forked from AdamLantos/redmine_http_auth
-
Notifications
You must be signed in to change notification settings - Fork 0
HTTP Authentication plugin for redmine
License
caleno/redmine_http_auth
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
I'm goint to try mesh this up so it works with Redmine 2.x and I'm not a Ruby guy. HTTP Authentication plugin for Redmine with SAML 2.0 support ======= This is a slightly modified version of the HTTP Authentication plugin for Redmine. The original version can be found at: https://github.com/AdamLantos/redmine_http_auth The goal of the modifications is to support SAML 2.0 authentication and just-in-time provisioning of users. We use the mod_mellon module for Apache for authentication: http://code.google.com/p/modmellon/ Quick installation guide ======= 1. Install mod_mellon. (Can in theory use any other authentication plugin for Apache that sets REMOTE_USER and provides user attributes.) 2. Configure mod_mellon. We used something like: <Location /> MellonEnable info MellonSecureCookie On MellonEndpointPath /mellon MellonUser eduPersonPrincipalName MellonSPMetadataFile /etc/apache2/mellon/sp.example.org.xml MellonSPPrivateKeyFile /etc/apache2/mellon/sp.example.org.key MellonIdPMetadataFile /etc/apache2/mellon/openidp.feide.no.xml </Location> See the mod_mellon documentation for details. (Remember to restart Apache after the configuration changes.) 3. Test mod_mellon. Visit: https://your-site.example.org/mellon/login?ReturnTo=/invalidURL You should be sent to your IdP for authentication. Afterwards you should end up at /invalidURL 4. Install this redmine plugin: ruby script/plugin install git://github.com/UNINETT/redmine_http_auth.git (You may have to restart Apache afterwards.) 5. Configure the plugin: * Link to trigger login: /mellon/login * Parameter with return URL: ReturnTo * Link to trigger logout: /mellon/logout * Parameter with return URL: ReturnTo For just-in-time provisioning, you will need to receive attributes with user information from the IdP. mod_mellon will then add them as environment variables that this plugin can use for provisioning. We use: * Environment variable with first name: "MELLON_givenName" * Environment variable with last name: "MELLON_sn" * Environment variable with email address: "MELLON_mail"
About
HTTP Authentication plugin for redmine
Resources
License
Stars
Watchers
Forks
Packages 0
No packages published
Languages
- Ruby 100.0%