Configuring a third-party authentication server

Configuring the QQ authentication server

To use QQ authentication for portal users, you must go to the Tencent Open Platform (http://connect.qq.com/intro/login) to finish the following tasks:

  1. Register as a developer by using a valid QQ account.

  2. Apply the access to the platform for your website. The website is the webpage to which users are redirected after passing QQ authentication.

You will obtain the APP ID and APP key from the Tencent Open Platform after your application succeeds.

After a portal user passes QQ authentication, the QQ authentication server sends the authorization code of the user to the portal Web server. After the portal Web server receives the authorization code, it sends the authorization code of the user, the APP ID, and the APP key to the QQ authentication server for verification. If the information is verified as correct, the device determines that the user passes QQ authentication.

To configure the QQ authentication server:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Create a QQ authentication server and enter its view.

portal extend-auth-server qq

By default, no QQ authentication server exists.

3. Specify the URL of the QQ authentication server.

auth-url url-string

By default, the URL of QQ authentication server is https://graph.qq.com.

4. Specify the redirection URL for QQ authentication success.

redirect-url url-string

By default, the redirection URL for QQ authentication success is http://lvzhou.h3c.com/portal/qqlogin.html.

The redirection URL must be the same as that specified during website application on the Tencent Open Platform.

5. Specify the APP ID for QQ authentication.

app-id app-id

By default, an APP ID for QQ authentication exists.

6. Specify the APP key for QQ authentication.

app-key app-key

By default, an APP key for QQ authentication exists.

Configuring the email authentication server

If a user chooses email authentication, the user can access the network after passing email authentication.

To configure the email authentication server:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Create an email authentication server and enter its view.

portal extend-auth-server mail

By default, no email authentication server exists.

3. Specify protocols for email authentication.

mail-protocol { imap | pop3 } *

By default, no protocols are specified for email authentication.