Single Sign On (SSO) is a technology that allows the transparent use of a single username and password in multiple security domains. They're commonly used as part of a greater identity-management framework which unites otherwise separate systems into a single virtual login domain. SSO systems may be ...
3
votes
1answer
96 views
Self Signed Certificate - Active Directory - Make it trustable to all users
I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com.
This SingleSignOn open source solution uses SAML protocol (i ...
1
vote
1answer
51 views
Is kerberized ssh (gssapi-with-mic) possible without access to KDC or domain admin?
I'm working inside a domain environment, served by Active Directory from a Windows 2008 host. I'm a regular "Domain User", with no special privileges and will not be able to get any.
When trying to ...
0
votes
3answers
53 views
Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)
In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question.
On the IdP side I have a few metadata files that describes some ...
0
votes
1answer
61 views
Is it possible to allow a client/user to log into a Remote Desktop session using credentials other than their AD username/password? (for SSO)
We are essentially trying to provide a single sign-on scenario with a few of our products.
We would prefer to allow customers on their own machines (which are not in our control and cannot have the ...
1
vote
1answer
50 views
Innovation: Single sign on integrated with web filter? [closed]
This one is a doozy, so be forewarned! Also please let me know if this isn't on the correct site.
What I would like to implement in the form of a server appliance is a single sign on solution that ...
1
vote
1answer
87 views
Apache2 NTLM Authentication on specific URL
I have a problem.
I'm using Legrandin's NTLM Authentication Module PyAuthenNTLM2 with my Apache2 server.
It really works well and it was easy to install. I recommend it to everybody.
The ...
1
vote
0answers
145 views
Reverse proxy with single sign-on and backend authentication modules
Has anyone got any recommendations for reverse proxy software that provides a single sign-on interface to multiple backend websites via various authentication mechanisms?
e.g.
Login to the frontend ...
0
votes
0answers
79 views
Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect
I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way
# cat .htaccess
AuthType Kerberos
AuthName "Domain login"
KrbAuthRealms DOMAIN.COM
KrbMethodK5Passwd on
Krb5KeyTab ...
2
votes
1answer
298 views
Apache Bad Request “Size of a request header field exceeds server limit” with Kerberos SSO
I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine.
But when I try to open the website in ...
0
votes
0answers
48 views
How to realize single sign on with pam and php apps?
Let's say that I've a server in the internet. Every user connect through an ssh tunnel to a various of php apps on it. Is it somehow possible to reuse the ssh authentication for these php apps, which ...
-2
votes
1answer
111 views
Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?
OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
2
votes
1answer
69 views
Can a user with a disabled account browse Confluence content anonymously?
I'm running Confluence 3.5.13.
I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime.
Users with an active account in Confluence are logged in ...
0
votes
0answers
64 views
Creating a Single Sign On Solution
We are currently moving our organisations e-mail system to Google and most of our companies applications will move to SaaS applications (Huddle, Salesforce etc). I am looking to implement some kind of ...
0
votes
1answer
172 views
Google Apps For Business, SSO, AD FS 2.0 and AD
We are a small company with 22 people in the office.
We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
1
vote
0answers
97 views
Setting up single sign-on between Mac client & OS X Server
I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong.
We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are ...
0
votes
1answer
439 views
Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested
I want to use Kerberos and Apache 2 on linux with mod_auth_kerb.
I added .htaccess to my project with following:
#SSLRequireSSL
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
...
0
votes
0answers
205 views
“Checksum failed” during Kerberos SSO
This is an error that occurs when a mod_auth_kerb protected webapp is being accessed, and I have no idea what the cause might be. Can anyone give hints as into which direction I should look? Thankful ...
0
votes
1answer
654 views
SSSD Authentication
I just built a test server running OpenSuSE 12.1 and am trying to learn how configure sssd, but am not sure where to begin to look for why my config cannot allow me to authenticate.
server:/etc/sssd ...
0
votes
0answers
177 views
Configuring a Apache Reverse Proxy for OracleAS Portal and OracleAS Single Sign-On
I'm trying to implement my Oracle Portal 10g Release 2 with a reverse proxy (Apache 2.2) as described in this link: http://download.oracle.com/docs/cd/B14099_19/core.1012/b13998/variants.htm#BEIFECEH ...
1
vote
1answer
166 views
ADFS chained over 2 forests for Single Sign On on Office 365
Is it possible to provide SSO to Office 365 in following Scenario?
Windows 2008 Forests
Exchange 2010
Hybrid Infrastructure with On Premise and Cloud Users
Account Domain ->
Account Domain ...
1
vote
3answers
379 views
Possible to enable ssh passwordless authentication via Windows Active Directory?
Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password?
If so, ...
-3
votes
2answers
209 views
Where do I get OpenAM Client SDK [closed]
I want to use the OpenAM SDK Client but I can't find it.
This page explains how to deploy the OpenAM Client SDK samples (I'm planning to start there), but it assumes I've already downloaded it.
I ...
0
votes
0answers
128 views
Apache2::AuthenNTLM : Wrong password/user ! (Windows automatic login)
I am trying to have users in our Windows Domain logged in our application without having to login. I am trying to use Apache2::AuthenNTLM but I always get
[error] Wrong password/user (rc=3/1/327681): ...
0
votes
1answer
71 views
OpenSSH + Kerberos SSO problem: Wrong principal in request
Thanks to your help , I am getting closer. Now at this point, I am getting the following message with logging in via ssh:
debug1: Unspecified GSS failure. Minor code may provide more information
...
