- Posts: 348
- Thank you received: 41
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
Shibboleth, anybody doing?
- Jmantysalo
- Topic Author
- Offline
- Platinum Member
Less
More
4 years 8 months ago #187350
by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
For others to know: I did not get the plugin to work, so I did another plugin from scratch. It was relatively easy, as I did only PoC code that works in our environment.
The topic has been locked.
- ollehar
- Offline
- LimeSurvey GmbH Employee
Less
More
- Posts: 522
- Thank you received: 108
4 years 8 months ago #187353
by ollehar
1. Which plugin didn't work?
2. Would you be interested in offering your new plugin in LimeStore?
Replied by ollehar on topic Shibboleth, anybody doing?
Jmantysalo wrote: For others to know: I did not get the plugin to work, so I did another plugin from scratch. It was relatively easy, as I did only PoC code that works in our environment.
1. Which plugin didn't work?
2. Would you be interested in offering your new plugin in LimeStore?
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13676
- Thank you received: 2496
4 years 8 months ago #187363
by DenisChenu
1. Never use this version in production
2. With exception : not a lot plugin are tested with this version
3. 4.0.0 plugin API are unstable too
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Shibboleth, anybody doing?
Realease CandidateJmantysalo wrote: The right bottom corner said that I have 4.x RC.
1. Never use this version in production
2. With exception : not a lot plugin are tested with this version
3. 4.0.0 plugin API are unstable too
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- Jmantysalo
- Topic Author
- Offline
- Platinum Member
Less
More
- Posts: 348
- Thank you received: 41
4 years 8 months ago #187391
by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
The plugin that I was not able to make work was
github.com/atlet/LimeSurvey-ShibbolethAuth
but maybe I did not try hard enought.
Currently I have no code that would be usable to other. I do have some ideas though. First, see for example groups.uta.fi/login/login_selection.php?lang=en where our Moodle can be accessed by Shibboleth accout or with local account (and there is even third way). Second, basic information should be checked on login, so that changed name or email address would be mirrored to LS too. Third, the plugin should block the user to make changes in his/her information that comes from SB.
We are currently wondering what survey systems to use here, and LS is one possible solution.
Currently I have no code that would be usable to other. I do have some ideas though. First, see for example groups.uta.fi/login/login_selection.php?lang=en where our Moodle can be accessed by Shibboleth accout or with local account (and there is even third way). Second, basic information should be checked on login, so that changed name or email address would be mirrored to LS too. Third, the plugin should block the user to make changes in his/her information that comes from SB.
We are currently wondering what survey systems to use here, and LS is one possible solution.
The topic has been locked.
- leandrobhbr
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 1
3 years 11 months ago #198671
by leandrobhbr
Replied by leandrobhbr on topic Shibboleth, anybody doing?
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- Jmantysalo
- Topic Author
- Offline
- Platinum Member
Less
More
- Posts: 348
- Thank you received: 41
3 years 11 months ago #198674
by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
Plugin I wrote (=modified from SB-auth and LDAP-auth -plugins) for our internal use is 125 lines long, this one is 171 lines.
What I don't get is how the system can be used to login with both SB and by local accounts. My plugin does that neither.
What I don't get is how the system can be used to login with both SB and by local accounts. My plugin does that neither.
The topic has been locked.
- leandrobhbr
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 1
3 years 11 months ago #198697
by leandrobhbr
Replied by leandrobhbr on topic Shibboleth, anybody doing?
I had an idea, but I haven't tested it yet.
You can use two URLs
In apache you protect only /admin
<Location /admin>
AuthType shibboleth
ShibRequireSession On
require valid-user
</Location>
In other url. You send get variable
/index.php/admin/authentication/sa/login?sb=no
$GET in code of plugin will control the two forms of login.
You can use two URLs
In apache you protect only /admin
<Location /admin>
AuthType shibboleth
ShibRequireSession On
require valid-user
</Location>
In other url. You send get variable
/index.php/admin/authentication/sa/login?sb=no
$GET in code of plugin will control the two forms of login.
The topic has been locked.
- Jmantysalo
- Topic Author
- Offline
- Platinum Member
Less
More
- Posts: 348
- Thank you received: 41
3 years 11 months ago #198699
by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
Yes, this is quite what I have been thinking. (But not done, as my boss said we won't have local accounts in this system. Also, accounts for API calls can still be local.)
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13676
- Thank you received: 2496
3 years 11 months ago - 3 years 11 months ago #198727
by DenisChenu
Currently you have sample with username/password account (LDAP and DB), can be harder with another method
EDIT : about API
Remind to check the current plugin :
github.com/LimeSurvey/LimeSurvey/blob/c6...thLDAP.php#L419-L425
@leandrobhbr : seems you didn't check it ?
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Shibboleth, anybody doing?
If you use API : plugin need to register to a specifi event : manual.limesurvey.org/Authentication_plu...t#remoteControlLoginJmantysalo wrote: accounts for API calls can still be local
Currently you have sample with username/password account (LDAP and DB), can be harder with another method
EDIT : about API
Remind to check the current plugin :
github.com/LimeSurvey/LimeSurvey/blob/c6...thLDAP.php#L419-L425
@leandrobhbr : seems you didn't check it ?
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Last edit: 3 years 11 months ago by DenisChenu. Reason: EDIT
The topic has been locked.
- leandrobhbr
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 1
3 years 11 months ago #198736
by leandrobhbr
Replied by leandrobhbr on topic Shibboleth, anybody doing?
i didn't check...
i will check now. thanks
i will check now. thanks
The topic has been locked.
- Jmantysalo
- Topic Author
- Offline
- Platinum Member
Less
More
- Posts: 348
- Thank you received: 41
3 years 11 months ago #198745
by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
My last message was stupid. Another try:
You can just add to your Apache settings something like
<Location /limesurvey/index.php/admin/remotecontrol>
ShibRequestSetting requireSession 0
AuthType None
Require host my.survey.server
and then you can use API with local accounts.
You can just add to your Apache settings something like
<Location /limesurvey/index.php/admin/remotecontrol>
ShibRequestSetting requireSession 0
AuthType None
Require host my.survey.server
and then you can use API with local accounts.
The topic has been locked.