Skip to Content

Changes for page org.clazzes.login.ldap

Last modified by wolfgang_glas@iteg_at on 2018-08-25 09.26:23
From version 6.1
edited by christoph_lechleitner@iteg_at
on 2014-01-03 04.05:26
Change comment: Restructuring to avoid confusing product admins
To version 7.1
edited by wolfgang_glas@iteg_at
on 2018-08-25 09.26:23
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.christoph_lechleitner@iteg_at
1 +XWiki.wolfgang_glas@iteg_at
Content
... ... @@ -18,6 +18,7 @@
18 18  
19 19  In our example we use {{code language="none"}}EXAMPLE{{/code}} as the Windows/NetBIOS domain name with its DNS counterpart {{code language="none"}}example.com{{/code}}.
20 20  
21 +(% class="wrapped" %)
21 21  |=(((
22 22  (% class="tablesorter-header-inner" %)
23 23  (((
... ... @@ -61,6 +61,7 @@
61 61  
62 62  The LDAP login service may be configured using the OSGi configuration PID {{code language="none"}}org.clazzes.login.ldap{{/code}} using these configuration values:
63 63  
65 +(% class="wrapped" %)
64 64  |=(((
65 65  (% class="tablesorter-header-inner" %)
66 66  (((
... ... @@ -157,13 +157,33 @@
157 157  )))|(((
158 158  The LDAP attribute to try to use as primary e-mail address for users.
159 159  )))
162 +|(((
163 +{{code language="none"}}
164 +domain.<domain>.mobileAttribute
165 +{{/code}}
166 +)))|(((
167 +\\
168 +)))|(((
169 +The LDAP attribute to try to use as mobile phone number for users. This number is used to send ephemerals OTP for two-factor-authentication to the user. If this option is activated, two-factor signons are mandatory for this domain. Usually, this option is configured to the value {{code language="none"}}mobile{{/code}} in order to activate ephemeral OTP two-factor-authentication.
170 +)))
171 +|(((
172 +{{code language="none"}}
173 +domain.<domain>.tokenIdsAttribute
174 +{{/code}}
175 +)))|(((
176 +\\
177 +)))|(((
178 +The LDAP attribute to try to use as a space separated list of 12-character YubiKey token IDs (like {{code language="none"}}cccccceiiuch{{/code}}) for users. These token IDs are used to check token OTPs for two-factor-authentication to the user. If this option is activated, two-factor signons are mandatory for this domain. Usually, this option is configured to the value {{code language="none"}}pager{{/code}} in order to activate token-based OTP two-factor-authentication.
179 +)))
160 160  
161 161  There may be multiple domains in a configuration.
162 162  
163 -=== {{id name="org.clazzes.login.ldap-ControllerSchemes"/}}Controller Schemes ===
183 +== {{id name="org.clazzes.login.ldap-ControllerSchemes"/}}Controller Schemes ==
164 164  
165 165  The URL schemes for a domain controller are ldap, ldaps and ads.
166 166  
187 +=== {{id name="org.clazzes.login.ldap-ADScontrollerscheme"/}}ADS controller scheme ===
188 +
167 167  The {{code language="none"}}ads{{/code}} URL scheme for the URL {{code language="none"}}ads://mydomain.com{{/code}} undertakes a lookup for the DNS records
168 168  
169 169  (% class="code" %)
... ... @@ -174,6 +174,10 @@
174 174  
175 175  to auto-detect the apropriate {{code language="none"}}ldap(s){{/code}} URI.
176 176  
199 +=== {{id name="org.clazzes.login.ldap-LDAPcontrollerscheme"/}}LDAP controller scheme ===
200 +
201 +When directly specifying the LDAP-Server using an URL like {{code language="none"}}ldap://ldap-01.mydomain.com{{/code}} it is possible to specify the baseDN for searches using a pseudo-path like in {{code language="none"}}ldap://ldap-01.mydomain.com/dc=mydomain,dc=com{{/code}}
202 +
177 177  = {{id name="org.clazzes.login.ldap-ManualinstallationinOSGicontainer"/}}Manual installation in OSGi container =
178 178  
179 179  I some software product has pointed to this page for configuration details, the bundle is probably already installed in the OSGi container the software product runs in.
Confluence.Code.ConfluencePageClass[0]
Id
... ... @@ -1,1 +1,1 @@
1 -688760
1 +688656
URL
... ... @@ -1,1 +1,1 @@
1 -https://clazzes.atlassian.net/wiki/spaces/LOGIN/pages/688760/org.clazzes.login.ldap
1 +https://clazzes.atlassian.net/wiki/spaces/LOGIN/pages/688656/org.clazzes.login.ldap