Access Server Intranet public

Tuesday 05 September 2006 8:01:45 am - 4 replies

4 replies

Author	Message
Xavier Dutoit	Wednesday 06 September 2006 3:35:58 am Salut, I'd suggest you to dig a little bit around single sign on. There is a patch (or is that already on the 3.9 ?). It should do it. Please post the result of your investigation. X+ http://www.sydesy.com
Norman Leutner	Thursday 07 September 2006 7:31:09 am You can create your own SSO module as an extension and send the encrypted login data in combination with a timestamp through the header. Within your SSO extension you can compare the timestamp within the header with the current timestamp and check for a timeout of 30 second. This would reduce the sucurity issues... Mit freundlichen Grüßen Best regards Norman Leutner ____________________________________________________________ eZ Publish Platinum Partner - http://www.all2e.com http://ez.no/partners/worldwide_partners/all2e_gmbh
Norman Leutner	Thursday 07 September 2006 7:34:07 am We are currently working on a solution with RSA Secure Authentification in combination with ez 3.8, a reverse proxy and a SSO module. We'll also write an article about how we implemented the solution within the customers intranet. Maybe this will be helpfull... Mit freundlichen Grüßen Best regards Norman Leutner ____________________________________________________________ eZ Publish Platinum Partner - http://www.all2e.com http://ez.no/partners/worldwide_partners/all2e_gmbh
thomas BAILLEUL	Tuesday 12 September 2006 6:47:06 am Thx for your very helpful advice for solving my problem, the problem is our boss seem to prefer solution 1 as it would be less unsafe(articles posted are very confidential) even if it can trigger problems (it's an sql replication so external users can't logged in without modified database'tables) Nevertheless, Im tryin' thinking about the SSO module Im looking forward to hearing from your articles.

You must be logged in to post messages in this topic!