Xavier Guimard
18 years ago
parent
9c928e97cd
commit
5f867fe023
@ -1,196 +0,0 @@ |
||||
package Lemonldap::NG::Handler::SharedConf::DBI; |
||||
|
||||
use strict; |
||||
|
||||
use Lemonldap::NG::Handler::SharedConf qw(:all); |
||||
use DBI; |
||||
use Storable qw(thaw); |
||||
use MIME::Base64; |
||||
|
||||
BEGIN { |
||||
if ( MP() == 2 ) { |
||||
Apache2::compat->import(); |
||||
} |
||||
} |
||||
|
||||
our $VERSION = '0.52'; |
||||
|
||||
our @ISA = qw(Lemonldap::NG::Handler::SharedConf); |
||||
|
||||
*EXPORT_TAGS = *Lemonldap::NG::Handler::SharedConf::EXPORT_TAGS; |
||||
*EXPORT_OK = *Lemonldap::NG::Handler::SharedConf::EXPORT_OK; |
||||
|
||||
our ( $dbiChain, $dbiUser, $dbiPassword ); |
||||
|
||||
my ( $dbh, $cfgNum ) = ( undef, 0 ); |
||||
|
||||
sub localInit($$) { |
||||
my ( $class, $args ) = @_; |
||||
$args->configStorage = { |
||||
type => 'DBI', |
||||
dbiChain => $args->{dbiChain}, |
||||
dbiUser => $args->{dbiUser}, |
||||
dbiPassword => $args->{dbiPassword}, |
||||
dbiTable => $args->{dbiTable}, |
||||
}; |
||||
$class->SUPER::localInit($args); |
||||
} |
||||
|
||||
1; |
||||
__END__ |
||||
|
||||
=head1 NAME |
||||
|
||||
Lemonldap::NG::Handler::SharedConf::DBI - Module to share Lemonldap::NG |
||||
configuration using DBI. |
||||
|
||||
IMPORTANT: This module is written for compatibility. Now, you an use directly |
||||
Lemonldap::NG::Handler::SharedConf as shown bellow: |
||||
|
||||
=head1 SYNOPSIS |
||||
|
||||
New usage: |
||||
|
||||
package My::Package; |
||||
use Lemonldap::NG::Handler::SharedConf; |
||||
@ISA = qw(Lemonldap::NG::Handler::SharedConf); |
||||
__PACKAGE__->init ( { |
||||
localStorage => "Cache::FileCache", |
||||
localStorageOptions => { |
||||
'namespace' => 'MyNamespace', |
||||
'default_expires_in' => 600, |
||||
}, |
||||
reloadTime => 1200, # Default: 600 |
||||
configStorage => { |
||||
type => "DBI" |
||||
dbiChain => "DBI:mysql:database=$database;host=$hostname;port=$port", |
||||
dbiUser => "lemonldap", |
||||
dbiPassword => "password", |
||||
}, |
||||
} ); |
||||
|
||||
Old usage: |
||||
|
||||
package My::Package; |
||||
use Lemonldap::NG::Handler::SharedConf::DBI; |
||||
@ISA = qw(Lemonldap::NG::Handler::SharedConf::DBI); |
||||
|
||||
__PACKAGE__->init ( { |
||||
localStorage => "Cache::FileCache", |
||||
localStorageOptions => { |
||||
'namespace' => 'MyNamespace', |
||||
'default_expires_in' => 600, |
||||
}, |
||||
reloadTime => 1200, # Default: 600 |
||||
dbiChain => "DBI:mysql:database=$database;host=$hostname;port=$port", |
||||
dbiUser => "lemonldap", |
||||
dbiPassword => "password", |
||||
} ); |
||||
|
||||
Call your package in /apache-dir/conf/httpd.conf : |
||||
|
||||
PerlRequire MyFile |
||||
# TOTAL PROTECTION |
||||
PerlHeaderParserHandler My::Package |
||||
# OR SELECTED AREA |
||||
<Location /protected-area> |
||||
PerlHeaderParserHandler My::Package |
||||
</Location> |
||||
|
||||
The configuration is loaded only at Apache start. Create an URI to force |
||||
configuration reload, so you don't need to restart Apache at each change : |
||||
|
||||
# /apache-dir/conf/httpd.conf |
||||
<Location /location/that/I/ve/choosed> |
||||
Order deny,allow |
||||
Deny from all |
||||
Allow from my.manager.com |
||||
