<br><font size=2><tt>Jeff Rush <jeff@taupro.com> wrote on 08/05/2005
10:33:39 PM:<br>
<br>
> If you have only the new stuff that *requires* COM, I don't know that
you can <br>
> do COM programming on the Mac (not being a Mac developer).<br>
</tt></font>
<br><font size=2><tt>Thanks, Jeff.</tt></font>
<br>
<br><font size=2><tt>I don't think COM will be an option. Bob Ippolito
suggests</tt></font>
<br><font size=2><tt>it should be do-able via Mac APIs. We will probably
need a</tt></font>
<br><font size=2><tt>Mac programmer with experience in this area. However,
it's a</tt></font>
<br><font size=2><tt>higher priority to do this on the Windows side, so
we'll do</tt></font>
<br><font size=2><tt>that first and in doing so get a better understanding
of how</tt></font>
<br><font size=2><tt>it's supposed to work. Also, if push comes to shove
we could</tt></font>
<br><font size=2><tt>fall back on handling the AD authentication at the
server</tt></font>
<br><font size=2><tt>level, but that is far less secure (this won't go
outside</tt></font>
<br><font size=2><tt>our internal network, so it's not totally unthinkable).</tt></font>
<br>
<br><font size=2><tt>Here is Bob Ippolito's posting from the MacPython
mailing list:</tt></font>
<br><font size=2><tt><br>
> The generic way to do the authentication is just to use LDAP, since
<br>
> Active Directory is just a jazzed up LDAP database server with a non-
<br>
> standard Kerberos implementation. You can crib some code from
<br>
> LDAPUserFolder for the authentication bits. I'm not sure exactly
<br>
> what "obtaining credentials" involves, but I'm guessing
that's just a <br>
> Kerberos ticket? Mac OS X should have all the APIs to do it,
since <br>
> it has good Kerberos support which supposedly integrates well with
<br>
> Active Directory... you'll probably have to a C extension to get at
<br>
> that, but that should be no big deal.<br>
> <br>
> Good luck, I don't have any Windows Server machines around, and am
<br>
> not really interested in dealing with Windows... but hopefully <br>
> somebody else can help you :)<br>
</tt></font>
<br>
<br>
<br>