[opensuse] Single-signon
Is there a way to configure openSUSE (any distro version actually) to use single-signon for ALL services? After playing with AD samba, kerberos, PAM (some, I dont really know PAM yet) configurations I still have issues with the following: 1. KDE still asks for a username and password when accessing windows shares (unless I statically enter the user pass combination in kcontrol) 2. CUPS needs static username password combination to access windows (samba) printers. 3. Firefox still asks for user;pass when accessing local NTLM pages. (not a OS issue, I know) 4. Evolution saves user;pass in keyring somewhere 5. knetworkmanager saves user;pass in kwallet Everytime our IT admin forces us to change our passwords I have to manually go and change it for all of the above. And if I forget - like with CUPS - and try and print, it locks my account. I know this is a lot harder than it sounds, but why don't all apps just use something like PAM to auth user activity? Why have keyrings, wallets, registries, credentials files, etc? Later, Hans ps. I actually know the answer, but still want to know if anyone else is also annoyed by this? E-mail Disclaimer http://www.sunspace.co.za/emaildisclaimer.htm -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hans van der Merwe wrote:
Is there a way to configure openSUSE (any distro version actually) to use single-signon for ALL services? After playing with AD samba, kerberos, PAM (some, I dont really know PAM yet) configurations I still have issues with the following:
1. KDE still asks for a username and password when accessing windows shares (unless I statically enter the user pass combination in kcontrol)
You can configure a default password, for accessing Windows shares, in Personal Settings.
2. CUPS needs static username password combination to access windows (samba) printers.
Probably as above.
3. Firefox still asks for user;pass when accessing local NTLM pages. (not a OS issue, I know)
4. Evolution saves user;pass in keyring somewhere
5. knetworkmanager saves user;pass in kwallet
Everytime our IT admin forces us to change our passwords I have to manually go and change it for all of the above. And if I forget - like with CUPS - and try and print, it locks my account.
I know this is a lot harder than it sounds, but why don't all apps just use something like PAM to auth user activity? Why have keyrings, wallets, registries, credentials files, etc?
Later, Hans ps. I actually know the answer, but still want to know if anyone else is also annoyed by this?
E-mail Disclaimer http://www.sunspace.co.za/emaildisclaimer.htm
-- Use OpenOffice.org <http://www.openoffice.org> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thu, 2007-11-15 at 13:06 -0500, James Knott wrote:
Hans van der Merwe wrote:
Is there a way to configure openSUSE (any distro version actually) to use single-signon for ALL services? After playing with AD samba, kerberos, PAM (some, I dont really know PAM yet) configurations I still have issues with the following:
1. KDE still asks for a username and password when accessing windows shares (unless I statically enter the user pass combination in kcontrol)
You can configure a default password, for accessing Windows shares, in Personal Settings.
Yes, and I have to - thats the problem. Hans E-mail Disclaimer http://www.sunspace.co.za/emaildisclaimer.htm -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thursday 15 November 2007 03:30, Hans van der Merwe wrote:
Is there a way to configure openSUSE (any distro version actually) to use single-signon for ALL services? After playing with AD samba, kerberos, PAM (some, I dont really know PAM yet) configurations I still have issues with the following:
1. KDE still asks for a username and password when accessing windows shares (unless I statically enter the user pass combination in kcontrol)
2. CUPS needs static username password combination to access windows (samba) printers.
3. Firefox still asks for user;pass when accessing local NTLM pages. (not a OS issue, I know)
4. Evolution saves user;pass in keyring somewhere
5. knetworkmanager saves user;pass in kwallet
Everytime our IT admin forces us to change our passwords I have to manually go and change it for all of the above. And if I forget - like with CUPS - and try and print, it locks my account.
I know this is a lot harder than it sounds, but why don't all apps just use something like PAM to auth user activity? Why have keyrings, wallets, registries, credentials files, etc?
Later, Hans ps. I actually know the answer, but still want to know if anyone else is also annoyed by this?
E-mail Disclaimer http://www.sunspace.co.za/emaildisclaimer.htm
Have you tried CASAManager? Carl -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Carl Luescher
-
Hans van der Merwe
-
James Knott