PerlHeaderParserHandler My::Package->refresh |
||||
</Location> |
||||
|
||||
=head1 DESCRIPTION |
||||
|
||||
This library inherit from L<Lemonldap::NG::Handler::SharedConf> to build a |
||||
complete SSO Handler System: a central database contains the policy of your |
||||
domain. People that want to access to a protected applications are redirected |
||||
to the portal that run L<Lemonldap::NG::Portal::SharedConf::DBI>. After reading |
||||
configuration from the database and authenticating the user, it stores a key |
||||
word for each application the user is granted to access to. |
||||
Then the user is redirected to the application he wanted to access and the |
||||
Apache handler build with L<Lemonldap::NG::Handler::SharedConf::DBI> has just |
||||
to verify that the keyword corresponding to the protected area is stored in |
||||
the database. |
||||
|
||||
=head2 EXPORT |
||||
|
||||
Same as L<Lemonldap::NG::Handler::SharedConf>. |
||||
|
||||
=head1 OPERATION |
||||
|
||||
Each new Apache child checks if there's a configuration stored in the local |
||||
store. If not, it calls C<getConf> to get one and store it in the local store by |
||||
calling setconf. |
||||
|
||||
Every 600 seconds (or $reload seconds), each Apache child checks if the local |
||||
stored configuration has changed and reload it if it has. |
||||
|
||||
=head1 SCHEME OF THE CONFIGURATION DATABASE |
||||
|
||||
CREATE TABLE lmConfig ( |
||||
cfgNum int, |
||||
locationRules text, |
||||
globalStorage text, |
||||
globalStorageOptions text, |
||||
groups text, |
||||
macros text, |
||||
exportedHeaders text, |
||||
portal text, |
||||
domain text, |
||||
ldapServer text, |
||||
ldapPort int, |
||||
ldapBase text, |
||||
securedCookie int, |
||||
cookieName text, |
||||
authentication text, |
||||
exportedVars text, |
||||
managerDn text, |
||||
managerPassword text, |
||||
PRIMARY KEY (cfgNum) |
||||
); |
||||
|
||||
=over |
||||
|
||||
=item * cfgNum indicates the number of each configuration. Lemonldap::NG use |
||||
always the highest. |
||||
|
||||
=item * locationRules, globalStorageOptions and exportedHeaders are hash |
||||
references serialized by Storage::freeze. See L<Lemonldap::NG::Manager> for |
||||
more about this. |
||||
|
||||
=item * portal indicates the URL of the Lemonldap portal used to authenticate |
||||
users. |
||||
|
||||
=item * globalStorage indicates the Apache::Session::* module used to store |
||||
sessions. |
||||
|
||||
=back |
||||
|
||||
=head1 SEE ALSO |
||||
|
||||
L<Lemonldap::Manager>, L<Lemonldap::NG::Handler>, |
||||
L<Lemonldap::NG::Handler::SharedConf> |
||||
|
||||
=head1 AUTHOR |
||||
|
||||
Xavier Guimard, E<lt>x.guimard@free.frE<gt> |
||||
|
||||
=head1 COPYRIGHT AND LICENSE |
||||
|
||||
Copyright (C) 2005-2007 by Xavier Guimard E<lt>x.guimard@free.frE<gt> |
||||
|
||||
This library is free software; you can redistribute it and/or modify |
||||
it under the same terms as Perl itself, either Perl version 5.8.4 or, |
||||
at your option, any later version of Perl 5 you may have available. |
||||
|
||||
=cut |
||||
|
||||
@ -1,98 +0,0 @@ |
||||
package Lemonldap::NG::Portal::SharedConf::DBI; |
||||
|
||||
use strict; |
||||
use warnings; |
||||
|
||||
use Lemonldap::NG::Portal::SharedConf qw(:all); |
