We (UConn) use mod_auth_cas to secure access into Cacti, but do not need Single
Log Out (SLO) nor sending of additional parameters. We generally believe that
SLO is practically impossible, and so simply modify logout links in
applications to tell the user to close their browser. We also generally
believe that permissions and authorization decisions should be kept within each
application, as the resources and actions to which permissions are being
granted are unique to each application. Attributes (roles, etc) that help the
application make decisions may be sent, but not the permissions themselves.
And so for Cacti, we use mod_auth_cas simply to provide basic authentication,
and manage everything else within Cacti.
HTH,
-Matt
Matthew J. Smith
University of Connecticut UITS
matt.sm...@uconn.edu
________________________________________
From: Jean-Alex Philippe [jean-alex.phili...@vantrix.com]
Sent: Tuesday, March 08, 2011 12:09 PM
To: cas-user@lists.jasig.org
Subject: [cas-user] perlCAS
Allo everybody,
I'm trying to CASify CACTI, a graphing solution based on the RRDTool's
framework and running under Apache-PHP-MySQL.
As proof of concept, I used mod_auth_cas as CAS Client Library. It works well
but only sends the username to CACTI (and also, CACTI doesn't support yet the
Single Sign Out). I would like to send more information: permissions, etc.
Is there someone that has successfully integrate a CACTI, with single sign out
working well? Can someone send me a complete configuration of apache for
CACTI/mod_auth_cas?
I've also explored the possibility to use PerlCAS, but there is no concrete
documentation on it. Do you know how to configure PerlCAS?
Any help is welcome!
===========================
Software Engineer
Vantrix Corporation
http://www.vantrix.com<http://www.vantrix.com/>
--
You are currently subscribed to cas-user@lists.jasig.org as:
matt.sm...@uconn.edu
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to cas-user@lists.jasig.org as:
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
