetPassword": 1,
|
|
||||||
%else
|
|
||||||
"portalDisplayResetPassword": 0,
|
|
||||||
%end if
|
|
||||||
"openIdSreg_timezone": "_timezone",
|
|
||||||
"infoFormMethod": "get",
|
|
||||||
"openIdAuthnLevel": 1,
|
|
||||||
"openIdSreg_nickname": "uid",
|
|
||||||
"samlServicePublicKeyEnc": "",
|
|
||||||
"userDB": "LDAP",
|
|
||||||
"grantSessionRules": {},
|
|
||||||
"remoteGlobalStorage": "Lemonldap::NG::Common::Apache::Session::SOAP",
|
|
||||||
"reloadUrls": {
|
|
||||||
"%%reloadWebName": "https://%%reloadWebName/reload"
|
|
||||||
},
|
|
||||||
"registerTimeout": 0,
|
|
||||||
"samlIDPSSODescriptorSingleSignOnServiceHTTPPost": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleSignOn;",
|
|
||||||
"slaveAuthnLevel": 2,
|
|
||||||
"samlIDPSSODescriptorSingleLogoutServiceHTTPPost": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/singleLogout;#PORTAL#/saml/singleLogoutReturn",
|
|
||||||
"Soap": 1,
|
|
||||||
%set %%RegisterDB=%%getVar('llRegisterDB', 'Demo')
|
|
||||||
%if %%RegisterDB == "Custom"
|
|
||||||
"registerDB": "Null",
|
|
||||||
%else
|
|
||||||
"registerDB": "%%RegisterDB",
|
|
||||||
%end if
|
|
||||||
"locationRules": {
|
|
||||||
"%%managerWebName": {
|
|
||||||
"default": "$uid eq \"%%lemonAdmin\""
|
|
||||||
},
|
|
||||||
"test1.%%nom_domaine_local": {
|
|
||||||
"default": "accept",
|
|
||||||
"^/logout": "logout_sso"
|
|
||||||
},
|
|
||||||
"test2.%%nom_domaine_local": {
|
|
||||||
"default": "accept",
|
|
||||||
"^/logout": "logout_sso"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"portalDisplayChangePassword": "$_auth =~ /^(LDAP|DBI|Demo)$/",
|
|
||||||
"hideOldPassword": 0,
|
|
||||||
%if %%is_file(%%ldapBindUserPassword)
|
|
||||||
"managerPassword": "%%readPass("", %%ldapBindUserPassword)",
|
|
||||||
%else
|
|
||||||
"managerPassword": "%%ldapBindUserPassword",
|
|
||||||
%end if
|
|
||||||
"authChoiceParam": "lmAuth",
|
|
||||||
"lwpSslOpts": {},
|
|
||||||
"portalSkinRules": {},
|
|
||||||
"issuerDBOpenIDPath": "^/openidserver/",
|
|
||||||
"redirectFormMethod": "get",
|
|
||||||
"portalDisplayRegister": 1,
|
|
||||||
"secureTokenMemcachedServers": "127.0.0.1:11211",
|
|
||||||
"notificationStorageOptions": {
|
|
||||||
"dirName": "/var/lib/lemonldap-ng/notifications"
|
|
||||||
},
|
|
||||||
"browserIdAuthnLevel": 1,
|
|
||||||
"portalUserAttr": "_user",
|
|
||||||
"ldapVersion": 3,
|
|
||||||
"sessionDataToRemember": {},
|
|
||||||
"samlNameIDFormatMapX509": "mail",
|
|
||||||
"managerDn": "%%ldapBindUserDN",
|
|
||||||
"mailSessionKey": "mail",
|
|
||||||
"openIdSreg_email": "mail",
|
|
||||||
"localSessionStorage": "Cache::FileCache",
|
|
||||||
"persistentStorage": "Apache::Session::File",
|
|
||||||
