Eu_ldap

Copyright 2005, Jean-Gaël Rouchon, <jgrouchon@onext.fr>

Tables des Matières

Gestion des Utilisateurs	1

Introduction	1

Création des espaces de fichiers utilisateurs (filemount)	2

Création des groupes d'utilisateurs	4

Création des groupes	4

Association des espaces de stockage (filemount)	5

Association des pages visualisables et modifiables (Dbmount)	5

Affectation menus d'administration autorisés	6

Création des contributeurs	8

Création d'un utilisateur	8

Gestion des droits sur les pages	10

Changement des droits sur les pages	10

Introduction

Authentification des users BE avec import auto depuis un openLDAP.

Description du LDAP :

openLDAP

# This is the main slapd configuration file. See slapd.conf(5) for more

# info on the configuration options.

#######################################################################

# Global Directives:

# Features to permit

#allow bind_v2

# Schema and objectClass definitions

include /etc/ldap/schema/core.schema

include /etc/ldap/schema/cosine.schema

include /etc/ldap/schema/nis.schema

include /etc/ldap/schema/inetorgperson.schema

# Schema check allows for forcing entries to

# match schemas for their objectClasses's

schemacheck off

# Where the pid file is put. The init.d script

# will not stop the server if you change this.

pidfile /var/run/slapd/slapd.pid

# List of arguments that were passed to the server

argsfile /var/run/slapd.args

# Read slapd.conf(5) for possible values

loglevel 0

# Where the dynamically loaded modules are stored

modulepath /usr/lib/ldap

moduleload back_bdb

#######################################################################

# Specific Backend Directives for bdb:

# Backend specific directives apply to this backend until another

# 'backend' directive occurs

backend bdb

checkpoint 512 30

#######################################################################

# Specific Backend Directives for 'other':

# Backend specific directives apply to this backend until another

# 'backend' directive occurs

#backend <other>

#######################################################################

# Specific Directives for database #1, of type bdb:

# Database specific directives apply to this databasse until another

# 'database' directive occurs

database bdb

# The base of your directory in database #1

suffix "dc=rouchon,dc=org"

rootdn "cn=admin,dc=rouchon,dc=org"

#Le mot de passe obtenu avec slappasswd.

#rootpw {SSHA}B8dd203Rq0xSu1Um6z0iatPbbK2KtkIB

rootpw admin

# Indexing options for database #1

index objectClass eq

# Save the time that the entry gets modified, for database #1

lastmod on

# Where to store the replica logs for database #1

# replogfile /var/lib/ldap/replog

# The userPassword by default can be changed

# by the entry owning it if they are authenticated.

# Others should not be able to see it, except the

# admin entry below

# These access lines apply to database #1 only

#access to attribute=userPassword

# by dn="cn=admin,o=rouchon,dc=org" write

# by anonymous auth

# by self write

# by * none

# Ensure read access to the base for things like

# supportedSASLMechanisms. Without this you may

# have problems with SASL not knowing what

# mechanisms are available and the like.

# Note that this is covered by the 'access to *'

# ACL below too but if you change that as people

# are wont to do you'll still need this if you

# want SASL (and possible other things) to work

# happily.

access to dn.base="" by * read

# The admin dn has full write access, everyone else

# can read everything.

access to *

by dn="cn=admin,dc=rouchon,dc=org" write

by * read

# Seul l'utilisateur peut changer son mot de passe et l'administrateur biensur.

access to attribute=userPassword

by dn="cn=admin,dc=rouchon,dc=org" write

by anonymous auth

by self write

by * none

Démarrer slapd

ajouter les branches avec :

ldapadd -x -D "cn=admin,dc=rouchon,dc=org" -W -f /home/oyion/base.ldif

avec base.ldif :

dn: dc=rouchon,dc=org

dc: rouchon

objectClass: dcObject

objectClass: organizationalUnit

ou: Rouchon

dn: ou=users,dc=rouchon,dc=org

ou: users

objectClass: organizationalunit

dn: ou=agenda,dc=rouchon,dc=org

ou: agenda

objectClass: organizationalunit

Installer LDAP admin (site php pour créer les users)

ajouter robert en utilisateur Unix

Configurer Typo3

Installer

Authentication Services cc_sv_auth

Installer en utilisant XCLASS

Installer

LDAP eu_ldap

Store encrypted login password for ...[storePWD] = 0 (default)
Enable authentication against LDAP ...[onlyLDAP] = 0 (default)

Créer un sysfolder user dans lequel on crée le serveur LDAP suivant.

Hop, c'est cuit !

Eu_ldap - 4

© OneXt Content System – Jean-Gaël Rouchon - 2005

Eu_ldap

Ldap avec eu_ldap sous typo3

LDAP TYPO3

Jean-Gaël Rouchon

2003-08-26T14:25:39