Re: [otrs] SSO

[Thomas Mueller]

> would you be able to write a readme ?
>

not quit a readme, but some hints wan't needs to be done:

* get familiar with keberos (tickets, keytabs, principals, kvno, ...), 
keywords GSSAPI/SSPI (RTFM, try-and-error)
* install and configure kerberos on the OTRS box (very basic check: 
kinit <usernmae>@<DOMAIN> && klist need to work).
* in OTRS: configure user names, otrs will see "AD-Style" usernames 
(<username>@<DOMAIN>)
* install & configure mod_auth_kerb
* configure OTRS  for basic auth

if you never configured kerberos/mod_auth_kerb, it won't be quick as 
there are many pitfalls (cryptic log, no log, dns issues, clock-drift 
issues, etc).

some readings:

http://support.microsoft.com/kb/555092
http://modauthkerb.sourceforge.net/
http://doc.otrs.org/2.2/en/html/x1641.html#agent-auth-backend-httpbasic
http://tldp.org/HOWTO/Kerberos-Infrastructure-HOWTO/client-configure.html#apache

- Thomas


_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/