I am running some web apps on an iSeries running Apache at V5R2.
In order for the user to get to the 2 apps that run on the iSeries, they
first log onto the main website which is running joomla. Both the joomla
web server and all the iseries web server apps authenticate against the same
LDAP server. We have this all running fine so the user only has a single,
integrated logon for all systems. (previously each of the 4 web based
systems had their own security mechanisms).
We would like to carry the process one step further. When the user logs on,
and authenticates against the LDAP, I would like the iseries Apache server
to recognize that the user has logged in and bypass asking for the
authentication information again.
The consultant I am working with suggested:
BEGIN QUOTE
1) Modify Joomla to set root domain cookies as well for the username and the
encrypted password.
2) Have any other system read these root domain cookies and check the
authentication against the ldap prior to prompting for a username and
password to be entered.
END QUOTE
Any idea how I would implement this on the iSeries? Anyone have a better or
different way to handle this without dismantling our current security scheme
using the LDAP?
Thanks
Carl J. Galgano
EDI Consulting Services, Inc.
770-422-2995
F: 678-881-9224
http://www.ediconsulting.com
530 Roselane Street
Marietta, GA 30060
midrange.com
