On Wed, Feb 02, 2005 at 03:40:40AM +0200, Ksenia Marasanova wrote:
> Hi,
>
> I wonder what other people think about following. I want to build a
> system that will authenticate users across multiple sites, so users
> have to log in only once on one site, and then just click on a link
> and go to another site with their credentials. All sites are Quixote
> applications on different subdomains on one Apache server with
> mod_scgi. PostgreSQL will be used for sessions.
> What is the strategy for creating thing like that? Has anyone done it
> before in Quixote?
> Any tips would be greatly appreciated :-)

Have you looked at SXIP? (http://sxip.org). Admittedly, you're trying
to roll your own for single domain/subdomain, but it solves some of the
"nasty" parts of this (crypto where needed, rootsite for master
mappings, etc.). There's already a python devkit for membersites, and
wiring it into Quixote is on my "wannado" list. It may not serve this
particular purpose, but I think the possibilities are pretty
intresting...wanted to toss it out to see if anyone else is playing
with it.

--

Ken Kennedy     | http://www.kenzoid.com        | kkennedy@kenzoid.com