LemonLDAP::NG

https://www.lemonldap-ng.org/documentation/
Admin
LemonLDAP::NG is a free software web Single Sign-On and Access Management solution providing...
Tokens:399,422
Snippets:5,350
Trust Score:9.7
Update:6 months ago
Show doc for...
Tokens:
Raw
### Install Examples Site

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the web site files for the LemonLDAP::NG examples.

```bash
sudo make install_examples_site
```

--------------------------------

### Enable and Start LLNG FastCGI Service on Debian/Ubuntu

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/configtraefik.rst.txt

Enable the LemonLDAP::NG FastCGI server to start on boot and then start the service using systemctl.

```bash
systemctl enable llng-fastcgi-server
systemctl start llng-fastcgi-server
```

--------------------------------

### Install with Parameters

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install LemonLDAP::NG and pass custom parameters to the `make install` command. For example, to keep configuration files, set `ERASECONFIG=0`.

```bash
sudo make install PARAM=VALUE PARAM=VALUE
```

--------------------------------

### Enable and Start LLNG FastCGI Server

Source: https://www.lemonldap-ng.org/documentation/2.0/configtraefik.html

Enable and start the LemonLDAP::NG FastCGI server service using systemctl. This ensures the service starts on boot and is running.

```bash
systemctl enable llng-fastcgi-server
systemctl start llng-fastcgi-server

```

--------------------------------

### Install Binaries

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the LemonLDAP::NG binary executables to the default location.

```bash
sudo make install_bin
```

--------------------------------

### Pass Parameters to Make Install

Source: https://www.lemonldap-ng.org/documentation/2.0/installtarball.html

Use the PARAM=VALUE syntax to override default installation settings.

```bash
sudo make install PARAM=VALUE PARAM=VALUE ...
```

--------------------------------

### Install Documentation Site

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the web site files for the LemonLDAP::NG documentation.

```bash
sudo make install_doc_site
```

--------------------------------

### Install All Sites

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install all web sites for LemonLDAP::NG, including documentation sites.

```bash
sudo make install_site
```

--------------------------------

### Install LemonLDAP::NG packages

Source: https://www.lemonldap-ng.org/documentation/2.0/installsles.html

Install the metapackage via zypper or install local RPM files directly.

```bash
zypper install lemonldap-ng
```

```bash
59 new packages to install.
Total download size: 13.5 MiB. Already cached : 0 B. After operation, 30.7 MiB of supplementary disk space will be used.
Continue ? [y/n/? print all options] (y):
```

```bash
zypper install lemonldap-ng-* perl-Lemonldap-NG-*
```

--------------------------------

### Install Build Tools

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/contribute.rst.txt

Install necessary system packages for manual development.

```bash
apt install make devscripts equivs yui-compressor git uglifyjs rollup node-rollup-plugin-babel autopkgtest cpanminus
```

--------------------------------

### Install Portal Site

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the web site files for the LemonLDAP::NG portal.

```bash
sudo make install_portal_site
```

--------------------------------

### Install Handler Site

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the web site files for the LemonLDAP::NG handler.

```bash
sudo make install_handler_site
```

--------------------------------

### Enable and Start Apache HTTP Server on CentOS/RHEL

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/quickstart.rst.txt

Enables the httpd service to start on boot and starts the Apache HTTP server on CentOS/RHEL systems.

```bash
systemctl enable httpd
systemctl start httpd
```

--------------------------------

### Advanced CLI Usage Examples

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/configlocation.rst.txt

Examples demonstrating specific flags and complex parameter handling.

```bash
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -cfgNum 10 get exportedHeaders/test1.example.com
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 set notification 1
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -sep ',' get macros,_whatToTrace
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli get portal --user=nginx --group=nginx
```

--------------------------------

### Install Documentation Dependencies

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/contribute.rst.txt

Install the necessary Python packages to build the project documentation.

```bash
apt install python3-sphinx python3-sphinx-bootstrap-theme
```

