single sign-on

[jgao]

Is there any single sign-on mechanism/method for scalix webmail so users can get into their webmail directly from other web applications?

Thanks.

[heupink]

maybe take a look at this:

http://a-select.surfnet.nl/

mj

[jch]

I haven't looked at the detail of this, but I integration would involve writing a PAM module that hooks into the A-select stuff. You'd still need to provide a user name so that the PAM module has something to work with though. The PAM documentation tells you how to write PAM modules and stuff in the man pages for sxpamauth, sxpampasswd and om_debug (all three new in Scalix 10) will give additional useful information.

Closer integration with A-select so you don't need to provide a user name (in much the same way that Kerberos works) would require more work for both the mail server and SWA and I haven't even glanced at how much work that would involve. Assume it's lots :-)

In answer to the original question though, there's no single-sign-on support for SWA. The server supports GSSAPI authentication but working out how to get a Kerberos ticket into a browser is tricky: I know it can be done in IE, I don't know about any other browsers but it's not made its way to the top of the pile yet.

jch

[Guest]

In answer to the original question though, there's no single-sign-on support for SWA. The server supports GSSAPI authentication but working out how to get a Kerberos ticket into a browser is tricky: I know it can be done in IE, I don't know about any other browsers but it's not made its way to the top of the pile yet.

Thanks for the update. I may try.
Jian

[jch]

Oops. I think I may have implied that single sign on was possible at the moment with SWA running in IE. It's not, but it is certainly possible for us, Scalix, to modify SWA to do that: not that we have any free time as we're all hard at work on Scalix 10's successor.

jch