Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Single Sign On (SSO) is a technology that allows the transparent use of a single username and password in multiple security domains. They're commonly used as part of a greater framework which unites otherwise separate systems into a single virtual login domain. SSO systems may be purely web-based, or client-based.

A variety of technologies can be used to build SSO systems.

347 questions
0
votes
2 answers

apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate

i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO to CMS. my problem: around 10% of our users…
joka66
  • 1
  • 2
0
votes
1 answer

Apache SSO for a service that runs as local user

I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app. I have successfully joined the domain, and can successfully issue kerberos tickets for AD…
0
votes
0 answers

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some instructions for using mod_auth_sspi that suggested…
gdhp
  • 41
  • 2
  • 5
0
votes
0 answers

Generating XML SAML with signature using xmlsec1

I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl. Next step, I install lib xmlsec1: yum install xmlsec1 yum…
0
votes
1 answer

Single sign-on between two UAG servers

The situation: site1.company.com is published in UAG 1 (Datacenter 1) site2.company.com is published in UAG 2 (Datacenter 2) My question: Is it at all possible to set up a single sign on between the two UAG servers? Authentication information in the…
0
votes
1 answer

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for any help on configuring a squid proxy server…
grmbl
  • 155
  • 1
  • 9
0
votes
1 answer

Upgrade vCenter 5.1 to 5.5 error 29102

I'm upgrading vCenter 5.1 to 5.5. After successful upgrading of Single Sign-On service, in the next step of upgrading Web Client when it needs Single Sign-On password and Lookup Service Url it used my last computer name as the default. When I set…
user195351
  • 1
  • 1
  • 1
0
votes
1 answer

Unable to disable Kerberos Single Sign On (SSO)

I've been exploring Kerberos Single Sign On (SSO) to replace NTLM for a Web Application hosted internally within a Windows Domain. After creating Service Principal Names (SPN) for a test service (setspn -s) I can clearly see - using Fiddler or…
rtev
  • 101
  • 2
0
votes
1 answer

Alfresco authentication chain for (MIT) Kerberos only? (no LDAP, no AD)

The Alfresco documentation seems to consider only LDAP or Active Directory cases. In my case, all users are in MIT Kerberos, but I don't use LDAP nor Active Directory. What authentication chain should I use? ldap1:ldap is what the documentation…
Nicolas Raoul
  • 1,334
  • 7
  • 22
  • 43
0
votes
1 answer

SSO mod_auth_kerb with Active Directory

I have working for a long time to get Drupal 7 to perform SSO authentication to a Windows Server 2003 environment. What I have done so far: Create a user account for the linux server in Active Directory. Had the Active Directory administrator…
0
votes
1 answer

Kerberos + Ldap Setup not working with ssh

I have a Kerberos 5 + LDAP configuration in the same server. They both work well (I assume). Kerberos works fine when asking for a TGT. The problem comes when I try to login from client1 to client2 via passwordless ssh... It keeps asking me for a…
hecstevez
  • 47
  • 1
  • 8
0
votes
2 answers

Kerberos authentication for Git server?

I have a Git server, and I want to make it usable by all Kerberos-logged users. eg: if a user has a valid Kerberos ticket, she can start pushing to Git without having to provide any username/password. Is it even possible to do this with Git? All I…
Nicolas Raoul
  • 1,334
  • 7
  • 22
  • 43
0
votes
1 answer

Is WebSphere server mandatory to enable sso in Domino domain?

I want to configure sso between domino servers . all the server are in the same domains. i have created the "web sso configuration document" and made the necessary chnages in server document. after restarting the http task i'm not getting any error…
Mythli
  • 17
  • 5
0
votes
1 answer

unifying active directory usernames / logins by creating a trust relationship?

I have a conceptual question: I manage user accounts for local network access using Active Directory (let's call this network A). We use an external service provider for email accounts, who's also running Active Directory for account management…
memyself
  • 335
  • 6
  • 13
0
votes
1 answer

How to make SSO work on remote machine

I'm fighting with SSO and SSH on Debian Wheezy. Locally it works fine. I'm getting ticket successfully at login. But when I've logged in to the remote machine by SSH without password, klist on the remote machine finds no credentials. I tried to get…