CAS Single Sign on

Frank-D 2008-05-15 13:23:13 UTC #1

Hi Developers,

there was a very interesting discussion on the french egw-list. They changed some code in order ot CASsifiy egroupware. http://www.nabble.com/eGroupWare-et-CAS-(Single-Sign-On)-to9372493s3741.html
This way and with using LDAP for groups, it is possible to crete an homogenous portal, having different applications (e.g. egroupware, phpBB, blogsomething) inside, user only have to sign on and sign out once. This way it would be very easy to integrate a forum as a egw-app. Of course you would have to install CAS-php packages, set up a CAS and LDAP server.

Is there any idea about integrating this into official trunk? This CAS-function would be a nice way to concentrate egw on the groupware part (like tasks, addresses, events, recources, mail), and to use third party apps for the rest (wiki, forum, blog, eshop, galary). For a deeper integratioin into egroupware, there would be still the possibility to write plugins/modules etc, for third party apps.

At the moment most of the top OS applications like phpBB etc already support CAS.

best regards Frank

Olivier_Berger 2008-11-15 09:53:55 UTC #2

You may also find a patch corresponding to these changes here : http://www.nabble.com/Patch-egw-1.4-tp16939160s3741p20513772.html

This way and with using LDAP for groups, it is possible to crete an homogenous portal, having different applications (e.g. egroupware, phpBB, blogsomething) inside, user only have to sign on and sign out once. This way it would be very easy to integrate a forum as a egw-app. Of course you would have to install CAS-php packages, set up a CAS and LDAP server. [/quote] This is particularly interesting whenever CAS is used with the proxy facilities as it allows both individual access to CAS-ified apps without coming from egw or through egw (acting as the auth proxy, and accessing the other apps "as" the user) all with SSO, and no longer any login+pass need. Is there any idea about integrating this into official trunk? This CAS-function would be a nice way to concentrate egw on the groupware part (like tasks, addresses, events, recources, mail), and to use third party apps for the rest (wiki, forum, blog, eshop, galary). For a deeper integratioin into egroupware, there would be still the possibility to write plugins/modules etc, for third party apps.

At the moment most of the top OS applications like phpBB etc already support CAS.

best regards Frank
[/quote]

I’d be very interested to know about such cas auth class and login/logout options integration in the code base…

Best regards,

Ralf_Becker_6 2008-11-15 11:27:46 UTC #3

Hi Olivier,

I was about to write:
it’s a bit late now to get that integrated into 1.6

I had a look at the code, and it looks really unproblematic (extra
files, simple if statement separating it from other code, off by
default), so I just committed it.

I dont think many will use it, unless the authors supply some more
documentation. Best would be a Wiki page (in english) on www.egroupware.org

Ralf

Olivier Berger schrieb:

Frank-D wrote:

Hi Developers,

there was a very interesting discussion on the french egw-list. They
changed some code in order ot CASsifiy egroupware.
http://www.nabble.com/eGroupWare-et-CAS-(Single-Sign-On)-to9372493s3741.html

You may also find a patch corresponding to these changes here :
http://www.nabble.com/Patch-egw-1.4-tp16939160s3741p20513772.html

This way and with using LDAP for groups, it is possible to crete an
homogenous portal, having different applications (e.g. egroupware, phpBB,
blogsomething) inside, user only have to sign on and sign out once. This
way it would be very easy to integrate a forum as a egw-app. Of course you
would have to install CAS-php packages, set up a CAS and LDAP server.

This is particularly interesting whenever CAS is used with the proxy
facilities as it allows both individual access to CAS-ified apps without
coming from egw or through egw (acting as the auth proxy, and accessing the
other apps “as” the user) all with SSO, and no longer any login+pass need.

Is there any idea about integrating this into official trunk? This
CAS-function would be a nice way to concentrate egw on the groupware part
(like tasks, addresses, events, recources, mail), and to use third party
apps for the rest (wiki, forum, blog, eshop, galary). For a deeper
integratioin into egroupware, there would be still the possibility to
write plugins/modules etc, for third party apps.

At the moment most of the top OS applications like phpBB etc already
support CAS.

best regards Frank

I’d be very interested to know about such cas auth class and login/logout
options integration in the code base…

Best regards,

–
Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
cell +49 (0) 170 7815917
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

Geschäftsführer Andre Keller, Nigel John Vickers,
Gudrun K. Müller und Ralf Becker
Registergericht Kaiserslautern HRB 12087

This SF.Net email is sponsored by the Moblin Your Move Developer’s challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers

Olivier_Berger 2008-11-16 17:33:40 UTC #4

Excellent. Thanks.

Best would be a Wiki page (in english) on www.egroupware.org

[/quote]
Here’s a quick and dirty attempt to be completed by interested people :
http://www.egroupware.org/egroupware/index.php?menuaction=wiki.uiwiki.view&lang=en&page=CasAuthentication

Ralf
[/quote]

Olivier_Berger 2008-11-16 17:44:07 UTC #5

May I suggest some comments in login.php/logoup.php explaining where to get phpCAS, as there’s an include of CAS/CAS.php … which may be missing whenever one tries… (and it’s here : http://www.ja-sig.org/wiki/display/CASC/phpCAS, btw) ?

Best regards

Ralf_Becker_6 2008-11-16 17:53:51 UTC #6

Hi Olivier,

I would prefer to put that in the Wiki page.

I think people will start searching the web for CAS and egroupware,
before start digging in the code.