"mailOnPasswordChange": 0,
|
|
||||||
"captchaStorage": "Apache::Session::File",
|
|
||||||
"remoteGlobalStorageOptions": {
|
|
||||||
"proxy": "https://%%authWebName/index.pl/sessions",
|
|
||||||
"ns": "https://%%authWebName/Lemonldap/NG/Common/CGI/SOAPService"
|
|
||||||
},
|
|
||||||
"passwordDB": "LDAP",
|
|
||||||
"captcha_size": 6,
|
|
||||||
"mailCharset": "utf-8",
|
|
||||||
"facebookExportedVars": {},
|
|
||||||
"nullAuthnLevel": 2,
|
|
||||||
"singleIP": 0,
|
|
||||||
"dbiExportedVars": {},
|
|
||||||
"portalSkin": "bootstrap",
|
|
||||||
"storePassword": 0,
|
|
||||||
"hiddenAttributes": "_password",
|
|
||||||
"samlServicePrivateKeySig": "",
|
|
||||||
"globalStorage": "Apache::Session::File",
|
|
||||||
"notificationWildcard": "allusers",
|
|
||||||
"portalForceAuthn": 0,
|
|
||||||
"samlMetadataForceUTF8": 1,
|
|
||||||
"secureTokenUrls": ".*",
|
|
||||||
"secureTokenAllowOnError": 1,
|
|
||||||
"samlAuthnContextMapTLSClient": 5,
|
|
||||||
"ldapAllowResetExpiredPassword": 0,
|
|
||||||
"oidcOPMetaDataExportedVars": {},
|
|
||||||
"notifyOther": 0,
|
|
||||||
"secureTokenExpiration": 60,
|
|
||||||
"captcha_mail_enabled": 0,
|
|
||||||
"samlStorageOptions": {},
|
|
||||||
"samlOrganizationDisplayName": "Example",
|
|
||||||
"trustedProxies": "",
|
|
||||||
"secureTokenHeader": "Auth-Token",
|
|
||||||
"issuerDBCASActivation": 1,
|
|
||||||
"samlIDPSSODescriptorSingleSignOnServiceHTTPRedirect": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/singleSignOn;",
|
|
||||||
"samlSPSSODescriptorSingleLogoutServiceHTTPRedirect": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect;#PORTAL#/saml/proxySingleLogout;#PORTAL#/saml/proxySingleLogoutReturn",
|
|
||||||
"samlIDPMetaDataXML": {},
|
|
||||||
"oidcStorageOptions": {},
|
|
||||||
"cfgDate": 1519998069,
|
|
||||||
"samlAuthnContextMapPassword": 2,
|
|
||||||
"portalDisplayLoginHistory": 1,
|
|
||||||
"ldapPasswordResetAttributeValue": "TRUE",
|
|
||||||
"ldapServer": "%%ldapScheme://%%ldapServer",
|
|
||||||
"samlIDPSSODescriptorSingleLogoutServiceSOAP": "urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/singleLogoutSOAP;",
|
|
||||||
"samlIDPMetaDataExportedAttributes": null,
|
|
||||||
"samlServicePrivateKeyEnc": "",
|
|
||||||
"useRedirectOnForbidden": 0,
|
|
||||||
"captcha_login_enabled": 0,
|
|
||||||
"https": 0,
|
|
||||||
"checkXSS": 1,
|
|
||||||
"ldapSetPassword": 0,
|
|
||||||
"portalPingInterval": 60000,
|
|
||||||
"captchaStorageOptions": {
|
|
||||||
"Directory": "/var/lib/lemonldap-ng/captcha/"
|
|
||||||
},
|
|
||||||
"useSafeJail": 1,
|
|
||||||
"registerDoneSubject": "[LemonLDAP::NG] Your new account",
|
|
||||||
"issuerDBCASRule": 1,
|
|
||||||
"samlAuthnContextMapKerberos": 4,
