Hi Mike, I'm not familiar with Windows Kerberos, it seems SPENGO is the choice: https://wiki.jasig.org/display/CASUM/SPNEGO
You have to implement a login handler similar to JCIFSSpnegoAuthenticationHandler mentioned in the wiki. Regards, Shi Jinghai/Beijing Langhua Ltd. 在 2010-09-07二的 08:28 -0500,Mike Baschky写道: > Hi Shi, > The Kerberos is coming from a windows system however the OFBIZ based > application is deployed on linux (SUSE). > > -Mike > > -----Original Message----- > From: Shi Jinghai [mailto:[email protected]] > Sent: Friday, September 03, 2010 1:04 PM > To: [email protected] > Subject: Re: Kerberos and SSO > > What OS is your Kerberos deployed on? > > 在 2010-09-03五的 10:14 -0500,Mike Baschky写道: > > Hello, > > > > I'm researching the single sign on capabilities of > > OFBIZ. Specifically I'm interested using a Kerberos token for sso. I > > know Apache has a Kerberos module that can be used to secure websites > > but I don't believe this is really a solution for OFBIZ because Apache > > would have to pass the information down to the embedded tomcat and then > > OFBIZ would have to pull said information. The documentation does not > > cover this and I've found only one user email requesting info on this > > topic (no response). My question is are there any hooks in OFBIZ that > > can handle Kerberos tokens? If not has anyone developed a solution using > > Kerberos with OFBIZ for SSO? > > > > > > > > Thanks, > > > > Mike > > >
