[rt-users] Single Sign-On

[Don Vick]

Not sure if this fits for you, but we do this sort of thing with mod_perl.
Our authentication handler (a Perl module) has logic to first try a Radius
server, and then a database of people who registered via the Internet. To
get Apache to fall back to RT, you might need a combination of two RT config
settings: WebExternal Auth (to let Apache try the authent), along with
WebFallBackToInternalAuth, to let RT try if the first one fails. Haven't
tried this, but it looks promising.

On 10/20/05, Todd Chapman <todd at chaka.net> wrote:
>
> But what I want to do is have Apache try passwordless NTLM
> witn my IE client, and then if that fails let RT handle
> authentication.
>
> -Todd
>
> On Thu, Oct 20, 2005 at 03:48:05PM -0700, Nathan Oyler wrote:
> > > On Thu, Oct 20, 2005 at 01:42:44PM -0500, Nathan, Ahalya wrote:
> > > > Single Sign On can be done by using the NTLM module in apache to get
> > the
> > > > Login ID from the IE browser. You can use this id to connect to the
> > LDAP
> > > > server. The LDAP contribution on the wiki will give you information
> > > > about connecting to the LDAP server. I am guessing NTLM module uses
> > > > mod-perl , not sure if it will work with fast-cgi.
> > > >
> > >
> > > Anyone know if you can get Apache to attempt automatic authentication
> > > with IE, and if that fails fall back to letting RT do the auth?
> > >
> > > -Todd
> >
> > I do this with the LDAP overlay instead of apache.
> >
> > It attempts LDAP, and then if that fails falls back to RT for auth. It
> > may actually try RT first, then LDAP. Works though.
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Be sure to check out the RT Wiki at http://wiki.bestpractical.com
>
> Buy your copy of our new book, RT Essentials, today!
>
> Download a free sample chapter from http://rtbook.bestpractical.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20051021/effe5212/attachment.htm>