Authentication plugins: Difference between revisions
From LimeSurvey Manual
DenisChenu (talk | contribs) No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
This is an overview of the authentication plugins currently shipped with LimeSurvey. If you want to extend or develop your own authentication plugin, please see [[Authentication_plugin development]] | This is an overview of the authentication plugins currently shipped with LimeSurvey. If you want to extend or develop your own authentication plugin, please see [[Authentication_plugin development]] | ||
== Internal database == | |||
This plugin is the default and can not be disabled. It uses the built in LimeSurvey database. It is a fall-back mechanism to that you can always login to the installation when needed. | This plugin is the default and can not be disabled. It uses the built in LimeSurvey database. It is a fall-back mechanism to that you can always login to the installation when needed. | ||
== LDAP == | |||
By activating this plugin you can perform basic authentication against an LDAP server. Make sure your PHP configuration has LDAP support enabled. | By activating this plugin you can perform basic authentication against an LDAP server. Make sure your PHP configuration has LDAP support enabled. | ||
| Line 13: | Line 13: | ||
Go to LimeSurvey Plugin Manager. | Go to LimeSurvey Plugin Manager. | ||
Configure LDAP plugin. | Configure LDAP plugin. | ||
Example settings | |||
=== Example settings === | |||
Ldap server e.g. ldap://ldap.mydomain.com: ldap://ldap.mydomain.com | Ldap server e.g. ldap://ldap.mydomain.com: ldap://ldap.mydomain.com | ||
Port number (default when omitted is 389): | Port number (default when omitted is 389): | ||
| Line 22: | Line 23: | ||
Log in using the AD credentials(username and password). | Log in using the AD credentials(username and password). | ||
=== Webserver authentication | == Example settings AD2008 & 2.05+ == | ||
'''Settings working with Active Directory 2008 and 2.05+ (build 140520) with AuthLDAP plugin '''. | |||
=== Authentication with ''userPrincipalName'' attribute === | |||
'''Note''': Authentication with ''userPrincipalName'' attribute (ie: firstname.lastname@domain.com). Create a LimeSurvey user with the same name as a AD(active directory) user account : | |||
''Username'': '''firstname.lastname@domain.com''' | |||
''Email'': '''firstname.lastname@domain.com''' | |||
''Full name'': '''Firstname LASTNAME''' | |||
Then configure the plugin : ''Plugin Manager > LDAP > Configure''. | |||
''Ldap server e.g. ldap://ldap.mydomain.com'': '''ldap://ldap.mydomain.com''' | |||
''Port number (default when omitted is 389)'': '''389''' | |||
''LDAP version (LDAPv2 = 2), e.g. 3'': '''LDAPv3''' | |||
''Username prefix cn= or uid=: cn='': '''empty''' | |||
''Username suffix e.g. @mydomain.com or remaining part of ldap query'': '''empty''' | |||
Log in using the AD credentials (username: '''firstname.lastname@domain.com''' and password). | |||
=== Authentication with ''sAMaccountName'' attribute === | |||
'''Note''': Authentication with ''sAMaccountName'' attribute (ie: firstname.lastname). Create a LimeSurvey user with the same name as a AD(active directory) user account : | |||
''Username'': '''firstname.lastname''' | |||
''Email'': '''firstname.lastname@domain.com''' | |||
''Full name'': '''Firstname LASTNAME''' | |||
Then configure the plugin : ''Plugin Manager > LDAP > Configure''. | |||
''Ldap server e.g. ldap://ldap.mydomain.com'': '''ldap://ldap.mydomain.com''' | |||
''Port number (default when omitted is 389)'': '''389''' | |||
''LDAP version (LDAPv2 = 2), e.g. 3'': '''LDAPv3''' | |||
''Username prefix cn= or uid=: cn='': '''empty''' | |||
''Username suffix e.g. @mydomain.com or remaining part of ldap query'': '''@domain.com''' | |||
Log in using the AD credentials (username: '''firstname.lastname''' and password). | |||
== Webserver authentication == | |||
This plugin leaves authentication to the webserver and reads the result from a configurable server setting. This method has been around for a while, and was configured from config.php. If you used this authentication, you should enable the plugin in the plugins menu and move your configuration from config.php to the plugin's settings. Feel free to contact the team via the bugtracker or irc-channel if it no longer functions the way it did before. | This plugin leaves authentication to the webserver and reads the result from a configurable server setting. This method has been around for a while, and was configured from config.php. If you used this authentication, you should enable the plugin in the plugins menu and move your configuration from config.php to the plugin's settings. Feel free to contact the team via the bugtracker or irc-channel if it no longer functions the way it did before. | ||
[[Category:Plugins]] | [[Category:Plugins]] | ||
Revision as of 11:26, 5 June 2014
This is an overview of the authentication plugins currently shipped with LimeSurvey. If you want to extend or develop your own authentication plugin, please see Authentication_plugin development
Internal database
This plugin is the default and can not be disabled. It uses the built in LimeSurvey database. It is a fall-back mechanism to that you can always login to the installation when needed.