--------------------------------

### Install LemonLDAP::NG Packages

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installrpm.rst.txt

Commands to install the software using DNF.

```shell
dnf install lemonldap-ng

# If you use SELinux
dnf install lemonldap-ng lemonldap-ng-selinux
```

```shell
dnf localinstall lemonldap-ng-* perl-Lemonldap-NG-*
```

```shell
dnf install lemonldap-ng-* perl-Lemonldap-NG-*
```

--------------------------------

### Install Manager Site

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the web site files for the LemonLDAP::NG manager interface.

```bash
sudo make install_manager_site
```

--------------------------------

### Install Portal Libraries

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install only the Perl libraries required for the LemonLDAP::NG portal.

```bash
sudo make install_portal_libs
```

--------------------------------

### Install Authen::PAM on Debian/Ubuntu

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/authpam.rst.txt

Use apt to install the libauthen-pam-perl library on Debian or Ubuntu systems.

```shell
apt install libauthen-pam-perl
```

--------------------------------

### Configure Overlay Backend in lemonldap-ng.ini

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/overlayconfbackend.rst.txt

Example configuration for the Overlay backend in lemonldap-ng.ini. This setup uses the File overlay type to store secrets in a specified directory.

```ini
[configuration]
type = Overlay
overlayRealtype = File
overlayDirectory = /var/lib/lemonldap-ng/secrets

# File parameters
dirName = /var/lib/lemonldap-ng/conf
```

--------------------------------

### Rule Example: Restrict /js/ and /css/ directories

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/writingrulesand_headers.rst.txt

This rule restricts access to directories starting with /js/ or /css/ to authenticated users. It uses a regular expression to match the URL.

```regex
^/(css|js)/
```

--------------------------------

### MongoDB Shell Commands for Setup

Source: https://www.lemonldap-ng.org/documentation/2.0/mongodbconfbackend.html

These commands demonstrate how to connect to MongoDB, switch to the configuration database, create a collection, and create a user with read-write roles.

```mongo
$ mongo
connecting to: test
> use configuration
switched to db configuration
> db.createCollection("configuration")
...
> db.createUser({user:"lluser",pwd:"llpassword",roles:["readWrite"]})
...
> exit
bye
$

```

--------------------------------

### Start Development Container

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/contribute.rst.txt

Run the development container with volume mounting and port mapping.

```bash
podman run -it -v ./:/app -p 8080:8080 -p 3000:3000 llng-local-dev
```

--------------------------------

### Get User Info from OAuth2 Endpoint

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/webserviceprotection.rst.txt

Use the UserInfo endpoint to retrieve user attributes by providing an Access Token in the Authorization header. This example shows a typical JSON response.

```bash
curl \
  -H "Authorization: Bearer a74d504ec9e784785e70a1da2b95d1d2" \
  https://auth.example.com/oauth2/userinfo | json_pp
```

```json
{
   "family_name" : "OUDOT",
   "name" : "ClÃ©ment OUDOT",
   "email" : "clement@example.com",
   "sub" : "coudot"
}
```

--------------------------------

### Enable Captcha in Login Form Rule

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/captcha.rst.txt

Use this rule to enable Captcha in the login form for specific networks, starting from version 2.20.0. Ensure the GD::SecurityImage Perl module is installed.

```perl
inSubnet('10.0.0.0/8', '192.168.0.0/16') or isInNet6($ipAddr, 'fe80::/10')
```

