[OpenID] OpenID enabled Mailman

SitG Admin sysadmin at shadowsinthegarden.com
Tue Jun 9 02:47:12 UTC 2009


>The reason we want to implement OpenID Provider for Mailman is so 
>that we can use the single sign on for our other internal accounts 
>like our internal wiki etc.
>We want our users to login in just their mailman account and have 
>single sign on for their other accounts.

If you're getting deep enough into the Mailman code and wiki code to 
patch their existing login systems with OpenID, you should be able to 
rig something much simpler with, say, just a cookie. This might lead 
to security problems if you're hosting each service on a different 
subdomain (with cookies delivered to *.domain.com) AND users get 
their own webspace on subdomains (since then users could read session 
cookies from other users), but if all the subdomains are official you 
should be fine :)

-Shade



More information about the general mailing list