LDAP
By activating this plugin you can perform basic authentication against an LDAP server. Make sure your PHP configuration has LDAP support enabled.
Enabling and configuring settings for plugin AuthLDAP v2.05+
Enable LDAP in PHP.INI. Verify that phpinfo.php shows that LDAP is enabled. Go to LimeSurvey Plugin Manager. Configure LDAP plugin.
Example settings
Ldap server e.g. ldap://ldap.mydomain.com: ldap://ldap.mydomain.com Port number (default when omitted is 389): LDAP version (LDAPv2 = 2), e.g. 3: 3 Username prefix cn= or uid=: cn= Username suffix e.g. @mydomain.com or remaining part of ldap query: ,OU=people,DC=mydomain,DC=com Create a LimeSurvey administrator with the same name as a AD(active directory) user account. Log in using the AD credentials(username and password).
Example settings AD2008 & 2.05+
Settings working with Active Directory 2008 and 2.05+ (build 140520) with AuthLDAP plugin .
Authentication with userPrincipalName attribute
Note: Authentication with userPrincipalName attribute (ie: firstname.lastname@domain.com). Create a LimeSurvey user with the same name as a AD(active directory) user account :
Username: firstname.lastname@domain.com
Email: firstname.lastname@domain.com
Full name: Firstname LASTNAME
Then configure the plugin : Plugin Manager > LDAP > Configure.
Ldap server e.g. ldap://ldap.mydomain.com: ldap://ldap.mydomain.com
Port number (default when omitted is 389): 389
LDAP version (LDAPv2 = 2), e.g. 3: LDAPv3
Username prefix cn= or uid=: cn=: empty
Username suffix e.g. @mydomain.com or remaining part of ldap query: empty
Log in using the AD credentials (username: firstname.lastname@domain.com and password).
Authentication with sAMaccountName attribute
Note: Authentication with sAMaccountName attribute (ie: firstname.lastname). Create a LimeSurvey user with the same name as a AD(active directory) user account :
Username: firstname.lastname
Email: firstname.lastname@domain.com
Full name: Firstname LASTNAME
Then configure the plugin : Plugin Manager > LDAP > Configure.
Ldap server e.g. ldap://ldap.mydomain.com: ldap://ldap.mydomain.com
Port number (default when omitted is 389): 389
LDAP version (LDAPv2 = 2), e.g. 3: LDAPv3
Username prefix cn= or uid=: cn=: empty
Username suffix e.g. @mydomain.com or remaining part of ldap query: @domain.com
Log in using the AD credentials (username: firstname.lastname and password).
Webserver authentication
This plugin leaves authentication to the webserver and reads the result from a configurable server setting. This method has been around for a while, and was configured from config.php. If you used this authentication, you should enable the plugin in the plugins menu and move your configuration from config.php to the plugin's settings. Feel free to contact the team via the bugtracker or irc-channel if it no longer functions the way it did before.