Hybrid authentication

QGIS Lizmap
1

Hello,
I am using Lizmap, specifically the ability to authenticate with a local AD by modifying the profiles.ini.php file. This works very well.

However, I can no longer create users on the fly, and to be honest, I don’t really know why, as I haven’t changed anything else.

Would you know how to combine both types of authentication? That is, authentication via my AD while still being able to create “external” users from the LWC admin console?

Thanks in advance.

2

Any help ?

3

Can you clarify “I can no longer create”. Do you have an error message, did the button disappeared ? Is there a form ?

4

Hello,thanks for your help.
Yes the button to create new users disappeared in the Administration/Users Lizmap web interface.
I have just modified [ldap:lizmapldap] section in profiles.ini.php

5

I didn’t resolve my problem if someone can help me.
Thanks

6

Hi symbhi,

It is possible to get LDAP and DB authentication. LDAP will be used for your local AD and DB authentication for “external” users.

To do so, you need the multiauth module. multiauth-module/INSTALL_INTO_LIZMAP.md at master · jelix/multiauth-module · GitHub

Then in localconfig.ini.php, you have to change the coordplugin_auth section to set driver=multiauth and to add

[multiauth]
providers[]="ldap:multiauth_ldap"
providers[]=dbaccounts

;------- parameters for the multiauth ldap plugin

[multiauth_ldap]
; profile to use for ldap
ldapprofile = "lizmapldap"
1 Like