authentication

Single Sign On widgets

I am developing an application with widgets. To enter the application you need to sign on. The widgets are small apllications already developed that need the same user and password. Therefore I want to implement Single Sign On from the fisrt log on to the widgets. How can I do this? ...

How to distinguish/identify users with OpenID without requesting SReg fields?

I've been toying with the JanRain OpenID PHP Library, mostly following along with a tutorial I found on ZendZone. How does one distinguish between users - especially Google users, who all end up using the same OpenID URL, https://www.google.com/accounts/o8/id ? Basically, I'm at the point where I can detect that they have an OpenID acc...

Android app remain logged into website, cookies? Session?

I'm looking to make an android app that is basically a custom view of a text based gaming website. I know how to do HttpPosting and such, so sending login information is relatively simple. But my question is, how would I go about then navigating the site? I've never really worked with sessions and cookies on the client side. Is a cookie ...

How to manage users with interactive logon rights?

Can anyone tell me how I can manage(or if not possible, monitor) programatically the people who are allowed to interactively logon(that is through actual physical access) on a windows machine attached to an active directory architecture? Something in BCL/FCL is preferred but COM interop/WMI is also fine. ...

OAuth Invalid signature issue with Digg

Hi everyone! So I'm trying to authenticate my app to Digg using OAuth (and I'm totally not an OAuth expert). I use the Scribe Java library. I keep on getting the HTTP 401 Authorization Required. Inside the body of the response, it is a 5001 Invalid Signature Error. I have read this Digg Google Groups Thread and I didn't really understa...

Java SSO: Kerberos authentication against Active Directory

I'm still trying to find a Java based solution for SSO (running on *nix), which I can use on JBoss to authorize against an Active Directory/domain controller. I initially tried to do this via NTLM, but gave up because it will be not supported on Windows Server >= 2008. Therefore I'm trying to implement this using Kerberos, but it seems ...

CGI Application Authentication using multiple drivers

Hi I have been trying to authenticate my CGI application through 2 drivers, one that uses username/password stored in the database and other using ldap active directory. following is the code $self->authen->config( DRIVER => [ 'DBI', DBH => $self->dbh, TABLE => 'user', CONSTRAINTS => { 'user.username' => '...

IIS FTP 7.5: Custom Auth Provider not working Error 530

Hi to all I have recently install Server 2008 R2 on a new server and want to use the FTP capabilities that are now shipped with IIS 7.5. Since my users are not windows users, I was using IISAuthManager but this prodiver does not offers home directory on a user basis. I found this sample http://learn.iis.net/page.aspx/669/how-to-use-ma...

Tomcat FORM authentication - login form not coming up as https

This is driving me nuts. I'm using Tomcat 6, declaritive authentication, form based. No framework involved. Everything works ok - some pages authenticated, some not, some use https, some http. Everything as I want it. EXCEPT... I want the login page to always use https. The login page comes up nicely as https if: a) I go to it directl...

sfFacebookConnectPlugin: Authentication problem

Hi overflowers, I try to get the sfFacebookConnectPlugin to run by following the tutorial on the symfony homepage. Everything seems well configured. But when I try to login with sfFacebookConnectAuth/signin. I get the form error "The username and/or password is invalid.". I even don't know where to start with the debugging. First Ste...

Convert Custom Auth to AuthLogic

I am trying to convert my custom simple auth system in my rails app to use AuthLogic. I have managed to get everything working fairly easily, but now when I try to login it will not properly validate my credentials. The pertinent code is below: # app/models/profile.rb class Profile < ActiveRecord::Base acts_as_authentic do |c| c.t...

Create a secure application with basicHttpBinding

Hello everybody, I am really really tired these day because of facing this problem. I am building a XBAP application (WPF Browser Application) that uses WCF Service. This app requires: Users can login by using their username and password (that store in my database) Users don't need to install any of X509 certificate (*.pfx or *.cert......

git svn: password for svn is not stored

I'm using git against a central remote svn repository using 'git-svn'. The SVN repository uses https with a self-signed certificate. Everything works fine, with one nasty exception. As long as I use directly with svn, the password is remembered, so it has to by typed only on the first command. When using git-svn operations (e.g. dcommi...

Upgrading from basicHttpBinding to wsHttpBinding: connection fails

I maintain a program that sends messages between users. The clients connect to a WCF-service that is hosted in IIS 7.0 on my domainserver. Up to now I successfully used basicHttpBinding for this, without any configuration. Now, I want to change to wsHttpBinding because this should encrypt the transport of the messages. The server has a c...

Secure Webservice (NTLM) - Jmeter

Hello All , I am trying to test a web service with Jmeter. The web service is protected with NTLM authentication(windows).I can able to load WSDL using WebService(SOAP) Request sampler. Currently it works only when I use proxy server with BurpSuit mentioned in this SO answer(Instead of SOUP UI, I'm using Jmeter with BurpSuite). But Ins...

Last login time using the ASP.NET Membership API

I want to find out the last login time for a user in my ASP.NET MVC 1.0 application. I'm using the Membership provider for authentication. Although I'm able to retrieve the last login time using: public ActionResult LogOn(string userName, string password, bool rememberMe, string returnUrl) { if (!ValidateLogOn(userName, pas...

WebView.setHttpAuthUsernamePassword() not working?

I am developing part of an Android application that needs to use a WebView to open a password protected site. I am using SharedPreferences to provide the username and password from when the user logs in the app for the first time. I've tested the credentials it's returning, so I know that those are correct. When I run this in the emulato...

Random DirectoryServices Exception

I know random errors don't really exist in our business, but I've got no clue as to why this method is not working. In short, this method searches for some properties starting from the root domain. It works great, except that it randomly gives me the following exception: Error System.ApplicationException: No free/busy public fol...

To use, or not to use, session_set_save_handler?

I'm playing around with creating a user login system in php. I have been studying this article (http://www.evolt.org/node/60384) as a way of approaching this. In the above article, the author uses a combination of $_SESSION and his own custom database table for storing user info. However... I have also come across numerous articles t...

Applets & client certificate authentication

I have an applet that loads its jar dependencies from a server using SSL + client certificate authentication. The web page that loads the applet is already authenticated using a client certificate. However, when the applet starts up, the JVM process (separate from the browser) brings up a dialog for certificate selection. These certi...