Slave

LL::NG Slave backend relies on HTTP headers to retrieve user login and/or attributes.

• Authentication: will check user login in a header and create session without prompting any credentials (but will register client IP and creation date)
• Users: collect data transfered in HTTP headers by the “master”.

It allows to put LL::NG::portal behind another web SSO, or behind a SSL hardware to delegate SSL authentication to that hardware.

In Manager, go in General Parameters > Authentication modules and choose Slave for authentication or users module.

Then, go in Slave parameters:

• Authentication level: authentication level for this module.
• Header for user login: header that contains the user main login
• Master's IP address: the IP addresses of servers which are accredited to authenticate user. This is a security point, to prevent someone to create a session by sending custom headers. You can set one or several IP addresses, separated by spaces, or let this parameter empty to disable the checking.

You have then to declare HTTP headers exported by the main SSO (in “Variables » Exported Variables”). Example :