Go in the Manager and set the session module to Apache::Session::Browseable::LDAP for each session type you intend to use:
General parameters » Sessions » Session storage » Apache::Session moduleGeneral parameters » Sessions » Persistent sessions » Apache::Session moduleCAS Service » CAS sessions module nameOpenID Connect Service » Sessions » Sessions module nameSAML2 Service » Advanced » SAML sessions module nameThe fill out the corresponding module parameters:
| Required parameters | ||
|---|---|---|
| Name | Comment | Example |
| ldapServer | URI of the server | ldap://localhost |
| ldapConfBase | DN of sessions branch | ou=sessions,dc=example,dc=com |
| ldapBindDN | Connection login | cn=admin,dc=example,dc=com |
| ldapBindPassword | Connection password | secret |
| ldapRaw | Binary attributes | (?i:^jpegPhoto|;binary) |
| Index | Fields to index | refer to List of fields to index by session type |
| Optional parameters | ||
| Name | Comment | Default value |
| ldapObjectClass | Objectclass of the entry | applicationProcess |
| ldapAttributeId | Attribute storing session ID | cn |
| ldapAttributeContent | Attribute storing session content | description |
| ldapAttributeIndex | Attribute storing index | ou |
| ldapVerify | Perform certificate validation | require (use none to disable) |
| ldapCAFile | Path of CA file bundle | (system CA bundle) |
| ldapCAPath | Perform CA directory | (system CA bundle) |
Note
In order to properly handle UTF-8 encoded values, you may need to set the ldapRaw parameter to a non-null value. This requires Apache::Session::Browseable >= 1.3.3