--------------------------------

### Plack Application with Auth::FCGI Middleware

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/ssoaas.rst.txt

Integrate LemonLDAP::NG authentication into a Plack application using the `Plack::Middleware::Auth::FCGI` module. This example shows basic setup and optional rejection handling.

```perl
use Plack::Builder;

my $app   = sub {
  my $env = shift;
  my $user = $env->{fcgiauth-auth-user};
  return [ 200, [ 'Content-Type' => 'text/plain' ], [ "Hello $user" ] ];
};

# Optionally ($fcgiResponse is the PSGI response of remote FCGI auth server)
#sub on_reject {
#    my($self, $env, $fcgiResponse) = @__;
#    my $statusCode = $fcgiResponse->{status};
#    ...
#}

builder
{
  enable "Auth::FCGI",
    host => '127.0.0.1',
    port => '9090',
    fcgi_auth_params => {
      RULES_URL => 'https://my-server/rules.json',
      HTTPS_REDIRECT => 'ON',
      PORT_REDIRECT  => 443
    },
    # Optional rejection subroutine
    #on_reject => \&on_reject;
    ;
  $app;
};
```

--------------------------------

### Set Up File Backend Directory

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/notifications.rst.txt

Commands to create the storage directory and set appropriate permissions for the web server user.

```bash
mkdir /usr/local/lemonldap-ng/notifications/
chown www-data /usr/local/lemonldap-ng/notifications/
```

--------------------------------

### Office 365 SAML Endpoints with Domain Parameter

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/applications/office365.rst.txt

When using a single SAML Identity Provider for multiple Office 365 domains, append the 'domain' GET parameter to your SAML SSO and metadata URLs. This example shows the format for 'mycompany.com' and 'myfirm.com'.

```text
- domain 'mycompany.com':

   -  url: https://auth.example.com/saml/singleSignOn?domain=mycompany
   -  uri: https://auth.example.com/saml/metadata?domain=mycompany

-  domain 'myfirm.com':

   -  url: https://auth.example.com/saml/singleSignOn?domain=myfirm
   -  uri: https://auth.example.com/saml/metadata?domain=myfirm
```

--------------------------------

### Build and Preview Documentation

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/contribute.rst.txt

Compile the documentation and open the result in a web browser.

```bash
make documentation
firefox doc/pages/documentation/current/start.html
```

--------------------------------

### Apache Configuration with LemonLDAP::NG FastCGI Client

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/ssoaas.rst.txt

Configure Apache to use the LemonLDAP::NG FastCGI client for authentication and authorization. Ensure `Lemonldap::NG::SSOaaS::Apache::Client`, `FCGI::Client`, and `Mod_Perl2` are installed. This setup directs authorization requests to a central FastCGI server.

```apache
<VirtualHost port>
    ServerName myapp.domain.com
    DocumentRoot "/var/www/myapp"
    ErrorLog /var/log/apache2/localsite_error.log
    CustomLog /var/log/apache2/localsite_access.log combine

    <Location /rules.json>
      Order deny,allow
      Deny from all
      Allow from 10.1.2.3
    </Location>
    
    <LocationMatch "^(?!rules.json)">
      PerlHeaderParserHandler Lemonldap::NG::SSOaaS::Apache::Client

      # Handler directive to declare this VHost as DevOps and
      # Pass authorization requests to Central FastCGI server
      PerlSetVar VHOSTTYPE DevOps
      # or to declare DevOpsST handler
      # PerlSetVar VHOSTTYPE DevOpsST
      PerlSetVar LLNG_SERVER 10.1.2.3:9090

      # Keep original hostname
      PerlSetVar HOST HTTP_HOST

      # Set redirection parameters
      PerlSetVar HTTPS_REDIRECT HTTPS
      PerlSetVar PORT_REDIRECT SERVER_PORT

      # This URL will be fetched by the Central FastCGI server every 10mn and
      # then used for compliling access rules and headers relative to this VirtualHost
      # CHECK THAT IT CAN BE REACHED BY THE CENTRAL FASTCGI SERVER
      PerlSetVar RULES_URL http://myapp.domain.com/rules.json
      # or to use an external rules server
      # PerlSetVar RULES_URL http://rulesserver/my.json;
    </LocationMatch>
</VirtualHost>
```

