Authentication, SSO and SSL: Difference between revisions
(Created page with " <nowiki>= Authentication modes for Dolibarr =</nowiki> There is different solutions to be authenticated with Dolibarr. You can find the selected method into the htdocs/conf...") |
mNo edit summary Tag: 2017 source edit |
||
| Line 1: | Line 1: | ||
= Authentication modes in Dolibarr = | |||
There is different solutions to be authenticated with Dolibarr. You can find the selected method into the htdocs/conf/conf.php file into the parameter '''$dolibarr_authentication_mode'''. This is a list of available | There is different solutions to be authenticated with Dolibarr. You can find the selected method into the htdocs/conf/conf.php file into the parameter '''$dolibarr_authentication_mode'''. This is a list of available values: | ||
* dolibarr | * dolibarr | ||
* http | * http | ||
* ldap | * ldap | ||
* forceuser | |||
* ... | * ... | ||
| Line 24: | Line 25: | ||
Note that the user must also exists as an existing user into the Dolibarr user database. Also the date of validity of this user must be valid. | Note that the user must also exists as an existing user into the Dolibarr user database. Also the date of validity of this user must be valid. | ||
<br /> | <br /> | ||
| Line 34: | Line 31: | ||
This mode is used only on development platforms. For example on an instance used to make demo or automated tests. | This mode is used only on development platforms. For example on an instance used to make demo or automated tests. | ||
<br /> | |||
== googleauth == | |||
This method is still in development and is not yet available | |||
<br /> | <br /> | ||
Revision as of 11:14, 29 December 2022
Authentication modes in Dolibarr
There is different solutions to be authenticated with Dolibarr. You can find the selected method into the htdocs/conf/conf.php file into the parameter $dolibarr_authentication_mode. This is a list of available values:
- dolibarr
- http
- ldap
- forceuser
- ...
You can combine several method. In such a case, you will try to authenticate the first method and if it fails, the other method will be used. For example, if you set $dolibarr_authentication_mode="ldap,dolibarr", the system will try to authenticate using the LDAP database and if it fails it will try to login using the internal Dolibarr login/password
dolibarr
With this method, the login and pass you entered on login page will be compared to the login and the hashed password saved into the Dolibarr database (Table llx_user).
http
You can set the authentication mode to http if you Dolibarr web application is protected by an Apache http basic authentication form. The login/pass are stored into the file used by the HTTP Basic system to store passwords (it is often a file called .htpasswd if you used the mod_auth_basic plugin of Apache).
Note that the user must also exists as a existing user into the Dolibarr user database. Also the date of validity of this user must be valid.
ldap
If you set the authentication mode to LDAP, the test of the validity of your login and password are done using a LDAP database.
Note that the user must also exists as an existing user into the Dolibarr user database. Also the date of validity of this user must be valid.
forceuser
When this method is used, there is no need to enter a login or password. No login page is show. The user will be automatically set to the one defined into variable $dolibarr_auto_userinto the htdocs/conf/conf.php
This mode is used only on development platforms. For example on an instance used to make demo or automated tests.
googleauth
This method is still in development and is not yet available
openid
This method is not yet available and still in development.
However, if you need to connect using OpenID, you can already do it using the following solution
Connect to dolibarr using Openid and the HTTP Basic of Apache
TODO...