Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-08-08 Thread Kiran Patil
There was no follow up on this so what I am specifically interested is how CAS server integrates with external servers. Does it have some sort of pluggable interface like PAM? Even if it does it is probably implementation specific. So is it just a configuration issue to configure the auth

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-08-04 Thread Dmitri Pal
On 08/04/2011 05:24 AM, Kiran Patil wrote: Did anybody got it working ? Please share your experiences with configuration details. Thanks, Kiran. ___ Freeipa-users mailing list Freeipa-users@redhat.com

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-08-04 Thread Kiran Patil
Which CAS server implementation you are using? -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. Sorry, I picked the subject from one of the earlier thread of FreeIPA user list. Right now we are evaluating different solutions. We found that FreeIPA project

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-08-04 Thread Dmitri Pal
On 08/04/2011 11:07 AM, Kiran Patil wrote: Which CAS server implementation you are using? -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. Sorry, I picked the subject from one of the earlier thread of FreeIPA user list. Right now we are evaluating different

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-07-29 Thread Rapid Noreapeat
Thank you for your quick reply Rob, I'll try it. On Fri, Jul 29, 2011 at 11:50 AM, Rob Crittenden rcrit...@redhat.comwrote: Rapid Noreapeat wrote: Is it possible to integrate my web applications like portal website, helpdesk website, and other web apps login using FreeIPA's login accounts

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-07-29 Thread Adam Young
In order to authenticate through the firewall you have to allow kinit and kerberos web traffic through, which means opening port 88. If you are unwilling to do that, you need to come up with an authentication solution that will pass through firewalls, which means either basic auth, digest,

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-07-28 Thread Rob Crittenden
Rapid Noreapeat wrote: Is it possible to integrate my web applications like portal website, helpdesk website, and other web apps login using FreeIPA's login accounts (SSO) like CAS? It depends. The FreeIPA SSO is Kerberos-based so you'd need to provide access to your KDC for this to work. If