Single-signon (Subversion, Apache etc)

[Greg Rundlett (freephile)]

I'm in the middle of rolling out an OpenLDAP server to act as the
heart of my 'single sign-on' infrastructure in an intranet environment
that includes shared network storage and web application access plus
services like version control.  Unfortunately, many of the "howto"s
out there reference older or deprecated systems

* LDAP is now on version 3 (2 is officially outdated)
* LDAP now uses ldap as it's configuration backend (a recursive /
chicken & egg problem for those who are just getting started)
* the wikipedia page references Howtos that are outdated or incomplete

The Apache Directory project talks about a "Renaissance of LDAP" [1]
which makes me wonder: "What do people do these days to establish a
single source of Authentication, Authorization, Group and resource
information?

The debathena project looks promising in the sense of established and
functionally complete but also very light on documentation.

I guess part of my problem is that I'm reaching the limits of my
System and Networking Administration skills.  :-)

Greg Rundlett

[1] http://directory.apache.org/community%26resources/ldap-renaissance.html




On Tue, Feb 9, 2010 at 7:52 PM, Richard Pieri <richard.pieri-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org> wrote:
> On Feb 9, 2010, at 4:37 PM, Rich Braun wrote:
>>
>> MIT Athena invented this technology a quarter century ago and I want it *now*.
>> Any success stories among y'all?
>
> Debathena.  It's a turnkey Project Athena package set layered on top of Ubuntu and Debian Linux.  Kerberos, AFS, everything.  You should be able to adapt it to your Kerberos realm and such.
>
> http://debathena.mit.edu/
>
> --Rich P.
>
>
> _______________________________________________
> Discuss mailing list
> Discuss-mNDKBlG2WHs at public.gmane.org
> http://lists.blu.org/mailman/listinfo/discuss
>