I just enabled single sign on at neonDragon.net. This means when you are logged in here at Cow’s Blog, your automatically logged in at neonDragon.net and the Evolution Portal. This was done by changing two configuration settings:
- Setting the cookie domain to .neondragon.net so cookies set to the whole domain.
- Setting a configuration option so www and evolution also read from the cow session table. The same technique is used to share users, settings, etc.
Hopefully we’ll be able to extend this to a few more parts of the network soon.
Now it would be nice if you could keep logged in :\
Of course, when I work out the best way to do it without having the password has a cookie and making it easier to attack via XSS stolen cookies. Thanks for the reminder
/me likes cookies