You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ofbiz.apache.org by Phillip Rhodes <sp...@rhoderunner.com> on 2006/12/19 04:57:49 UTC
Authorization and SSO server for ofbiz offer
Hi,
My name is Phillip Rhodes, and I have been a java developer since '96,
and have integrated apps with Oracle 11i ERP systems, Tibco, Vertex, sso
and all kinds of interesting projects...
I have a project called "authsum" , think of it as "sum of authorizations"
http://www.authsum.org/
Good summary architecture diagram:
http://www.authsum.org/overview/index.html
In summary, it's a SSO/Identity server. It communicates with client
applications via a JDBC or Web services api to figure out what
authorizations a user has. The authorizations are stored in a lucene
index, so it's fast (given how enterprises can have complicated
group/role structures).
Anyway, just wanted to know if it would be possible to bolt this into
ofbiz. I would be willing to give the authsum code the same license
(apache). Unfortunately, it uses hibernate/spring/tapestry (open source
products) .
It would also "complicate things" because it consists of 4 different
webapps that can be run in a distributed environment. But it also has a
SSO so that it could provide SSO across ofbiz/registration/user
admin/CMS/etc...
Just putting a feeler out.
Phillip
Re: Authorization and SSO server for ofbiz offer
Posted by Torsten Schlabach <ts...@gmx.net>.
Hi Philip!
Thanks for the heads up. You project is probably something I have been
looking for for quite some time.
On the question about the fit with OFBiz:
Does OFBiz provide any means for delegating both authentication and / or
authoriation to somewhere outside it's own database right now? Does
OFBiz use JAAS for example? Could I use objects in some LDAP directory
to authenticate and / or authorize users in OFBiz?
I don't think I'd have that much of a voice here, but to me, introducing
the option to delegate AAA for OFBiz to any existing system makes all
the sense in the world. People just have too many passwords to remember.
Just my 2 cents.
Regards,
Torsten
spamsucks schrieb:
> Is springframework a problem?
>
> I could switch out hibernate to something else, since most of the fun is
> in lucene.
>
> Do you understand what authsum could bring to ofbiz? It could tell you
> what customers you can place an order on behalf of in a split second.
>
>
> Phillip
> ----- Original Message ----- From: "Jacques Le Roux"
> <ja...@les7arts.com>
> To: <of...@incubator.apache.org>
> Sent: Tuesday, December 19, 2006 4:08 AM
> Subject: Re: Authorization and SSO server for ofbiz offer
>
>
>> Phillip,
>>
>> Just about licence : only Hibernate is really a problem since it's
>> LGPL licenced
>>
>> BTW you may consider using Entity Engine in place of
>> Hibernate/Spring/Tapestry because I can't see how all that would fit
>> in OFBiz
>> :o)
>>
>> It's up to you...
>>
>> Jacques
>>
>> ----- Original Message ----- From: "Phillip Rhodes"
>> <sp...@rhoderunner.com>
>> To: <of...@incubator.apache.org>
>> Sent: Tuesday, December 19, 2006 4:57 AM
>> Subject: Authorization and SSO server for ofbiz offer
>>
>>
>>> Hi,
>>> My name is Phillip Rhodes, and I have been a java developer since '96,
>>> and have integrated apps with Oracle 11i ERP systems, Tibco, Vertex, sso
>>> and all kinds of interesting projects...
>>>
>>> I have a project called "authsum" , think of it as "sum of
>>> authorizations"
>>> http://www.authsum.org/
>>>
>>> Good summary architecture diagram:
>>> http://www.authsum.org/overview/index.html
>>>
>>> In summary, it's a SSO/Identity server. It communicates with client
>>> applications via a JDBC or Web services api to figure out what
>>> authorizations a user has. The authorizations are stored in a lucene
>>> index, so it's fast (given how enterprises can have complicated
>>> group/role structures).
>>>
>>> Anyway, just wanted to know if it would be possible to bolt this into
>>> ofbiz. I would be willing to give the authsum code the same license
>>> (apache). Unfortunately, it uses hibernate/spring/tapestry (open source
>>> products) .
>>>
>>> It would also "complicate things" because it consists of 4 different
>>> webapps that can be run in a distributed environment. But it also has a
>>> SSO so that it could provide SSO across ofbiz/registration/user
>>> admin/CMS/etc...
