Forum OpenACS Q&A: Single Sign-on with Windows

Collapse
1: Single Sign-on with Windows
Posted by Anindya Adhikari on 10/25/04 01:06 PM
Hi,
  I have installed OpenACS 5.1.1 on Linux machine. But I need to access this machine from another Windows machine with single sign-on (as soon as I log on to Windows machine, I should automatically log-on to Linux machine without any further username and password) feature. I installed Postgresql on Linux machine.
How can I do that?

Thanks in advance.

Thanks & Regards,
Anindya

Collapse
2: Re: Single Sign-on with Windows (response to 1)
Posted by Rocael Hernández Rizzardini on 10/25/04 03:00 PM
I think this is not related to oacs, more to OS authentication features....
Collapse
3: Re: Single Sign-on with Windows (response to 1)
Posted by Randy O'Meara on 10/26/04 04:12 AM
It is related. The question is: how to automatically provide logged-on user credentials from Windows to OACS. While the webserver OS will most likely be involved, it's still a valid question. Samba might also be involved? Does acs-authentication have hooks to somehow facilitate this?

Has anyone worked through this process?

Collapse
4: Re: Single Sign-on with Windows (response to 1)
Posted by Don Baccus on 10/27/04 01:00 AM
He's trying to log into Linux, not OACS, therefore it is, as Roc states, an OS auth issue.
Collapse
5: Re: Single Sign-on with Windows (response to 1)
Posted by Anindya Adhikari on 10/27/04 06:01 AM
Hi,
  Let me clarify the problem once again.

I had installed OACS5.1.1 on a Linux machine for our corporate portal site. I want to log-on to the same Linux machine from my desktop (windows) without using username and password. Our target is, as soon as we logon to our windows desktop (with username and password) we should be able to logon to OACS5.1.1 also after giving only the URL. It will reduce the twice authentication.

Thanks for your help.

Regards,
Anindya

Collapse
6: Re: Single Sign-on with Windows (response to 5)
Posted by Bruno Mattarollo on 10/27/04 07:55 AM

What sort of authentication are you using on your windoze environment? Have a look at external-authentication, it might be the base of the solution you are looking for but AFAIK there isn't a single-signon (ala M$ passport) implemented yet. You could have a look at CAS from Yale?

Good luck and if you implement this solution on OpenACS, keep us updated!