[Koha-bugs] [Bug 9936] SIP2 should work with LDAP and CAS

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9936

--- Comment #5 from David Cook <dcook at prosentient.com.au> ---
(In reply to Katrin Fischer from comment #4)
> (In reply to David Cook from comment #3)
> > Is this still valid?
> > 
> > Looking at "C4/SIP/ILS/Patron.pm" and it looks like it uses "checkpw()"
> > which looks like it will check LDAP. 
> > 
> > I'm not familiar with CAS but it looks like its more SSO rather than
> > directory lookup like LDAP so don't know that it would ever work in this
> > context.
> 
> CAS is for authentication, like LDAP or Shibboleth. Some libraries ask for
> the password at the self checks to avoid abuse of lost cards.

LDAP and Shibboleth/SAML are totally different though. I'm not familiar with
CAS, but I imagine it probably works similar to SAML and OIDC in that it
requires browser redirection, which needs to happen client-side.

LDAP, on the other hand, happens all server-side. So LDAP is easy to do on a
SIP server, but you couldn't do SAML/OIDC (and maybe CAS) on the SIP server.

Alex and I have been talking about SAML for the self checkout at bug 30444. It
gets complicated...

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.