Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Shibboleth, anybody doing?

  • Jmantysalo
  • Jmantysalo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
4 years 7 months ago #187350 by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
For others to know: I did not get the plugin to work, so I did another plugin from scratch. It was relatively easy, as I did only PoC code that works in our environment.
The topic has been locked.
  • ollehar
  • ollehar's Avatar
  • Offline
  • LimeSurvey GmbH Employee
  • LimeSurvey GmbH Employee
More
4 years 7 months ago #187353 by ollehar
Replied by ollehar on topic Shibboleth, anybody doing?

Jmantysalo wrote: For others to know: I did not get the plugin to work, so I did another plugin from scratch. It was relatively easy, as I did only PoC code that works in our environment.


1. Which plugin didn't work?

2. Would you be interested in offering your new plugin in LimeStore?
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
4 years 7 months ago #187363 by DenisChenu
Replied by DenisChenu on topic Shibboleth, anybody doing?

Jmantysalo wrote: The right bottom corner said that I have 4.x RC.

Realease Candidate

1. Never use this version in production
2. With exception : not a lot plugin are tested with this version
3. 4.0.0 plugin API are unstable too

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
  • Jmantysalo
  • Jmantysalo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
4 years 7 months ago #187391 by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
The plugin that I was not able to make work was github.com/atlet/LimeSurvey-ShibbolethAuth but maybe I did not try hard enought.

Currently I have no code that would be usable to other. I do have some ideas though. First, see for example groups.uta.fi/login/login_selection.php?lang=en where our Moodle can be accessed by Shibboleth accout or with local account (and there is even third way). Second, basic information should be checked on login, so that changed name or email address would be mirrored to LS too. Third, the plugin should block the user to make changes in his/her information that comes from SB.

We are currently wondering what survey systems to use here, and LS is one possible solution.
The topic has been locked.
More
3 years 10 months ago #198671 by leandrobhbr
The following user(s) said Thank You: DenisChenu
The topic has been locked.
  • Jmantysalo
  • Jmantysalo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
3 years 10 months ago #198674 by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
Plugin I wrote (=modified from SB-auth and LDAP-auth -plugins) for our internal use is 125 lines long, this one is 171 lines.

What I don't get is how the system can be used to login with both SB and by local accounts. My plugin does that neither.
The topic has been locked.
More
3 years 10 months ago #198697 by leandrobhbr
Replied by leandrobhbr on topic Shibboleth, anybody doing?
I had an idea, but I haven't tested it yet.

You can use two URLs

In apache you protect only /admin
<Location /admin>

        AuthType shibboleth

        ShibRequireSession On

        require valid-user

</Location>


In other url. You send get variable

/index.php/admin/authentication/sa/login?sb=no

$GET in code of plugin will control the two forms of login.
The topic has been locked.
  • Jmantysalo
  • Jmantysalo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
3 years 10 months ago #198699 by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
Yes, this is quite what I have been thinking. (But not done, as my boss said we won't have local accounts in this system. Also, accounts for API calls can still be local.)
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
3 years 10 months ago - 3 years 10 months ago #198727 by DenisChenu
Replied by DenisChenu on topic Shibboleth, anybody doing?

Jmantysalo wrote: accounts for API calls can still be local

If you use API : plugin need to register to a specifi event : manual.limesurvey.org/Authentication_plu...t#remoteControlLogin

Currently you have sample with username/password account (LDAP and DB), can be harder with another method ;)


EDIT : about API
Remind to check the current plugin :
github.com/LimeSurvey/LimeSurvey/blob/c6...thLDAP.php#L419-L425

@leandrobhbr : seems you didn't check it ?

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Last edit: 3 years 10 months ago by DenisChenu. Reason: EDIT
The topic has been locked.
More
3 years 10 months ago #198736 by leandrobhbr
Replied by leandrobhbr on topic Shibboleth, anybody doing?
i didn't check...
i will check now. thanks
The topic has been locked.
  • Jmantysalo
  • Jmantysalo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
3 years 10 months ago #198745 by Jmantysalo
Replied by Jmantysalo on topic Shibboleth, anybody doing?
My last message was stupid. Another try:

You can just add to your Apache settings something like

<Location /limesurvey/index.php/admin/remotecontrol>
ShibRequestSetting requireSession 0
AuthType None
Require host my.survey.server

and then you can use API with local accounts.
The topic has been locked.

Lime-years ahead

Online-surveys for every purse and purpose