Skip to Content

Changes for page org.clazzes.login.sql

Last modified by christoph_lechleitner@iteg_at on 2013-07-15 01.30:42
From version 1.1
edited by christoph_lechleitner@iteg_at
on 2013-01-18 02.49:21
Change comment: There is no comment for this version
To version 2.1
edited by christoph_lechleitner@iteg_at
on 2013-01-18 05.10:06
Change comment: First throw at hopefully complete configuration specs

Summary

Details

Page properties
Content
... ... @@ -16,8 +16,10 @@
16 16  
17 17  === {{id name="org.clazzes.login.sql-Functionality"/}}Functionality ===
18 18  
19 -The SQL login service authenticates against users in a SQL database.
19 +The SQL login service authenticates against users in a SQL database, using configurable SQL queries.
20 20  
21 +There are no plans to support authentication domains, because typical standalone login systems do not care for domains.
22 +
21 21  === {{id name="org.clazzes.login.sql-Configuration"/}}Configuration ===
22 22  
23 23  The SQL login service may be configured using the OSGi configuration PID {{code language="none"}}org.clazzes.login.sql{{/code}} using these configuration values:
... ... @@ -24,6 +24,8 @@
24 24  
25 25  (% class="wiki-content" %)
26 26  (((
29 +
30 +
27 27  |=(((
28 28  (% class="tablesorter-header-inner" %)
29 29  (((
... ... @@ -32,11 +32,6 @@
32 32  )))|=(((
33 33  (% class="tablesorter-header-inner" %)
34 34  (((
35 -Default Value
36 -)))
37 -)))|=(((
38 -(% class="tablesorter-header-inner" %)
39 -(((
40 40  Description
41 41  )))
42 42  )))
... ... @@ -45,9 +45,78 @@
45 45  defaultDomain
46 46  {{/code}}
47 47  )))|(((
48 -(% style="font-family: monospace;" %)-
47 +Optional. Defaults to an empty string.
48 +
49 +The login domain to use for principals when the request did not contain a domain.
50 +)))
51 +|(((
52 +{{code language="none"}}
53 +groupsByUserIdQuery
54 +{{/code}}
49 49  )))|(((
50 -The login domain to use for principals, which do not contain a domain.
51 -May be left null for domain-less databases
56 +Optional. Required for //getGroups// feature.
57 +
58 +SQL template for a prepared statement to query the group IDs and group names of the groups of which the user specified by a userId is a member.
59 +
60 +Example:
61 +{{code language="none"}}SELECT g.groupId, g.groupName FROM groups AS g, users AS u, memberships AS mgroupName
62 + WHERE u.userId=?
63 +AND m.userId = u.id
64 + AND g.id = m.groupId
65 + ORDER BY g.groupId {{/code}}
52 52  )))
67 +|(((
68 +{{code language="none"}}
69 +defaultPasswordAlgorithm
70 +{{/code}}
71 +)))|(((
72 +Optional. Defaults to {{code language="none"}}crypt{{/code}}
73 +
74 +Values supported so far: {{code language="none"}}crypt{{/code}}, {{code language="none"}}ssha1{{/code}}, {{code language="none"}}plain{{/code}}.
75 +
76 +Password fields may contain:
77 +
78 +* the password encrypted using the default password algorithm, or
79 +* a LDAP style algorithm prefix and the password encrypted with the algorithm specified in the prefix. Example: {{code language="none"}}{PLAIN}badPassword{{/code}}
53 53  )))
81 +|(((
82 +{{code language="none"}}
83 +setUserPasswordStatement
84 +{{/code}}
85 +)))|(((
86 +Optional. Required for //changePassword// feature.
87 +
88 +SQL template for a prepared statement to set a new password for the user.
89 +
90 +Example:
91 +{{code language="none"}}UPDATE users SET encryptedPassword=? WHERE userId=?{{/code}}
92 +)))
93 +|(((
94 +{{code language="none"}}
95 +userByUserIdQuery
96 +{{/code}}
97 +)))|(((
98 +SQL template for a prepared statement to query userId, encrypted password, pretty name and e-mail address of a user specified by a userId.
99 +If the pretty name is not part of the database, reuse the userId field.
100 +If the e-mail address is not part of the database, use a constant like '' or null.
101 +
102 +Example:
103 +{{code language="none"}}SELECT userId, encryptedPassword, userName, mailAdr FROM users WHERE userId=?{{/code}}
104 +)))
105 +|(((
106 +{{code language="none"}}
107 +userIdsByGroupIdQuery
108 +{{/code}}
109 +)))|(((
110 +Optional. Required for //getGroupMembers// feature.
111 +
112 +SQL template for a prepared statement to query the user IDs of the members of the group specified by a groupId.
113 +
114 +Example:
115 +{{code language="none"}}SELECT u.userId FROM groups AS g, users AS u, memberships AS mgroupName
116 + WHERE g.groupId=?
117 +AND m.groupId = g.id
118 + AND u.id = m.userId
119 + ORDER BY g.userId {{/code}}
120 +)))
121 +)))
Confluence.Code.ConfluencePageClass[0]
Id
... ... @@ -1,1 +1,1 @@
1 -688785
1 +688791
URL
... ... @@ -1,1 +1,1 @@
1 -https://clazzes.atlassian.net/wiki/spaces/LOGIN/pages/688785/org.clazzes.login.sql (work in progress)
1 +https://clazzes.atlassian.net/wiki/spaces/LOGIN/pages/688791/org.clazzes.login.sql (work in progress)