Artifact dc1c8588d7835f2b19fa7a4820ad722fa850b464:

Ticket change [dc1c8588d7] - Ticket [ad56e8db1e] Windows Activity Directory Integration status still Open with 1 other change by ben 2011-07-21 12:03:27.

---

D 2011-07-21T12:03:27.100
J +comment \n\n<hr\s/><i>ben\sadded\son\s2011-07-21\s12:03:27\sUTC:</i><br\s/>\nOne\ssimple\sway\sof\simplementing\sthis:\r\n\r\nFossil\sis\sset\sto\suse\sdelegated\sauthentication.\sThis\srequires\sa\sshared\ssecret\sand\san\s"authentication\sURL".\sWhen\sa\suser\sasks\sto\slog\son,\sfossil\sredirects\sto\sthat\sauthentication\sURL.\r\n\r\nIn\sthis\scase,\sit'd\sbe\sa\sscript\srunning\son\sa\sWindows\sIIS\sserver,\swhich\suses\s"Integrated\sWindows\sAuthentication"\sto\sauthenticate\sthe\suser.\sIf\sa\suser\sauthenticates\ssuccessfully,\sit\sSHA1-HMAC\ssigns\sthe\susername\sand\scurrent\stime\swith\sa\sshared\ssecret,\sthen\sredirects\sthe\suser\sback\sto\sthe\sfossil\sserver.\r\n\r\nThe\sfossil\sserver\schecks\sthe\ssignature\sis\scorrect,\sthe\stime\sis\swithin\sa\sfew\sseconds\sof\sthe\scurrent\stime,\sand\sif\sso,\slogs\sthe\suser\son.\r\n\r\n
K ad56e8db1e94f8352646e9b9fdd6455c27e373bf
U ben
Z 69707b423a0a183542f14ce55a88ac35