--------------------------------

### Start llng-server.psgi with uWSGI

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/psgi.rst.txt

This command demonstrates how to start the `llng-server.psgi` using uWSGI with the PSGI plugin. It configures the socket, user, group, and the path to the PSGI file.

```shell
/usr/bin/uwsgi --plugins psgi --socket :5000 --uid www-data --gid www-data --psgi /usr/share/lemonldap-ng/llng-server/llng-server.psgi
```

--------------------------------

### Install EPEL Release

Source: https://www.lemonldap-ng.org/documentation/2.0/installrpm.html

Installs the Extra Packages for Enterprise Linux (EPEL) repository, which is a prerequisite for installing LemonLDAP::NG on most community distributions.

```bash
dnf install epel-release

```

--------------------------------

### Install apt-transport-https and other prerequisites

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installdeb.rst.txt

Ensure your system can install packages from HTTPS repositories. This command installs necessary packages for secure repository access.

```shell
apt install apt-transport-https curl gnupg
```

--------------------------------

### Start Test Web Server

Source: https://www.lemonldap-ng.org/documentation/2.0/contribute.html

Starts a test web server for LemonLDAP::NG. Options include enabling SSL or using Nginx as the web server.

```bash
make start_web_server # TESTUSESSL=1 to enable SSL engine (only available for Apache)
make start_web_server TESTWEBSERVER=nginx # to use Nginx web server
```

--------------------------------

### Install Build Dependencies

Source: https://www.lemonldap-ng.org/documentation/2.0/contribute.html

Installs build dependencies for LemonLDAP::NG using `mk-build-deps` and `cpanm`. Also installs Apache and necessary Perl modules.

```bash
# Install build dependancies
mk-build-deps debian/control
sudo apt install ./lemonldap-ng-build-deps*deb
apt install apache2 libapache2-mod-fcgid libapache2-mod-perl2  # install Apache
cpanm Perl::Tidy@$(make tidyversion)
```

--------------------------------

### Install LemonLDAP::NG packages with dpkg

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installdeb.rst.txt

Installs LemonLDAP::NG packages using dpkg after manually downloading them. Ensure all dependencies are installed beforehand.

```shell
dpkg -i liblemonldap-ng-* lemonldap-ng*
```

--------------------------------

### Full Installation

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Perform a full installation of LemonLDAP::NG after checking prerequisites. The `PROD=yes` option minifies JS and CSS files for production use.

```bash
cd lemonldap-ng-*
make configure
make
make test
sudo make install PROD=yes
```

--------------------------------

### Install and Enable uWSGI Application

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/psgi.rst.txt

Install necessary uWSGI packages, enable the LemonLDAP-NG uWSGI application by creating a symbolic link, and restart the uWSGI service.

```shell
apt install uwsgi uwsgi-plugin-psgi
cd /etc/uwsgi/apps-enabled
ln -s ../apps-available/llng-server.yaml
service uwsgi restart
```

--------------------------------

### Install Apache2 prerequisites for LemonLDAP::NG

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installdeb.rst.txt

If you intend to use Apache2 with LemonLDAP::NG, install Apache2 and the necessary Perl modules first. This command installs Apache2, mod_perl2, and mod_fcgid.

```shell
apt install apache2 libapache2-mod-perl2 libapache2-mod-fcgid
```

--------------------------------

### Install Perl Libraries

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install all necessary Perl libraries for LemonLDAP::NG.

```bash
sudo make install_libs
```

--------------------------------

### Install FastCGI server on Debian/Ubuntu

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/confignginx.rst.txt

Use the apt package manager to install the LemonLDAP::NG FastCGI server.

```bash
apt install lemonldap-ng-fastcgi-server
```

--------------------------------

### Install Dependencies

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/contribute.rst.txt

Install project build dependencies and required Perl modules.

```bash
# Install build dependancies
mk-build-deps debian/control
sudo apt install ./lemonldap-ng-build-deps*deb
apt install apache2 libapache2-mod-fcgid libapache2-mod-perl2  # install Apache
cpanm Perl::Tidy@$(make tidyversion)
```

```bash
apt install liblasso-perl libglib-perl
```

