eDirectory SSO

Is eDirectory SSO available in 6.819? I have it turned on and my workstation is authenticated to Novell, but I am still getting challenged for my username and password.

I ran a tcpdump on the firewall and did not see any LDAP activity before the login appeared. I did see activity afterwards.

Parents

0 Gert Hansen over 18 years ago

No, NTLM and eDir SSO is still worked on.
Regards
Gert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 boquinn over 18 years ago in reply to Gert Hansen

Will eDir SSO in v7 address the performance issues with fallback to browser based authentication with people who are not logged into eDir? If a user has to enter browser credentials, they are cached at the browser but EVERY http download causes ASG to try SSO again, then fall back to browser based authentication. This brings browsing almost to a halt AND drives processor utilization on the LDAP/eDir server up to near 100%.

This issue currently keeps us from using SSO and has been acknowledged by Astaro support. I just want to make sure that there is some plan to correct it in V7.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 boquinn over 18 years ago in reply to Gert Hansen

Will eDir SSO in v7 address the performance issues with fallback to browser based authentication with people who are not logged into eDir? If a user has to enter browser credentials, they are cached at the browser but EVERY http download causes ASG to try SSO again, then fall back to browser based authentication. This brings browsing almost to a halt AND drives processor utilization on the LDAP/eDir server up to near 100%.

This issue currently keeps us from using SSO and has been acknowledged by Astaro support. I just want to make sure that there is some plan to correct it in V7.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 Gert Hansen over 18 years ago in reply to boquinn

Hi there,

yes, this issue has been fixed.

The next up2date, which should be available in the next few days, will add the whole authentication framework, including the fixed eDirectory SSO.

We use negative caching to not overload the eDirectory Servers in fallback mode.

Once ASG V7 is released, we plan to backport this fix to V6.

regards
Gert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BertJanssen over 18 years ago in reply to Gert Hansen

Hi Gert,
how about the NTLM SSO will this allso use the newer style logon instead of depending on a PDC emulator in broadcast range ?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mduran over 18 years ago in reply to BertJanssen

By the way.
The new Novell Client for Windows will have a fix for this problem. The Network address will be more often updaten. Not only during intial login.

This Client "Novell Client for Windows 4.91 SP3" will be available in the week of 20th november.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert Hansen over 18 years ago in reply to mduran

Thanks mduran,

those are good news.

We are currently investigating another issue with eDirectory on Linux servers. There the networkAddress is not coded as an IP, but as TCP with ip and port.

This will not be fixed in the next BETA up2date.

Regarding the NTLM SSO question, we have currently maintained the V6 way for now. so there are now changes yet.

But, it is on our near term Roadmap to improve that feature. The main reason why we used the old style NTLM auth back in V5 was the requirement for NT4 support, which is no longer a big issue these days.

regards Gert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel