WebID
Authentication | Users | Password |
---|---|---|
✔ | ✔ |
Presentation
WebID is a way to uniquely identify a person, company, organisation, or other agent using a URI and a certificate.
You need Web::ID package.
Configuration
In Manager, go in General Parameters
> Authentication modules
and choose WebID for authentication module. You can also use WebID as user database.
Then, go in WebID parameters
:
- Authentication level: authentication level for this module.
- WebID whitelist: list of space separated hosts granted to host FOAF document. You can use '*' character. Example :
*.partner.com
If you use WebID as user database, declare values in exported variables :
- use any key name you want. If you want to refuse access when a data is missing, just add a “!” before the key name
- in the value field, set the field name. Take a look at http://xmlns.com/foaf/spec/#sec-crossref. Example :
name => foaf:name
See also exported variables configuration.
Apache configuration
Portal host must be configured to use SSL and must ask for client certificate. It is recommended to use optional_no_ca since WebID doesn't use certificate authorities :
<VirtualHost _default_:443> ServerName auth.example.com SSLEngine on SSLCertificateFile ... SSLCertificateKeyFile ... SSLVerifyClient optional_no_ca ... </VirtualHost>
Tests
To test this, you can build your own WebID certificate using one of :