Cadoles
/
eole-lemonldap
20
0
Fork 0
Code Issues 11 Pull Requests Releases Wiki Activity
124 Commits 16 Branches 164 Tags 386 KiB
Makefile 52.6%
Shell 19.1%
Perl 17.6%
Python 10.7%
Go to file
Daniel Dehennin c7d4949fb7 Merge branch 'master' into dist/eole/2.8.0/master 2020-10-15 09:10:44 +02:00
creolefuncs Python3 ConfigParser is in configparser module 2020-10-14 13:16:37 +02:00
debian Clean garbage file 2020-10-14 15:08:57 +02:00
diagnose Don't crash if LemonLDAP::NG is disabled 2020-10-14 13:17:07 +02:00
dicos eolesso_adresse should be forced only when LemonLDAP::NG is enabled 2020-10-15 09:07:40 +02:00
postservice Smooth the configuration of LemonLDAP::NG on Scribe 2020-10-14 13:19:05 +02:00
posttemplate Don't modify /etc/hosts on ScribeAD 2020-10-14 13:52:41 +02:00
tmpl Update configuration for version 2.0.7 of LemonLDAP::NG 2020-10-14 13:18:35 +02:00
LICENSE Initial commit 2018-03-02 09:12:54 +01:00
Makefile Prepare version 2.8.0 2020-10-14 13:15:19 +02:00
README.md Update README 2020-10-14 13:31:42 +02:00
apps.mk First commit 2018-03-02 15:44:00 +01:00
eole-lemonldap.mk Fixing eole-lemonldap.mk file 2018-03-13 10:48:32 +01:00
eole.mk First commit 2018-03-02 15:44:00 +01:00

README.md

eole-lemonldap

LemonLDAP::NG EOLE integration

Howto

Configure LemonLDAP in GenConfig

  • Enable lemonldap in "Services" tab

Gen_Config -> Services -> Activer LemonLDAP::NG -> "Oui"

  • Fill LemonLDAP configuration

On Scribe

  • LemonLDAP::NG is configured to use the local LDAP service
  • We register the supplementary host names to the AD DNS
  • We add the supplementary host names to the ssl_subjectalt_names

Manual configuration

Nginx Web case

By default NGINX is configured to serve "web" application, in this case the lemonLDAP::NG application will not be served properly, so we need to disable this function

GenConfig -> Services -> Activer la publication d’applications web par Nginx -> "Non'

Configuration DNS
  • GenConfig -> Lemonldap -> Nom DNS du manager LemonLDAP-NG
  • GenConfig -> Lemonldap -> Nom DNS du service d'authentification LemonLDAP-NG
Configuration LDAP
  • GenConfig -> Lemonldap -> Protocole LDAP à utiliser
  • GenConfig -> Lemonldap -> Adresse du Serveur LDAP utilisé par LemonLDAP::NG
  • GenConfig -> Lemonldap -> Port d'écoute du LDAP utilisé par LemonLDAP::NG
  • GenConfig -> Lemonldap -> Base DN des utilisateurs dans l'annuaire
  • GenConfig -> Lemonldap -> Utilisateur de connection à l'annuaire (DN ex: cn=reader,o=gouv,c=fr)
  • GenConfig -> Lemonldap -> Mot de passe de l'utilisateur de connection à l'annuaire (file like /root/.reader or the clear password)
Configuration CAS

Add your CAS attributes mapping ( uid = uid and mail = mail are created by default)

  • GenConfig -> Lemonldap -> Nom de l'attribut CAS
  • GenConfig -> Lemonldap -> Attribut LDAP équivalent
SSL issues

If you use "autosign" certificates you need to add the "manager" and "auth" service names to the alternative names. You also need to include "reload" service name (available in GenConfig -> Mode Expert -> Lemonldap -> Nom DNS du service Reload de LemonLDAP-NG)

  • GenConfig -> Mode Expert -> Certificats ssl -> Nom Alternatif de la machine (SubjectAltName)

If you use "manual" certificates make sure this names are covered by your SSL Certificate

If you use "letsencrypt" mode you also need to add this names to the let'sencrypt request:

  • GenConfig -> Mode Expert -> Certificat ssl -> Nom de domaines supplémentaires