1
vote
1answer
49 views
OpenSSH + Kerberos SSO: No key table entry found for host/localhost.localdomain
SSO not working with OpenSSH - I have not been able to get GSSAPIAuthentication to work with Kerberos. Everytime I attempted to login, I kept getting prompted for the password.
During the ...
0
votes
1answer
64 views
Password Change - Linux Server + Windows Clients
I'm planning on setting up centralized authentication for a Samba file server, a VPN, Radius and Postfix using either LDAP or Kerberos. These services are going to be accessed by Windows clients.
As ...
0
votes
0answers
116 views
Using ApacheDS for Single-Sign-On for Google Apps
I am new to ApacheDS and have been given a project to figure out how to use ApacheDS for single-sign-on for Google Apps. I have set up a server on Windows but am unsure how to authenticate users via a ...
0
votes
1answer
193 views
IIS/AD - Implementing single sign-on between two websites
I have two websites. One is an "intranet," one is a public site that has "admin" areas:
www.example-intranet.com
www.example.com
They are both running on the same IIS 6 box.
...
2
votes
3answers
225 views
How does SSO using Active Directory works where user is transparently logged in. (intranet webapp)
I'm told that it's possible to make a web application not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able to go to ...
3
votes
2answers
77 views
What is the term for single source authentication that is not Single Sign-On?
I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
1
vote
1answer
489 views
Single sign on - Sharepoint to Web app
We have a Sharepoint site that uses Windows based authentication.
We provide links in Sharepoint to a secure web app that uses forms based authentication. Both authenticate against the same AD.
...
4
votes
1answer
155 views
How can one recover SSO from a disaster?
I am trying to test recovery from a disaster, but feel the SSO part is like a Catch 22 situation. I cannot get it to work.
We have a DB cluster where SSO is also a clustered service, just like the ...
0
votes
1answer
189 views
How to implement Windows Single Sign On for Tomcat in IIS
How can I obtain the current Windows domain user in an application on Tomcat.
request.getRemoteUser() is null
2
votes
1answer
918 views
Fallback authentication if mod_auth_kerb fails
Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be:
Kerberos
Active ...
0
votes
1answer
373 views
getUserPrincipal() in JCIFS / Lan-Manager authentitation level setting in Windows 2k8
I have to find out in which exact format JCIFS stores the user principal in the "getUserPrincipal()" property. Therefor i created a test Environment like this:
Windows Server 2008 Domain Controller
...
0
votes
1answer
472 views
IE does not send NTLM domain
I have a problem with NTLM single-sign-on with IE8.
We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru.
...
1
vote
1answer
399 views
Set up Jenkins to use Crowd's OpenID for SSO?
Been trying to get Jenkins to work with Crowd's OpenID server so we can use single sign-on like with our Atlassian stuff (the Jenkins Crowd plugin can't do SSO). Can't seem to find the proper OpenID ...
2
votes
0answers
326 views
How does ForeFront UAG implement single sign-on?
One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
0
votes
1answer
597 views
SharePoint Foundation 2010: no service for single sign on
Alright, so I'm trying to install SharePoint Foundation 2010 with Single Sign-On. Almost everything works great, but when I go to the services section no services with the words "Microsoft Single ...
0
votes
1answer
171 views
single sign-on integrating SVN
I need to authenticate my windows users on to a Linux Server which will act as a primary authentication source. Users need to be authenticated and use their access to run SVN or Mercurial ( with ...
1
vote
2answers
436 views
Top open source single sign on app
We're using a webapps like google apps(mail), jira, etc. and would like to implement single sign on on our system. What is the best or top pick when choosing a single sign on app?
Is ...
0
votes
1answer
1k views
Open source alternative to ISA/Forefront TMG?
I'm using Forefront TMG to do web server publishing & SSO and very little else. Are there any open source alternatives that can satisfy all (or at least most) of these features:
Web server ...
0
votes
2answers
649 views
What is a free active directory simulator tool for testing remote single-sign-on auth requests?
Need to test if an application has correctly implemented active directory remote authentication single-sign-on requests? If you don't know of a tool, what would be a checklist of items to confirm are ...
2
votes
2answers
285 views
Seamless single sign on between Windows and Linux
I have been messing with Services for unix 3.5 for two days now and I am getting nowhere fast.
Let me explain our situation. We have several hundreds of Linux servers, and hundreds of windows ...
0
votes
2answers
200 views
What should I use for mixed environment authentication + SSO? [closed]
Our company runs mostly linux server but mostly windows clients.
I'm looking for a solution that would allow all of our web applications to have a login portal (and once you're logged in you don't ...
6
votes
3answers
3k views
Single-Signon options for Exchange 2010
We're working on a project to migrate employee email from Unix/open-source (courier IMAP, exim, squirrelmail, etc) to Exchange 2010, and trying to figure out options for single-signon for Outlook Web ...
2
votes
0answers
382 views
Single Sign On through Citrix
I have a webserver running Windows 2008 R2 with IIS 7. The server is a member of the domain "mydomain.com". What I am trying to achieve is a SSO connection between the AD users and the web server. The ...
0
votes
3answers
2k views
XP Mode and Active Directory
I've got a computer on Windows 7 x64 because its a great OS. Well there are some programs that don't work on it because it is a 64bit OS. So I've setup XP Mode to put apps on.
One application I have ...
2
votes
4answers
115 views
How can I revoke access for a user across different systems?
We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
1
vote
1answer
441 views
samba + kerberos ssh single signon (SSO)
Hey folks,
I'm modifying an existing samba config that it works fine for authenticating AD users on linux servers to also handle Kerberos and SSO.
I've successfully got pam_winbind to use kerberos ...
