You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Ksenia Marasanova <ks...@ksenia.nl> on 2004/05/23 23:00:00 UTC
[users@httpd] digest authentication across sites
Hi all,
I am looking for authentications system to authorize users across
multiple sites. I want this functionality:
- User logs in on www.xyz.com and is authorized for two sites:
www.xyz.com and www.abc.com.
- When he clicks on a link to www.abc.com, no authentication dialog is
shown again.
If I am correct, it is possible with digest authentication. It seems
from the docs that mod_auth_digest is still "experimental".
That's why I'd like to know - do you people use this module? Does it
supported well by major browsers (i am particularly interested in IE
and Safari)? Is there any alternative solution?
Thanks in advance for any tips!
Ksenia
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Eugene Lee <li...@fsck.net>.
On Mon, May 24, 2004 at 12:46:16AM +0300, Ksenia Marasanova wrote:
:
: >[snip]
: >
: >Best Alternatives is Basic Authentication over HTTPS.
:
: But how can I use Basic Authentication across multiple sites?!
SSL doesn't work with virtual hosts. That leaves two options:
Option #1: Make sure each site gets its own unique IP address.
Option #2: If Option #1 is not available, then create a unique
individual directory for each site that can then be
individually configured for basic authentication.
--
Eugene Lee
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Ksenia Marasanova <ks...@ksenia.nl>.
> [snip]
>
> Best Alternatives is Basic Authentication over HTTPS.
But how can I use Basic Authentication across multiple sites?!
>
> There is a fix for IE in Apache 2.1 (CVS), but it is not yet in 2.0.XX:
> http://issues.apache.org/bugzilla/show_bug.cgi?id=27758
No problem here... we don't use query_string at all :)
Thanks!
Ksenia.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Nick Kew <ni...@webthing.com>.
> > If I am correct, it is possible with digest authentication. It seems
>
> Not well Supported by Internet Explorer. Not Sure about Safari. Works
> fine in Recent Mozilla Based Browsers and Konqueur.
I'm using it live, and IE users report it working fine for them.
Can't speak for Safari, but Konqueror has supported it for as long as
it's existed as a serious web browser, so for Safari to have lost it
would seem seriously perverse.
--
Nick Kew
Nick's manifesto: http://www.htmlhelp.com/~nick/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Paul Querna <ch...@force-elite.com>.
On Mon, 2004-05-24 at 00:00 +0300, Ksenia Marasanova wrote:
> Hi all,
>
> I am looking for authentications system to authorize users across
> multiple sites. I want this functionality:
>
> - User logs in on www.xyz.com and is authorized for two sites:
> www.xyz.com and www.abc.com.
> - When he clicks on a link to www.abc.com, no authentication dialog is
> shown again.
>
> If I am correct, it is possible with digest authentication. It seems
> from the docs that mod_auth_digest is still "experimental".
> That's why I'd like to know - do you people use this module? Does it
> supported well by major browsers (i am particularly interested in IE
> and Safari)? Is there any alternative solution?
Not well Supported by Internet Explorer. Not Sure about Safari. Works
fine in Recent Mozilla Based Browsers and Konqueur.
Best Alternatives is Basic Authentication over HTTPS.
There is a fix for IE in Apache 2.1 (CVS), but it is not yet in 2.0.XX:
http://issues.apache.org/bugzilla/show_bug.cgi?id=27758
-Paul Querna
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Ksenia Marasanova <ks...@ksenia.nl>.
>> I am looking for authentications system to authorize users across
>> multiple sites.
> I believe what you are describing is Single Sign On (or SSO, for
> short). I am sure a little googling on that name will give you the
> info you are wanting.
>
>
Thank you for this tip.
If anyone interested, those sites provide links to some open-source SSO
solutions:
http://et.aset.psu.edu/initiatives/credential/publications/index.shtml
http://middleware.internet2.edu/webiso/
Ksenia.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] digest authentication across sites
Posted by Aaron W Morris <aa...@mindspring.com>.
Ksenia Marasanova wrote:
> Hi all,
>
> I am looking for authentications system to authorize users across
> multiple sites. I want this functionality:
>
> - User logs in on www.xyz.com and is authorized for two sites:
> www.xyz.com and www.abc.com.
> - When he clicks on a link to www.abc.com, no authentication dialog is
> shown again.
>
> If I am correct, it is possible with digest authentication. It seems
> from the docs that mod_auth_digest is still "experimental".
> That's why I'd like to know - do you people use this module? Does it
> supported well by major browsers (i am particularly interested in IE and
> Safari)? Is there any alternative solution?
>
> Thanks in advance for any tips!
>
> Ksenia
>
I believe what you are describing is Single Sign On (or SSO, for short).
I am sure a little googling on that name will give you the info you
are wanting.
--
Aaron W Morris <aa...@mindspring.com> (decep)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org