Hi,
I just wanted to bring to your attention our approach to handing a CAS-based single-sign-on solution with drupal.
In a nutshell, we wrote an apache auth module (using mod_python's auth support, not c, though a mod_perl port would probably be a snap) that does the CAS dance, and then adapts CAS to Basic Auth (namely, it populates the REMOTE_USER variable), allowing for the ordinary drupal remote user auth product to work for auth.
I wrote this up in more detail here: http://www.ja-sig.org/wiki/display/CASC/mod_python+auth+module
We had to tweak remoteuser a bit to make it work w/ drupal 5, though the main remote user might be up to snuff
http://svn.cc.columbia.edu/viewvc/auth/drupal/trunk/?root=ccnmtl
Hope this helps, /Jonah
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Jonah Bossewitch Senior Technical Architect ccnmtl.columbia.edu jonah at ccnmtl dot columbia dot edu 212.854.1815 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I tried this with drupal to first, but because of the desire to protect some pages, but not all within drupal I abandoned it later.
FYI: I maintain a CAS module which may or may not be of interest to you. It handles cas authentication within drupal.
Dave
-----Original Message----- From: support-bounces@drupal.org [mailto:support-bounces@drupal.org] On Behalf Of Jonah Bossewitch Sent: Thursday, August 30, 2007 10:22 AM To: support@drupal.org Cc: doogieb@gmail.com; roczei@niif.hu Subject: Re: [support] Shibboleth module for drupal
Hi,
I just wanted to bring to your attention our approach to handing a CAS-based single-sign-on solution with drupal.
In a nutshell, we wrote an apache auth module (using mod_python's auth support, not c, though a mod_perl port would probably be a snap) that does the CAS dance, and then adapts CAS to Basic Auth (namely, it populates the REMOTE_USER variable), allowing for the ordinary drupal remote user auth product to work for auth.
I wrote this up in more detail here: http://www.ja-sig.org/wiki/display/CASC/mod_python+auth+module
We had to tweak remoteuser a bit to make it work w/ drupal 5, though the main remote user might be up to snuff
http://svn.cc.columbia.edu/viewvc/auth/drupal/trunk/?root=ccnmtl
Hope this helps, /Jonah
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Jonah Bossewitch Senior Technical Architect ccnmtl.columbia.edu jonah at ccnmtl dot columbia dot edu 212.854.1815 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- [ Drupal support list | http://lists.drupal.org/ ]
+1 for the CAS module - it has worked great for us at ASU, in two different authentication domains.
On 8/30/07, Metzler, David metzlerd@evergreen.edu wrote:
I tried this with drupal to first, but because of the desire to protect some pages, but not all within drupal I abandoned it later.
FYI: I maintain a CAS module which may or may not be of interest to you. It handles cas authentication within drupal.
Dave
-----Original Message----- From: support-bounces@drupal.org [mailto:support-bounces@drupal.org] On Behalf Of Jonah Bossewitch Sent: Thursday, August 30, 2007 10:22 AM To: support@drupal.org Cc: doogieb@gmail.com; roczei@niif.hu Subject: Re: [support] Shibboleth module for drupal
Hi,
I just wanted to bring to your attention our approach to handing a CAS-based single-sign-on solution with drupal.
In a nutshell, we wrote an apache auth module (using mod_python's auth support, not c, though a mod_perl port would probably be a snap) that does the CAS dance, and then adapts CAS to Basic Auth (namely, it populates the REMOTE_USER variable), allowing for the ordinary drupal remote user auth product to work for auth.
I wrote this up in more detail here: http://www.ja-sig.org/wiki/display/CASC/mod_python+auth+module
We had to tweak remoteuser a bit to make it work w/ drupal 5, though the main remote user might be up to snuff
http://svn.cc.columbia.edu/viewvc/auth/drupal/trunk/?root=ccnmtl
Hope this helps, /Jonah
Jonah Bossewitch Senior Technical Architect ccnmtl.columbia.edu jonah at ccnmtl dot columbia dot edu 212.854.1815-- [ Drupal support list | http://lists.drupal.org/ ] -- [ Drupal support list | http://lists.drupal.org/ ]
-
Jeff Beeman -
Jonah Bossewitch -
Metzler, David