Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / May 2006

Tip: Looking for answers? Try searching our database.

cross domain single sign-on with JAAS

Thread view: 
Stian Lavik - 24 May 2006 13:51 GMT
We are working on integrating a java (JSP) based webapp and a PHP based
webapp. One of the things we want to do, is to facilitate a single
sign-on between the two. We plan on doing it by letting the PHP webapp
keep track of usernames and passwords for the java webapp. By clicking
on a URL in the PHP webapp, the user shall then be taken to the java
webapp, automatically authenticated and be logged in.

The problem is that it seems JAAS will not accept this kind of remote
login requests, even if the username and the password is present in the
request. Have crawled the web to find some solution to this cross domain
single sign-on with JAAS, but without any luck. Anyone here with ideas?

Cheers,
Stian
Danno - 24 May 2006 17:08 GMT
So can use a servlet thats using JAAS to authenticate and authorize the
login and from there store a cookie stating that this person is valid.
The PHP side can check to see if that cookie is there and call the java
servlet as neccessary? I wouldn't recommend using j_security_check
since you need information outside of the container for your PHP, you
would have to make your own servlet.


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.