Changes between Version 10 and Version 11 of campuswifiandeduroam2023Agenda/pwdc

Timestamp:

Jul 23, 2024, 9:02:07 AM (2 months ago)

Author:

tuwan

Comment:

--

campuswifiandeduroam2023Agenda/pwdc

@@ -57 +57 @@
 {{{apt install self-service-password}}}
 
-[[Image(SP.png, 600px, ||center|| nolink))]]
+[[Image( SP.png, 600px, nolink))]]
 
 ''' Apache configuration'''
@@ -347 +347 @@
 }}}
 
+'''Reset by mail tokens'''
+
+First, the user will enter his login and his mail address. A mail is sent to him.
+
+Then, the user click on the link in the mail, an can set a new password.
+
+//PHP sessions are used to store and retrieve token on server side.//
+
+You can enable or disable this feature with $use_tokens
+
+{{{
+$use_tokens = true;
+}}}
+
+'''Mail configuration'''
+
+You can also avoid to request the mail to the user, only the login will be asked, and the mail will be read in LDAP:
+
+{{{
+$mail_address_use_ldap = true;
+}}}
+
+'''Security'''
+
+You can crypt tokens, to protect the session identifier:
+
+{{{
+$crypt_tokens = true;
+}}}
+
+You should set a token lifetime, so they are deleted if unused. The value is in seconds:
+
+{{{
+$token_lifetime = "3600";
+}}}
+
+'''Log'''
+
+By default, generated URLs are logged in the default Apache error log. This behavior can be changed, to log in a specific file:
+
+{{{
+$reset_request_log = "/var/log/self-service-password";
+}}}
+
+'''Reset URL'''
+
+//Optional//
+
+By default, reset URL is computed using server name and port, but these values can be wrong if the application is behind a reverse proxy. In this case you can set yourself the reset URL:
+
+{{{
+$reset_url = $_SERVER['HTTP_X_FORWARDED_PROTO'] . "://" . $_SERVER['HTTP_X_FORWARDED_HOST'] . $_SERVER['SCRIPT_NAME'];
+}}}