mannobug wrote:
hello all,
i kindly wanted to submit you a question. I have to decide if my application
has to make the authentication using the classical method, via jdbc to DBMS,
or, I would be more directed toward the use of an external component, a LDAP
server. Someone of you has used this type of solution, maybe using the
implementation of LdapPasswordAuthenticationDao? I think that this solution
it's more safety and versatile in an university contest. I thought that
office (secretary of department, for example) can use LDAP more easily than a
DBMS; for example using the info of users to send mail or something else
regard office operation, they just open their mail client (e.g.) and connect
to LDAP server.
Do you think it can be a good idea?
thanks everybody.
Kind regards
It really depends on whether your users will be requiring access solely
to webapps that you can integrate with Acegi Security and/or CAS, or
whether you'd like those same users to be able to access Unix logins,
mail servers etc via non-HTTP means. If you want the broadest possible
use of the login information, LDAP is a good base. If you're only
concerned with a campus-wide series of webapps, using Acegi Security
with CAS is probably best. Or, if you just want a single application to
be secured, Acegi Security on its own would be easiest. I'm not sure
administering an LDAP server would be easier for administrative
assistants than say using a custom webapp that manages the
authentication information in a DBMS. Most universities use some form of
LDAP server, and given it's the most flexible approach, you're probably
best of putting the authentication data in there, and using Acegi
Security with its CAS module to handle most or all of your webapps.
Best regards
Ben
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