||||
use DBI; |
||||
use Storable qw(thaw); |
||||
use MIME::Base64; |
||||
|
||||
*EXPORT_OK = *Lemonldap::NG::Portal::SharedConf::EXPORT_OK; |
||||
*EXPORT_TAGS = *Lemonldap::NG::Portal::SharedConf::EXPORT_TAGS; |
||||
*EXPORT = *Lemonldap::NG::Portal::SharedConf::EXPORT; |
||||
|
||||
our $VERSION = '0.31'; |
||||
|
||||
our @ISA = qw(Lemonldap::NG::Portal::SharedConf); |
||||
|
||||
sub getConf { |
||||
my ( $self, $args ) = @_; |
||||
$self->{configStorage} = { |
||||
type => "DBI", |
||||
dbiChain => $self->{dbiChain}, |
||||
dbiUser => $self->{dbiUser}, |
||||
dbiPassword => $self->{dbiPassword}, |
||||
dbiTable => $self->{dbiTable}, |
||||
}; |
||||
$self->SUPER::getConf(@_); |
||||
} |
||||
|
||||
1; |
||||
__END__ |
||||
|
||||
=head1 NAME |
||||
|
||||
Lemonldap::NG::Portal::SharedConf::DBI - This module is deprecated. See |
||||
L<Lemonldap::NG::Portal::SharedConf>. |
||||
|
||||
=head1 SYNOPSIS |
||||
|
||||
use Lemonldap::NG::Portal::SharedConf; |
||||
my $portal = new Lemonldap::NG::Portal::SharedConf( { |
||||
configStorage => { |
||||
dbiChain => "dbi:mysql:database=lemonldap;host=127.0.0.1", |
||||
dbiUser => "lemonldap", |
||||
dbiPassword => "password", |
||||
dbiTable => "lmConfig", |
||||
}, |
||||
} ); |
||||
|
||||
if($portal->process()) { |
||||
# Write here the menu with CGI methods. This page is displayed ONLY IF |
||||
# the user was not redirected here. |
||||
print $portal->header; # DON'T FORGET THIS (see L<CGI(3)>) |
||||
print "..."; |
||||
|
||||
# or redirect the user to the menu |
||||
print $portal->redirect( -uri => 'https://portal/menu'); |
||||
} |
||||
else { |
||||
# Write here the html form used to authenticate with CGI methods. |
||||
# $portal->error returns the error message if athentification failed |
||||
# Warning: by defaut, input names are "user" and "password" |
||||
print $portal->header; # DON'T FORGET THIS (see L<CGI(3)>) |
||||
print "..."; |
||||
print '<form method="POST">'; |
||||
# In your form, the following value is required for redirection |
||||
print '<input type="hidden" name="url" value="'.$portal->param('url').'">'; |
||||
# Next, login and password |
||||
print 'Login : <input name="user"><br>'; |
||||
print 'Password : <input name="password" type="password" autocomplete="off">'; |
||||
print '<input type=submit value="OK">'; |
||||
print '</form>'; |
||||
} |
||||
|
||||
=head1 DESCRIPTION |
||||
|
||||
Lemonldap::NG::Portal::SharedConf::DBI is written for compatibility with old |
||||
versions of Lemonldap::NG. See now L<Lemonldap::NG::Portal::SharedConf>. |
||||
|
||||
=head1 SEE ALSO |
||||
|
||||
L<Lemonldap::NG::Portal::SharedConf>, L<Lemonldap::NG::Portal>, |
||||
L<Lemonldap::NG::Handler>, L<Lemonldap::NG::Manager> |
||||
|
||||
=head1 AUTHOR |
||||
|
||||
Xavier Guimard, E<lt>x.guimard@free.frE<gt> |
||||
|
||||
=head1 COPYRIGHT AND LICENSE |
||||
|
||||
Copyright (C) 2005-2006 by Xavier Guimard E<lt>x.guimard@free.frE<gt> |
||||
|
||||
This library is free software; you can redistribute it and/or modify |
||||
it under the same terms as Perl itself, either Perl version 5.8.4 or, |
||||
at your option, any later version of Perl 5 you may have available. |
||||
|
||||
=cut |
||||
Loading…
Reference in new issue