Central Authentication Service

Moderator: crythias

Post Reply
Icyarol
Znuny newbie
Posts: 6
Joined: 07 Jul 2023, 09:18
Znuny Version: 7.0.4
Real Name: Cristian

Central Authentication Service

Post by Icyarol »

Hi all,
I need to configure Znuny so that the customers are authenticated via CAS, can someone show me step by step what are the installations and configurations to do?
Thanks a lot.
root
Administrator
Posts: 3968
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Central Authentication Service

Post by root »

Hi,

Use the HTTPBasicAuth authentication for the customers and configure mod_auth_cas. Configuration of mod_auth_cas is a task for the Linux server admin.

- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
Icyarol
Znuny newbie
Posts: 6
Joined: 07 Jul 2023, 09:18
Znuny Version: 7.0.4
Real Name: Cristian

Re: Central Authentication Service

Post by Icyarol »

Hi,
is there a quick way to check if everything works?
Thanks.
Icyarol
Znuny newbie
Posts: 6
Joined: 07 Jul 2023, 09:18
Znuny Version: 7.0.4
Real Name: Cristian

Re: Central Authentication Service

Post by Icyarol »

root wrote: 10 Jul 2023, 11:14 Hi,

Use the HTTPBasicAuth authentication for the customers and configure mod_auth_cas. Configuration of mod_auth_cas is a task for the Linux server admin.

- Roy
The mod_auth_cas is now configured.
In Znuny this is my config.pm Customer Auth part:

Code: Select all

# Customer DB Authentication
	$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::DB';
	$Self->{'Customer::AuthModule::DB::Table'} = 'customer_user';
	$Self->{'Customer::AuthModule::DB::CustomerKey'} = 'login';
	$Self->{'Customer::AuthModule::DB::CustomerPassword'} = 'pw';

	# Customer LDAP Authentication
	$Self->{'Customer::AuthModule1'} = 'Kernel::System::CustomerAuth::LDAP';
	$Self->{'Customer::AuthModule::LDAP::Host1'} = $LDAPHost;
	$Self->{'Customer::AuthModule::LDAP::BaseDN1'} = $LDAPBaseDN;
	$Self->{'Customer::AuthModule::LDAP::UID1'} = 'upiCodiceFiscale';
	
	$Self->{'Customer::AuthModule::LDAP::SearchUserDN1'} = $LDAPUser;
	$Self->{'Customer::AuthModule::LDAP::SearchUserPw1'} = $LDAPPwd;


	
	# Customer HTTP Authentication
	$Self->{'Customer::AuthModule2'} = 'Kernel::System::CustomerAuth::HTTPBasicAuth';
Access via CAS would take place via authentication of the users loaded via ldap, is anything else needed?
Thanks.
root
Administrator
Posts: 3968
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Central Authentication Service

Post by root »

Hi,

If you are using HTTPBasicAuth then it needs to be the first AuthModule. Combining with other authentication. methods is not possible.

- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
Post Reply