[nycphp-talk] Question Re: Intranet PHP central authentication???
inforequest
1j0lkq002 at sneakemail.com
Mon Oct 16 16:13:15 EDT 2006
Out of my league, but you may want to look at what Yale has in place for
single sign on /central auth of web apps/services:
http://www.yale.edu/tp/auth/cas20.html
http://www.ja-sig.org/products/cas/index.html
-=john andrews
http://www.johnon.com
R. Mariotti r.mariotti-at-fdcx.net |nyphp dev/internal group use| wrote:
>Gentlemen;
>
>Subscribing and reading this list for some time now there is quite a bit
>of very valuable and useful info coming across.
>
>I value your professional responses and would like to call upon them at
>this time?
>
>In my position as primary designer/developer I have been challenged with
>designing/developing a new central authentication facility/mechanism for
>all applications on our Intranet. We run several departments/divisions
>that have access to both their own unique and common apps, all delivered
>via Apache.
>
>Currently each has its own style/type of authentication and
>authorizations and it has become very cumbersome and very unmanageable.
>
>I thought with this new challenge I could wipe the slate clean and
>design something that could be used for all new development and apps and
>also be retro fit into the old apps over time.
>
>Therefore I was wondering what other firms are doing to address this out
>there? Immediately I can come up with a multitude of ways, but what is
>the norm? What is the standard? what is scalable and trasportable?
>
>It is important to know that we are a 100% Linux and OSS shop with the
>exception of some 3rd party software and what ever is done must continue
>using oss.
>
>I was thinking of an LDAP solution and creating one or more php modules
>to allow central access (i.e.: an app requires user authentication: it
>includes_once or exec's the central module to accomplish then and stores
>a returned token or something with the session to determine successful
>authentication and permissions.
>
>I would appreciate ANY ideas that any of you may have to address this
>and links to any sampes, templates, etc that would help.
>
>Thank you again for any and all recommendations you can provide.
>
>
More information about the talk
mailing list