Re: authentification question ...

"Mick Knutson" <[email protected]> Thu, 25 Jan 2007 06:55:17 -0800
Newsgroups gmane.comp.cms.jahia.devel
Message-ID <[email protected]>
ntlm is super weak. if you need to encrypt the data, use md5 or Kerberos to
get to AD.


On 1/25/07, Gustav <[email protected]> wrote:
>
>
> Hi .. thanks for the reply ...
>
> The situation is the following: We have two connected subnets. One of them
> uses authentification through a NTLM server, and the other through the new
> LDAP Active directory. We need that both subnets can access the same
> jahia,
> and therefore I supose that jahia should manage ntlm and ldap
> authentification simultaneously. The doubt I have is: can Jahia
> simultaneously manage the two kinds of authentification ?? How can I
> configure it in the authentification pipeline ??
>
> We have these doubts independently of browser (We dont worry if the
> browser
> shows login window or not), I mean the questions are related only to
> server
> side.
>
> Thanks again
> Regards
>
>
>
> Serge Huber wrote:
> >
> >
> > Hi,
> >
> > NTLM works in conjunction with a configuration to a connection to an
> > ActiveDirectory, configured through the LDAP connector in Jahia. Do you
> > mean you want to access an external LDAP different than the
> > ActiveDirectory one ?
> >
> > Because of the challenge-response nature of NTLM though, once it is
> > configured to use NTLM, if a client doesn't support it, he will get a
> > popup that will ask for his password.
> >
> > Regards,
> >   Serge Huber.
> >
> > Gustav wrote:
> >> Hi ...
> >>
> >> we saw in doc that Jahia supports NTLM and LDAP authentification ...
> >> In our case we're going to make a portal banking site, with can be
> >> accesed
> >> from two different networks .. one of them using NTLM and the other
> using
> >> LDAP ...
> >>
> >> can we do this ??
> >>
> >> thanks
> >>
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/authentification-question-...-tf3083984.html#a8600368
> Sent from the Jahia - Dev mailing list archive at Nabble.com.
>
>


-- 
Thanks

DJ MICK

(Mick Knutson)
http://www.djmick.com
http://www.myspace.com/djmick_dot_com
http://www.thumpradio.com