|
|
||||||
"ldapGroupAttributeNameSearch": "cn",
|
|
||||||
"logoutServices": {},
|
|
||||||
"samlIDPSSODescriptorWantAuthnRequestsSigned": 1,
|
|
||||||
"portalDisplayLogout": 1,
|
|
||||||
"issuerDBGetParameters": {},
|
|
||||||
"googleExportedVars": {},
|
|
||||||
"openIdSreg_fullname": "cn",
|
|
||||||
"samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact": "1;0;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact;#PORTAL#/saml/proxySingleSignOnArtifact",
|
|
||||||
"demoExportedVars": {
|
|
||||||
"mail": "mail",
|
|
||||||
"uid": "uid",
|
|
||||||
"cn": "cn"
|
|
||||||
},
|
|
||||||
"oidcOPMetaDataJSON": null,
|
|
||||||
"samlIdPResolveCookie": "lemonldapidp",
|
|
||||||
"samlRelayStateTimeout": 600,
|
|
||||||
"samlOrganizationURL": "https://auth.%%nom_domaine_local",
|
|
||||||
"globalStorageOptions": {
|
|
||||||
"Directory": "/var/lib/lemonldap-ng/sessions",
|
|
||||||
"LockDirectory": "/var/lib/lemonldap-ng/sessions/lock"
|
|
||||||
},
|
|
||||||
"ldapExportedVars": {
|
|
||||||
"mail": "mail",
|
|
||||||
"cn": "cn",
|
|
||||||
"uid": "uid"
|
|
||||||
},
|
|
||||||
"webIDExportedVars": {},
|
|
||||||
"activeTimer": 1,
|
|
||||||
"cda": 0,
|
|
||||||
"samlServicePublicKeySig": "",
|
|
||||||
%if %%llCheckLogins == "oui"
|
|
||||||
"portalCheckLogins": 1,
|
|
||||||
%else
|
|
||||||
"portalCheckLogins": 0,
|
|
||||||
%end if
|
|
||||||
"CAS_authnLevel": 1,
|
|
||||||
"macros": {
|
|
||||||
"_whatToTrace": "$_auth eq 'SAML' ? \"$_user\\@$_idpConfKey\" : \"$_user\""
|
|
||||||
},
|
|
||||||
"samlIDPMetaDataOptions": null,
|
|
||||||
"twitterAuthnLevel": 1,
|
|
||||||
"openIdExportedVars": {},
|
|
||||||
"captcha_register_enabled": 1,
|
|
||||||
"oidcOPMetaDataJWKS": null,
|
|
||||||
"webIDAuthnLevel": 1,
|
|
||||||
"issuerDBOpenIDActivation": "1",
|
|
||||||
%if %%llResetPassword == "oui"
|
|
||||||
%if %%is_empty(%%llResetUrl)
|
|
||||||
"mailUrl": "https://%%authWebName/mail.pl",
|
|
||||||
%else
|
|
||||||
"mailUrl": "%%llResetUrl",
|
|
||||||
%end if
|
|
||||||
%end if
|
|
||||||
"maintenance": 0,
|
|
||||||
"jsRedirect": 0,
|
|
||||||
"cfgAuthor": "Cadoles",
|
|
||||||
"persistentStorageOptions": {
|
|
||||||
"LockDirectory": "/var/lib/lemonldap-ng/psessions/lock",
|
|
||||||
"Directory": "/var/lib/lemonldap-ng/psessions"
|
|
||||||
},
|
|
||||||
"SSLAuthnLevel": 5,
|
|
||||||
"oidcServiceMetaDataAuthnContext": {},
|
|
||||||
"samlIDPSSODescriptorArtifactResolutionServiceArtifact": "1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact",
|
|
||||||
"notification": 1,
|
|
||||||
"ldapChangePasswordAsUser": 0,
|
|
||||||
"CAS_proxiedServices": {},
|
|
||||||
"key": "e\"bTCt3*eU9^\\V%b",
|
|
||||||
"portal": "https://%%authWebName/",
