Re: Maintaining State Across Requests / An SSO Extension

On Wed, 21 Dec 2005 03:56:06 -0500 mba2000@ioplex.com (Michael B Allen) wrote: > On Wed, 21 Dec 2005 01:58:41 -0500 > Wez Furlong <kingwez@gmail.com> wrote: > > > Just curious, why aren't you writing this as an apache module? > > > > Is this of any use; it seems a bit dated, but could save you some > > effort: > > > > http://meta.cesnet.cz/cms/opencms/en/docs/software/devel/negotiate.html > > Well for one, mod_auth_gss_krb5 only does authentication. My *real* > product is Windows integration libraries for non-Windows environments > (i.e. LAMP). So, for example, this SSO module is going to include > Windows authorization functionality for integration with AD. Meaning > the developer can restrict content based on group membership of > groups defined in an AD domain: There is already some NTLM modules for apache. A php version will may be available in PEAR. NTLM is what you are trying to achieve, or a part of it. Single Sign On is another problem, and can be done with various auth mechanisms. Are you implementing SSO as well? :) --Pierre