On Tue, 2009-06-16 at 11:43 -0500, Les Mikesell wrote:
> JohnS wrote:
> What I'm looking for is a network service that will work across apache
> and java web services (without requiring a login account) that
> transparently merges AD accounts with others that I can control
> separately, and also to be able to use those same logins and passwords
> for linux system logins where accounts are specifically created. That
> is, all AD & linux accounts should work for web services and Linux
> account logins should be able to use AD passwords where they exist.
>
> I'd think this would be a fairly common situation where the bulk of
> company operations are on desktops controlled by AD but there are some
> developers using Linux and some infrastructure resources using it
> (subversion, wikis and other web services, etc.) and some users that
> don't map to employees.
>
---
Web Services via SOAP can be your "Middle Ware" (man in the middle) to
authentication here. Your AD admin is going to have to help out in some
way for this to happen. No way around it I see. Anonymous accounts can
be mapped to the the appropiate AD account (IWAM_User - depends on
service app). Firefox can use the LDAP Plugin, Apache auth can be mapped
to LDAP on AD. Once an AD account is locked out he will know anyway.
Maybe check out MS Web Services Interface and WSDL for AD. It is just
something to really sit down and think about authentication between
mixed node systems. Can it be done? Yes. One other solution here
Enterprise wide would be Citrix.
john
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
