Return-Path: Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: (qmail 23346 invoked from network); 19 Oct 2009 11:54:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 19 Oct 2009 11:54:54 -0000 Received: (qmail 66874 invoked by uid 500); 19 Oct 2009 11:54:52 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 66777 invoked by uid 500); 19 Oct 2009 11:54:52 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 66767 invoked by uid 99); 19 Oct 2009 11:54:52 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 19 Oct 2009 11:54:52 +0000 X-ASF-Spam-Status: No, hits=-2.6 required=5.0 tests=BAYES_00,HTML_MESSAGE X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of suhailski@gmail.com designates 209.85.220.206 as permitted sender) Received: from [209.85.220.206] (HELO mail-fx0-f206.google.com) (209.85.220.206) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 19 Oct 2009 11:54:50 +0000 Received: by fxm2 with SMTP id 2so5259702fxm.4 for ; Mon, 19 Oct 2009 04:54:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=Hg+JdckFAgn9j4AdurBitjxypUAkWSVBoQB95qZpr5A=; b=YDH3DcEEaR3MZoUWc6JTpINNzea7qGabPi971baIKpgKegg3ByKomIpniJIEz9Xuni OCZhGsFW2OEfSdoU6it0kmYhzau2x0hEsWXQs3SA0oqy5YFBYmYKe8B4d38cOyvjsTh7 72OpnmujM5VN5gjO2XJS6bg4D4GzOF3VccJIA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=n96yTNT1PMmloe5FhK91ydEP4x2tPr+ovxPf3qafy8/LXTWPwb4Dz+6Ruw/j+sjfRc ev2wENREh363aU7CIYlEWD+w5xEkXPCjgPhFP6sb3Ll4Dj46zO/OO1EwkuOILpRzrEwm S/WFyfqb+EMd0TUeeTAjhTEgyBRTb8EtAP8PY= MIME-Version: 1.0 Received: by 10.204.148.78 with SMTP id o14mr4838960bkv.83.1255953268622; Mon, 19 Oct 2009 04:54:28 -0700 (PDT) Date: Mon, 19 Oct 2009 12:54:28 +0100 Message-ID: Subject: Couchdb with OpenSSO From: Suhail Ahmed To: user@couchdb.apache.org Content-Type: multipart/alternative; boundary=0015175cac2e6e481f0476486802 --0015175cac2e6e481f0476486802 Content-Type: text/plain; charset=ISO-8859-1 Hi, I am looking to replacing my existing content management engine with couchdb. In order to do this properly, I would have to lock down the couchdb REST interface using OpenSSO. I would be much obliged if anyone could point out how I should go about it. There are a number of ways OpenSSO can be integrated, RPC/REST, SOAP, Native Java API etc. In my current system, both authentication and authorization is performed against OpenSSO (the reason being that the system consists of more than just the content management engine) centrally. Where would I go about plugging in OpenSSO? Should I do it at the Erlang layer? The couchdb layer or the mochiweb layer? Looking forward to hearing from you. Thanks and cheers su./hail --0015175cac2e6e481f0476486802--