|
|
||||||
"singleSessionUserByIP": 0,
|
|
||||||
"portalOpenLinkInNewWindow": 0,
|
|
||||||
"post": {
|
|
||||||
"test2.%%nom_domaine_local": {},
|
|
||||||
"test1.%%nom_domaine_local": {},
|
|
||||||
"%%managerWebName": {}
|
|
||||||
},
|
|
||||||
"samlSPSSODescriptorAssertionConsumerServiceHTTPPost": "0;1;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST;#PORTAL#/saml/proxySingleSignOnPost",
|
|
||||||
"issuerDBSAMLRule": 1,
|
|
||||||
"samlCommonDomainCookieActivation": 0,
|
|
||||||
"syslog": "",
|
|
||||||
"ldapBase": "%%ldapUserBaseDN",
|
|
||||||
"ldapAuthnLevel": 2,
|
|
||||||
"mailTimeout": 0,
|
|
||||||
"samlEntityID": "#PORTAL#/saml/metadata",
|
|
||||||
"oidcOPMetaDataOptions": null,
|
|
||||||
"samlSPSSODescriptorWantAssertionsSigned": 1,
|
|
||||||
"samlOrganizationName": "%%samlOrganizationName",
|
|
||||||
%if %%RegisterDB == "Custom"
|
|
||||||
"registerUrl": "%%llRegisterURL",
|
|
||||||
%else
|
|
||||||
"registerUrl": "https://%%authWebName/register.pl",
|
|
||||||
%end if
|
|
||||||
"casAccessControlPolicy": "none",
|
|
||||||
"multiValuesSeparator": ";",
|
|
||||||
"ldapPort": %%ldapServerPort
|
|
||||||
}
|
|
||||||
@ -196,13 +196,6 @@
|
|||||||
"macros": {
|
"macros": {
|
||||||
"_whatToTrace": "$_auth eq 'SAML' ? \"$_user\\@$_idpConfKey\" : \"$_user\""
|
"_whatToTrace": "$_auth eq 'SAML' ? \"$_user\\@$_idpConfKey\" : \"$_user\""
|
||||||
},
|
},
|
||||||
"samlIDPMetaDataOptions": null,
|
|
||||||
"twitterAuthnLevel": 1,
|
|
||||||
"openIdExportedVars": {},
|
|
||||||
"captcha_register_enabled": 1,
|
|
||||||
"oidcOPMetaDataJWKS": null,
|
|
||||||
"webIDAuthnLevel": 1,
|
|
||||||
"issuerDBOpenIDActivation": "1",
|
|
||||||
"mailCharset": "utf-8",
|
"mailCharset": "utf-8",
|
||||||
"mailConfirmSubject": "[LemonLDAP::NG] Password reset confirmation",
|
"mailConfirmSubject": "[LemonLDAP::NG] Password reset confirmation",
|
||||||
"mailFrom": "noreply@%%nom_domaine_local",
|
"mailFrom": "noreply@%%nom_domaine_local",
|
||||||
@ -264,7 +257,7 @@
|
|||||||
"portalDisplayChangePassword": "$_auth =~ /^(LDAP|DBI|Demo)$/",
|
"portalDisplayChangePassword": "$_auth =~ /^(LDAP|DBI|Demo)$/",
|
||||||
"portalDisplayLoginHistory": 1,
|
"portalDisplayLoginHistory": 1,
|
||||||
"portalDisplayLogout": 1,
|
"portalDisplayLogout": 1,
|
||||||
"portalDisplayRegister": %%boolean[%%llRegisterAccount],
|
"portalDisplayRegister": 1,
|
||||||
"portalDisplayResetPassword": %%boolean[%%llResetPassword],
|
"portalDisplayResetPassword": %%boolean[%%llResetPassword],
|
||||||
"portalForceAuthn": 0,
|
"portalForceAuthn": 0,
|
||||||
"portalForceAuthnInterval": 0,
|
"portalForceAuthnInterval": 0,
|
||||||
|
|||||||
Reference in New Issue
Block a user