# Parameter list

Click on a column header to sort table. The attribute key name can be used directly in `lemonldap-ng.ini` or in Perl scripts to override configuration parameters.

Full name | Key name | Portal | Handler | Manager
--- | --- | --- | --- | ---
Authentication backend | authentication | ✔ |  |
User backend | userDB | ✔ |  |
Password backend | passwordDB | ✔ |  |
Session backend | globalStorage | ✔ | ✔ |
Session backend options | globalStorageOptions | ✔ | ✔ |
SAML Session backend | samlStorage | ✔ |  |
SAML Session backend options | samlStorageOptions | ✔ |  |
CAS Session backend | casStorage | ✔ |  |
CAS Session backend options | casStorageOptions | ✔ |  |
Configuration backend | configStorage | ✔ | ✔ | ✔
Cache backend | localStorage | ✔ | ✔ | ✔
Cache backend options | localStorageOptions | ✔ | ✔ | ✔
Notification backend | notificationStorage | ✔ |  |
Notification backend options | notificationStorageOptions | ✔ |  |
Remote user | whatToTrace | ✔ | ✔ |
Custom functions | customFunctions | ✔ | ✔ | ✔
Headers sent | exportedHeaders |  | ✔ |
Access rules | locationRules |  | ✔ |
Portal URL | portal | ✔ | ✔ |
Name of the cookie | cookieName | ✔ | ✔ |
Main DNS domain | domain | ✔ | ✔ |
CDA activation | cda | ✔ | ✔ |
Cookie security | securedCookie | ✔ | ✔ |
Cookie expiration | cookieExpiration | ✔ | ✔ |
Attributes from user backend | exportedVars | ✔ |  |
Local groups | groups | ✔ |  |
Macros | macros | ✔ |  |
Session lifetime for cronjob | timeout | ✔ |  |
Syslog facility | syslog | ✔ |  |
SOAP activation | Soap | ✔ |  |
Attributes exported in SOAP | exportedAttr | ✔ |  |
Store password in session | storePassword | ✔ |  |
Notification activation | notification | ✔ |  |
Trusted domains | trustedDomains | ✔ |  |
Rule for session granting | grantSessionRule | ✔ |  |
Status module | status |  | ✔ |
Force HTTPS in redirection | https |  | ✔ |
Force port in redirection | port |  | ✔ |
Protection scheme | protection |  | ✔ | ✔
Use XForwardedFor for IP | useXForwardedForIP | ✔ |  | ✔
Multi values separator | multiValuesSeparator | ✔ | ✔ | ✔
SMTP server | SMTPServer | ✔ |  |
Mail From address | mailFrom | ✔ |  |
Regular expression for random password | randomPasswordRegexp | ✔ |  |
Subject for password mail | mailSubject | ✔ |  |
Body for password mail | mailBody | ✔ |  |
Subject for confirmation mail | mailConfirmSubject | ✔ |  |
Body for confirmation mail | mailConfirmBody | ✔ |  |
URL for mail reset | mailUrl | ✔ |  |
Skin name | portalSkin | ✔ |  |
Display logout module | portalDisplayLogout | ✔ |  |
Display reset password form | portalDisplayResetPassword | ✔ |  |
Display change password module | portalDisplayChangePassword | ✔ |  |
Display applications list | portalDisplayAppslist | ✔ |  |
Allow form autocompletion | portalAutocomplete | ✔ |  |
Require old password (change) | portalRequireOldPassword | ✔ |  |
User name session field | portalUserAttr | ✔ |  |
Open links in new window | portalOpenLinkInNewWindow | ✔ |  |
Anti frame protection | portalAntiFrame | ✔ |  |
Delete other session | singleSession | ✔ |  |
Delete other session if IP differs | singleIP | ✔ |  |
Do not allow several users for 1 IP | singleUserByIP | ✔ |  |
Display other sessions | notifyOther | ✔ |  |
Display deleted sessions | notifyDeleted | ✔ |  |
LDAP server or Net::LDAP connexion string | ldapServer | ✔ |  |
LDAP Port | ldapPort | ✔ |  |
LDAP search base | ldapBase | ✔ |  |
LDAP Bind DN | managerDn | ✔ |  |
LDAP Bind Password | managerPassword | ✔ |  |
