4 users Sign-in to change your status

AD authentification and SSO plugin. Security

• Repository
• Download package
• Browse source

The vjAuthPlugin packages authentification using Active Directory and Single Sign On (SSO) with NTLM protocol if activated.

Developers

Name	Status	Email
Jean-Philippe MORVAN	lead	rf.fiujelliv-elliv <<ta>> navrom.pj

License

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is furnished
to do so, subject to the following conditions:

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

Releases for sf 1.4

Version	License	API	Released
2.1.1stable	MIT license	0.0.1alpha	29/12/2009
2.1.0stable	MIT license	0.0.1alpha	29/12/2009

Releases for sf 1.3

Version	License	API	Released
2.1.1stable	MIT license	0.0.1alpha	29/12/2009
2.1.0stable	MIT license	0.0.1alpha	29/12/2009
2.0.0stable	MIT license	0.0.1alpha	27/11/2009

Releases for sf 1.2

Version	License	API	Released
1.2.1stable	MIT license	0.0.1alpha	29/12/2009
1.2.0stable	MIT license	0.0.1alpha	29/12/2009
1.1.0stable	MIT license	0.0.1alpha	27/11/2009
1.0.3stable	MIT license	0.0.1alpha	14/09/2009
1.0.2stable	MIT license	0.0.1alpha	14/09/2009
1.0.1stable	MIT license	0.0.1alpha	14/09/2009
1.0.0stable	MIT license	0.0.1alpha	10/09/2009
0.9.3beta	MIT license	0.0.1alpha	23/07/2009
0.9.2beta	MIT license	0.0.1alpha	20/07/2009
0.9.1beta	MIT license	0.0.1alpha	20/07/2009
0.9.0beta	MIT license	0.0.1alpha	17/07/2009

Join this plugin team

Other releases

Release 2.1.1 - 29/12/2009

Release 2.1.0 - 29/12/2009

Release 2.0.0 - 27/11/2009

Release 1.2.1 - 29/12/2009

Release 1.2.0 - 29/12/2009

Release 1.1.0 - 27/11/2009

Release 1.0.3 - 14/09/2009

Release 1.0.2 - 14/09/2009

Release 1.0.1 - 14/09/2009

Release 1.0.0 - 10/09/2009

Release 0.9.3 - 23/07/2009

Release 0.9.2 - 20/07/2009

Release 0.9.1 - 20/07/2009

Release 0.9.0 - 17/07/2009

vjAuthPlugin

The vjAuthPlugin packages authentification using Active Directory and Single Sign On (SSO) with NTLM protocol if activated.

Installation

• Install the plugin

  $ symfony plugin:install vjAuthPlugin
  

• Clear the cache

  $ symfony cache:clear
  

Secure your application

To secure a symfony application:

• Enable the module vjAuthPlugin in settings.yml

   all:
     .settings:
       enabled_modules: [..., vjAuthPlugin]
  

• Change the default login modules in settings.yml

    login_module:           vjAuthLogin
    login_action:           index
  

• Secure some modules or your entire application in security.yml

    default:
      is_secure: on
  

• Secure some modules or your entire application in security.yml

    all:          
      ad:
        options:   # theses options are usefull for the adldap class, the documentation is online
          account_suffix:            '@mysite.fr'
          base_dn:                   'DC=mysite,DC=fr'
          domain_controllers:        [ "myDC1.mysite.fr", "myDC2.mysite.fr" ]
          ad_username:               'username_administrator_active_directory'
          ad_password:               'password_administrator_active_directory'
          recursive_groups:          false
        group_prefix:                PREFIX_
        group_authorize:             GROUP     # the real name of the group authorize to use the application is : PREFIX_GROUP
        ntlm_active:                 true      # if ntlm activated, autologon with the windows username (there are some issues with the NTLM protocol, I'll documente how to solve them soon)
  

Forms

• vjAuthFormLogin: A form to authenticate the user with his Active Directory's Username and Password

Informations

There is no test. I'll write some soon.

I don't include CSS files because mine are very linked with my application and everybody don't like pink :)

This plugin is only available in french. I won't internationalize it.

The files impacted with french are :

• lib/AuthUser.class.php

    $this->setCulture('fr');
  

• lib/form/doctrine/vjAuthFormLogin.class

• modules/vjAuthLogin/actions/actions.class.php

• modules/vjAuthLogin/templates/indexSuccess.php

• modules/vjAuthLogin/config/view.yml

TODO

• write tests

• write more documentation

• write documentation about NTLM issues

• integrate CSS files

• any idea, advice, other ? please email me :)