[30102] in Kerberos
Re: SSO
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Thu Jul 17 10:40:52 2008
Message-ID: <487F59A3.90002@anl.gov>
Date: Thu, 17 Jul 2008 09:39:31 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Sharad Desai <ssdesai1@gmail.com>
In-Reply-To: <5183a7480807170653q196244d9gd6a27e186849f520@mail.gmail.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Sharad Desai wrote:
> Hi All,
>
> I was actually interested in implementing a web SSO solution for my
> environment. I have five applications -- all web applications, so a web SSO
> is needed -- and three run off of Windows, while the other two are Unix and
> Linux. Since they are web apps, it won't matter from where they are run
> from.
>
> I wanted to use Kerberos to authenticate the user. After research, I
> thought this would make sense. I saw some suggestions using CoSign or
> WebAuth. I can't use WebAuth because it is only for Linux, and CoSign is
> written for Apache (but there are ISAPI filters i guess for IIS) and I am
> running off of Microsoft IIS.
>
> Hopefully this is on the right track. I know that using Kerberos for web
> SSO is definitely quite difficult, but I would like for it to be
> implemented. If any of you have suggestions or any advice, I would
> appreciate it.
You may want to search for SPNEGO and mod_auth_kerb. Windows IE and IIS
have SPNEGO built in, and can use the Kerberos in Active Directory.
Apache can use mod_auth_kerb that supports SPNEGO. With FireFox 2 on any platform
see the about:config and the network.negotiate-auth.trusted-uris option.
>
> Thanks in advance.
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
