[horde] Composite Authentication

Michael M Slusarz slusarz at horde.org
Fri Oct 18 18:17:28 UTC 2013


Quoting Laurent Foucher <laurent.foucher at iut-tlse3.fr>:

> Hello,
>
> I'm trying to configure the composite authentication, using  
> shibolleth as auth driver and ldap as admin driver. Here my config :
>
> $conf['auth']['driver'] = 'composite';
> $conf['auth']['params']['admin_driver']['driver'] = 'ldap';
> $conf['auth']['params']['admin_driver']['params'] = array(
>   'hostspec' => 'XX.XX.XX.XX',
>   'tls' => false,
>   'version' => '3',
>   'binddn' => 'XXXXXXXX,dc=iut-tlse3,dc=fr',
>   'bindpw' => 'XXXXXXXX',
>   'bindas' => 'admin',
>   'basedn' => 'ou=People,dc=iut-tlse3,dc=fr',
>   'scope' => 'one',
>   'ad' => false,
>   'uid' => 'uid',
>   'encryption' => 'ssha',
>   'newuser_objectclass' => array('shadowAccount', 'inetOrgPerson'),
>   'filter' => '(objectclass=shadowAccount)',
>   'password_expiration' => 'no'
> );
> $conf['auth']['params']['auth_driver']['driver'] = 'shibboleth';
> $conf['auth']['params']['auth_driver']['params'] = array(
>   'username_header' => 'HTTP_AUTH_USER',
>   'password_header' => 'HTTP_AUTH_PASSWORD',
>   'password_holder' => 'header'
> );
>
> Authentication works fine with shibolleth and ldap, but not with  
> composite driver.

I would start simpler.  Replace, for example, the auth_driver with a  
simple auth driver (i.e. 'auto') and see if it works.  Then switch  
with admin_driver.  This will let you know which portion of your  
config is faulty.

michael

___________________________________
Michael Slusarz [slusarz at horde.org]



More information about the horde mailing list