[opensource] Who to talk to about integrating with OSU web auth?

Brian Swaney swaneybr at opensource.osu.edu
Fri Jun 10 13:57:25 EDT 2011

As our website administrator, I believe I can speak authoritatively
about what was involved in hooking OSU's central web authentication
service, Shibboleth. The first step is actually installing the
Shibboleth daemon, then adding the appropriate configuration to the
Apache configuration, where it acts something like a module. Once you
believe it is running, you will need to register your site with OIT, as
per the documentation at
https://webauth.service.ohio-state.edu/~shibboleth .

For Drupal, which you appear to be running, you do have to install a
Shibboleth module from drupal.org/project/shib_auth (I think we might be
running a custom build right now). This module by itself cannot hook the
authentication, but rather acts as a bridge between Drupal and the
daemon. Once the module is installed and Shibboleth is running the rest
is usually pretty straightforward, but it can take a while to figure it
out or set it up the first time. Important note: our setup is designed
to be as open as possible, where you don't have to be affiliated with
OSU or anything to use it. This might not be what you want, and if you
don't then you'll need to take some extra steps to keep users from
editing their accounts or else they might be able to log in directly
without Shibboleth. If you're open to the community like us, or you have
the permissions set such that it doesn't matter if they log in, then
this is probably not an issue for you. I can't remember where this was
documented right now.

Primarily for future administrators, but also to help out other people
running Drupal and Shibboleth, our specific setup is documented at
opensource.osu.edu/documentation/shibboleth . Step 5 will probably vary
for you, since you might be dealing with a different set of user
information, and we specifically asked for different fields that people
don't normally use.

Brian Swaney
Open Source Club at
Ohio State University
Website Administrator

On 06/10/2011 12:36 PM, Triest, Bill E. wrote:
> My apologize as I don't really know how much you know about central auth @ OSU.  I'm trying to over reference as it should help you and people who come across the archives.
> Also, take this with a grain of salt as I had nothing to do with the clubs integration; I'm not really even affiliated with the open source club anymore (with children and a wife that works evening I can't really attend the meetings), so I really have no clue what I'm talking about.
> Generally central auth at OSU is done through shibboleth (http://shibboleth.internet2.edu/ & https://webauth.service.ohio-state.edu/~shibboleth/) and there is a Drupal module for shibboleth (http://drupal.org/project/shib_auth)
> Also there's a Drupal group at OSU (http://drupal.osu.edu/) They have a mailing list and hold meetings periodically.  They may be much more helpful once you have specific questions as I know they've helped others setup shibboleth with drupal.
> Hopefully between the club members and the resources I linked to you can get it worked out.
> Good luck!
> --Bill
> -----Original Message-----
> From: opensource-bounces at cse.ohio-state.edu [mailto:opensource-bounces at cse.ohio-state.edu] On Behalf Of Bart Kelsey
> Sent: Friday, June 10, 2011 12:05 PM
> To: opensource at cse.ohio-state.edu
> Subject: [opensource] Who to talk to about integrating with OSU web auth?
> Greets!
> My name is Bart Kelsey, and I administer the OSU CCTS website, at
> http://ccts.osu.edu .  I was a CSE student at OSU starting in 1996,
> and I've been an employee here since 1999.  In my spare time, I run a
> website called OpenGameArt.org that archives freely-licensed art for
> use in FOSS computer games.
> Anyway, I noticed that you guys are running Drupal 6, and that you've
> integrated with OSU's web authentication system.  I'd like to do that
> for the CCTS website.  Who do I talk to in order to set that up?  Does
> it involve a custom module that's not on Drupal Contrib, and if so,
> can I get a copy of it?
> Thanks!
> Bart

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
Url : http://mail.cse.ohio-state.edu/pipermail/opensource/attachments/20110610/e225695c/signature.bin

More information about the Opensource mailing list