I'm trying to install Drupal with Single Sign On over Active Directory.
My customer does not have any SSO suite like CAS, and their general recommendation are to use Kerberos (or NTLM as a second choice). I am clearly agreed with that.
Each time I had to integrate SSO with Active Directory using Kerberos, I use "native" product facilities, or apache mod_auth_kerb with headers rewrite.
Does someone implemented such a working module ? Everything I read about that is around "on developpement modules" on "snapshots realeases". We are currently using a ldap module that allow authentication over LDAP, and it seems that it provide SSO features, but I don't have any feedback on it.
So : Should I implements SSO over Kerberos using Apache mod_auth_kerb, or is there a real functional module that would encapsulate all those tedious configuration and dialog ?
What is the best pratice, at this moment ? Could you provide me "real" (anonymised) examples ?
As soon as I would installed it and put in in production (around the end of december), i would give you my feedback.
Thanks in advance