>>>
>>> Just putting a feeler out.
>>> Phillip
>>>
>>
>
Re: Authorization and SSO server for ofbiz offer
Posted by spamsucks <sp...@rhoderunner.com>.
Is springframework a problem?
I could switch out hibernate to something else, since most of the fun is in
lucene.
Do you understand what authsum could bring to ofbiz? It could tell you what
customers you can place an order on behalf of in a split second.
Phillip
----- Original Message -----
From: "Jacques Le Roux" <ja...@les7arts.com>
To: <of...@incubator.apache.org>
Sent: Tuesday, December 19, 2006 4:08 AM
Subject: Re: Authorization and SSO server for ofbiz offer
> Phillip,
>
> Just about licence : only Hibernate is really a problem since it's LGPL
> licenced
>
> BTW you may consider using Entity Engine in place of
> Hibernate/Spring/Tapestry because I can't see how all that would fit in
> OFBiz
> :o)
>
> It's up to you...
>
> Jacques
>
> ----- Original Message -----
> From: "Phillip Rhodes" <sp...@rhoderunner.com>
> To: <of...@incubator.apache.org>
> Sent: Tuesday, December 19, 2006 4:57 AM
> Subject: Authorization and SSO server for ofbiz offer
>
>
>> Hi,
>> My name is Phillip Rhodes, and I have been a java developer since '96,
>> and have integrated apps with Oracle 11i ERP systems, Tibco, Vertex, sso
>> and all kinds of interesting projects...
>>
>> I have a project called "authsum" , think of it as "sum of
>> authorizations"
>> http://www.authsum.org/
>>
>> Good summary architecture diagram:
>> http://www.authsum.org/overview/index.html
>>
>> In summary, it's a SSO/Identity server. It communicates with client
>> applications via a JDBC or Web services api to figure out what
>> authorizations a user has. The authorizations are stored in a lucene
>> index, so it's fast (given how enterprises can have complicated
>> group/role structures).
>>
>> Anyway, just wanted to know if it would be possible to bolt this into
>> ofbiz. I would be willing to give the authsum code the same license
>> (apache). Unfortunately, it uses hibernate/spring/tapestry (open source
>> products) .
>>
>> It would also "complicate things" because it consists of 4 different
>> webapps that can be run in a distributed environment. But it also has a
>> SSO so that it could provide SSO across ofbiz/registration/user
>> admin/CMS/etc...
>>
>> Just putting a feeler out.
>> Phillip
>>
>
Re: Authorization and SSO server for ofbiz offer
Posted by Jacques Le Roux <ja...@les7arts.com>.
Phillip,
Just about licence : only Hibernate is really a problem since it's LGPL licenced
BTW you may consider using Entity Engine in place of Hibernate/Spring/Tapestry because I can't see how all that would fit in OFBiz
:o)
It's up to you...
Jacques
----- Original Message -----
From: "Phillip Rhodes" <sp...@rhoderunner.com>
To: <of...@incubator.apache.org>
Sent: Tuesday, December 19, 2006 4:57 AM
Subject: Authorization and SSO server for ofbiz offer
> Hi,
> My name is Phillip Rhodes, and I have been a java developer since '96,
> and have integrated apps with Oracle 11i ERP systems, Tibco, Vertex, sso
> and all kinds of interesting projects...
>
> I have a project called "authsum" , think of it as "sum of authorizations"
> http://www.authsum.org/
>
> Good summary architecture diagram:
> http://www.authsum.org/overview/index.html
>
> In summary, it's a SSO/Identity server. It communicates with client
> applications via a JDBC or Web services api to figure out what
> authorizations a user has. The authorizations are stored in a lucene
> index, so it's fast (given how enterprises can have complicated
> group/role structures).
>
> Anyway, just wanted to know if it would be possible to bolt this into
> ofbiz. I would be willing to give the authsum code the same license
> (apache). Unfortunately, it uses hibernate/spring/tapestry (open source
> products) .
>
> It would also "complicate things" because it consists of 4 different
> webapps that can be run in a distributed environment. But it also has a
> SSO so that it could provide SSO across ofbiz/registration/user
> admin/CMS/etc...
>
> Just putting a feeler out.
> Phillip
>