[cas-dev] CAS in an NT authentication domain

[Jérôme Fraysse]

Hi,
 
I would like to submit the following case to the community :
 

*	We plan to run LifeRay portal with CAS
*	This infra should be included in an intranet with Microsoft Active
Directory/Domain Controller.
*	Each user open a session with is AD account on the network through
the Kerberos mechanism embedded in the Domain Controller.
*	When an user already "windows" authenticated going to the Liferay
portal we don't want to re-authenticate him explicitly with a login prompt
from CAS.

 
Does the following is the best way to do that : Implement in front of the
liferay Portal the CasFilter to intercept the REMOTE_USER and activate the
Gateway feature in CAS in order to send the credentials to the Domain
controller.
 
If this approach is not correct could you explain how I can make this work ?
 
Best regards,
Jérôme Fraysse
 
 
 
 


This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient,  you are not authorized to read, print, retain, copy, disseminate,  distribute, or use this message or any part thereof. If you receive this  message in error, please notify the sender immediately and delete all  copies of this message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20061215/6d9f00f6/attachment.html