Liferay Domino SSO

[Stefan Muecke, módosítva 12 év-val korábban]

Hello,

we would like to set-up Liferay (Tomcat) with an Domino (8.5) and Kerberos SSO.

We do have an Microsoft Active Directory 2008 - where all the Users log in (Windows)
and we also have a Domino Environment, where the user data (email, job title ...) is located.

So the mechanism should work like with the Domino Web Server.
There the Domino User is matched to the Kerberos Ticket, gotten from the AD, so the user then is automatically authenticated.
The only password he has to type in is the Windows-login.
Is there a chance to do this with liferay?

I can't even get the normal LDAP working when using Domino.
Is there something special to take care about?

Many thanks in advance.

[Mika Koivisto, módosítva 12 év-val korábban]

Liferay doesn't have Kerberos support but you could get that working through JAAS. See http://stackoverflow.com/questions/339101/tomcat-authentication-using-spnego-kerberos-and-delegation

[Victor Zorin, módosítva 12 év-val korábban]

This is what we have done in similar environments:
1). Active Directory + Domino, and
2). Novell eDirectory/Netware + Domino:

- All user synchronization was made using LDAP setup (AD for Windows, eDirectory for Novell), as this is the primary source of user control (userId and password).
- Auto-login for AD uses NTLM
- Auto-login for Novell uses Novell Netware Liferay plugin
- For domino email, we use Lotus Notes Summary Liferay portlet
- For domino contacts, we use Domino Contacts Liferay portlet
- For additional synchronisation of user data with Domino we use User hooks (onCreateXXX)

[Madhura Raut, módosítva 12 év-val korábban]

Victor Zorin:

This is what we have done in similar environments:
1). Active Directory + Domino, and
2). Novell eDirectory/Netware + Domino:

- All user synchronization was made using LDAP setup (AD for Windows, eDirectory for Novell), as this is the primary source of user control (userId and password).
- Auto-login for AD uses NTLM
- Auto-login for Novell uses Novell Netware Liferay plugin
- For domino email, we use Lotus Notes Summary Liferay portlet
- For domino contacts, we use Domino Contacts Liferay portlet
- For additional synchronisation of user data with Domino we use User hooks (onCreateXXX)

Hi,

I want to acheive SSo on my liferay so That users once login in system (windows or linux), and then in browser on enter in Liferay portal it didn't ask about username/password. Can you tell me stepwise how to acheive this?