authentication

Why do I get a 401 Unauthorized when making a HttpWebRequest with the correct credentials?

I have a url and a username and password to an external site. If I access the URL through a browser, an authentication box pops up. I give it the username and password, and I can get to the page. I am trying to achieve the same thing through code, using a HttpWebRequest object: var webRequest = (HttpWebRequest)WebRequest.Create(url); ...

IIS7 Restrict website access by MAC address?

Is it possible to restrict access to a website in IIS7 using MAC address rather than IP address? We are wanting to restrict access to our website to only known PCs as mentioned here: link text. These PCs will be external to our network, but because some users could be remote, we would rather do this on MAC address rather than IP address...

How to display a web page just before Apache basic authentication (with exclusion list)?

I have web page running on the Apache. Web page is using Apache basic authentication. So when user tries to access certain page - must enter user/pass before to get authorised. I would like to display notification (except a list of IP addresses) screen with accept button just before authentication. Other comments on above: I can't sto...

Calling getUserPrincipal() in a Web Service returns ANONYMOUS

Hello everyone I'm trying to use plain SSL between my web service and a client application. They are both running in GlassFish 2.1.1 and are each in seperate domains. The client application is itself web application and I have add the JVM option -Dcom.sun.enterprise.security.httpsOutboundKeyAlias=s1as in order to get it to send it's cert...

How to pass user authentication when visiting another url?

Suppose I have a web app MyApp. When I access this web app, I have input user authentication info( user name and password), then from this site, want to visit another site say YourSite which will ask authentication too. Same authentication should be fine for both site. So I want to pass user authentication data on MyApp to YourSite in ...

Windows 7 : Subauthentication Package

Hi all, I have this problem, I was trying to create a subauthentication package for windows 7. But no samples are available. Can someone please help. Sid ...

How to do authentication in a native app using web service?

In a web application, we have session to store the authentication. But let say I am developing a native application with web service, for example, the Facebook app. How can I check the session in the native app? Thank you. ...

User security in the database of my website

Lets say i have a website mysite.com that will store some sensitive personal data (bank related) On this website i have an oracle database with a USERS tables that will store the logins and passwords of users from mysite.com I have a few questions : How should i store passwords,encryption of course, but which ? What should be the pro...

WCF: Windows or UserName authentication in one endpoint

We are implementing the following log on mechanism for our 3-tier application: User launches the client application and - authenticates using her Windows session credentials (Active Directory) or enters her AD credentials if another user is already logged on to this Windows session or enters her user name and password if the computer is...

Auth in CakePhp using 2 tables

I would like to know how to make a login in CakePhp when my data comes from 2 tables. Due to the specifications in the application the data in the table is divided like this: users: details: id id idDetail username group_id pas...

Configuring Elicpse and SVN for multiple repositories

I'm using Elipse (Galileo) with the Subversive plugin. When I set SVNPath in apache httpd.conf I can get a connection to my repos from Eclipse. This works fine: <Location /repos> DAV svn SVNPath c:/SVN/MyProject AuthType Basic AuthName "Subversion repository" ... </Location> But when I use SVNParentPath it errors: "Lo...

iis 7 \ windows 7 asp.net access is denied

Hi all, I am trying a very simple action of saving a file into a folder of mine. I am hosting my application on windows 7 using iis 7. When I try saving my file I get the following error: Access to the path 'C:\MyWebsite\MyFolder' is denied I am not impersonating, I have given network service full control on the folder. What can be ca...

Handling authentication through AJAX?

This is a newbie question to AJAX experts: In case an unauthenticated user tries to post a comment to an article and send it to the server through AJAX, I need the remote PHP script to return... a 401 and a logon/password form which the user will fill and try again, or a 301 to redirect the user to a full-page logon/password form which...

PHP: how would I use this simple class?

I was looking around for more "correct" login/logout portions of code, and found this one: http://snipplr.com/view/1079/auth/ I got two questions though that stop me from using it. 1: How would I instantiate the class, and use it in my script?(I know PHP but am just befuddled for some reason) 2: there's the following lines: global $db;...

What is the difference among BasicAuth,OAuth and XAuth?

Hi all, Recently i heard that Twitter will be shutting off the basic authentication on the Twitter API and they move towards OAuth. So i want to know What is the difference among BasicAuth,OAuth and XAuth? what is the advantage and disadvantage of each Auth? ...

GAE - Sharing Authentication Across Apps

Let's say I had a root app and multiple sub-apps. Would it be possible to share authenticated sessions across them? I'm using Google App Engine (Python). ...

PHP: authenticate local unix user (without direct access to /etc/shadow)

Given a username and password, I need to check if there's a user on the local system with said username and password. I'm aware of posix_getpwnam and using the PAM package, but both of these methods require that the PHP script have access to /etc/shadow. I'd rather not mess with permissions of system files or daemon users. I imagine th...

Creating own Zend_Auth_Adapter

i am having difficulties creating my own Zend_Auth_Adapter. i am using Doctrine 2 with it also. so far i have ... code below i am getting the error Method "hasIdentity" does not exist and was not trapped in __call() whats wrong? use \Doctrine\ORM; class Application_Auth_Adapter implements Zend_Auth_Adapter_Interface { privat...

Shld authentication be done in Zend_Validate instead of a controller action?

currently, to login a user in Zend Framework, i do something like public function loginAction() { if ($this->getRequest()->isPost()) { $adapter = new Application_Auth_Adapter( $this->getRequest()->getParam('username'), $this->getRequest()->getParam('password') ...

OAuth recommended for async data transfer in own webapp?

Hi all I am making heavy use of async requests by Javascript to the webserver. Since I am building a multitenant application, I want to restrict access to the json services on the user level. I read a lot about OAuth being recommended for consumer authentification. In my scenario, would the Javascript (client) side be regarded as the c...