Single Sign On (SSO) is a technology that allows the transparent use of a single username and password in multiple security domains. They're commonly used as part of a greater identity-management framework which unites otherwise separate systems into a single virtual login domain. SSO systems may be ...
-2
votes
1answer
54 views
Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?
OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
1
vote
1answer
25 views
Can a user with a disabled account browse Confluence content anonymously?
I'm running Confluence 3.5.13.
I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime.
Users with an active account in Confluence are logged in ...
0
votes
0answers
36 views
Creating a Single Sign On Solution
We are currently moving our organisations e-mail system to Google and most of our companies applications will move to SaaS applications (Huddle, Salesforce etc). I am looking to implement some kind of ...
0
votes
1answer
76 views
Google Apps For Business, SSO, AD FS 2.0 and AD
We are a small company with 22 people in the office.
We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
1
vote
0answers
36 views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
0
votes
1answer
99 views
Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested
I want to use Kerberos and Apache 2 on linux with mod_auth_kerb.
I added .htaccess to my project with following:
#SSLRequireSSL
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
...
0
votes
0answers
99 views
“Checksum failed” during Kerberos SSO
This is an error that occurs when a mod_auth_kerb protected webapp is being accessed, and I have no idea what the cause might be. Can anyone give hints as into which direction I should look? Thankful ...
0
votes
1answer
225 views
SSSD Authentication
I just built a test server running OpenSuSE 12.1 and am trying to learn how configure sssd, but am not sure where to begin to look for why my config cannot allow me to authenticate.
server:/etc/sssd ...
0
votes
0answers
115 views
Configuring a Apache Reverse Proxy for OracleAS Portal and OracleAS Single Sign-On
I'm trying to implement my Oracle Portal 10g Release 2 with a reverse proxy (Apache 2.2) as described in this link: http://download.oracle.com/docs/cd/B14099_19/core.1012/b13998/variants.htm#BEIFECEH ...
0
votes
1answer
83 views
ADFS chained over 2 forests for Single Sign On on Office 365
Is it possible to provide SSO to Office 365 in following Scenario?
Windows 2008 Forests
Exchange 2010
Hybrid Infrastructure with On Premise and Cloud Users
Account Domain ->
Account Domain ...
1
vote
3answers
165 views
Possible to enable ssh passwordless authentication via Windows Active Directory?
Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password?
If so, ...
-3
votes
2answers
121 views
Where do I get OpenAM Client SDK [closed]
I want to use the OpenAM SDK Client but I can't find it.
This page explains how to deploy the OpenAM Client SDK samples (I'm planning to start there), but it assumes I've already downloaded it.
I ...
0
votes
0answers
90 views
Apache2::AuthenNTLM : Wrong password/user ! (Windows automatic login)
I am trying to have users in our Windows Domain logged in our application without having to login. I am trying to use Apache2::AuthenNTLM but I always get
[error] Wrong password/user (rc=3/1/327681): ...
0
votes
1answer
47 views
OpenSSH + Kerberos SSO problem: Wrong principal in request
Thanks to your help , I am getting closer. Now at this point, I am getting the following message with logging in via ssh:
debug1: Unspecified GSS failure. Minor code may provide more information
...
1
vote
1answer
37 views
OpenSSH + Kerberos SSO: No key table entry found for host/localhost.localdomain
SSO not working with OpenSSH - I have not been able to get GSSAPIAuthentication to work with Kerberos. Everytime I attempted to login, I kept getting prompted for the password.
During the ...
0
votes
1answer
54 views
Password Change - Linux Server + Windows Clients
I'm planning on setting up centralized authentication for a Samba file server, a VPN, Radius and Postfix using either LDAP or Kerberos. These services are going to be accessed by Windows clients.
As ...
0
votes
0answers
76 views
Using ApacheDS for Single-Sign-On for Google Apps
I am new to ApacheDS and have been given a project to figure out how to use ApacheDS for single-sign-on for Google Apps. I have set up a server on Windows but am unsure how to authenticate users via a ...
0
votes
1answer
143 views
IIS/AD - Implementing single sign-on between two websites
I have two websites. One is an "intranet," one is a public site that has "admin" areas:
www.example-intranet.com
www.example.com
They are both running on the same IIS 6 box.
...
2
votes
3answers
134 views
How does SSO using Active Directory works where user is transparently logged in. (intranet webapp)
I'm told that it's possible to make a web application not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able to go to ...
3
votes
2answers
70 views
What is the term for single source authentication that is not Single Sign-On?
I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
1
vote
1answer
326 views
Single sign on - Sharepoint to Web app
We have a Sharepoint site that uses Windows based authentication.
We provide links in Sharepoint to a secure web app that uses forms based authentication. Both authenticate against the same AD.
...
4
votes
1answer
119 views
How can one recover SSO from a disaster?
I am trying to test recovery from a disaster, but feel the SSO part is like a Catch 22 situation. I cannot get it to work.
We have a DB cluster where SSO is also a clustered service, just like the ...
0
votes
0answers
111 views
How can I use LDAP or other SSO methods on WordPress Installation?
I want my users to use 'Single Sign on' feature for registration . That eases the user registration using External accounts and convenient for users to sign-in/signup .
I heard a lot about the ...
0
votes
0answers
70 views
Implementation of Single Sign On or Bridge with in the WordPress WebSites?
I have a question about implementation of ' Single Sign on ' with in the Wordpress Installations. I have asked the same question at WordPress.stackexchange.com and a user advised me to ask it here. ...
0
votes
0answers
159 views
Apache, mod_auth_sspi and Apache credentials
So far, I have succeeded in configuring/running mod_auth_sspi on Apache using two versions of Apache (2.0.55 and 2.2.14) locally using XAMP. In PHP, I have access to $_SERVER["REMOTE_USER"] and ...
