This page provides a collection of resources related to authentication in complex environments.

Table of Contents

• Starting Points
• Open Source PKI
  • PKI
  • Time Stamping
  • Reverse Proxy
  • Signature
  • Zope / Python Stuff
  • Other
  • Unsorted
• Related Articles

This includes PKI, SSO reverse proxies, authentication plugins. Since ERP5 is based on PAS, it should be possible to extend the standard authentication setup with any of the more complex environments described.

Many sources are in French, probably because open source PKI market is quite developed in France with many large customers, large implementations and leading providers.

Starting Points¶

• Concept de base des PKI provides an easy introduction in French to PKI
• Comment monter une PKI open source provides a summary of existing projects and approaches (In French)
• IGC CNRS provides an exhaustive list of links and explanations (In French)
• HSC provides a short introduction to PKI (In French)
• Open Source PKI¶ Book may be a good start point although it is old
• Mise en place d'une PKI libre (French) provides a step by step guide

Open Source PKI¶

• Open Source PKI¶ provides a quite exhaustive list of open source PKI solutions

PKI¶

• OpenCA is one the pioneers in open source PKI
• PrimeKey provides a wide range of PKI related solutions in LGPL. Leading project is called EJBCA.
• OpenTrust PKI is the open source market leader. Source code is provided to customers under GPL. OpenTrust also provides an SSO reverse proxy. Latest versions are no longer open source.
• Rooster is an open source PKI made by Intrinsec
• LASSO provides a way to federate multiple PKIs. It is written in C and in python. It is supported in about any language.
• Bandit is supported by Novell
• FederIDis based on LASSO and supported by ObjectWeb
• OpenSSO is a Java based SSO

Time Stamping¶

• OpenTSA provides a time stamping solution built into Apache.

Reverse Proxy¶

• http://vulture.open-source.fr/wiki/ is an open source reverse proxy made by Intrinsec. It now includes a PKI module.
• LARPE is an SSO reverse proxy based on LASSO. It is written in Python.

Signature¶

• OpenOCES includes a java applet to sign text
• OpenCA client support provides minimal information on the built-in signature features of browsers

Zope / Python Stuff¶

• PyCais a python implementation of a certificate authority provider
• PyKI provides a couple a scripts to manage a minimal public key infrastructure
• GEARS Plugin was made by the GEARS project to integrate LASSO with Zope

Other¶

• OpenSC provides access to smart card

Unsorted¶

• DFN
• PKI¶ Page
• XML Digital Signature Tool
• Key Manager
• OpenXPKI
• M2Crypto
• TLSLite
• PyCa

Related Articles¶

• Guidelines | Configuration And Project Business Templates Must Include Roles For Group, Site And Function
• Guidelines | Define Module Author And Auditor In Roles Tab Based On Use Cases
• Guidelines | Define The Roles Allowed To Excecute A Transition
• Guidelines | Generic Business Templates Must Have Security Roles Set On States And Transitions
• Guidelines | Include Module Base Categories In Business Template
• Guidelines | Include Module Local Roles In Business Template
• Guidelines | Inside The Roles Tab, Assignor, Assignee, Associate And Auditor Must Be Defined
• Guidelines | Python Class Method Should Have Security Declaration
• Guidelines | Unset Acquire Local Roles On Document Portal Type Configuration If Applicable
• HowTo | Set User Access Permissions
• HowTo | Understand ERP5 Security
• HowTo | Use Multiple Users Simultaneously
• HowTo | Use Security Based On Role, Group And Function
• Technical Note | Authentication Infrastructure
• Technical Note | Catalog Roles
• Technical Note | System Backup
• Technical Note | Upgrading Security
• Technical Note | User Permisson Troubleshooting