Seamless/transparent SSO with Apache, Win2003, IE

[Nikola Milutinovic]

it_outsource_pros at yahoo.com wrote:

>Fred Dennis wrote:
>  
>
>>I'm trying to create a seamless sign on to a web site
>>using Solaris (Kerberos installed), Apache
>>(mod_auth_kerb installed), MS Active directory, and IE
>>client.
>>
>>    
>>
>
>I was doing some Google searches the other day for a similar project
>and found a commercial alternative that looks appealing. It looks like
>they have an agent for Solaris 8/9/10 that sets up the Kerberos
>environment for you fairly painlessly. Then there's some config work on
>the server. The doc they posted here seems pretty straightforward. I
>talked to one of their sales people and the appealing part was that
>there are no end-user licensing fees, you just license the server-based
>agent. If it works as advertised it looks like I'd burn a lot more
>client fees trying to build (and test; that's eating up the time)
>something homegrown than just using this. I keep running across posts
>like yours with various issues and I'm beginning to think this is the
>way to go. I found it here:
>http://www.centrify.com/resources/apache.asp.
>  
>

Setting up mod_kerb_auth should be no more problematic than that. The 
biggest "problem" is actually building it and testing it, but it can be 
done once. Of course, if a problem should crop up, you're on your own.

Nix.