authentication

Please help test a CORS issue in Firefox jQuery ajax when 401

Hi, this is driving me nutters. jQuery 1.4.2, windows XP sp3 Here is my test. Load firefox 3.5+ http://plungjan.name/test/testcors.html works Save the file to harddisk and run from there From my office the external works and the internal does not What is also interesting is that I cannot run both in one go. Background: I do a GE...

Set Specific IIS 7 Site with AppCmd?

I have an IIS 7 machine with multiple apps/vdirs on the single default web site. I would like to set two of them with this authentication: anonymous - off impersonation - on forms auth - off windows auth - on I would like to do this with appcmd.exe but cannot seem to get the syntax down right. Has anyone had luck with this? Thanks. ...

2 separate logins for asp.net application

Hi there I need to have 2 separate logins for my asp.net web site. Firstly I need to block access to the site entirely and show an unstyled log-in page (so it doesnt show the layout of the site). This login is only needed whilst the website is in development. Secondly, I need another login for a "members area" of the site. This is par...

Windows authentication in Java

Hi, I am developing a java application (running on a Linux server) that needs to connect to a .net WCF web service configured to use Windows authentication only. It seems to work fine when I run the app on my Windows desktop. Is there any way to make it work from the Linux server? ...

Authentication for an external Sharepoint Web Part Page (SSO)

An external hosted app can take the username and password in the querystring and auto login the user. How do I get these details from Sharepoint? I know you can use SPContext.Current.Web.CurrentUser; if the application is hosted locally however it isn't. How can we achieve single sign on from Sharepoint to the external 3rd party softwa...

Using Authentication with Ajax.Request

I currently have a Palm WebOS application that uses an Ajax.Request to connect to a web service using basic authentication. To send the username and password, I simply include it in the url (i.e. http://username:password@ip-address:port/) which works exceedingly well, expect for when the password contains anything other than alphanumeric...

BlackBerry user authentication with LDAP

Hi there, After I've tried so much and still being stuck, I hope anyone here has an idea. Well, that's the situation: I'm trying to login to my app with ldap. If its possible to login there, you can go on using the app. I've already tried to use net.rim.device.api.ldap.LDAPQuery but the problem is, that if I try to log in, the LDAP L...

SASL library for .net

I am searching for a sasl library for .net. So far I could only find: Sasl.Net but it looks dead and only implements plain and digest-md5. Can anyone suggest a good library? Preferably an open-source implementation. ...

Spring security - Spring doesn't check on isAccountNonLocked for UserDetails on correct login

I'm using Spring 2.5.6 and Spring security 2.0. For login attempts I implements the UserDetails class on my User class. So the User class implements isAccountNonLocked() after a wrong login (dispatch the AuthenticationFailureBadCredentialsEvent, I handle this with a Eventlistener) Spring called this function from my User class to check ...

redirect users to the login page

Hey Guys, I've got the following login script.. <?php $name = $_POST["name"]; $password = $_POST["password"]; $query = "SELECT * FROM users WHERE username = '$name' AND password = '$password'"; $q=mysql_query($query) or die(mysql_error()); $result = mysql_query($query); if (mysql_fetch_row($result)) { /* access granted */ ...

authentication system requirements for a stand alone web app

What should my authentication requirements be for a stand alone web application that will not integrate with any other applications? I know that I will need to have the following features, but am I missing anything? unattended password reset lock account after multiple failed login attempts roles for different kinds of users log all l...

Can My Web App Implement User Login and Remain Stateless?

We have a web application that is stateless. We are using http authentication over SSL/TLS. The user's browsers are presumably storing authentication credentials (possibly even after a browser shut-down if they configure their browsers that way.) We validate them on every access. For reasons mostly having to do with usability, we wou...

Multiple login forms submitting to one login action

I'm having 2 login forms in my (cake) application. One on the home page (served by pages controller) and one in my user controller. The one from my user controller is working fine. But when I try to login from the homepage I get a blank page and I see in firebug I got a 404. The strange thing is that the session is setup OK. It's looks...

Using sahi to test sharepoint application.

We're trying to test sharepoint application with NTLM authentication using Sahi web testing tool. We have problem with access to the sharepoint using Sahi proxy server - we can't sign in. So if someone know this problem or know how fix it, please anserw here. I think that problem is delegation of credentials but I'm not sure. Thanks i...

Writing authentication system

I am currently writing the backend for a service which has 3 clients: browser, android native and iphone native. I am having a little trouble with coming up with an authentication system since I don't know what can really be done on the clients. I am using django + twisted for the backend. Basically, I am going to be writing RestfulAPI...

Grails debugging flash scope

I am using Authentication plugin for Grails. It needs a flash variable to be set to do redirection after successful login. I set the flash variable in various places in controller, in view just before authentication service does it's work, but somehow flash variables are being cleared on the way. I can't manage to find a way to spot th...

Which solution is better for Django social authentication?

django-socialregistration or django-SocialAuth? For my new project, I'm thinking of having signups only through Facebook (and possibly Twitter). Don't care about OpenID, hence this question doesn't answer my concern: http://stackoverflow.com/questions/2123369/whats-the-best-solution-for-openid-with-django Both these apps seem appropria...

Login to gmail account

Hi, folks, I need to be able to login to my gmail account, then i get cookies and will have access to other google services. But i can't login to my gmail(or any goolgle) account. I found some posts on this site how to do it, but none works for me. i do : string formUrl = "https://www.google.com/accounts/ServiceLoginAuth"; ...

Setting up 2 factor authentication

Hi We are in the process of building a new website which we want to lock down to specific computers to only allow access, then once the pc is authenticated we will do our in built user authentication. Also, when a pc is known, we dont really want anything on the pc which can be easily transfered (by the client) onto another pc in order...

Is it secure to put the authentication for a silverlight "object" on asp.net level?

I have a silverlight application which I load inside a an asp.net website via . If I don't implement any security on the silverlight application itself - will it be secure if the user needs to authenticate on the asp.net page (in which the tag sits) only? Or is there some hack to access the silverlight application without actually acces...