LDAP main search filter | LDAPFilter | ✔ |  |
LDAP authentication search filter | AuthLDAPFilter | ✔ |  |
LDAP mail search filter | mailLDAPFilter | ✔ |  |
LDAP password policy control | ldapPpolicyControl | ✔ |  |
LDAP extended SetPassword modify | ldapSetPassword | ✔ |  |
LDAP groups base | ldapGroupBase | ✔ |  |
LDAP groups objectClass | ldapGroupObjectClass | ✔ |  |
LDAP groups member attribute | ldapGroupAttributeName | ✔ |  |
LDAP groups member link value | ldapGroupAttributeNameUser | ✔ |  |
LDAP groups name attribute | ldapGroupAttributeNameSearch | ✔ |  |
LDAP activate recursive groups | ldapGroupRecursive | ✔ |  |
LDAP group link attribute name | ldapGroupAttributeNameGroup | ✔ |  |
LDAP change password as user | ldapChangePasswordAsUser | ✔ |  |
LDAP password encoding | ldapPwdEnc | ✔ |  |
LDAP timeout | ldapTimeout | ✔ |  |
LDAP version | ldapVersion | ✔ |  |
LDAP binary attributes | ldapRaw | ✔ |  |
LDAP authentication level | ldapAuthnLevel | ✔ |  |
DBI Connection chain | dbiAuthChain | ✔ |  |
DBI Connection user | dbiAuthUser | ✔ |  |
DBI Connection password | dbiAuthPassword | ✔ |  |
DBI Authentication table | dbiAuthTable | ✔ |  |
DBI Login column | dbiAuthLoginCol | ✔ |  |
DBI Password column | dbiAuthPasswordCol | ✔ |  |
DBI Password hash | dbiAuthPasswordHash | ✔ |  |
DBI UserDB connection chain | dbiUserChain | ✔ |  |
DBI UserDB connection user | dbiUserUser | ✔ |  |
DBI UserDB connection password | dbiUserPassword | ✔ |  |
DBI UserDB table | dbiUserTable | ✔ |  |
DBI Mail column | dbiPasswordMailCol | ✔ |  |
DBI Pivot from user table | userPivot | ✔ |  |
DBI authentication level | dbiAuthnLevel | ✔ |  |
SSL user field in certificate | SSLVar | ✔ |  |
SSL map with LDAP attribute | SSLLDAPField | ✔ |  |
SSL force SSL authentication | SSLRequire | ✔ |  |
SSL authentication level | SSLAuthnLevel | ✔ |  |
CAS server URL | CAS_url | ✔ |  |
CAS CA file | CAS_CAFile | ✔ |  |
CAS force authentication renewal | CAS_renew | ✔ |  |
CAS force gateway authentication | CAS_gateway | ✔ |  |
CAS PGT temporary file | CAS_pgtFile | ✔ |  |
CAS proxied services | CAS_proxiedServices | ✔ |  |
CAS authentication level | CAS_authnLevel | ✔ |  |
Remote portal | remotePortal | ✔ |  |
Remote Session backend | remoteGlobalStorage | ✔ |  |
Remote Session backend options | remoteGlobalStorageOptions | ✔ |  |
Remote cookie name | remoteCookieName | ✔ |  |
Proxy portal URL | soapAuthService | ✔ |  |
Proxy cookie name | remoteCookieName | ✔ |  |
Proxy session SOAP end point | soapSessionService | ✔ |  |
Twitter application key | twitterKey | ✔ |  |
Twitter application secret | twitterSecret | ✔ |  |
Twitter application name | twitterAppName | ✔ |  |
Twitter authentication level | twitterAuthnLevel | ✔ |  |
OpenID secret token | openIdSecret | ✔ |  |
OpenID allowed domains | openIdIDPList | ✔ |  |
OpenID authentication level | openIdAuthnLevel | ✔ |  |
Apache authentication level | apacheAuthnLevel | ✔ |  |
Null authentication level | nullAuthnLevel | ✔ |  |
Choice URL parameter | authChoiceParam | ✔ |  |
Choice modules | authChoiceModules | ✔ |  |
Multi overridden parameters | multi | ✔ |  |
Zimbra preauthentication key | zimbraPreAuthKey | ✔ |  |
Zimbra account session key | zimbraAccountKey | ✔ |  |
Zimbra account type | zimbraBy | ✔ |  |
Zimbra preauthentication URL | zimbraUr | ✔ |  |
Zimbra local SSO URL pattern | zimbraSsoUrl | ✔ |  |
Sympa shared secret | sympaSecret | ✔ |  |
Sympa mail session key | sympaMailKey | ✔ |  |