--------------------------------

### Install LLNG FastCGI Server on Debian/Ubuntu

Source: https://www.lemonldap-ng.org/documentation/2.0/configtraefik.html

Install the LemonLDAP::NG FastCGI server package on Debian or Ubuntu systems using apt.

```bash
apt install lemonldap-ng-fastcgi-server

```

--------------------------------

### Install simpleSAMLphp on Debian

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/applications/simplesamlphp.rst.txt

Command to install the simpleSAMLphp package on Debian-based systems.

```bash
apt install simplesamlphp
```

--------------------------------

### REST Configuration Backend Setup

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/restconfbackend.rst.txt

Instructions for configuring the REST configuration backend.

```APIDOC
### Main Server Configuration

1. Configure a backend (File, SQL, or LDAP) on your main server.
2. Enable the REST server in the configuration using the manager (in portal plugins).
3. Configure your web server (Apache or Nginx) to allow remote access.

**Apache Configuration Example (`portal-apache2.conf`):**
```apache
# REST functions for configuration access (disabled by default)
<Location /index.fcgi/config>
    Require ip 192.168.2.0/24
</Location>
```

**Nginx Configuration Example (`portal-nginx.conf`):**
```nginx
# REST functions for configuration access (disabled by default)
location /index.psgi/config {
  allow 192.168.2.0/24;
}
```

### Remote Server Configuration

Modify the `lemonldap-ng.ini` file on remote servers:

**Example for Apache:**
```ini
type         = REST
baseUrl      = https://auth.example.com/index.fcgi/config
```

**Example for Nginx:**
```ini
type         = REST
baseUrl      = https://auth.example.com/index.psgi/config
```

**Optional Parameters:**

```ini
user         = lemonldap
password     = mypassword
realm        = myrealm
# LWP::UserAgent parameters
lwpOpts      = { timeout => 5 }
lwpSslOpts   = { SSL_ca_file => "..." }
```

- `user`, `password`, and `realm` are used for basic authentication if the endpoint is protected. `realm` must match the web server's authentication setting.
```

--------------------------------

### Start llng-fastcgi-server with FCGI::Engine::ProcManager

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/psgi.rst.txt

This command starts the `llng-fastcgi-server` using the `FCGI::Engine::ProcManager` engine. It configures the user, group, socket, and number of processes.

```shell
llng-fastcgi-server -u nobody -g nobody -s /run/llng.sock -n 10 \
                       -e FCGI::Engine::ProcManager
```

--------------------------------

### Install Auth_remoteuser extension

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/applications/mediawiki.rst.txt

Command to install the extension into the MediaWiki extensions directory.

```bash
cp -a Auth_remoteuser/ extensions/
```

--------------------------------

### Run llng-fastcgi-server with FCGI::Engine::ProcManager

Source: https://www.lemonldap-ng.org/documentation/2.0/psgi.html

This command starts the `llng-fastcgi-server` using the `FCGI::Engine::ProcManager` engine. It configures the user, group, socket path, and the number of processes.

```bash
llng-fastcgi-server -u nobody -g nobody -s /run/llng.sock -n 10 \
                    -e FCGI::Engine::ProcManager

```

--------------------------------

### SAML Conditions Example

Source: https://www.lemonldap-ng.org/documentation/2.0/idpsaml

Example of a Conditions element within a SAML response.

```xml
<saml:Conditions NotBefore="2014-07-21T11:46:08Z"
  NotOnOrAfter="2014-07-21T12:48:08Z">
```

--------------------------------

### Enable EPEL and CodeReady Builder

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installrpm.rst.txt

Commands to prepare the system by enabling necessary repositories.

```shell
dnf install epel-release
```

```shell
crb enable
```

