151 lines
9.4 KiB
Markdown
151 lines
9.4 KiB
Markdown
---
|
|
gitea: none
|
|
include_toc: true
|
|
---
|
|
|
|
# lemonldap
|
|
|
|
## Synopsis
|
|
|
|
LemonLDAP, a Web Single Sign On and Access Management.
|
|
|
|
[For more informations](https://lemonldap-ng.org/)
|
|
|
|
## Basic variables
|
|
|
|
### Général (*general*)
|
|
|
|
#### Reverse proxy (*general.revprox*)
|
|
|
|
##### Point d'entrée des clients (*general.revprox.revprox_client*)
|
|
|
|
|
|
This a family is a leadership.
|
|
|
|
| Description | Type | Example | Supplier |
|
|
|----------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------|---------------------|-----------------------|
|
|
| **Nom de domaine exterieur du serveur** (*[general.revprox.revprox_client.revprox_client_external_domainnames](dictionaries/21_revprox_client.xml)*) [+] | [domainname](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | service.example.net | ReverseProxy:external |
|
|
|
|
#### LemonLDAP (*general.lemonldap*)
|
|
|
|
|
|
Configuration de la solution d'authentification unique LemonLDAP::NG.
|
|
|
|
| Description | Type | Example |
|
|
|-------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------|-------------------|
|
|
| **Courriel de l'administrateur** (*[general.lemonldap.lemon_mail_admin](dictionaries/70_lemonldap_ng.xml)*) | [mail](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | admin@example.net |
|
|
|
|
- [+]: variable is multiple
|
|
- **bold**: variable is mandatory
|
|
|
|
## Variables
|
|
|
|
### Général (*general*)
|
|
|
|
#### Annuaire OpenLDAP (*general.ldap*)
|
|
|
|
##### Client (*general.ldap.client*)
|
|
|
|
|
|
| Description | Type | Values | Supplier |
|
|
|------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------|--------------|--------------|
|
|
| **Nom de la famille LDAP** (*[general.ldap.client.ldapclient_family](dictionaries/70_lemonldap_ng.xml)*) | [unix_user](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | all | LDAP:family |
|
|
| **Base DN de l'annuaire** (*[general.ldap.client.ldapclient_base_dn](dictionaries/21_ldap-client.xml)*) | [string](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | <calculated> | LDAP:base_dn |
|
|
| **Base DN de l'annuaire des utilisateurs** (*[general.ldap.client.ldapclient_search_dn](dictionaries/21_ldap-client.xml)*) | [string](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | <calculated> | |
|
|
| **Base DN de l'annuaire des groupes** (*[general.ldap.client.ldapclient_group_dn](dictionaries/21_ldap-client.xml)*) | [string](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | <calculated> | |
|
|
| **Base DN de l'annuaire des utilisateurs n'appartenant à une famille** (*[general.ldap.client.ldapclient_user_dn](dictionaries/21_ldap-client.xml)*) | [string](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | <calculated> | |
|
|
|
|
#### Reverse proxy (*general.revprox*)
|
|
|
|
##### Point d'entrée des clients (*general.revprox.revprox_client*)
|
|
|
|
|
|
This a family is a leadership.
|
|
|
|
| Description | Type | Supplier |
|
|
|-------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|----------------------------|
|
|
| **Nom de l'arborescence racine du site** (*[general.revprox.revprox_client.revprox_client_location](dictionaries/21_revprox_client.xml)*) | [filename](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | ReverseProxy:location |
|
|
| Taille maximum du corps (*[general.revprox.revprox_client.revprox_client_max_body_size](dictionaries/21_revprox_client.xml)*) | [string](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | ReverseProxy:max_body_size |
|
|
|
|
#### LemonLDAP (*general.lemonldap*)
|
|
|
|
|
|
Configuration de la solution d'authentification unique LemonLDAP::NG.
|
|
|
|
| Description | Type | Values |
|
|
|------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------|----------|
|
|
| **Nombre de processus dédié à LemonLdap (équivalent au nombre de processeurs)** (*[general.lemonldap.lemon_proc](dictionaries/70_lemonldap_ng.xml)*) | [number](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | 1 |
|
|
|
|
- [+]: variable is multiple
|
|
- **bold**: variable is mandatory
|
|
|
|
## Variables for expert
|
|
|
|
### Général (*general*)
|
|
|
|
#### NGINX (*general.nginx*)
|
|
|
|
|
|
Paramétrage global de NGINX.
|
|
##### Client (*general.ldap.client*)
|
|
|
|
|
|
| Description | Type | Values | Choices |
|
|
|---------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------|----------|---------------------|
|
|
| **Longueur maximum pour un nom de domaine** (*[general.nginx.nginx_hash_bucket_size](dictionaries/21_nginx.xml)*) | [choice](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | 128 | 128<br />64<br />32 |
|
|
| **Taille maximale des données reçues par la méthode POST (en Mo)** (*[general.nginx.nginx_post_max_size](dictionaries/21_nginx.xml)*) | [number](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | 32 | |
|
|
|
|
- [+]: variable is multiple
|
|
- **bold**: variable is mandatory
|
|
|
|
## Associated providers
|
|
|
|
- **LocalDNS**
|
|
- Journald
|
|
- **SMTP**
|
|
- **LDAP**
|
|
- **ReverseProxy**
|
|
|
|
**bold**: provider is mandatory
|
|
|
|
## Example
|
|
|
|
Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.
|
|
|
|
```
|
|
lemonldap:
|
|
applicationservice: lemonldap
|
|
provider_zone: oauth2
|
|
zones_name:
|
|
- ldap
|
|
- localdns
|
|
- reverseproxy
|
|
- smtp
|
|
values:
|
|
general.revprox.revprox_client.revprox_client_external_domainnames:
|
|
- service.example.net
|
|
general.lemonldap.lemon_mail_admin: admin@example.net
|
|
```
|
|
|
|
## Dependances
|
|
|
|
- [ldap-client](../ldap-client/README.md)
|
|
- [relay-mail-client](../relay-mail-client/README.md)
|
|
- [nginx-https](../nginx-https/README.md)
|
|
- [nginx-common](../nginx-common/README.md)
|
|
- [reverse-proxy-client](../reverse-proxy-client/README.md)
|
|
- [base-debian-bullseye](../base-debian-bullseye/README.md)
|
|
- [base-debian](../base-debian/README.md)
|
|
- [systemd](../systemd/README.md)
|
|
- [base-machine](../base-machine/README.md)
|
|
- [base](../base/README.md)
|
|
- [dns-local](../dns-local/README.md)
|
|
- [pki-tls](../pki-tls/README.md)
|
|
- [journald](../journald/README.md)
|
|
- [resolved](../resolved/README.md)
|
|
|
|
## Supplier
|
|
|
|
[oauth2-client](../oauth2-client/README.md)
|
|
|
|
[All applications services for this dataset.](../README.md)
|