Hi Richard,

On Fri, 9 Jul 2010, Richard Zulu wrote:

> Any ideas on how to implement single sign on in a linux
> environment....still searching too

My advice would be to try Kerberos:

http://www.mail-archive.com/[email protected]/msg11958.html

If you implement LDAP without Kerberos, then even though users would have 
the same passwords everywhere, they would still have to enter them 
whenever they access a service. Whereas with Kerberos, they will get a 
secure token when they log in, which allows them to log into other servers 
and services without a password for as long as the token is valid (e.g. a 
few hours to a few days).

Cheers, Chris.
-- 
Aptivate | http://www.aptivate.org | Phone: +44 1223 760887
The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES

Aptivate is a not-for-profit company registered in England and Wales
with company number 04980791.
_______________________________________________
LUG mailing list
[email protected]
http://kym.net/mailman/listinfo/lug

LUG is generously hosted by INFOCOM http://www.infocom.co.ug/

All Archives can be found at http://www.mail-archive.com/[email protected]/

The above comments and data are owned by whoever posted them (including 
attachments if any). The List's Host is not responsible for them in any way.
---------------------------------------

Reply via email to