search

rev2004 / i-librarian

Automatically exported from code.google.com/p/i-librarian
0 stars 0 forks source link

Add SiteMinder / Shibboleth integration #37

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Since institutions are very concerned with security, we're having trouble 
deploying i-librarian on any of our servers. They prefer that all 
authentication be performed with CA SiteMinder or Shibboleth and the central 
database. This feature would really ease the integration of i-librarian in such 
contexts.

Original issue reported on code.google.com by jonathan...@gmail.com on 10 Oct 2012 at 2:32

GoogleCodeExporter commented 9 years ago 
Unfortunately, there are no plans to include this feature into I, Librarian. 
You can limit access to I, Librarian to only computers in your institution's 
Intranet to keep access secure.

Original comment by mku...@gmail.com on 10 Oct 2012 at 5:33

GoogleCodeExporter commented 9 years ago 
Secure access to the computer is one thing, but people tend to use the same 
passwords for multiple services, and our IT staff does not want to host a 
service where passwords are stored anywhere. 

I was looking through the code and found some LDAP interfaces with a "This is 
unmaintained; do not use!!!" warning. Is there a reason why this was abandoned?

There are already ready-to-use PHP libraries that might be easily be integrated 
with I, Librarian like SimpleSAML (http://simplesamlphp.org/) 
(http://www.zeitoun.net/articles/configure-simplesaml-1.3-sp-and-shibboleth-2.1-
idp/start)

Original comment by jonathan...@gmail.com on 15 Oct 2012 at 3:56

GoogleCodeExporter commented 9 years ago 
The passwords are stored encoded with MD5 algorithm. At no point are they 
stored in a flat text form.

LDAP was working at one point. It was integrated by one user. I don't have 
experience with LDAP, so I did not test it in the newer versions. Would LDAP 
work for you? I might be able to work with you to re-integrate it, if you have 
some experience with LDAP.

The libraries you sent are impressive, but I will not be able to test them, 
therefore their integration into I, Librarian is unlikely.

One more thing you could consider is to have only one admin account and one 
user account with enabled autosign.

Original comment by mku...@gmail.com on 26 Oct 2012 at 12:48

GoogleCodeExporter commented 9 years ago

Original comment by mku...@gmail.com on 25 Mar 2015 at 9:45