WUI Webapp configuration

Configuration location

You can find the WUI Webapp configuration in the following locations:

  • src/main/resources/configuration.properties: main configuration file
  • src/main/resources/applicationContext_*.xml: how use the configuration parameter for the webapp (authentication, authorization, ...)
  • src/main/resources/log4j.xml: logging capabilities
  • src/main/resources/lqlRules-*.xml: LQL rules for authorizations

Configuration detail

configuration.properties

This file contains main parameters, such as LDAP parameters (server, bind DN, etc.), objectClass mapping and branch mapping. Here is an example:

#==============================================================================
# LDAP parameters
#==============================================================================
# LDAP URL, for example ldap://localhost:389
ldap.url = ldap://localhost:1389

# LDAP base (suffix) ldap.base = dc=interldap,dc=org

# LDAP account (can be the rootdn or not), for example uid=root,dc=base,dc=org ldap.root.dn = cn=manager ldap.root.password = secret

# Proxy account (when using ProxyAuthz LDAP control) #ldap.proxyuser.dn = #ldap.proxyuser.password =

# ObjectClass mapping ldap.interldapdemo.usagers.class = interldapDemoUsager ldap.interldapdemo.externes.class = interldapDemoExterne ldap.interldapdemo.personnels.class = interldapDemoPersonnel ldap.interldapdemo.professionnels.class = interldapDemoProfessionnel ldap.interldapdemo.structures.class = interldapDemoStructure ldap.interldapdemo.sso.class = ssoObject

# Branch mapping ldap.interldapdemo.usagers.ou = ou=usagers,${ldap.base} ldap.interldapdemo.externes.ou = ou=externes,${ldap.base} ldap.interldapdemo.personnels.ou = ou=personnels,${ldap.base} ldap.interldapdemo.professionnels.ou = ou=professionnels,${ldap.base} ldap.interldapdemo.admins.ou = ou=groupes,${ldap.base} ldap.interldapdemo.structures.ou = ou=structures,${ldap.base} ldap.interldapdemo.ppolicies.ou = ou=ppolicy,ou=configuration,${ldap.base}

# DN template # Used to bind users, relative to the base given in ldap url. # For example, if your users are in a branche "ou=people,dc=base,dc=org", # identified by there uid, write: uid={0},ou=people # {0} means "put the login given by the user here" ldap.user.dn.usagers = mail={0},${ldap.interldapdemo.usagers.ou} ldap.user.dn.externes = mail={0},${ldap.interldapdemo.externes.ou} ldap.user.dn.personnels = mail={0},${ldap.interldapdemo.personnels.ou} ldap.user.dn.professionnels = mail={0},${ldap.interldapdemo.professionnels.ou}

#============================================================================== # Enhanced schema #============================================================================== # Persistence directory (modified enhanced schemas go here) eschema.xml.persistence-directory = /tmp/eschemas

#============================================================================== # CSV export #============================================================================== # Encoding of exported CSV file csv.export.encoding = ISO-8859-15

#============================================================================== # Other #============================================================================== # Debug mode display.debug.info = false

# Menu sections, used for authorizations (see LQL files) interldapdemo.components.menu.authz.dn = cn=menu,ou=wui interldapdemo.components.menu.authz.attribute.search = search interldapdemo.components.menu.authz.attribute.editself = editself interldapdemo.components.menu.authz.attribute.manageentries = manageentries interldapdemo.components.menu.authz.attribute.admin = admin interldapdemo.components.menu.authz.attribute.webssoadmin = adminWebsso interldapdemo.components.viewuser.authz.exportcsv.dn = cn=exportcsv,ou=wui

# WebSSO Manager URL interldapdemo.components.menu.websso.url = http://lemonldapng.demo.interldap.org/manager/

# Attributes shown when a search is successfull. # If the RDN is not in the list, the link will not be active. interldapdemo.services.interldapdemospecific.searchattributes.default = mail,sn,cn interldapdemo.services.interldapdemospecific.searchattributes.structures = ou,telephoneNumber,facsimileTelephoneNumber,telexNumber,description

# Authorization cache size and time # The size of the cache is the global number of authorization evaluation cached # in normal run, this number may be *huge* authz.lql.cache.size = 10000