similar to: Rails and Single Sign On

Practically speaking, most popular IAM and SSO solutions offer OIDC SAML tokens but do not offer Kerberos tickets.? OpenID Connect is a standard which itself is based on RFC6749 (OAuth2). This provides a compelling reason to support it in addition to Kerberos.? I'll also note that OIDC tokens are easy to validate without a bidirectional trust relationship between the IdP and RP. SSH

We have just published a neat little toolkit for those of you who are interested in SAML-enabling your enterprise application. SAML is a standards-based single sign-on protocol, which allows an identity provider to securely log users into an application without a password. Some of the advantages of SAML that you avoid passwords altogether and can centralize access control at your identity

Hello Everybody, I have two rails app. Both have login pages for user authentication. The two apps have links to one another. Now what i need is when a user logs in to one app, he should not be again asked for login when he clicks the link for second app. Please tell me how to go on? Thanks in advance, Ak -- Posted via http://www.ruby-forum.com/.

Hello, I saw a lot of tutorials about setting postfix with dovecot sasl but I would like more. I want to set a SSO system with roundcube on dovecot. I would like to know how to make dovecot work with sasl or saml, not as a provider but as a service plugging on an external provider. I saw there is an EXTERNAL auth mechanism but I didn't find any doc about it. Can you help me ? Thanks.

I''m new to OmniAuth and am trying to get two sample apps (a provider and a client) to work. I have two sample apps I forked from a blog post on omniauth and single sign in: http://blog.joshsoftware.com/2010/12/16/multiple-applications-with-devise-omniauth-and-single-sign-on/ Provider - https://github.com/RobZolkos/sso-devise-omniauth-provider Client -

Hello, I have a running setup with a dovecot imap4/pop3 proxy to a few dovecot backend servers which actually store the mailboxes. This is running smoothly and allows me to transparently distribute mailboxes. I'm using some "extrafield" configured in the LDAP passdb. However, now I would like to use GSSAPI (preferred) and NTLM for single sign-on. Both are pretty straightforward to

Hello, I have a small (medium?) sized network of about 30 XP machines. About 2/3 of these machines are running Home Ed. while the other 1/3 are running Professional Ed. I currently have two samba shares, and I'm using 'user' security. I want to implement single sign on, some way, somehow. I've considered: NIS and LDAP, but I can't get the NIS pGina plugin to

Hi all, Does anyone have any experience with creating a Single sign on (SSO) concept where if someone logs in on their PC the phone next to that PC is also automatically assigned to that user? TIA, Patrick

Announcement: The self service can be configured for passwordless SSO with Okta/OpenID. PHP 8.3 is supported and a new cron job can deactivate inactive accounts based on lastBind overlay data. This is a test version. Please report any issues till 2024-03-12. Full changelog: https://www.ldap-account-manager.org/lamcms/changelog Download:

Announcement: The self service can be configured for passwordless SSO with Okta/OpenID. PHP 8.3 is supported and a new cron job can deactivate inactive accounts based on lastBind overlay data. There is also a security fix included. Full changelog: https://www.ldap-account-manager.org/lamcms/changelog Download: https://www.ldap-account-manager.org/lamcms/releases Features: * management

On Thu, 2019-10-10 at 21:24 -0300, Thiago Anderson Santos via samba wrote: > Hello everyone, > I received a somewhat strange and complicated demand today. > > The idea of the manager is to use samba as a domain server but the > directory tree (authentication and authorization of users) is on an > external SAML server using keycloak. The samba will pass only GPO. > > Is

Hello everyone, I received a somewhat strange and complicated demand today. The idea of the manager is to use samba as a domain server but the directory tree (authentication and authorization of users) is on an external SAML server using keycloak. The samba will pass only GPO. Is this possible? As far as I've seen samba works the version of Windows Active Directory as well, and I've

thanks, I believe I will need to do an Adfs for this kind of authentication. I found nothing in documented about federation service, is it possible to do samba? Thiago Em sex, 11 de out de 2019 00:16, Andrew Bartlett <abartlet at samba.org> escreveu: > On Thu, 2019-10-10 at 21:24 -0300, Thiago Anderson Santos via samba > wrote: > > Hello everyone, > > I received a

Hai Jim, what is your looking for. Im using a SSO for my Zarafa mail server. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Jim Seymour >Verzonden: maandag 31 augustus 2015 21:21 >Aan: samba at lists.samba.org >Onderwerp: [Samba] Samba AD PDC , LDAP and Single-Sign-On >(was: re: Samba Internal DNS vs. BIND_DLZ)

On Tue, 31 May 2016, Alex wrote: > Hi, > > Is it possible to query an Exchange server for its user list via ADFS > using samba? > > I'm interested in integrating this support with postfix on my fedora > system instead of having to maintain the list in Exchange and the list > as a map in postfix. > > I really don't know much about Exchange and whether/how this

I have installed ruby, gem and rails. I am trying to create a new project and I get some error messages. undefined method `write_inheritable_attribute'' for Rails::Generator::Base:Class (NoMethodError) Am I missing something? regards, Arnaud PS: detail of the error message I get. $ ruby /usr/local/lib/ruby/gems/1.8/gems/rails-0.12.1/bin/rails

Hello, thanks for the time to read this. I am doing a proof of concept in the following context. I have a NT 4.0 domain and because I don't want AD, I am moving towards a MIT Kerberos managed domain which still gives me SSO and thru kerberized SAMBA, file sharing. What I have setup so far is XP workstations SSO into the MIT Kerberos domain, I can access shares on the Samba server

I'm very confused. I have a Samba4 AD/DC which works great for Windows Authentication with our Windows 7 workstations. Now, I am trying to implement single-sign-on for our coming-soon Linux workstations. All web documentation I've so far found on this references OpenLDAP as the server and describes server-side commands such as kadmin and slapd-config to get things set up on the

We have a network of PCs running XP and servers running Win 2k and Win 2003. User Account management is done with Active Directory (AD). We want to add some Sun Solaris computers to this network. One of the network guys said that Samba could be used as a single sign on solution for a network of Windows and Solaris computers. He said that Samba 3.x provided the capability to use Active

It's very difficult at least. I can't instantly think any sensible way forward, but you might be able to get somewhere using %a variable. Aki > On December 31, 2016 at 11:38 AM mj <lists at merit.unu.edu> wrote: > > > Hi, > > Does the lack of replies mean that what I'm asking is not possible? > > (or am I missing something SO obvious that nobody