Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.
0
votes
0answers
24 views
How to install and configure Windows Server 2008 Active Directory + LDAP + SAML 2.0 for providing SSO?
I want to run a Windows Active Directory Server and provide LDAP, SAML 2.0 protocol to our trusted applications inside our company to implement SSO.
After googling for a few days I found that ...
-2
votes
0answers
26 views
Linux mail server allowing users access by windows clients without entering password [closed]
I have long been trying to solve a problem but I could not.
I want to install a linux mail server allowing users access by by windows clients without entering password.
I tried with a combination of ...
0
votes
0answers
11 views
Kerberos gss_acquire_cred() failed: An invalid name was supplied error
I'm trying to set up a single sign on system using LDAP, Kerberos and Drupal on a Ubuntu server. I have done some configuring for them all 3 and the last peace of problem remains this error in Apache ...
0
votes
0answers
42 views
Samba 4 and SSH without password
I've a question to Samba 4 and Kerberos. I've had a functional SSH with SSO. But now when I've installed Samba 4 it doesn't work and it seems, that nobody has found any solution yet. I just read, that ...
0
votes
0answers
35 views
How to configure Alfresco for ActiveDirectory SSO?
I have set up Alfresco 4.2 on Windows Server 2012.
There is also an ActiveDirectory server used for Windows login.
How to configure Alfresco so that logged-in users do not need to log in in Alfresco ...
0
votes
0answers
20 views
Single sign on for RDP connections in Sophos UTM
I've got Sophos UTM Home Edition and I'm fooling around with some of the advanced settings that the home edition has available. Something of interest at work is the clientless HTML5 VPN connection, ...
0
votes
0answers
37 views
Federated Web SSO on a Cloud-based infrastructure
We have a couple of internal asp.net web applications. Intranet users authenticate using AD, and are authorized in the internal apps using the web.config ( sections), by their AD groups or specific ...
0
votes
0answers
38 views
WIF with ADFS 2.0 server not logging out user
Using WIF with ADFS 2.0 server. Browser login persists even when Force Logout URL called and/or browser closed
Logout URL:
ADFS-SERVER-NAME/adfs/ls/?wa=wsignout1.0
Detailed explanation:
So, when I ...
0
votes
0answers
77 views
Using SAML authentication within nginx
I want to restrict access to some static content, served using nginx, using an existing SAML 2.0 IdP. (In Apache, this would be done with a module such as mod_mellon or mod_auth_saml)
What is the ...
0
votes
1answer
85 views
Kerberos authentication for Git server?
I have a Git server, and I want to make it usable by all Kerberos-logged users.
eg: if a user has a valid Kerberos ticket, she can start pushing to Git without having to provide any ...
0
votes
1answer
90 views
Is WebSphere server mandatory to enable sso in Domino domain?
I want to configure sso between domino servers . all the server are in the same domains.
i have created the "web sso configuration document" and made the necessary chnages in server document. after ...
0
votes
1answer
119 views
Apache proxy for CAS SSO - configuration example
I need to use an Apache (or other) proxy to enable SSO on a platform which does not natively support CAS (namely splunk)
It looks like everyone on Internet has "successfully configured their Apache ...
0
votes
1answer
47 views
unifying active directory usernames / logins by creating a trust relationship?
I have a conceptual question:
I manage user accounts for local network access using Active Directory (let's call this network A). We use an external service provider for email accounts, who's also ...
0
votes
0answers
84 views
ksu: Unsupported key table format version number while verifying ticket for server
I'm trying to use ksu on a machine (client.domain.local), where I'm ve been authentized by Kerberos running on another machine, but I got an error:
Server not found in Kerberos database while getting ...
0
votes
1answer
45 views
How to make SSO work on remote machine
I'm fighting with SSO and SSH on Debian Wheezy. Locally it works fine. I'm getting ticket successfully at login. But when I've logged in to the remote machine by SSH without password, klist on the ...
