Not entirely sure, but if you were willing to run the server on Windows, you should be able to create a much simpler module than mod_auth_kerb using the MS functions; send the right headers for IE to return the NTLM token, check its validity using MS code and then just get the username out of it.

Bas.

On 1 Aug 2007, at 09:26, Rick Cobb wrote:

We’re getting a lot of requests for real Windows “single-sign-on”. That is, no sign on at all if the user’s already logged into their Windows domain. This is for corporate deployments, obviously. The Apache community apparently has a module known as “mod_auth_kerb” for this. Has anybody worked on porting it to AOLServer? NaviServer? We’ve already done LDAP deployments; that’s not sufficient for this community (since it still requires you to log in to the web server).

Thanks –
-- ReC
-- AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.



--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> 
with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: 
field of your email blank.

Reply via email to