Configuration overview
Connect to the manager with your browser (for example http://manager.example.com) to start configure your WebSSO. You can now configure a default installation, with an LDAP directory.General parameters
- Authentication parameters:
- portal: URL to access to the authentication portal.
- domain: the cookie domain. All protected VirtualHosts have to be under it (or you have to use Cross Domain Authentication).
- LDAP parameters:
- ldapServer: LDAP Server.
- managerDn and managerPassword: required only if anonymous binds are not accepted.
User groups
Use the "New Group" button to add your first group. On the left, set the keyword which will be used later and set on the right the corresponding rule. You can use a Perl condition enclosed with {}. All variables declared in "General parameters -> exported attributes" can be used with a "$". For example:MyGroup => { $uid eq "foo" or $uid eq "bar" }
Virtual hosts
You have to create a virtual host for each Apache host (virtual or real) protected by LemonLDAP::NG even if just a sub-directory is protected. Else, user who want to access to the protected area will be rejected with a "500 Internal Server Error" message and the apache logs will explain the problem.
Each virtual host has 2 groups of parameters:
- Headers: the headers added to the apache request. Default: Auth-User => $uid.
- Rules: subdivised in 2 categories:
- default: the default rule
- personalized rules: association of a Perl regular expression and a condition.
^/restricted.*$ => $groups =~ /\bMyGroup\b/
To go further
See the full parameters list.