Which one is best in backend?

[Mehdi Sarmadi]

Hello Everyone

The situation:
  I have CAS 3 as central authentication server setup for one of the web
applications we have. CAS 3 uses DB as backend.

The problem:
  I'm going expand and develop more to have most of the authentications(eg..
other web appz, AD & mail-service) work as one. I mean some kind of ESSO.
  The question I'm facing at the beginning is, which is best in back end?
Kerberos? LDAP? LDAP backended Kerberos? AD itself? (by LDAP and Kerberos, I
mean non-AD service)

  I'm looking for Pros and Cons of each method, and possible integration and
security concerns.

   Any ideas/opinion/comments?
   Any one had similar experience?

TIA
Cheers
-- 
Mehdi Sarmadi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20081006/df7f3e3d/attachment.html