1
vote
1answer
299 views
SSO with Apache and Kerberos issues
I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately.
I have followed this guide to the letter but I ...
1
vote
1answer
822 views
vCenter 5.1 SSO Configuration option not available in Web Client?
Problem
I just finished separately installing vCenter Server 5.1. I installed the components separately but on the same machine using a local SQL 2008 R2 DB (not SQL express).
Everything appears to ...
1
vote
0answers
143 views
Active Directory reversible encryption for single sign-on?
Problem: Creating and maintaining hundreds of student accounts
The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
1
vote
1answer
288 views
Office 365 SSO external DNS redirect
I have ADFS and office 365 completely set up and configured for SSO, using an ADFS server and ADFS proxy.
For internal users, I have IIS configured on the adfs server to redirect companynamemail.com ...
4
votes
1answer
196 views
Intranet corporate SSO for webapps against Active Directory
I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS:
Corporate portal (Drupal backend)
Project management ...
0
votes
1answer
65 views
How can I connect these 3 environments with SSO?
In my org today, we use the following:
W2K8 R2 - Active Directory
Google Apps for Enterprise
Salesforce Enterprise version
Each of these has it's abilities for SSO connectivity. I would like to ...
1
vote
1answer
850 views
Windows 2008 R2 RDS - Double Login
Issue:
Double logins when connecting to RemoteApps or Remote Desktop
Environment:
Gateway = 1 server 2008 R2 - Roles = Gateway, Session Broker, Connection Mgr, Session Host Configuration server
...
1
vote
0answers
432 views
Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.
We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
0
votes
0answers
76 views
Integration of Jboss Portal 2.6.8 with cas server 3.5.0 in different hosts
I'm a newby in jboss. I have deployed CAS server in tomcat in the host1 and configurate it with ldap. It works fine. I have a jboss-portal configurated with the same ldap too in the host2. Now I need ...
1
vote
1answer
714 views
What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider
I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this.
What is the URL for the SAML Assertion Consumer that I need to give to the IdP?
I think it may be ...
0
votes
2answers
707 views
Enable Single-Sign-On (SSO) on the TS Web server to lunch RemoteApps
Just wondering if someone could help me out on how to enable SSO when lunching RemoteApps.
I followed some instructions on the net but it does not seem to work.
What I did was the following:
I ...
1
vote
1answer
217 views
How to login to VisualSVN Server (with Single Sign-On enabled) under other user than the currently logged one to Windows machine?
If you have Integrated Windows Authentication as the only authentication type enabled in VisualSVN Server you don't get any login / password prompts.
You may find yourself stuck and confused if ...
0
votes
1answer
447 views
Credentials can not be delegated - Alfresco Share
I've hit a brick wall configuring Alfresco 4.0.d on Redhat 6.
I'm using Kerberos authentication, it seems to be working normally, and single sign on is working on the main alfresco app itself. I've ...
1
vote
1answer
202 views
“Attach to native process failed” with Apache 2.0 Agent 2.202 for RHEL5 Linux 64bit
In trying to install Apache 2.0 Agent 2.202 for RHEL5 Linux 64bit, the dialogue appears as follows.
# export JAVAHOME=/usr/java/jdk1.6.0_24/; echo $JAVAHOME
/usr/java/jdk1.6.0_24/
# ./setup
...
0
votes
1answer
243 views
Integrating CRM 2011 and SharePoint 2010 using ADFS 2.0
As the title quite accurately reflects above, I have the following environment that I'm looking to tie all together:
CRM 2011 IFD (already using ADFS 2.0 successfully)
SharePoint 2010
There is ...
3
votes
1answer
719 views
Self Signed Certificate - Active Directory - Make it trustable to all users
I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com.
This SingleSignOn open source solution uses SAML protocol (i ...
1
vote
1answer
183 views
Is kerberized ssh (gssapi-with-mic) possible without access to KDC or domain admin?
