Ludovic Dubost wrote:
Hi,
If you setup an authentication which correctly sets the REMOTE_USER
field then you should be able to use it with XWiki. You can then use the
AppServerTrustedAuthentication module to accept your user and create
it's user page. You can activate it using this in xwiki.cfg
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl
Implementing XWiki in Kerberos itself is a lot of work and not really
usefull since you can have it in Apache or the App server.
<fsfRant>
Why not drop Windows? It's a crappy product, and there's no reason why
you should keep it. This way you'll be able to use mod_auth_kerb.
</fsfRant>
Sebastian Kannengiesser a écrit :
> Hi guys,
>
> I'm very enthusiastic about getting everything out of the XWiki
> environment I'm about to set up for my company. As a matter of fact,
> right now I'm thinking about the best solution for getting Kerberos
> authentication/authorization to work as all 12000 employees are
> already part of the company's Active Directory.
>
> I've read the XWiki article about Auth issues and am now thinking
> about what would be the best/easiest/strongest solution.
> The solution mentioned in the Wiki wants to use Apache Webserver mit
> mod_auth_kerb. As for now, I did not succeed in building a working
> mod_auth_kerb module for Win32, which somehow disencourages me to
> follow this suggestion. Anyway I wonder, whether I would only be able
> to authenticate users or whether there would be a way to have XWikis
> builtin auth features cooperate with the Kerberos mechanism. The I
> just came across "josso" which seems to a framework which can be
> deployed into a JBoss Application Server and work as an authentication
> gateway to any josso-enabled applications running on JBoss. Is XWiki
> capable of doing this? And the question about XWikis auth mechanism
> from before remains. Any other suggestions and hints for such are
> scenario from you guys are highly appreciated , since the whole
> AD/Kerberos/JBoss stuff is rather new to me. Again, many thanx in
> advance for any potential reply on this, it's really important to me.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/