--------------------------------

### Install Apache2 with Mod Perl and FCGI

Source: https://www.lemonldap-ng.org/documentation/2.0/installdeb.html

Installs Apache2 web server along with mod_perl and mod_fcgid, which are required if you plan to use Apache2 with LemonLDAP::NG. This should be done before installing LemonLDAP::NG itself.

```bash
apt install apache2 libapache2-mod-perl2 libapache2-mod-fcgid

```

--------------------------------

### Install DBD::Patroni

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/sqlconfbackend.rst.txt

Command to install the required Perl database driver for Patroni.

```shell
cpan DBD::Patroni
```

--------------------------------

### Patroni Support Configuration Example

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/pgjsonsessionbackend.rst.txt

Example configuration for using the Patroni PostgreSQL cluster with the PgJSON session backend. The 'PatroniUrl' parameter lists the available Patroni cluster APIs.

```text
DataSource: dbi:Pg:database=lemonldap-ng
UserName: lemonldapng
Password: mysuperpassword
TableName: sessions
Commit: 1
PatroniUrl: http://172.16.1.2:8008/cluster http://172.16.1.3:8008/cluster
```

--------------------------------

### OpenID Server Activation Rule Example

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/idpopenid.rst.txt

This example shows a 'Use rule' configuration for the OpenID module. It demonstrates how to allow users with a strong authentication level (greater than 2) to use the OpenID module.

```regex
$authenticationLevel > 2
```

--------------------------------

### Enable LemonLDAP::NG sites on Debian/Ubuntu

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/confignginx.rst.txt

Enable the portal, manager, and handler sites by linking their configuration files to the sites-enabled directory.

```bash
ln -s /etc/nginx/sites-available/portal-nginx.conf /etc/nginx/sites-enabled/
ln -s /etc/nginx/sites-available/manager-nginx.conf /etc/nginx/sites-enabled/
ln -s /etc/nginx/sites-available/handler-nginx.conf /etc/nginx/sites-enabled/
```

--------------------------------

### Importing Configuration

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/docker.rst.txt

Steps to restore a configuration file into the container.

```bash
docker cp lmConf-X.json lemonldap-ng:/var/lib/lemonldap-ng/lmConfig.json
docker exec -it lemonldap-ng bash
/usr/share/lemonldap-ng/bin/lemonldap-ng-cli restore - < /var/lib/lemonldap-ng/lmConfig.json
rm /var/lib/lemonldap-ng/lmConfig.json
```

--------------------------------

### Install FastCGI Server

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install the FastCGI server component, which is required for Nginx integration.

```bash
sudo make install_fastcgi_server
```

--------------------------------

### Create MySQL Database

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/sqlconfbackend.rst.txt

SQL command to initialize the database for LemonLDAP::NG.

```sql
CREATE DATABASE lemonldap-ng CHARACTER SET utf8;
```

--------------------------------

### Install Handler Libraries

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/installtarball.rst.txt

Install only the Perl libraries required for the LemonLDAP::NG handler.

```bash
sudo make install_handler_libs
```

--------------------------------

### Sample log4perl.conf file

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/logs.rst.txt

Example configuration for Log4perl appenders and loggers.

```text
log4perl.logger.LLNG = DEBUG, Syslog
log4perl.logger.LLNGuser = INFO, Syslog
log4perl.appender.Syslog = Log::Dispatch::Syslog
log4perl.appender.Syslog.ident = LLNG
log4perl.appender.Syslog.layout = PatternLayout
log4perl.appender.Syslog.layout.ConversionPattern = [%p] %m
```

--------------------------------

### Configure File Configuration Backend

Source: https://www.lemonldap-ng.org/documentation/2.0/_sources/configlocation.rst.txt

Example of configuring the 'File' type for the configuration backend in the local configuration file.

```ini
[configuration]
type=File
dirName = /usr/local/lemonldap-ng/data/conf
```
Tokens:
Raw