Problem: Single Sign On for linux


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users Problem: Single Sign On for linux
# 1  
Old 07-21-2009
Problem: Single Sign On for linux

Hi gurus,
I'd like to know your opions about Single Sign On (SSO) for linux (Debian). In my company, clients want to access to different services (FTP, HTTP, Mail, Web Applications ). I think about OpenLDAP and Proxy (Squid, Vulture) to resolve this problem but i'm not sure if they can. Are there others solutions for this SSO problem ? The more secure, the better it is.
Any suggestion will be welcome and thankful.
Kind regards,
Thanh Dat
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Linux expand dollar sign in single quotes

I am trying to get a dollar sign variable to be expanded in single quotes. Not sure what I am doing wrong. I have tried every way I can think of. for i in `cat file1` do for j in `cat file2` do ssh $i 'systemctl is-enabled "${j}" '; done done... (4 Replies)
Discussion started by: cokedude
4 Replies

2. UNIX for Advanced & Expert Users

Linux dollar sign in front of directory

I'm looking at a config file with dollar signs. What do the dollar signs mean in front of a directory? dir = ./demoCA # Where everything is kept certs = $dir/certs # Where the issued certs are kept crl_dir = $dir/crl # Where the issued crl are kept new_certs_dir = $dir/newcerts # default... (1 Reply)
Discussion started by: cokedude
1 Replies

3. Cybersecurity

differences between Shibboleth and Single Sign On

Could someone please explain to me the difference between Shibboleth and Single Sign On? How are they related? Thank you! (1 Reply)
Discussion started by: onlinelearner02
1 Replies

4. Linux

Linux command to find and replace occurance of more than two equal sign with "==" from XML file.

Please help me, wasted hrs:wall:, to find this soulution:- I need a command that will work on file (xml) and replace multiple occurrence (more than 2 times) Examples 1. '===' 2. '====' 3. '=======' should be replaced by just '==' Note :- single character should be replaced. (=... (13 Replies)
Discussion started by: RedRocks!!
13 Replies

5. Solaris

Solaris Single Sign on options

We are looking for implementing solaris single sign on with AD in our environment which as few hundred Solaris hosts and couple of hundred solaris zones ..IS there any third party software for the same or we can do it by just making the solaris servers as AD clients ? Any help is appreciated. (1 Reply)
Discussion started by: fugitive
1 Replies

6. UNIX for Dummies Questions & Answers

Sign up address for linux forum eNews

Does anyone have this handy Thanks (0 Replies)
Discussion started by: 77yrold
0 Replies

7. UNIX for Dummies Questions & Answers

are dropped packets a sign of network problem?

in a xen environment , i see a lot op dropped packets via netstat -i Is this a sign of network problems, or is it normal to see this kind of numbers? i'm not sure how to interprete the data. is this normal, bad, critical. What are your stats on this? I guess i have a xen issue of some sort,... (1 Reply)
Discussion started by: progressdll
1 Replies

8. Shell Programming and Scripting

Sign on/Sign off logging script

I'd like to make a script that I can execute every time I sign on to my linux box that keeps track of the time and allows to me to add a remark to a file. So basically once I log in, I run the script, and it outputs the date and time to a text file (log.txt). But that isn't my problem. I need... (1 Reply)
Discussion started by: Glider
1 Replies
Login or Register to Ask a Question
kadmin_util(8)						    BSD System Manager's Manual 					    kadmin_util(8)

NAME
kadmin_util -- Kerberos -- Open Directory Single Sign On SYNOPSIS
kadmin_util -a principal_name -d principal_name [-r REALM] [-h] [-p] [-v debug_level] DESCRIPTION
kadmin_util is a tool for managing the access control list used by kadmind to control which users have the ability to modify the Kerberos database of user information. It will look at the acl_file item in the realm section of the kdc config file to determine which acl files to update. -a principal_name Adds the given principal name to the acl file with administrator privs. -d principal_name Removes the given principal name from the acl. (-a & -d are mutually exclusinve) -h Send a HUP signal to kadmind if the update completes without errors -p Write the output error to standard out in an XML Plist format -r REALM Denotes which realm to update. If this parameter is omitted, kadmin_util will operate on the first realm it finds in the kdc config file. To operate on all the available realms use '*' for the realm name -v debug_level Sets the debug level (1 = progress >1 for more detail) EXAMPLES
To add adminuser@REALM.COM to the acl file as kerberos administrator for realm REALM.COM kadmin_util -a adminuser@REALM.COM -r REALM.COM To remove adminuser@REALM.COM from all the realms serviced by this kdc (you need the quotes around the * to keep the shell from substituting filenames) kadmin_util -d adminuser@REALM.COM -r '*' FILES
/var/db/krb5kdc/kadm5.acl the standard acl file location /var/db/krb5kdc/kdc.conf the default kdc config file DIAGNOSTICS
You can add -v debug_level to any kadmin_util command. Debug level 1 provides status information, higher levels add progressivly more levels of detail. NOTES
The kadmin_util tool is used by the Apple Single Sign On system to set up a KDC integrated with the rest of the Single Sign On components. SEE ALSO
DirectoryService(1), kerberos(1), kadmind(8), kerberosautoconfig(8), krbservicesetup(8), krb5kdc(8), sso_util(8) Darwin June 2, 2019 Darwin