Authenticate Cyrus off active directory

[Rob Siemborski]

On Thu, 4 Dec 2003, Kevin P. Fleming wrote:

> I'd like to be able to do the same sort of thing; any chance these
> changes are distributable (no support, i'm sure they're ugly, etc. etc.)?

They're distributable, but they're mixed in with a number of local patches
so it may be a bit obnoxious to do the pull.  I'll see what I can do as
soon as I get a chance (it winds up being a relatively simple patch, in
the end).

> > The trick is that you need to get the user's kerberos ticket to the web
> > server, which we accomplish via a system known as pubcookie, which has
> > been developed by a few universities.  Its sort of like
> > kerberos-via-cookies, though the kerberos ticket passing bit is somewhat
> > disconnected from the main system.
>
> This was the stumbling block in my mental exercises to get this working.
> I'd never heard of pubcookie before :-)

http://www.pubcookie.org/

No promises about the documentation.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper