DMZ webserver portal question

[John]

We have several webservers with several web base applications (total
compatible for internet explorer, FireFox or others) in our dmz and want to
make an "single sign on" portal (also web based) application for our
internet customers. The goal is that a user will log in into the web portal
and only see and use dedicated web applications. These application can sit
on other webserver. Also, If the user close his browser, and open a fresh
browser he must be logged in into the application automatically and
securely.

We are looking into setting up active directory in the dmz. Is this a good
practice our a nightmare? And can this fulfill all our needs?

Kind regards,
John
Ierland.

 

[Cary Shultz [A.D. MVP]]

AD in the DMZ is 'generally' not a good idea. Key word is 'generally'.

--
Cary W. Shultz
Roanoke, VA 24012

WIN2000 Active Directory MVP
http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)

 

[Burtsev Dmitry]

Hi.
I think this is very interesting and usefull solution
http://www.microsoft.com/serviceproviders/hosters.mspx