Integrated Windows Authentication in OFBiz

[Kaushik Chakraborty-2]

Hi,

The application which is a CMS on OFBiz uses CAS for authentication on
user's provision of username and password. The customer requires Integrated
Windows Authentication for some internal users who login to their Windows
system with the same username and password which they use to access the CMS
application.

My approach is to get the windows credentials for those users and
authenticate them from CAS, get the ticket and then pass the same to the
application. Once the ticket is available in request, the application has
functionality to use that ticket for further authorization.

Please provide any pointers, documentation or suggestion in this regard.


Regards,
Kaushik

[Shi Jinghai]

It's feasible.

You can write a new class to authen a user first to Windows, and if
failed, then to OFBiz.

What protocal to authen a user to Windows? CAS supports SPENEGO
http://www.ja-sig.org/wiki/display/CASUM/SPNEGO

Good luck,

Shi Jinghai/Beijing Langhua Ltd.

在 2010-01-11一的 14:58 +0530，Kaushik Chakraborty写道：

> Hi,
>
> The application which is a CMS on OFBiz uses CAS for authentication on
> user's provision of username and password. The customer requires Integrated
> Windows Authentication for some internal users who login to their Windows
> system with the same username and password which they use to access the CMS
> application.
>
> My approach is to get the windows credentials for those users and
> authenticate them from CAS, get the ticket and then pass the same to the
> application. Once the ticket is available in request, the application has
> functionality to use that ticket for further authorization.
>
> Please provide any pointers, documentation or suggestion in this regard.
>
>
> Regards,
> Kaushik