icingaweb2/doc/authentication.md

1.1 KiB

Authentication via internal DB

The class DbUserBackend allows to handle the user authentication internally in a database.

Configuration

The internal authentication is configured in config/authentication.ini. The value of the configuration key "backend" will determine which UserBackend class to load. To use the internal backend you need to specifiy the value "Db" which will cause the class "DbUserBackend" to be loaded.

There are various configuration keys in "Authentication.ini" and some are only used by specific backends. The internal DB uses the values dbtype,table,host,password,user and db, which define the used connection parameters, the database and the table.

Database support

The module currently supports these databases:

  • mysql (dbtype=mysql)
  • PostgreSQL (dbtype=pgsql)

Authentication

The backend will store the salted hash of the password in the column "password" and the salt in the column "salt". When a password is checked, the hash is calculated with the function hash_hmac("sha256",salt,password) and compared to the stored value.