By docn on

Can anyone share inputs on solving our problem at hand? We integrate Drupal with several other systems, whereas users are authenticated to Drupal when log onto the site, but users will also need to access other systems but we want to avoid logon prompts when accessing other systems. The user info will also be kept on all other systems.

We are thinking to use a LDAP to store the user db centrally, and Drupal and other systems import the user db from LDAP. Will this work? if so what modules can do this? if not, what are the alternatives?

⋅ Categories: Drupal 7.x

Comments

Kyle Meinhold’s picture

Kyle Meinhold commented

Hello Docn,

If you are interested in considering a commercial service or product to solve this problem. I am happy to speaking with you regarding your options at Ping Identity.

Solutions: http://pingidentity.com/our-solutions/
Ping Identity Resource Center: http://pingidentity.com/resource-center/

Best Regards,

Kyle

Kyle Meinhold | Sales Associate
PingIdentity | www.pingidentity.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
O: 720.317.2083
Email: kmeinhold@pingidentity.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Connect with Ping
Twitter: @pingidentity
LinkedIn Group: Ping's Identity Cloud
Facebook.com/pingidentitypage
Connect with me
LinkedIn.com/in/kylemeinhold

mpapet’s picture

mpapet commented

Two things I'm aware of:

1. You can access the session via the api. http://api.drupal.org/api/drupal/includes--session.inc

2. LDAP stores user data great, but not a great tool for managing sessions.

The tool that gives you all that session handling capability is Kerberos. Kerberos issues session tickets and handles all the authentication. LDAP just stores personal information.

3. The browser may need to be configured to support Kerberos auth depending on the environment

4. This probably means using mod_kerberos in apache. This module looks like it'll do the passing auth through to the webserver, which is going to be a big help in getting things going. http://drupal.org/project/webserver_auth

Lots of details to cover and probably a few 'gotchas.'