Skip to content

Latest commit

 

History

History
38 lines (26 loc) · 1.45 KB

UPGRADE.md

File metadata and controls

38 lines (26 loc) · 1.45 KB

Upgrade notes for SimpleSAMLphp LDAP-module 2.0

SimpleSAMLphp LDAP-module 2.0 is a major new release which has cleaned up support for a lot of things that have been marked deprecated in previous SimpleSAMLphp releases.

The following changes are relevant for installers and/or developers.

Software requirements

  • The minimum PHP version required is now PHP 7.4.
  • The module now depends on symfony/ldap.

Configuration

Some settings for the authsources and authproc-filters have been renamed to follow the Symfony naming convention:

  • 'hostname' becomes 'connection_string' and can no longer contain simple hostnames or IP-addresses, but must be given one or more ldap(s):// URIs.
  • 'enableTLS' becomes 'encryption' and can be set to 'ssl', 'tls' or 'none', following symfony naming convention.
  • 'search.base' is not always an array of OUs.
  • 'search.scope' can now be set to 'base', 'one' or 'sub'.

The authsources themselves have been renamed:

  • 'ldap:LDAP' becomes 'ldap:Ldap'
  • 'ldap:LDAPMulti' becomes 'ldap:LdapMulti'

Some new settings have been added for the authsources:

  • 'version' can be used to set the LDAP-version to be used. Defaults to v3.
  • 'options' can be set to deal with LDAP connection options like referrals or connection timeouts. See the example config-template. See Symfony documentation for the available options.