From: Richard Conroy Date: 2010-03-19T05:18:29+09:00 Subject: Re: web app authentication to active directory --0014852e1f22eb5903048218eebd Content-Type: text/plain; charset=ISO-8859-1 On Thu, Mar 18, 2010 at 7:55 PM, Nick Brown wrote: > Richard Conroy wrote: > > On Thu, Mar 18, 2010 at 7:24 PM, Nick Brown wrote: > > this question comes up a fair bit. > > Ruby moves so quickly that it's worth asking questions frequently, as > the answers from six months ago are often obsolete ;-) My main concern with this topic, is that I dont think I have ever seen this question answered well. Its not a good sign, as it implies that you are on your own when you go down this route. > > I think most of the Ruby/ActiveDirectory > > integration issues end up directing people to the various ldap options > > for Ruby. > > Net-ldap does work! But it requires that I solicit usernames and > passwords. And the "activedirectory" gem seems to be broken and > unmaintained. Nicely, net-ldap is being actively maintained (saw some recent announcements). I think there is also a ruby-net-ldap which is pure ruby, and gets some recommendations. > > I would also look and see if anyone has built any Rack Middleware around > > this. > > I looked for a way to use Rack on IIS. I didn't find anything considered > "stable" and compatible with MRI :-/ > Don't get me started. I dont think there is anybody in the entire planet putting Ruby on production windows web servers with MRI. If there was, you would expect to see a lot more solutions out there that solve the common problems. That said, you might want to check out IronRuby, and their solution ecosystem. The best advice I often see is to deploy your app on JRuby, then take advantage of Java APIs that can do the integration better. > I would love to hear experiences from someone who actually has a > production application using kerberos/AD/MRI. > So would I. I would buy beers for people who can put together all the pieces of successfully deploying Ruby web apps on windows. -- http://richardconroy.blogspot.com --0014852e1f22eb5903048218eebd--