It would allow the use an existing KDC, be it Active Directory, MIT Kerberos, etc., to allow for native SSO on the mid-tier side. It will not be completely painless to set up, but it will not require any coding, just installation and configuration. My goal is to address configuration for common environments, e.g., Windows/IIS/Active Directory, Linux/Apache/Active Directory, Solaris/Apache/Active Directory. The J2EE tier does not matter, to a large extent, and the instructions/components should work whether you are using Tomcat, JBoss, WebSphere, etc.
Axton The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. On Mon, May 9, 2011 at 3:31 AM, Jason Miller <[email protected]> wrote: > ** I think it would be great. This would allow true single sign-on out of > the box, correct? Atrium SSO is a nice addition but it is more than some > companies are going to need. If you are not going to use other BMC products > then Atrium SSO doesn't seem worth it for MT authentication. Even with > Atrium SSO you still need to tie into an existing SSO infrastructure if you > don't want your users to be prompted that first time (or after a timeout > period). If I am following what you are asking Kerberos would work with > most anybody's existing Directory Service system with minimal fuss. > > Jason > > On Fri, May 6, 2011 at 11:23 AM, Axton <[email protected]> wrote: > >> ** Is there a much interest in an end to end capability for Kerberos >> authentication for the Mid-Tier? I'm asking for systems that run on both >> Windows and Unix and for users of poplar web server, such as Apache, >> iPlanet, IIS or Tomcat standalone? >> >> Axton >> >> The opinions, statements, and/or suggested courses of action expressed in >> this E-mail do not necessarily reflect those of BMC Software, Inc. My >> voluntary participation in this forum is not intended to convey a role as a >> spokesperson, liaison or public relations representative for BMC Software, >> Inc. >> _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_ > > > _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_ _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"
