Mailing-List: contact user-help@roller.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@roller.apache.org
Received-SPF: pass (athena.apache.org: domain of snoopdave@gmail.com
 designates 66.249.82.228 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=mHcfAdTY3KOZPW+lh3tee7ufJ1y+D6OMLL9LR5/dVwTVnxoCee4541+w2cQqzHVF9V8XJGAJyh4qx9/TRRr+caq6f5eS7fh4bFKZQeTjZBJSzbpmthe+NWCZzs/H0ENwQKPxWpvIBhBwhddA4Z51DxHPRqYlTkODgWAZDBSnGH4=
Message-ID: <8fb9ac720708111911u1b301efr2070aaabfb61abda@mail.gmail.com>
Date: Sat, 11 Aug 2007 22:11:48 -0400
From: Dave <snoopdave@gmail.com>
To: user@roller.apache.org
Subject: Re: example config for using CAS for SSO with Roller
In-Reply-To: <46BDD224.4080804@cpphacker.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <46BD244C.6020509@cpphacker.co.uk>
	 <46BDD224.4080804@cpphacker.co.uk>

On 8/11/07, Phillip Rhodes <mindcrime@cpphacker.co.uk> wrote:
> A few extra note and points of clarification... anybody who's
> trying to implement SSO probably already understands these
> issues (or at least these kinds of issues) but just in case it
> will help somebody:

Thanks for posting these notes Phillip.


> This configuration still uses the same roller database tables
> and information for authorization.  That is, after a user is
> authenticated using CAS, the code will try to look that username
> up in the roller db, in order to set the authorities for the
> user.  Additionally, I imagine the Roller code - at some level - expects
> entries in whichever table it uses for user information so it can
> maintain associations between a given user and their blog, etc.

I hope to be breaking some of those associations in 4.1 and make it
possible to externalize Roller's user and permissions management.
Check the proposal here:

http://cwiki.apache.org/confluence/display/ROLLER/Proposal+Externalize+User+And+Permissions+Management

- Dave