SSO

[Michael Ströder]

Sharad Desai wrote:
>> You may want to search for SPNEGO and mod_auth_kerb. Windows IE and IIS
>> have SPNEGO built in, and can use the Kerberos in Active Directory.
>> Apache can use mod_auth_kerb that supports SPNEGO. With FireFox 2 on any
>> platform
>> see the about:config and the network.negotiate-auth.trusted-uris option.
> 
> I would have definitely considered this, but the group that I am working
> with does not want to include AD in any solution.

It works with any Kerberos KDC.

I'm using CAS (http://www.ja-sig.org/products/cas/) for SPNEGO/Kerberos 
with fall-back to LDAP bind.

Ciao, Michael.