On Tue, Apr 28, 2009 at 7:27 AM, Obsidian <[email protected]> wrote:
>
> Hi,
>

Hi once again !

> I googled for CoSign and had a brief look at it but it requires
> installation which means something else to maintain not really what
> I'm after.
>

The fact is the following :

  - What you 'r trying to do is known as SSO (link to wikipedia ->)
  - Central user registration can be attained by seting up an LDAP dir
    (which could be already there if MSAD is around ;)
  - However, since the auth process is specific to every service, the login
    part is still duplicated, and it is very difficult to have a shared login
    unless you are delegating such task to a common service (e.g. CoSign).
    However there other (commercial | free) SSO products out there.
  - If you'r trying to setup an SSO then, since there are many services,
    there's always an extra-overhead. IMHO (very particular & personal
    opinion ;) duplicate data is a mess, and it gets worst with time & more
    services.
  - Yes, you'r righ, CoSign is not as simple as some might expect. I
    understand what you'r saying, :-/ but ...
  - Reinvent the wheel ? Ufff ...

> OpenID isn't an option either since it allows anyone with an open ID
> to log in I want it so only those that are registered on my site can
> access.
>

Maybe, but you could set up a local OpenId provider (for your
enterprise or whatever) and use white_list & black_list options under
[openid] section in order to reject the undesired providers and allow
only the one(s) you want.

> Is there an RPC for trac I missed somewhere or would it just be easier
> to run trac-admin from my site when someone registers and have my site
> set the trac cookie?
>

For user registration with LDAP, once somebody is registered, all the
services should write user data to the *same* LDAP dir, and therefore
everybody is always up to date. Permissions could be managed using
LDAP groups & the appropriate Trac plugins.

For user login, as I said before it is very, very difficult unless you
have a central service and delegate the login part to it.

But anyway, if you find out another way then I'd like to know ;)

-- 
Regards,

Olemis.

Blog ES: http://simelo-es.blogspot.com/
Blog EN: http://simelo-en.blogspot.com/

Featured article:
Microsoft Magic bugs : ¿Por qué utilizar software libre?  -
http://feedproxy.google.com/~r/simelo-es/~3/cXNYovsJJ5s/microsoft-magic-bugs-por-que-utilizar.html

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to