Steve, It was a bit of a struggle, but I got Kerberos against Active Directory to work inside Equinox for my RCP app. Some useful links: http://java.sun.com/javase/6/docs/technotes/guides/security/kerberos/jgs s-windows.html http://beamdocs.fnal.gov/DocDB/0015/001502/001/index.html#toc http://java.sun.com/javase/6/docs/technotes/guides/security/jaas/JAASRef Guide.html http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/single-signon.ht ml http://java.sun.com/javase/6/docs/technotes/guides/security/jgss/tutoria ls/index.html http://java.sun.com/products/jndi/tutorial/ldap/security/gssapi.html
________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Pruitt, Byron S Sent: 2009, September, 10 11:25 AM To: [email protected] Subject: [osgi-dev] Single Sign-on Does anyone have experience with single sign-on and the OSGi environment. I currently have a set of OSGi services and we use a simple authentication scheme based on a local repository containing users and groups. I need to support authentication and authorization, most commonly using Active Directory. The user clients will vary across either browser-based applications, possibly Visual Basic, and SharePoint clients. I do not have in depth security expertise. But, if anyone can point me to any resources or experience; I can take it from there. Hopefully. Thanks in advance, -Steve Pruitt [email protected] ________________________________________ This E-Mail (including any attachments) may contain privileged or confidential information. It is intended only for the addressee(s) indicated above. The sender does not waive any of its rights, privileges or other protections respecting this information. Any distribution, copying or other use of this E-Mail or the information it contains, by other than an intended recipient, is not sanctioned and is prohibited. If you received this E-Mail in error, please delete it and advise the sender (by return E-Mail or otherwise) immediately. This E-Mail (including any attachments) has been scanned for viruses. It is believed to be free of any virus or other defect that might affect any computer system into which it is received and opened. However, it is the responsibility of the recipient to ensure that it is virus free. The sender accepts no responsibility for any loss or damage arising in any way from its use. E-Mail received by or sent from RBC Capital Markets is subject to review by Supervisory personnel. Such communications are retained and may be produced to regulatory authorities or others with legal rights to the information. IRS CIRCULAR 230 NOTICE: TO COMPLY WITH U.S. TREASURY REGULATIONS, WE ADVISE YOU THAT ANY U.S. FEDERAL TAX ADVISE INCLUDED IN THIS COMMUNICATION IS NOT INTENDED OR WRITTEN TO BE USED, AND CANNOT BE USED, TO AVOID ANY U.S. FEDERAL TAX PENALTIES OR TO PROMOTE, MARKET, OR RECOMMEND TO ANOTHER PARTY ANY TRANSACTION OR MATTER.
_______________________________________________ OSGi Developer Mail List [email protected] https://mail.osgi.org/mailman/listinfo/osgi-dev
