Authenticate Cyrus off active directory

Rob Siemborski rjs3 at
Thu Dec 4 12:40:37 EST 2003

On Thu, 4 Dec 2003, Kevin P. Fleming wrote:

> I'd like to be able to do the same sort of thing; any chance these
> changes are distributable (no support, i'm sure they're ugly, etc. etc.)?

They're distributable, but they're mixed in with a number of local patches
so it may be a bit obnoxious to do the pull.  I'll see what I can do as
soon as I get a chance (it winds up being a relatively simple patch, in
the end).

> > The trick is that you need to get the user's kerberos ticket to the web
> > server, which we accomplish via a system known as pubcookie, which has
> > been developed by a few universities.  Its sort of like
> > kerberos-via-cookies, though the kerberos ticket passing bit is somewhat
> > disconnected from the main system.
> This was the stumbling block in my mental exercises to get this working.
> I'd never heard of pubcookie before :-)

No promises about the documentation.


Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper

More information about the Info-cyrus mailing list