Authenticate Cyrus off active directory
rjs3 at andrew.cmu.edu
Thu Dec 4 12:40:37 EST 2003
On Thu, 4 Dec 2003, Kevin P. Fleming wrote:
> I'd like to be able to do the same sort of thing; any chance these
> changes are distributable (no support, i'm sure they're ugly, etc. etc.)?
They're distributable, but they're mixed in with a number of local patches
so it may be a bit obnoxious to do the pull. I'll see what I can do as
soon as I get a chance (it winds up being a relatively simple patch, in
> > The trick is that you need to get the user's kerberos ticket to the web
> > server, which we accomplish via a system known as pubcookie, which has
> > been developed by a few universities. Its sort of like
> > kerberos-via-cookies, though the kerberos ticket passing bit is somewhat
> > disconnected from the main system.
> This was the stumbling block in my mental exercises to get this working.
> I'd never heard of pubcookie before :-)
No promises about the documentation.
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper
More information about the Info-cyrus