windows+ad域扩展单点登录技术研究与实现大学生毕业（设计）论文说明书.doc

河 北 工 业 大 学 毕 业 作 者： 学 号： 学 院： 计算机科学与软件学院 系(专业)： 题 目： 基于 研究与实现 指导者： 教授 (姓 名) (专业技术职务) 评阅者： (姓 名) (专业技术职务) 201年 月 日毕业设计（论文）中文摘要 基于摘要： 。 基于Windows AD域扩展单点登录技术的研究与实现就是实现了多个应用系统的单点登录，即登录一次就可以访问所有整合过的资源。 关键词： 毕业设计（论文）外文摘要 Title Abstract With the rapid development of information technology, as well as various management systems continue to improve, making more and more types of companies or other organizations of the application system. Each application has its own authentication login page when a user login system, must authenticate their identity, many user login system takes up a lot of login time, and the user is easy to forget or remember passwords mix of these systems, if the password system will be set to the same security risks, so log on problem solving of these systems is a very necessary and has good market demand. Based on Windows AD domain extension and single sign-on technology is to achieve a number of applications to achieve single sign-on systems that log in once to access all integrated over resources. It is based on Microsofts Windows AD domain authentication, so authentication is more secure, reliable, single sign-on this basis, single sign-on using the CAS system developed by Yale University as the basis for Windows AD domain and on this basis CAS integration, to achieve single sign-on system. Keywords：  目 录 1 引言 1 1.1 论文的选题背景 1 1.2 论文研究的意义 1 1.3 论文的内容安排 2 2 相关技术简介及其研究意义 3 2.1 身份认证 3 2.2 Windows AD域身份认证 3 2.3 单点登录 4 2.4 基于CAS单点登录模型 9 3 基于Windows AD域扩展单点登录技术设计与分析 12 3.1 CAS私有域登录框架 12 3.2 CAS私有域票据 13 3.3 CASSSOServlet类 14 3.4 Filter类 15 3.5 CAS私有域票据服务接口 16 3.6生成票据接口-requiredTicket 17 3.7兑换票据接口-exchangeTicket 18 3.8票据接口里其他功能 18 4 主要单点登录系统典型场景分析 20 4.1 域终端访问Portal 20 4.2 非域终端访问Portal 22 4.3 域终端访问资源 23 4.4 非域终端访