I'm working inside a domain environment, served by Active Directory from a Windows 2008 host. I'm a regular "Domain User", with no special privileges and will not be able to get any.
When trying to ...
0
votes
3answers
291 views
Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)
In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question.
On the IdP side I have a few metadata files that describes some ...
0
votes
1answer
336 views
Is it possible to allow a client/user to log into a Remote Desktop session using credentials other than their AD username/password? (for SSO)
We are essentially trying to provide a single sign-on scenario with a few of our products.
We would prefer to allow customers on their own machines (which are not in our control and cannot have the ...
1
vote
1answer
97 views
Innovation: Single sign on integrated with web filter? [closed]
This one is a doozy, so be forewarned! Also please let me know if this isn't on the correct site.
What I would like to implement in the form of a server appliance is a single sign on solution that ...
1
vote
1answer
552 views
Apache2 NTLM Authentication on specific URL
I have a problem.
I'm using Legrandin's NTLM Authentication Module PyAuthenNTLM2 with my Apache2 server.
It really works well and it was easy to install. I recommend it to everybody.
The ...
1
vote
0answers
327 views
Reverse proxy with single sign-on and backend authentication modules
Has anyone got any recommendations for reverse proxy software that provides a single sign-on interface to multiple backend websites via various authentication mechanisms?
e.g.
Login to the frontend ...
0
votes
1answer
273 views
Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect
I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way
# cat .htaccess
AuthType Kerberos
AuthName "Domain login"
KrbAuthRealms DOMAIN.COM
KrbMethodK5Passwd on
Krb5KeyTab ...
3
votes
4answers
2k views
Apache Bad Request “Size of a request header field exceeds server limit” with Kerberos SSO
I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine.
But when I try to open the website in ...
-1
votes
1answer
445 views
Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?
OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
2
votes
1answer
140 views
Can a user with a disabled account browse Confluence content anonymously?
I'm running Confluence 3.5.13.
I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime.
Users with an active account in Confluence are logged in ...
0
votes
1answer
523 views
Google Apps For Business, SSO, AD FS 2.0 and AD
We are a small company with 22 people in the office.
We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
1
vote
0answers
197 views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
0
votes
2answers
2k views
Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested
I want to use Kerberos and Apache 2 on linux with mod_auth_kerb.
I added .htaccess to my project with following:
#SSLRequireSSL
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
...
1
vote
2answers
3k views
SSSD Authentication
I just built a test server running OpenSuSE 12.1 and am trying to learn how configure sssd, but am not sure where to begin to look for why my config cannot allow me to authenticate.
server:/etc/sssd ...
1
vote
1answer
346 views
ADFS chained over 2 forests for Single Sign On on Office 365
Is it possible to provide SSO to Office 365 in following Scenario?
Windows 2008 Forests
Exchange 2010
Hybrid Infrastructure with On Premise and Cloud Users
Account Domain ->
Account Domain ...
1
vote
3answers
825 views
Possible to enable ssh passwordless authentication via Windows Active Directory?
Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password?
If so, ...
-3
votes
2answers
522 views
Where do I get OpenAM Client SDK [closed]
I want to use the OpenAM SDK Client but I can't find it.
This page explains how to deploy the OpenAM Client SDK samples (I'm planning to start there), but it assumes I've already downloaded it.
I ...
0
votes
1answer
114 views
OpenSSH + Kerberos SSO problem: Wrong principal in request
Thanks to your help , I am getting closer. Now at this point, I am getting the following message with logging in via ssh:
debug1: Unspecified GSS failure. Minor code may provide more information
...
1
vote
1answer
88 views
OpenSSH + Kerberos SSO: No key table entry found for host/localhost.localdomain
SSO not working with OpenSSH - I have not been able to get GSSAPIAuthentication to work with Kerberos. Everytime I attempted to login, I kept getting prompted for the password.
During the ...
