用户认证选项

curl https://my.itop.com/.../api.php -F param1=xyz... --basic -u $NAME:$PASSWORD

curl https://my.itop.com/.../api.php -F param1=xyz... -F auth_user=$USER -F auth_pwd=$PASSWORD

curl https://my.itop.com/.../api.php -G -F param1=xyz... -F auth_user=$USER -F auth_pwd=$PASSWORD

allowed_login_types => 'form|basic|external',

'allowed_login_types' => 'form|basic',

wget --http-user=<login> --http-password=<password> -O test.csv --auth-no-challenge "http://127.0.0.1/webservices/export.php?expression=SELECT%20Contact&format=csv"

wget --no-check-certificate --http-user=admin --http-password=admin2 -O test.csv "https://127.0.0.1/webservices/export.php?expression=SELECT%20Contact&format=csv&login_mode=basic"

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
</IfModule>

'ext_auth_variable' => '$_SERVER[\'REMOTE_USER\']',

'ext_auth_variable' => '$_COOKIE[\'auth_user\']',

'ext_auth_variable' => 'getallheaders()[\'SSL_DN_CERTIFICATE\']',

'allowed_login_types' => 'external|form|basic',

$MySettings = array(
        ...
        'allowed_login_types' => 'external|form|basic',
        ...
);

<Directory /var/www/>
        AuthUserFile /var/www/.htpasswd
        AuthName "Please identify yourself..."
        AuthType Basic
        require valid-user
</Directory>

<?php
//
// Script to test External Authentication
//
require_once('../approot.inc.php');
require_once(APPROOT.'core/config.class.inc.php');
require_once(APPROOT.'application/utils.inc.php');
require_once(APPROOT.'application/startup.inc.php');

echo "<h1>External Authentication: Integration Test Script</h1>";
try
{
        $aAllowedLoginTypes = utils::GetConfig()->GetAllowedLoginTypes();
        $sAllowedLoginTypes = implode('|', $aAllowedLoginTypes);
        echo "<p>allowed_login_types set to '$sAllowedLoginTypes'</p>\n";

        if (!in_array('external', $aAllowedLoginTypes))
        {
                    echo "<p>Check your iTop configuration file, ".
                           "<b>allowed_login_type</b> does not enable ".
                           "'external' authentication.</p>";
        }
        else
        {
                   echo "<p>Ok, external authentication is enabled by allowed_login_type.</p>";
                $sExternalAuthVariable = utils::GetConfig()->GetExternalAuthenticationVariable();
                echo "<p>External Authentication Variable: '$sExternalAuthVariable'</p>\n";
                if ($sExternalAuthVariable != '')
                {

                        $sEval = '$bVarIsSet = isset('.$sExternalAuthVariable.');';
                        eval($sEval);
                        if ($bVarIsSet)
                        {
                                $sEval = '$sAuthUser = '.$sExternalAuthVariable.';';
                                eval($sEval);
                                echo "<p>External Authentication Variable set to: ".
                                         "'$sAuthUser'</p>\n";
                                if ($sAuthUser != '')
                                {
                                        echo "<p><b>Ok, integration with external authentication ".
                                                 "successful !</b></p>\n";
                                }
                                else
                                {
                                        echo "<p>Empty user information passed by the web ".
                                                 "server.</p>\n";
                                }
                        }
                        else
                        {
                                echo "<p>External Authentication Variable <b>NOT</b> set.</p>\n";
                        }
                }
                else
                {
                        echo "<p>Check your iTop configuration file, <b>ext_auth_var</b> is set ".
                                 "to an empty string.</p>\n";
                }
        }
}
catch(ConfigException $e)
{
        echo "<p>iTop configuration file not found. Did you already install iTop ?</p>\n";
}
echo "<hr/>\n";
echo "<p>For information:</p>";
echo "<pre>\$_SERVER variable:\n";
print_r($_SERVER);
echo "\$_COOKIE variable:";
print_r($_COOKIE);
echo "\getallheaders() array of headers:";
print_r(getallheaders());
echo "</pre>\n";
?>

      'authent-ldap' => array (
               'host' => 'localhost',
                'port' => 389,
                'default_user' => '',
                'default_pwd' => '',
                'base_dn' => 'dc=mycompany,dc=com',
                'user_query' => '(&(uid=%1$s))',
                'options' => array (
                        17 => 3,
                        8 => 0,
                ),
                'debug' => false,
                'servers' => array(
                    'MySecond-LDAP-Server' => array(
                        'host' => 'server1',
                        'port' => 389,
                        'default_user' => '',
                        'default_pwd' => '',
                        'base_dn' => 'dc=mycompany,dc=com',
                        'user_query' => '(&(uid=%1$s))',
                        'options' => array (
                                17 => 3,
                                8 => 0,
                        ),
                        'debug' => false,
                     ),
                ),
        ),

  'authent-ldap' => array (
               'host' => 'ldaps://ldap.demo.com:6636',
               'port' => null,
               ...
        );

//'cas' first, means login will be automatically redirected to CAS
allowed_login_types => 'cas|form|basic|external',

      'authent-cas' => array (
                'cas_debug' => false,
                'cas_host' => '',
                'cas_port' => '',
                'cas_context' => '',
                'cas_version' => '',
                'service_base_url' => '',
        ),

      'authent-cas' => array (
                'cas_context' => '/cas',
                'cas_debug' => true,
                'cas_host' => 'cas-server.combodo.net',
                'cas_memberof' => 'Configuration Manager',
                'cas_memberof_attribute_name' => 'businessCategory',
                'cas_port' => 8443,
                'cas_version' => 'S1',
                'cas_user_synchro' => true,
                'service_base_url' => 'https://my.itop.server.net',
        ),