0
votes
0answers
101 views
Apache and Oracle WebGate SSO
I am new to this WebGate SSO, and not sure if what I want to do is possible. I have a few special pages that don't need authentication. I added this to my httpd.conf file:
#All pages need ...
0
votes
1answer
153 views
How to implement Windows Single Sign On for Tomcat in IIS
How can I obtain the current Windows domain user in an application on Tomcat.
request.getRemoteUser() is null
2
votes
1answer
642 views
Fallback authentication if mod_auth_kerb fails
Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be:
Kerberos
Active ...
0
votes
0answers
55 views
Solaris - Compile Apache webserver with NTML auth and AD auth via LDAPS? Single sign on
we're on a solaris platform which has no internet connections, just LAN. We need to compile apache from source but we want a few things:
Active directory authentication via LDAPS
NTML authentication ...
0
votes
1answer
261 views
getUserPrincipal() in JCIFS / Lan-Manager authentitation level setting in Windows 2k8
I have to find out in which exact format JCIFS stores the user principal in the "getUserPrincipal()" property. Therefor i created a test Environment like this:
Windows Server 2008 Domain Controller
...
0
votes
0answers
132 views
Users cannot change password with kpasswd command - MIT Kerberos w/OpenLDAP backend
I've setup an OpenLDAP server that acts as a backend for Kerberos authentication on an Ubuntu Lucid server. All clients are Linux. Kerberos authentication is working fine across all machines in the ...
0
votes
1answer
373 views
IE does not send NTLM domain
I have a problem with NTLM single-sign-on with IE8.
We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru.
...
1
vote
1answer
344 views
Set up Jenkins to use Crowd's OpenID for SSO?
Been trying to get Jenkins to work with Crowd's OpenID server so we can use single sign-on like with our Atlassian stuff (the Jenkins Crowd plugin can't do SSO). Can't seem to find the proper OpenID ...
1
vote
0answers
278 views
How does ForeFront UAG implement single sign-on?
One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
0
votes
1answer
458 views
SharePoint Foundation 2010: no service for single sign on
Alright, so I'm trying to install SharePoint Foundation 2010 with Single Sign-On. Almost everything works great, but when I go to the services section no services with the words "Microsoft Single ...
0
votes
1answer
149 views
single sign-on integrating SVN
I need to authenticate my windows users on to a Linux Server which will act as a primary authentication source. Users need to be authenticated and use their access to run SVN or Mercurial ( with ...
1
vote
2answers
383 views
Top open source single sign on app
We're using a webapps like google apps(mail), jira, etc. and would like to implement single sign on on our system. What is the best or top pick when choosing a single sign on app?
Is ...
0
votes
1answer
1k views
Open source alternative to ISA/Forefront TMG?
I'm using Forefront TMG to do web server publishing & SSO and very little else. Are there any open source alternatives that can satisfy all (or at least most) of these features:
Web server ...
0
votes
2answers
566 views
What is a free active directory simulator tool for testing remote single-sign-on auth requests?
Need to test if an application has correctly implemented active directory remote authentication single-sign-on requests? If you don't know of a tool, what would be a checklist of items to confirm are ...
2
votes
2answers
250 views
Seamless single sign on between Windows and Linux
I have been messing with Services for unix 3.5 for two days now and I am getting nowhere fast.
Let me explain our situation. We have several hundreds of Linux servers, and hundreds of windows ...
0
votes
2answers
178 views
What should I use for mixed environment authentication + SSO? [closed]
Our company runs mostly linux server but mostly windows clients.
I'm looking for a solution that would allow all of our web applications to have a login portal (and once you're logged in you don't ...
6
votes
3answers
2k views
Single-Signon options for Exchange 2010
We're working on a project to migrate employee email from Unix/open-source (courier IMAP, exim, squirrelmail, etc) to Exchange 2010, and trying to figure out options for single-signon for Outlook Web ...
1
vote
0answers
350 views
Single Sign On through Citrix
I have a webserver running Windows 2008 R2 with IIS 7. The server is a member of the domain "mydomain.com". What I am trying to achieve is a SSO connection between the AD users and the web server. The ...
0
votes
3answers
1k views
XP Mode and Active Directory
I've got a computer on Windows 7 x64 because its a great OS. Well there are some programs that don't work on it because it is a 64bit OS. So I've setup XP Mode to put apps on.
One application I have ...
2
votes
4answers
113 views
How can I revoke access for a user across different systems?
We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
1
vote
1answer
403 views
samba + kerberos ssh single signon (SSO)
Hey folks,
I'm modifying an existing samba config that it works fine for authenticating AD users on linux servers to also handle Kerberos and SSO.
I've successfully got pam_winbind to use kerberos ...
5
votes
2answers
724 views
SSO solution and centralized user mgmt for about 10-30 Ubuntu machines?
I'm looking for a clean way to centralize user management. The setup:
About 10-30 linux machines (Ubuntu 10.04 LTS server)
Maybe 10-30 users for now.
The requirements (hopes and expectations):
A ...
3
votes
3answers
2k views
Using ADFS 2.0 for Google apps single sign on
Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0.
Does this mean that is can be used to authenticate users of ...
2
votes
1answer
728 views
Single Sign On for intranet with Apache and Linux MIT Kerberos
EDIT: SOLVED! See my answer below.
Greetings, I am looking for a way to do a single sign on to an intranet in the following manner:
A Linux user logs on via a graphical frontend (for example, ...
1
vote
1answer
359 views
Single sign-on for SharePoint to MySite?
I've got a fairly simple SharePoint 2010 farm set up: 2 WFE servers with Network Load Balancing hosting the main portal site.
As per Microsoft's best practice recommendations I've set up My Sites ...
