Re: [cas-user] Group-based authorisation with mod_auth_cas and SPNEGO/LDAP/AD

2011-06-09 Thread Philippe MARASSE
Le 08/06/2011 17:55, David Hawes a écrit : On 06/08/2011 10:00 AM, Philippe MARASSE wrote: Hello, In our organization, we use CAS with AD (smartcard and login/password login, but not SPNEGO), and 2 different techniques to manage authorization through group membership : - client application i

Re: [cas-user] Group-based authorisation with mod_auth_cas and SPNEGO/LDAP/AD

2011-06-08 Thread David Hawes
On 06/08/2011 10:00 AM, Philippe MARASSE wrote: > Hello, > > In our organization, we use CAS with AD (smartcard and login/password > login, but not SPNEGO), and 2 different techniques to manage > authorization through group membership : > - client application is CAS aware => SAML ticket validati

Re: [cas-user] Group-based authorisation with mod_auth_cas and SPNEGO/LDAP/AD

2011-06-08 Thread Philippe MARASSE
Hello, In our organization, we use CAS with AD (smartcard and login/password login, but not SPNEGO), and 2 different techniques to manage authorization through group membership : - client application is CAS aware => SAML ticket validation can provide attributes : groups, given name, display n

[cas-user] Group-based authorisation with mod_auth_cas and SPNEGO/LDAP/AD

2011-06-08 Thread Nicolaie
Hello all, after a while struggeling with SPNEGO / CAS and Confluence it works now really like a charm without any user-interaction. Now I would like to expand the scope to an Apache Server with mod_auth_cas by giving acces to authorized users to some group subdirectories. The Groups can be retri