Nov 07 2005
Secure Single Sign-on
Paranoid Penguin - Single Sign-on and the Corporate Directory, Part I | Linux Journal
Lately I’ve been doing some research on how to create a secure, multiplatform centralized password and authentication managment solution. Oh, and did I mention it has to be on a shoe-string budget too? So of course, I’m looking at open source options.
I don’t have a lot of experience with LDAP and Kerberos, so having a step-by-step article like this to draw on helps an awful lot. The two aspects of my own situation that this doesn’t address are implementation over a WAN link and integration with Windows Active Directory.
For the WAN solution, I might use something like Stunnel (www.stunnel.org), a program that creates an SSL-based tunnel for any protocol and works with Windows and Linux. LDAP and Kerberos both offer plenty of options for Windows/Linux integration, I’ve just never done it before. I’ll post any articles I find on the subject here.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}