Should I use Pubcookie or the UW Windows Infrastructure with IIS?
This is a complex question and deserves a bit of background. We recommend first reading X if you aren’t intimately familar with how authorization is connected to authentication on the Windows platform. Pubcookie can certainly do authentication, but for the Windows platform requires that you write your own code to do the authorization. On the unix platform, there’s something called mod_uwa that will do authorization against GDS, the enterprise groups directory. However, GDS has a limited set of groups in it at this time, which primarily consists of course groups. If you wrote your own code to do the authorization on Windows, on what can you base the decision-making within that code? You can snag the uwnetid string that Pubcookie has. You could then compare that to … GDS, the enterprise groups directory? Only if GDS had groups that meant something to your web application. Groups in your Windows domain? Why should you write something if you could do this comparison without writing code
