README 1.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748
  1. The CAS Authentication plugin allows for StatusNet to handle authentication
  2. through CAS (Central Authentication Service).
  3. Installation
  4. ============
  5. add "addPlugin('casAuthentication',
  6. array('setting'=>'value', 'setting2'=>'value2', ...);"
  7. to the bottom of your config.php
  8. Settings
  9. ========
  10. provider_name*: a unique name for this authentication provider.
  11. authoritative (false): Set to true if CAS's responses are authoritative
  12. (if authorative and CAS fails, no other password checking will be done).
  13. autoregistration (false): Set to true if users should be automatically created
  14. when they attempt to login.
  15. email_changeable (true): Are users allowed to change their email address?
  16. (true or false)
  17. password_changeable*: must be set to false. This plugin does not support changing passwords.
  18. server*: CAS server to authentication against
  19. port (443): Port the CAS server listens on. Almost always 443
  20. path (): Path on the server to CAS. Usually blank.
  21. takeOverLogin (false): Take over the main login action. If takeOverLogin is
  22. set, anytime the standard username/password login form would be shown,
  23. a CAS login will be done instead.
  24. user_whitelist (null): Only allow login via CAS for users listed in this
  25. array. This is useful when both CAS and password authentication is enabled
  26. and there is a mismatch between some GNU social account names and CAS user
  27. names. This prevents CAS users from logging in as someone else on GNU
  28. social. When set to null, no CAS logins are filtered by this feature.
  29. * required
  30. default values are in (parenthesis)
  31. Example
  32. =======
  33. addPlugin('casAuthentication', array(
  34. 'provider_name'=>'Example',
  35. 'authoritative'=>true,
  36. 'autoregistration'=>true,
  37. 'server'=>'sso-cas.univ-rennes1.fr',
  38. 'port'=>443,
  39. 'path'=>'',
  40. 'takeOverLogin'=>true
  41. ));