Single Sign On for linux

thanhdat · 07-21-2009, 08:26 AM

Hi gurus,
I'd like to know your opions about Single Sign On (SSO) for linux (Debian). In my company, clients want to access to different services (FTP, HTTP, Mail, Web Applications ). I think about OpenLDAP and Proxy (Squid, Vulture) to resolve this problem but I don't know if they are secure. Are there others solutions for this SSO problem ? The more secure, the better it is.
Any suggestion will be welcome and thankful.
Kind regards,
Thanh Dat

Simon Bridge · 07-21-2009, 09:51 AM

They are as secure as you want them to be. Some companies even have packaged solutions.

Example:
http://www.centos.org/docs/5/html/De...US/sso-ov.html

However, there are so many possible configurations there is no way to advise you.

thanhdat · 07-21-2009, 10:28 AM

Thank you for your reply,
I see that RHEL supports actually: Login, Screensaver, Firefox and Thunderbird and not other services °__°
Do you have any reference for Debian ?

Simon Bridge · 07-21-2009, 11:08 AM

There is a wonderful, if slightly worrying, service these days called "google".

Learn how to use kerberos with OpenLDAP - and keep in mind what you want to do rather than how you want to do it. It's all the same programs on debian as on redhat - you just pick your configuration for your needs.

You may not find a step-by-step howto for you exact requirements - be prepared to adapt.

thanhdat · 07-22-2009, 04:14 AM

Thanks for your advice, I'm googling about Kerberos and OpenLDAP.