tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
icingaweb2/doc/authentication.md

63 lines
2.8 KiB
Markdown
Raw Normal View History

Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
# Authentication
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
The authentication manager can use different backend types like LDAP or Databases as data sources. During
the application bootstrap the different available resources are checked for availability and
the resource with the highest priority will be used for authentication. This behaviour is useful for setting
up fallback accounts, that are available when the regular authentication backend is not available.
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
## Configuration
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
The internal authentication is configured in *config/authentication.ini*.
Each section listed in this configuration represents a single backend
that can be used to authenticate users or groups.
The order of entries in this configuration is used to determine the fallback
priority in case of an error. If the resource referenced in the first entry (the one at the top if the file)
is not reachable, the next lower entry will be used for authentication.
Please be aware that this behaviour is not valid for the authentication itself.
The authentication will only be done against the one available resource with the highest
Fix mistakes in the documentation files resolves #4503
2013-08-14 09:55:46 +02:00
priority. When an account is only present in a backend with lower priority, it will not
be able to authenticate when a backend with higher priority is active that does not contain
this account.
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
### Backend
The value of the configuration key *backend* will determine which UserBackend class to
Change default database to "icingaweb" and add installation instructions Set the default database and user to "icingaweb" in the authentication.ini. Add instructions about how to set up the databases to authentication.ini. refs #3769
2013-07-26 12:58:21 +02:00
load. To use the internal backend you need to specifiy the value "Db"
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
which will cause the class "DbUserBackend" to be loaded.
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
Currently these types of backends are allowed:
* ldap
* db
#### db
The authentication source is a SQL database and points to a resource defined in *resources.ini*, which
contains all the connection information. Every entry should therefore contain a property *resource*
with the name of the assigned resource. For a more detailed description about how to set up resources,
please read the chapter *Resources*.
The authentication currently supports the databases MySQL and PostgreSQL.
#### ldap
The authentication source is an ldap server. The connection information should be directly present
in the *authentication.ini*, like described in the example configuration.
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
### target
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Fix mistakes in the documentation files resolves #4503
2013-08-14 09:55:46 +02:00
The value of the configuration key *target* defines the type of authentication the described backend provides.
The allowed values are *user* for a backend that provides user authentication or *group* for group authentication.
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
## Technical description
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
If an ldap-backend is used, the standard ldap bind will be executed and all user credentials will be managed
directly by the ldap server.
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
In case of an SQL-backend, the backend will store the salted hash of the password in the column "password" and the salt in the column "salt".
Fix unit tests and add documentation Add functionality to check if a certain database type like psql or mysql is available and skip the tests accordingly. Add documentation for backend authentication. refs #3769
2013-07-25 10:05:47 +02:00
When a password is checked, the hash is calculated with the function hash_hmac("sha256",salt,password) and compared
Add the DbAdapterFactory to instanciate database adapters using resource names Create the DbAdapterFactory to instanciate db adapters, add resources.ini to configure resources, change the authentication Manager to fall back to backends with lower priority in case of errors, update the current UserBackends to the changed environment. Also adjust the documentation and existing unit tests. resolves #4503
2013-08-13 18:08:21 +02:00
to the stored value.